syzkaller login: [ 57.203274] sshd (238) used greatest stack depth: 23792 bytes left Warning: Permanently added '[localhost]:59939' (ECDSA) to the list of known hosts. 2025/01/20 22:44:05 fuzzer started 2025/01/20 22:44:06 dialing manager at localhost:44833 [ 60.401617] cgroup: Unknown subsys name 'net' [ 60.488100] cgroup: Unknown subsys name 'cpuset' [ 60.522976] cgroup: Unknown subsys name 'rlimit' [ 67.421488] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/20 22:44:24 syscalls: 201 2025/01/20 22:44:24 code coverage: enabled 2025/01/20 22:44:24 comparison tracing: enabled 2025/01/20 22:44:24 extra coverage: enabled 2025/01/20 22:44:24 setuid sandbox: enabled 2025/01/20 22:44:24 namespace sandbox: enabled 2025/01/20 22:44:24 Android sandbox: enabled 2025/01/20 22:44:24 fault injection: enabled 2025/01/20 22:44:24 leak checking: enabled 2025/01/20 22:44:24 net packet injection: enabled 2025/01/20 22:44:24 net device setup: enabled 2025/01/20 22:44:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/20 22:44:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/20 22:44:24 USB emulation: enabled 2025/01/20 22:44:24 hci packet injection: enabled 2025/01/20 22:44:24 wifi device emulation: enabled 2025/01/20 22:44:24 802.15.4 emulation: enabled 2025/01/20 22:44:24 fetching corpus: 0, signal 0/0 (executing program) 2025/01/20 22:44:25 starting 8 fuzzer processes 22:44:25 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffff324, 0x51, 0xd16, 0x5, 0x76, 0x9], 0x8, &(0x7f0000000040)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x80, 0x100) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x4000000a}) r2 = socket$unix(0x1, 0x1, 0x0) accept4(r2, &(0x7f0000000200)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000280)=0x80, 0x80800) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x3, 0x0, 0x200, 0x1, 0xfff}) getsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000000340)=""/155, &(0x7f0000000400)=0x9b) r3 = syz_io_uring_setup(0x1a4d, &(0x7f0000000440)={0x0, 0x4e74, 0x2, 0x2, 0x1b1, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000540)={0x6}) pipe(&(0x7f0000000580)={0xffffffffffffffff}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x274, &(0x7f00000005c0)={[{0xf2, 0x4e00, "2fd60f78c044ea97f3654c80b558eb4bd52b223bae4ba36b38113734f5e952c934d633de2ad060686baaf5459a43ba2d6c25b86d677301e383554ee0d0bfc78956dd5b05de7d32d62a15a89a51a0bf46908a87f6357e3c6b74da389badb2a81fcff2bf3f47911a09f233f4a858956d22b26c15c590dcd9d8f6476291f6ddb61b1f01beae23792ace7307eea9cc9be8c55901d7800f315f684ba3e2e5ad9c3322ec15a33f2058faaf32df041a138d50c956da9dfb003993db7eb3cabcd6a132b7b6abdb26e3f3274750fbf39babb6f6c272516fcbd647f0381cc330d304fb4d90e40eac19cf447bdd8ba6a67cc5d1065fb921"}, {0xf6, 0x4e00, "a0567e661d437528bb503fc15023fd78efa335c889bb4cd04e0d756fe360cdf73568344b18d3f538a62137b5fbcac5bd9e29789f296eb2f0805e6c24c33d22b7d43dec4211d8ef7ee2f8c33fac58f8a83bbf9d77cbb9f214096b98bdcd27f16466cbe758b5ea2a6aebfa35a873e557046a7f7e2602d7d0437fb3f8bc65c4fe7c3d02a4024f8ad3862d8e0f20df12529ad19285779c70d8a8a78a25d76dca2e38c7bd99397396d125a8f9c2aae9c30312e12277054a84937347d10862beb16a25001f41a2608d34d3382551f55216acc1449beea68b628dd151b256e89b318a0faa058b209a3aad5825a58196c579a016f708f8bf526e"}, {0x7a, 0x4e00, "3e4bf36fe36c5391176a1ad6d81750029e73e816759a83e4814cd78d9daaf089f834efbefcb9792bbd73ab38e337fbbf97cc24fdb4cb0c25e5dba8e7b3adfc2340dc2555116efcd65bdb66279113204a44673e79db89f348982157c61c65c86c3a37c42107010d911ebd5f680f4aa9140d435ec793dda0b2a850"}]}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000840)='\x00', 0x0, r3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/locks\x00', 0x0, 0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/net\x00') epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(r7, 0x406, r5) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}}, 0x24004094) kcmp(0x0, 0x0, 0x4, r2, 0xffffffffffffffff) 22:44:25 executing program 1: r0 = fork() r1 = fsopen(&(0x7f0000000000)='ext4\x00', 0x1) r2 = socket$inet(0x2, 0x4, 0x2000) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000001280)={0xffffffffffffffff, r2, 0x9}) epoll_pwait2(0xffffffffffffffff, &(0x7f00000012c0)=[{}, {}, {}], 0x3, &(0x7f0000001300)={0x77359400}, &(0x7f0000001340)={[0x40]}, 0x8) r3 = syz_open_procfs$namespace(r0, &(0x7f0000001380)='ns/net\x00') ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r4 = fork() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000004680)={'\x00', 0x4, 0x9, 0x24, 0x5, 0x6, r4}) r5 = gettid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000004700)={'\x00', 0xfff9, 0x5, 0x7fff, 0x2, 0x0, r5}) ioctl$int_in(r2, 0x5421, &(0x7f0000004780)=0x7fffffff) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000047c0), 0x40000, 0x0) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000004880)={'ip6_vti0\x00', &(0x7f0000004800)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x6, 0x1ff, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x20, 0x1, 0x8, 0x70000000}}) r7 = fspick(r6, &(0x7f00000048c0)='./file0\x00', 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000004900)={0xffffffffffffff00, 0x401, 0x1, 0x5, 0x3, [{0xffffffffffff8000, 0x7, 0x7fffffff, '\x00', 0x1004}, {0x8, 0xfffffffffffeffff, 0x7fffffff, '\x00', 0x3002}, {0x2, 0x3, 0x1, '\x00', 0x900}]}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000004a80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000004bc0)={&(0x7f0000004a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004b80)={&(0x7f0000004b00)={0x48, r8, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x44000) 22:44:25 executing program 2: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nl=@proc, &(0x7f0000000080)=0x80, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r4 = accept4(r3, &(0x7f0000000180)=@ax25={{}, [@bcast, @bcast, @netrom, @bcast, @netrom, @bcast, @bcast, @null]}, &(0x7f0000000200)=0x80, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x40c1) r5 = dup2(r2, r3) ioctl$PTP_SYS_OFFSET_EXTENDED(r5, 0xc4c03d09, &(0x7f0000000340)={0x14}) r6 = syz_open_dev$mouse(&(0x7f0000000800), 0x8, 0x600) ioctl$PTP_PIN_GETFUNC2(r6, 0xc0603d0f, &(0x7f0000000840)={'\x00', 0x7f, 0x1, 0x5}) r7 = syz_open_dev$mouse(&(0x7f00000008c0), 0x7, 0x8000) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2b}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000010}, 0x44015) r8 = creat(&(0x7f0000000a80)='./file0\x00', 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4005) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000bc0)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 'lc\x00', 0x6, 0x1, 0x1e}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e21, 0x10000, 0x3, 0x8001, 0x6}}, 0x44) syz_open_dev$vcsu(&(0x7f0000000c40), 0x401, 0x2c0002) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10c, 0x0, 0x302, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) clock_gettime(0x0, &(0x7f0000000f00)={0x0, 0x0}) epoll_pwait2(r5, &(0x7f0000000e80)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000f40)={r9, r10+60000000}, &(0x7f0000000f80)={[0x5]}, 0x8) 22:44:25 executing program 4: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f0000000040)={0x1184, 0x14, 0x20, 0x70bd26, 0x25dfdbfe, {0x1d, 0x1f}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x65, 0x1, "99dbe654ac814678318169c0f942cc27eed5db2908126d28bd81f18f4000b4d7a7c77b99b001a40fdd352f874647f8a4cd30464ea30467890788f3702d470ff46e38bc3074ba14287dea8ef8806b459cd281acce8ad780bd4a3116ddb90558a31a"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "cd230fb0869e54f867784d081f6f51ee2b253abc73b681d1050415376f289ddbd4861b7a8f21420f5feb4e9b332b0a835d8146de3894397f6cf57fb56b73e5b524aa"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "b87c10e24731c4b46ed84984c6a91b430a68c1becb6ec3da6dfb102aec1faffb7c12a72cbe798a81c9b70d46013e16288eead8ab651f07668f58f38ccc0a30af498cbc070db00563830d3c65234f7a6ded0cc91ab2dddb14f61f5dfd7fa56adb063208ce0f1d4d6129491224b5a384e568e9afdf3d02ad8598b8114c2562110101e1458befd25e0bd77bcca981bfee7433c884227f5434f79dac924914f969f1a6dc551c80b9b2a7ff0f407ca39aa2dd5b896d808be541"}]}, 0x1184}, 0x1, 0x0, 0x0, 0x40090}, 0x41) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001280), 0xc, &(0x7f0000001480)={&(0x7f0000001300)={0x16c, r0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x34}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4ab0cdcc}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x72}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x26cd}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040044) syz_genetlink_get_family_id$mptcp(&(0x7f0000001500), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x50, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x80d4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000016c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x30, r0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004801}, 0x20040044) recvmsg$unix(r2, &(0x7f0000002c80)={&(0x7f0000001800), 0x6e, &(0x7f0000002b40)=[{&(0x7f0000001880)=""/92, 0x5c}, {&(0x7f0000001900)=""/49, 0x31}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/225, 0xe1}, {&(0x7f0000002a40)=""/237, 0xed}], 0x5, &(0x7f0000002bc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xb0}, 0x40010000) recvmsg$unix(r2, &(0x7f0000003300)={&(0x7f0000002cc0), 0x6e, &(0x7f0000003140)=[{&(0x7f0000002d40)=""/10, 0xa}, {&(0x7f0000002d80)}, {&(0x7f0000002dc0)=""/212, 0xd4}, {&(0x7f0000002ec0)}, {&(0x7f0000002f00)=""/68, 0x44}, {&(0x7f0000002f80)=""/203, 0xcb}, {&(0x7f0000003080)=""/64, 0x40}, {&(0x7f00000030c0)=""/99, 0x63}], 0x8, &(0x7f00000031c0)=[@rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x110}, 0x40) kcmp(r8, r9, 0x5, r2, 0xffffffffffffffff) r10 = syz_open_dev$vcsn(&(0x7f0000003340), 0x1d28, 0x4040) fsconfig$FSCONFIG_SET_FD(r10, 0x5, &(0x7f0000003380)='\x00', 0x0, r5) recvmsg$unix(r4, &(0x7f0000004c00)={&(0x7f00000033c0)=@abs, 0x6e, &(0x7f0000004a80)=[{&(0x7f0000003440)=""/94, 0x5e}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/226, 0xe2}, {&(0x7f00000045c0)=""/207, 0xcf}, {&(0x7f00000046c0)=""/88, 0x58}, {&(0x7f0000004740)=""/206, 0xce}, {&(0x7f0000004840)=""/83, 0x53}, {&(0x7f00000048c0)=""/103, 0x67}, {&(0x7f0000004940)=""/120, 0x78}, {&(0x7f00000049c0)=""/133, 0x85}], 0xa, &(0x7f0000004b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}, 0x40012000) creat(&(0x7f0000004c40)='./file0\x00', 0x141) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r6) r13 = fsmount(r11, 0x1, 0x4) epoll_ctl$EPOLL_CTL_MOD(r13, 0x3, r12, &(0x7f0000004c80)={0xa0002000}) sendmsg$IPVS_CMD_ZERO(r13, &(0x7f0000004d80)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004d40)={&(0x7f0000004d00)={0x1c, r0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0d5}, 0x40000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x10, r7, 0x10000000) 22:44:25 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, r0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x30}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24000854}, 0x12) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000010}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x0, 0x30, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c008}, 0x40) r1 = socket$inet(0x2, 0x2, 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r0, 0x14, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x8004) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r3) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000940)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000a00)={'ip6tnl0\x00', &(0x7f0000000980)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0xfc, 0xc89, 0xe, @mcast1, @local, 0x7a0, 0x7, 0x45}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000b40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000c40)={'vxcan1\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001000)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000c80)={0x314, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x48}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r7}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x314}}, 0x80040) r9 = syz_open_dev$vcsn(&(0x7f0000006040), 0xff, 0x412000) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r9, 0x942e, 0x0) r10 = syz_open_dev$vcsn(&(0x7f00000060c0), 0x5, 0x880) syz_genetlink_get_family_id$team(&(0x7f0000006080), r10) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000006100)={@rand_addr, @loopback, @remote}, &(0x7f0000006140)=0xc) r11 = memfd_create(&(0x7f0000006180)=')\\[$\x00', 0x0) ioctl$int_in(r11, 0x5421, &(0x7f00000061c0)) [ 80.116032] audit: type=1400 audit(1737413065.916:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:44:25 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x500200, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$ptp(r1, &(0x7f0000000080)=""/88, 0x58) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000140)) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0xf}) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x144, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xd}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xdefd}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x48000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd44f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x8011) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000740)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x78, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000080}, 0x20040000) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000900), 0x410703, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x68, 0x7, 0xe, @empty, @local, 0x10, 0x0, 0xffffffe1, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000d40)={'sit0\x00', &(0x7f0000000cc0)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x2, 0x3, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x700, 0x700, 0x3ff, 0x59bb}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000004d80)={'syztnl2\x00', &(0x7f0000004d00)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x6, 0x8, 0x6c, @private2, @mcast2, 0x700, 0x40, 0x2, 0xa31}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004dc0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000004e80)={'ip6gre0\x00', &(0x7f0000004e00)={'syztnl0\x00', 0x0, 0x29, 0x80, 0x41, 0x6, 0x5, @mcast1, @mcast1, 0x80, 0x1, 0x6, 0x5c2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f00000053c0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005380)={&(0x7f0000004ec0)={0x4b0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xcab1}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x2, 0x0, 0x8856}, {0xfffd, 0x3b, 0x55, 0x10000}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 22:44:25 executing program 5: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socketpair(0x11, 0x2, 0x80, &(0x7f0000000240)={0xffffffffffffffff}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdb11}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x800) r2 = syz_open_dev$mouse(&(0x7f0000000400), 0x40, 0x2400) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x50}}, 0x20008094) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000780)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000840)={'sit0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x4, 0x20, 0x5f, 0x1, 0x67, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x10, 0x700, 0x1, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x7f, 0x800, 0xc, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x38, 0x7, 0xffffffff, 0x43e2}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x3a, 0x0, 0x4, @mcast2, @loopback, 0x1, 0x1, 0x9, 0x1f}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002040)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000002d00)={'syztnl1\x00', &(0x7f0000002c80)={'syztnl1\x00', 0x0, 0x29, 0x40, 0x8, 0x7, 0x0, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x8000, 0xfffffc00, 0x2}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002d40)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000002e40)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000003880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003840)={&(0x7f0000002e80)={0x9c0, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x2c4, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x39, 0x9, 0x9}, {0x0, 0x5, 0xfc, 0xe4c}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x7ff, 0x1, 0x3, 0x7ff}, {0x4, 0xfb, 0x4, 0x1168}, {0x1000, 0x3f, 0x4}, {0x0, 0x40, 0x8, 0xfffffffe}, {0x1, 0x8, 0x6, 0xff}, {0x5, 0x1a, 0x2, 0x5}, {0x6, 0x40, 0x4, 0x4}, {0x40, 0x80, 0xdb, 0x4}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9, 0x3, 0x5, 0x8}, {0x1f, 0x2, 0xff, 0x1f}, {0x0, 0x0, 0x1, 0x7}, {0x8, 0x0, 0x5, 0x2bf}, {0x4, 0x4d, 0x3, 0x6cfb}, {0x6, 0x9, 0x8, 0x7f}, {0xc, 0x5, 0xf8, 0x40}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x16ac}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r6}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x20, 0x6a, 0x3}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff8001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xffff, 0x7f, 0xff, 0x1f}, {0x8000, 0x1, 0x9, 0x535b}, {0x401, 0x9, 0x2, 0x4}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x53feafd8}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0xff, 0xfc, 0xe7ac}, {0x3ff, 0x33, 0x5, 0x3f}]}}}]}}]}, 0x9c0}, 0x1, 0x0, 0x0, 0x10814}, 0x48801) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000038c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat(r2, &(0x7f0000003b00)='./file0\x00', 0x400000, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003b80), r0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000003c40)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x1c, r11, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x497}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x4040000) accept4(0xffffffffffffffff, &(0x7f0000003c80)=@caif, &(0x7f0000003d00)=0x80, 0x0) 22:44:25 executing program 7: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'rose0\x00', @ifru_map}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xc8, 0xff, 0x6e1b, 0x54, @mcast2, @loopback, 0x7800, 0x40, 0x3, 0x4}}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x508b}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xed}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa896}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4048814}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r0, 0x29, 0x6, 0x9, 0x1, 0x50, @private1, @remote, 0x8, 0x7800, 0x4a, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6_vti0\x00', r0, 0x29, 0x81, 0x7, 0x0, 0xa, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x3a6, 0x1, 0x1, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000880)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)={0x324, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1cb6cf79}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xeb}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffc0}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r0}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r0}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0x324}, 0x1, 0x0, 0x0, 0x81}, 0x40050) socketpair(0x8, 0x6, 0x1f, &(0x7f00000008c0)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000a40)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xb0, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4084}, 0x4010) r7 = syz_open_dev$mouse(&(0x7f0000000a80), 0x8, 0x84a80) ioctl$PTP_SYS_OFFSET_EXTENDED(r7, 0xc4c03d09, &(0x7f0000000ac0)={0x1}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r7, 0x89f6, &(0x7f0000001040)={'ip6_vti0\x00', &(0x7f0000000fc0)={'ip6_vti0\x00', r5, 0x29, 0x2, 0x0, 0xcf, 0x760e0cd3dda5e5f4, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8000, 0x1f, 0x63c}}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000001140)={'sit0\x00', &(0x7f00000010c0)={'syztnl1\x00', r5, 0x4, 0x0, 0x81, 0x100, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x17}, 0x700, 0x7, 0x8, 0xff}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001ac0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001240)={0x80c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x88, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x9, 0x7, 0x800}, {0x7f, 0x40, 0xfc, 0x401}]}}}]}}, {{0x8, 0x1, r4}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x13c, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x400, 0xb7, 0x9, 0x10001}, {0x26f, 0x3, 0x3, 0x8}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x84d5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r4}, {0x2a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x3, 0x0, 0x8}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x1ff, 0x3f, 0x75, 0x400}, {0x7, 0x6, 0x4, 0x80000000}, {0x1, 0xce, 0x63, 0x4}, {0x1, 0x36, 0x1, 0x9}, {0x6, 0x9, 0x7f, 0xe849}, {0x2, 0x4, 0x40, 0x7}, {0xffff, 0x9, 0x1f, 0x824}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0xbc, 0x4, 0x9}, {0x5, 0xe, 0x1f, 0x2}, {0x9, 0x20, 0x7f, 0x9}, {0x7fff, 0x9a, 0x7c, 0x8}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x70}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x27e}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}]}}]}, 0x80c}, 0x1, 0x0, 0x0, 0x20008080}, 0x40810) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001b40)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000001b00)={0x0, 0x3938700}, 0x1, 0x0, 0x1}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001c40)={'raw\x00', 0x5b, "4692c1d2a3d82648a85d822d9812584ef4986c0a8b1b42112346645e1efd154226b1a1ad35912dce91101b47c07bba9255c417b06e94fa752ababf72502474e9c49bb22ad6ea1f07ee6540bfb763c08f549c9b2deba88356f3331e"}, &(0x7f0000001cc0)=0x7f) [ 81.574767] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.583894] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.584821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.590107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.595903] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.596307] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.601943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.604449] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.609562] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.614070] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.617089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.627624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.629621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.640086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.642811] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.643172] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.646047] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.650154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.650603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.659738] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.660064] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.664080] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.673923] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.677868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.692795] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.702803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.705764] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.708986] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.713748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.717017] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.721518] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.721614] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.738196] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.747046] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.756070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.768461] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 81.772106] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.773211] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.779994] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.780723] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.782011] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.782795] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.809972] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.812471] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.817005] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 81.823915] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.825855] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 81.830565] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.710833] Bluetooth: hci1: command tx timeout [ 83.774671] Bluetooth: hci2: command tx timeout [ 83.774715] Bluetooth: hci0: command tx timeout [ 83.837695] Bluetooth: hci3: command tx timeout [ 83.838410] Bluetooth: hci5: command tx timeout [ 83.838493] Bluetooth: hci4: command tx timeout [ 83.901767] Bluetooth: hci6: command tx timeout [ 83.901941] Bluetooth: hci7: command tx timeout [ 85.758641] Bluetooth: hci1: command tx timeout [ 85.821465] Bluetooth: hci2: command tx timeout [ 85.821558] Bluetooth: hci0: command tx timeout [ 85.885407] Bluetooth: hci5: command tx timeout [ 85.885504] Bluetooth: hci3: command tx timeout [ 85.885528] Bluetooth: hci4: command tx timeout [ 85.950478] Bluetooth: hci7: command tx timeout [ 85.950504] Bluetooth: hci6: command tx timeout [ 87.805477] Bluetooth: hci1: command tx timeout [ 87.870421] Bluetooth: hci0: command tx timeout [ 87.870522] Bluetooth: hci2: command tx timeout [ 87.933447] Bluetooth: hci4: command tx timeout [ 87.933488] Bluetooth: hci3: command tx timeout [ 87.933547] Bluetooth: hci5: command tx timeout [ 87.997406] Bluetooth: hci7: command tx timeout [ 87.997943] Bluetooth: hci6: command tx timeout [ 89.854487] Bluetooth: hci1: command tx timeout [ 89.917480] Bluetooth: hci2: command tx timeout [ 89.917688] Bluetooth: hci0: command tx timeout [ 89.981489] Bluetooth: hci5: command tx timeout [ 89.985390] Bluetooth: hci3: command tx timeout [ 89.985413] Bluetooth: hci4: command tx timeout [ 90.045514] Bluetooth: hci6: command tx timeout [ 90.046484] Bluetooth: hci7: command tx timeout [ 139.148553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.148677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.553595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.553754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.779935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.780022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.939906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.939989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.023673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.023756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.347505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.347632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.348055] [ 140.349586] ====================================================== [ 140.350191] WARNING: possible circular locking dependency detected [ 140.350795] 6.13.0-rc7-next-20250120 #1 Not tainted [ 140.351284] ------------------------------------------------------ [ 140.352673] kworker/u8:0/11 is trying to acquire lock: [ 140.353748] ffffffff8621eb28 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 140.354288] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 140.356641] [ 140.356641] but task is already holding lock: [ 140.358210] ffff88800b740768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 140.359933] [ 140.359933] which lock already depends on the new lock. [ 140.359933] [ 140.361381] [ 140.361381] the existing dependency chain (in reverse order) is: [ 140.362515] [ 140.362515] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 140.363191] __mutex_lock+0x13d/0xb50 [ 140.363656] wiphy_register+0x1b2e/0x25d0 [ 140.364163] ieee80211_register_hw+0x23a4/0x3d60 [ 140.364726] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 140.365307] init_mac80211_hwsim+0x389/0x870 [ 140.365852] do_one_initcall+0xf9/0x640 [ 140.366348] kernel_init_freeable+0x53d/0x7a0 [ 140.366883] kernel_init+0x1e/0x2d0 [ 140.367332] ret_from_fork+0x48/0x80 [ 140.367777] ret_from_fork_asm+0x1a/0x30 [ 140.368277] [ 140.368277] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 140.368908] __lock_acquire+0x29fd/0x4580 [ 140.369397] lock_acquire+0x19b/0x520 [ 140.369846] __mutex_lock+0x13d/0xb50 [ 140.370309] unregister_netdevice_many_notify+0x1612/0x1c80 [ 140.370931] unregister_netdevice_queue+0x224/0x2e0 [ 140.371483] _cfg80211_unregister_wdev+0x57b/0x700 [ 140.372048] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 140.372611] ieee80211_unregister_hw+0x55/0x3a0 [ 140.373145] hwsim_exit_net+0x3a0/0x730 [ 140.373627] ops_exit_list+0xb3/0x180 [ 140.374081] cleanup_net+0x546/0xad0 [ 140.374522] process_one_work+0x8ee/0x1a10 [ 140.375038] worker_thread+0x674/0xe70 [ 140.375522] kthread+0x3ab/0x720 [ 140.375940] ret_from_fork+0x48/0x80 [ 140.376376] ret_from_fork_asm+0x1a/0x30 [ 140.376874] [ 140.376874] other info that might help us debug this: [ 140.376874] [ 140.377638] Possible unsafe locking scenario: [ 140.377638] [ 140.378230] CPU0 CPU1 [ 140.378690] ---- ---- [ 140.379136] lock(&rdev->wiphy.mtx); [ 140.379543] lock(rtnl_mutex); [ 140.380137] lock(&rdev->wiphy.mtx); [ 140.380764] lock(rtnl_mutex); [ 140.381132] [ 140.381132] *** DEADLOCK *** [ 140.381132] [ 140.381723] 4 locks held by kworker/u8:0/11: [ 140.382159] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 140.383185] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 140.384179] #2: ffffffff86212b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 140.385092] #3: ffff88800b740768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 140.386156] [ 140.386156] stack backtrace: [ 140.386594] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250120 #1 [ 140.387430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 140.388231] Workqueue: netns cleanup_net [ 140.388660] Call Trace: [ 140.388922] [ 140.389160] dump_stack_lvl+0xca/0x120 [ 140.389586] print_circular_bug+0x47b/0x750 [ 140.390032] check_noncircular+0x2e9/0x3c0 [ 140.390480] ? srso_return_thunk+0x5/0x5f [ 140.390926] ? __pfx_check_noncircular+0x10/0x10 [ 140.391418] ? hlock_class+0x4e/0x130 [ 140.391820] ? mark_lock+0xac/0xed0 [ 140.392211] ? srso_return_thunk+0x5/0x5f [ 140.392678] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 140.393169] ? lockdep_lock+0xba/0x1b0 [ 140.393600] ? __pfx_lockdep_lock+0x10/0x10 [ 140.394063] __lock_acquire+0x29fd/0x4580 [ 140.394517] ? __pfx___lock_acquire+0x10/0x10 [ 140.394994] ? lock_release+0x20f/0x6f0 [ 140.395410] ? __pfx_lock_release+0x10/0x10 [ 140.395864] lock_acquire+0x19b/0x520 [ 140.396278] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 140.396877] ? __pfx_lock_acquire+0x10/0x10 [ 140.397322] ? srso_return_thunk+0x5/0x5f [ 140.397782] ? lock_release+0x20f/0x6f0 [ 140.398213] ? srso_return_thunk+0x5/0x5f [ 140.398655] ? lock_is_held_type+0x9e/0x120 [ 140.399114] ? srso_return_thunk+0x5/0x5f [ 140.399568] __mutex_lock+0x13d/0xb50 [ 140.399972] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 140.400578] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 140.401199] ? srso_return_thunk+0x5/0x5f [ 140.401643] ? synchronize_rcu_expedited+0x38a/0x420 [ 140.402159] ? __pfx___mutex_lock+0x10/0x10 [ 140.402626] ? __pfx_autoremove_wake_function+0x10/0x10 [ 140.403183] ? srso_return_thunk+0x5/0x5f [ 140.403625] ? kasan_quarantine_put+0x84/0x1e0 [ 140.404122] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 140.404590] ? srso_return_thunk+0x5/0x5f [ 140.405039] unregister_netdevice_many_notify+0x1612/0x1c80 [ 140.405622] ? __virt_addr_valid+0x2e8/0x5d0 [ 140.406107] ? __pfx_lock_release+0x10/0x10 [ 140.406552] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 140.407161] ? find_held_lock+0x2c/0x110 [ 140.407601] ? srso_return_thunk+0x5/0x5f [ 140.408046] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 140.408561] ? srso_return_thunk+0x5/0x5f [ 140.409017] ? lock_release+0x20f/0x6f0 [ 140.409455] ? __pfx_lock_release+0x10/0x10 [ 140.409917] ? srso_return_thunk+0x5/0x5f [ 140.410374] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 140.410911] ? srso_return_thunk+0x5/0x5f [ 140.411369] unregister_netdevice_queue+0x224/0x2e0 [ 140.411890] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 140.412452] ? up_write+0x195/0x520 [ 140.412851] _cfg80211_unregister_wdev+0x57b/0x700 [ 140.413375] ? srso_return_thunk+0x5/0x5f [ 140.413829] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 140.414362] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 140.414928] ? srso_return_thunk+0x5/0x5f [ 140.415367] ? srso_return_thunk+0x5/0x5f [ 140.415811] ? synchronize_rcu+0x1ff/0x260 [ 140.416257] ieee80211_unregister_hw+0x55/0x3a0 [ 140.416746] hwsim_exit_net+0x3a0/0x730 [ 140.417173] ? __pfx_hwsim_exit_net+0x10/0x10 [ 140.417652] ? srso_return_thunk+0x5/0x5f [ 140.418101] ? netdev_run_todo+0x788/0x1040 [ 140.418555] ? __pfx_hwsim_exit_net+0x10/0x10 [ 140.419038] ops_exit_list+0xb3/0x180 [ 140.419454] cleanup_net+0x546/0xad0 [ 140.419845] ? __pfx_cleanup_net+0x10/0x10 [ 140.420303] process_one_work+0x8ee/0x1a10 [ 140.420776] ? __pfx_lock_acquire+0x10/0x10 [ 140.421224] ? __pfx_process_one_work+0x10/0x10 [ 140.421730] ? srso_return_thunk+0x5/0x5f [ 140.422178] ? move_linked_works+0x172/0x270 [ 140.422638] ? srso_return_thunk+0x5/0x5f [ 140.423081] ? assign_work+0x196/0x240 [ 140.423508] worker_thread+0x674/0xe70 [ 140.423951] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 140.424500] ? __pfx_worker_thread+0x10/0x10 [ 140.424976] kthread+0x3ab/0x720 [ 140.425355] ? __pfx_kthread+0x10/0x10 [ 140.425783] ? srso_return_thunk+0x5/0x5f [ 140.426233] ? finish_task_switch.isra.0+0x206/0x840 [ 140.426762] ? __pfx_kthread+0x10/0x10 [ 140.427186] ret_from_fork+0x48/0x80 [ 140.427568] ? __pfx_kthread+0x10/0x10 [ 140.427996] ret_from_fork_asm+0x1a/0x30 [ 140.428441] [ 142.664126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 142.667542] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 142.669491] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 142.673676] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 142.675918] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 142.677381] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.701372] Bluetooth: hci4: command tx timeout [ 146.749421] Bluetooth: hci4: command tx timeout [ 148.797391] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 22:45:26 Registers: info registers vcpu 0 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283e2e5 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=0000000000000036 R11=3a6b636f6c206762 R12=0000000000000036 R13=0000000000000001 R14=ffff888008fea01b R15=ffff8880095deeb8 RIP=ffffffff8283e33d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561d26332d48 CR3=0000000015824000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffffffffffffff0f0e0d0c XMM03=0000000000000000736563697665642f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=0000561d262e71a000000000ffffffff XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffffffff0c8a673 RBX=ffffffff86453398 RCX=ffffffff812d1ae2 RDX=0000000000000000 RSI=ffffffff8678d09c RDI=ffffffff86453378 RBP=ffffffff86453390 RSP=ffff888022017698 R8 =ffffffff8678d09c R9 =ffff8880220177e0 R10=000000000003ab6c R11=0000000000004330 R12=ffffffff864533a0 R13=ffffffff86453378 R14=ffffffff8645338c R15=dffffc0000000000 RIP=ffffffff813484ff RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc699e9a428 CR3=0000000019fea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000413329c000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000