Warning: Permanently added '[localhost]:22682' (ECDSA) to the list of known hosts. 2022/10/02 04:37:54 fuzzer started 2022/10/02 04:37:54 dialing manager at localhost:35095 syzkaller login: [ 45.607849] cgroup: Unknown subsys name 'net' [ 45.692605] cgroup: Unknown subsys name 'rlimit' 2022/10/02 04:38:09 syscalls: 230 2022/10/02 04:38:09 code coverage: enabled 2022/10/02 04:38:09 comparison tracing: enabled 2022/10/02 04:38:09 extra coverage: enabled 2022/10/02 04:38:09 setuid sandbox: enabled 2022/10/02 04:38:09 namespace sandbox: enabled 2022/10/02 04:38:09 Android sandbox: enabled 2022/10/02 04:38:09 fault injection: enabled 2022/10/02 04:38:09 leak checking: enabled 2022/10/02 04:38:09 net packet injection: enabled 2022/10/02 04:38:09 net device setup: enabled 2022/10/02 04:38:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 04:38:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 04:38:09 USB emulation: enabled 2022/10/02 04:38:09 hci packet injection: enabled 2022/10/02 04:38:09 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 04:38:09 802.15.4 emulation: enabled 2022/10/02 04:38:09 fetching corpus: 0, signal 0/0 (executing program) 2022/10/02 04:38:11 starting 8 fuzzer processes 04:38:11 executing program 0: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c044) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5f15}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xde4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfe2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = accept4$inet(r0, &(0x7f0000000380)={0x2, 0x0, @multicast2}, &(0x7f00000003c0)=0x10, 0x800) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd4, 0x32}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1f, 0xfff, 0x8, 0x1000, 0x8, 0x6, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x18, 0x2, 0x60, 0x2, 0x30, 0x48, 0x6]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x1b, 0x5b, 0x30, 0x5, 0x1, 0xc, 0x3, 0x6, 0x5a, 0x6, 0x3, 0xb, 0x60, 0x6c, 0x16, 0x22, 0x4, 0x6c, 0x2, 0xc, 0x9, 0xc, 0x24, 0x4, 0x30]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x5}, {0x0, 0x8}, {0x4}, {0x6, 0x6}, {0x7}, {0x3, 0x6}, {0x0, 0x8}, {0x3, 0x2}, {0x7, 0x6}, {0x0, 0xa}, {0x3, 0x9}, {0x3, 0xa}, {0x3, 0x2}, {0x2, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x5, 0x5}, {0x2}, {0x4, 0x3}, {0x3, 0x5}, {0x5, 0x9}]}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0xcd5c0c01f618876f) syz_open_dev$hidraw(&(0x7f0000000640), 0x1, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@private0}}, &(0x7f0000000780)=0xe8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f00000007c0)={'ipvs\x00'}, &(0x7f0000000800)=0x1e) accept4$inet(r0, &(0x7f0000000840)={0x2, 0x0, @initdev}, &(0x7f0000000880)=0x10, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'erspan0\x00', r3, 0x8, 0x7800, 0x5, 0x8, {{0x15, 0x4, 0x0, 0x6, 0x54, 0x65, 0x0, 0x6e, 0x2f, 0x0, @empty, @loopback, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x40, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast, @private=0xa010102]}, @noop, @rr={0x7, 0x7, 0x22, [@broadcast]}, @noop, @generic={0x86, 0x6, "92aa7713"}, @ra={0x94, 0x4}]}}}}}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048004) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, r6, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd742}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x8840) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 04:38:11 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x304, 0x2) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044804) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c5}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7, 0x10, 0x6, 0xe09, {{0x2a, 0x4, 0x3, 0x11, 0xa8, 0x67, 0x0, 0xdd, 0x0, 0x0, @private=0xa010100, @multicast1, {[@noop, @generic={0x86, 0x8, 'BkY5#^'}, @ssrr={0x89, 0x2b, 0xa3, [@loopback, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1, @broadcast, @multicast2, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x5b, 0x3, [{0x1, 0x6, "8f160a5f"}, {0x2, 0x11, "a7713553b8f47548baf49a38fbe705"}, {0x7, 0xd, "5d90c24020e470e80bd935"}, {0x0, 0x5, "739e43"}, {0x1, 0xd, "c617a7d005834f64931f43"}, {0x0, 0xf, "7c481d58ac3858b82cdc0da8eb"}, {0x0, 0x7, "2bdb52a85c"}, {0x7, 0x9, "b0e2f05f0e2b0b"}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', r2, 0x8, 0x7, 0x6, 0x5, {{0x20, 0x4, 0x1, 0x38, 0x80, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@ssrr={0x89, 0x7, 0x68, [@loopback]}, @cipso={0x86, 0x63, 0x2, [{0x2, 0xc, "eacf5f2875bd491539de"}, {0x5, 0xc, "3cb950579c517fead09d"}, {0x2, 0x2}, {0xc, 0x11, "f2968cb4f4063989f80f8e15a9e440"}, {0x1, 0xc, "5cd05016dbac44c46f96"}, {0x6, 0x12, "77794ea69c862ba07a07ff3f8cb4cb80"}, {0x1, 0x8, "1547a28ced9c"}, {0x6, 0x2}, {0x1, 0xa, "383ebdf42fd49d09"}]}]}}}}}) r3 = socket(0x25, 0x3, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000580)=0x9, &(0x7f00000005c0)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000600), 0x2) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000640), &(0x7f0000000680)=0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) io_pgetevents(0x0, 0xdd1, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000780)={r5, r6+60000000}, 0x0) io_pgetevents(0x0, 0x7fffffff, 0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x362]}, 0x8}) clock_getres(0x2, &(0x7f0000000940)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000980)={0x2, {{0xa, 0x4e21, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x88) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x2}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040810}, 0x884) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0) setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000b80)=0x9, 0x2) 04:38:11 executing program 2: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x1, 0x8, 0x1800}, {0x3, 0x3e00, 0x1000}, {0x2, 0x1, 0x800}], 0x3, &(0x7f0000000180)={0x77359400}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) io_pgetevents(0x0, 0x1, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000000300)=0xfffffffe) r0 = semget(0x0, 0x4, 0x280) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x400, 0x800}, {0x2, 0x2, 0x1800}, {0x4, 0x4, 0x800}], 0x3, &(0x7f00000003c0)={r1, r2+60000000}) pselect6(0x40, &(0x7f0000000400)={0xfffffffffffffffd, 0x9, 0x2, 0x4, 0x4, 0x5, 0x5, 0x8}, &(0x7f0000000440)={0x0, 0x4, 0x20, 0x0, 0x6, 0x0, 0x5, 0x4}, &(0x7f0000000480)={0x2, 0x6, 0x20, 0x1, 0x3, 0xffffffffffff0000, 0xffffffffffffff01, 0x7fffffff}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x5]}, 0x8}) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, 0x0, r3) r4 = request_key(&(0x7f0000000600)='rxrpc_s\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)='[-]\\\x00', 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0) add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = semget(0x0, 0x0, 0x9840a7d51ce5aec4) semctl$SEM_STAT(r5, 0x4, 0x12, &(0x7f0000000740)=""/123) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000007c0)=""/79, &(0x7f0000000840)=0x4f) pselect6(0x40, &(0x7f0000000880)={0x200, 0x1f, 0x5, 0xff, 0x313ea777, 0x6, 0x58b, 0x6ef}, &(0x7f00000008c0)={0x3910a88f, 0x6, 0x5, 0x3, 0xb2ac, 0x0, 0xaa45, 0x2}, &(0x7f0000000900)={0x2, 0x53, 0x800, 0x7, 0x3, 0x7ff, 0x8000, 0x2}, &(0x7f0000000940), &(0x7f00000009c0)={&(0x7f0000000980)={[0x200]}, 0x8}) r6 = geteuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1, r6, 0x0, 0xee00, 0xee00, 0x161}, 0x1, 0x1, 0xd3a, 0x2, 0x0, 0xffffffffffffffff, 0x1000}) 04:38:11 executing program 3: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x40800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x8, 0x40, 0x0, 0x9, {{0x12, 0x4, 0x0, 0x3, 0x48, 0x64, 0x0, 0x43, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x18, 0xce, 0x0, 0x0, [0x8, 0xc9, 0x8, 0x1ff, 0x10001]}, @lsrr={0x83, 0x1b, 0xd6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100, @loopback, @broadcast]}]}}}}}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000280)={0x3c, 0x2b, '\x00', [@pad1, @generic={0xff, 0x92, "a3e989f66a181dd95ff776a8035344d15494a7507de16ce4b61fc655cf82d0013683b0b88f67668886a2afa07ea59b6235adff200a5104eeddb73f7492e8de3d87c828f41d1c1707081fd7e81a33dae193f8845fc6bd82923c1400916bc2f0b3023dff36d3e5809764d974ef734ea21d080c1a2b69425c0b6d93cfc7457d2ab6eb3cf7d9e096cc21bfda0894cf6a5d014d07"}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xb6, "f9f828e2a84dccbe39f623b83e4d1857012cedac371849893c7522a78109018573eed4eb222965c96e31c1e64bdb2d0e57c72aae3996b85739082dcb5e2246ab98893ecd11cb81d89141434a472732806b2dc7ee35082d39bb62c0f7a5e126b16d261c66eefe32e2dcf4ee3508073b748e455b22fc3a5c581b810a03a328dc044d0698fb533f2e117a40ac28e6c05ab2f74f7eaec460ae8f753415224f4248b90358d30865080eed9acdc60e78a8d2d178f9ca3b5529"}]}, 0x160) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', r1, 0x2f, 0x2, 0x7f, 0x1, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x7, 0xa589}}) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x2f, 0x1, 0x7, 0x9e77, 0x10, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8, 0x1ff, 0x7b}}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x134, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xac2c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000780)={0x1, 0x1, 0x0, 0x877, 0x40}, 0xc) r5 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x4e24, 0x81, 0x4e24, 0x8, 0xd, 0x80, 0xe0, 0x88, r4, r5}, {0x189, 0xe56, 0xffff, 0x7, 0x8, 0x3, 0x1, 0x19c}, {0x5, 0x6, 0x0, 0xebc}, 0x8, 0x6e6bbc, 0x2, 0x0, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4d6, 0x33}, 0x2, @in=@local, 0x3504, 0x0, 0x1, 0x6, 0xdf, 0x100, 0x1}}, 0xe8) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000008c0)={0x3a, 0xe, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1e}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @local]}, 0x78) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x4000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000980)={'TPROXY\x00'}, &(0x7f00000009c0)=0x1e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'sit0\x00', r2, 0x4, 0x6, 0x1f, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x6, 0x7}}) io_setup(0x5, &(0x7f0000000ac0)=0x0) io_submit(r7, 0x0, &(0x7f0000000b00)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r9, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20000001) 04:38:11 executing program 4: sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48d4}, 0x8040) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x25}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20000040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, 0x0, 0x4000000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x262080, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x67}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40014) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x5, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008050) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, &(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)='.\x00') prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x40000000) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x0, [0x5fa1, 0x8, 0x7]}, &(0x7f0000000a00)=0x44) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ac0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x138, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x6c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "97f840a0dc28b8ab296fc3fb277a68b9804b4010595f3bc9a12db3fba46fd101"}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}]}, @NL802154_ATTR_SEC_KEY={0x90, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "865c67941746962a0e563ad5debe6978"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d7f304b724694218e4239d7ebf26966e8879e5e1d5017813ef22c79faf3cdbda"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a64b5090be31b507af86d8149ea6019e2af0e7796b05f9d68c11a9a8e9b4107d"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2e}]}, @NL802154_ATTR_SEC_KEY={0x20, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x4001) keyctl$read(0xb, 0x0, &(0x7f0000000cc0)=""/107, 0x6b) 04:38:11 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:cert_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004004) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r4) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r8, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1dc, r9, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3d, 0xbe, "db57e2419f5124d55b9e3245971e103493d11da5d8134364b075ea7b1da56ef5fcbd22e2ea4833a7ad935470acace456c26059440aa82babdf"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa5, 0xbe, "a49c850aae91ad0a42bc43732620b6ec01267b22a4b594087a220a0a1013faa1558d4b413779d63a2a5a0a8291f2cff14f03d6cb35ef849bbe6bcd40292dafad0e7cf3744214a55f5469db6c8d454c2fa8f34a3461fe8cac7670fac5e8f39f22a6e37d34fbf7fa4b02f2b1fc6691eb2f7f2215dec6e78b473b643e79f9fbe8e1c64e64ac0a2cb14775399bc49c104b1111031b2318629fdb8c88bb6f8cf360e2b2"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa8, 0xac, "b423948c506888a69bfb4bc496d47c543d804dd3a5dc5b32ba6528244ef30de788394c9ab57ac164f35f8d0663c8526e1449732b7da11f7520c537c47e77ba314f36ff89e0aca98f9e8efaec1f1bc1d37b8d9faead023f14f291f1b4ed0e5775ee4ec655997b5f9464a256b74a9d9b9263b7221f534fb21b5dab24f0b0e90ee899ba98a935d79f91a2c783e0a0458646b246208ddb4836cf7a7ab97a3dc1d0c8a95180e3"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x8000}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x3]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40014}, 0x2000c0c0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 61.456774] audit: type=1400 audit(1664685491.182:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:38:11 executing program 6: r0 = gettid() waitid(0x1, r0, 0x0, 0x4, &(0x7f0000000000)) r1 = fork() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1, &(0x7f00000000c0)=""/119) r2 = fork() waitid(0x0, r2, &(0x7f0000000140), 0x2, 0x0) wait4(r0, 0x0, 0x1, &(0x7f00000001c0)) wait4(r2, &(0x7f0000000280), 0x4, &(0x7f00000002c0)) process_vm_readv(r1, &(0x7f0000000380), 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/231, 0xe7}, {&(0x7f0000000600)=""/184, 0xb8}, {&(0x7f00000006c0)=""/89, 0x59}], 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f00000008c0)=0xe8) r4 = getgid() r5 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000900)={{0x3, r3, r4, 0xee01, 0x0, 0x0, 0xa2}, 0xfffffff8, 0x4, 0x4, 0x7ff, r0, r5, 0x4}) r6 = fork() sched_setparam(r6, &(0x7f0000000980)=0x1) getrusage(0x1, &(0x7f00000009c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wg1\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, 0x0, 0x98e84c9e62d6a31a, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4008004) io_setup(0x8001, &(0x7f0000000bc0)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x9, &(0x7f0000000c00)=""/83) 04:38:11 executing program 5: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005041}, 0x400c054) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044011) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x55}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x14080004}, 0x5) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x58eee835f54f5192}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1a080}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r2, 0x810, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004490) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xfd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hwclock_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000e40)={&(0x7f0000000d40), 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x19}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044474}, 0x4c891) [ 62.786517] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.788908] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.790872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.792455] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.801731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.802816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.836417] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.837652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.839528] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.841586] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 62.845498] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.847857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.849011] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.851068] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.852468] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.853719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.854877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.857867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.860330] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.861668] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 62.862724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.864377] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 62.865577] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.869753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.871847] Bluetooth: hci0: HCI_REQ-0x0c1a [ 62.874793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.881271] Bluetooth: hci1: HCI_REQ-0x0c1a [ 62.885848] Bluetooth: hci3: HCI_REQ-0x0c1a [ 62.907859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 62.910114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.913400] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 62.915546] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 62.918173] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 62.919230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.921390] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.923083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.929040] Bluetooth: hci5: HCI_REQ-0x0c1a [ 62.934855] Bluetooth: hci4: HCI_REQ-0x0c1a [ 62.947457] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.948825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 62.956182] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 62.957828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.960616] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.961905] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 62.962120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.964868] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 62.967516] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 62.974642] Bluetooth: hci2: HCI_REQ-0x0c1a [ 62.974651] Bluetooth: hci6: HCI_REQ-0x0c1a [ 64.919468] Bluetooth: hci0: command 0x0409 tx timeout [ 64.921153] Bluetooth: hci3: command 0x0409 tx timeout [ 64.922213] Bluetooth: hci1: command 0x0409 tx timeout [ 64.923261] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 64.983087] Bluetooth: hci2: command 0x0409 tx timeout [ 64.984138] Bluetooth: hci4: command 0x0409 tx timeout [ 64.985041] Bluetooth: hci5: command 0x0409 tx timeout [ 65.048120] Bluetooth: hci6: command 0x0409 tx timeout [ 66.967099] Bluetooth: hci1: command 0x041b tx timeout [ 66.967860] Bluetooth: hci3: command 0x041b tx timeout [ 66.968688] Bluetooth: hci0: command 0x041b tx timeout [ 67.031179] Bluetooth: hci5: command 0x041b tx timeout [ 67.031926] Bluetooth: hci4: command 0x041b tx timeout [ 67.032693] Bluetooth: hci2: command 0x041b tx timeout [ 67.095182] Bluetooth: hci6: command 0x041b tx timeout [ 68.076731] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 68.081191] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 68.101897] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 68.131702] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 68.150566] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 68.174633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 68.194447] Bluetooth: hci7: HCI_REQ-0x0c1a [ 69.015049] Bluetooth: hci0: command 0x040f tx timeout [ 69.015819] Bluetooth: hci3: command 0x040f tx timeout [ 69.016582] Bluetooth: hci1: command 0x040f tx timeout [ 69.079151] Bluetooth: hci2: command 0x040f tx timeout [ 69.079921] Bluetooth: hci4: command 0x040f tx timeout [ 69.080680] Bluetooth: hci5: command 0x040f tx timeout [ 69.143215] Bluetooth: hci6: command 0x040f tx timeout [ 70.231104] Bluetooth: hci7: command 0x0409 tx timeout [ 71.064048] Bluetooth: hci1: command 0x0419 tx timeout [ 71.064500] Bluetooth: hci3: command 0x0419 tx timeout [ 71.064902] Bluetooth: hci0: command 0x0419 tx timeout [ 71.128002] Bluetooth: hci5: command 0x0419 tx timeout [ 71.128452] Bluetooth: hci4: command 0x0419 tx timeout [ 71.128846] Bluetooth: hci2: command 0x0419 tx timeout [ 71.190997] Bluetooth: hci6: command 0x0419 tx timeout [ 72.280103] Bluetooth: hci7: command 0x041b tx timeout [ 74.327999] Bluetooth: hci7: command 0x040f tx timeout [ 76.376010] Bluetooth: hci7: command 0x0419 tx timeout 04:39:07 executing program 3: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x40800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x8, 0x40, 0x0, 0x9, {{0x12, 0x4, 0x0, 0x3, 0x48, 0x64, 0x0, 0x43, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x18, 0xce, 0x0, 0x0, [0x8, 0xc9, 0x8, 0x1ff, 0x10001]}, @lsrr={0x83, 0x1b, 0xd6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100, @loopback, @broadcast]}]}}}}}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000280)={0x3c, 0x2b, '\x00', [@pad1, @generic={0xff, 0x92, "a3e989f66a181dd95ff776a8035344d15494a7507de16ce4b61fc655cf82d0013683b0b88f67668886a2afa07ea59b6235adff200a5104eeddb73f7492e8de3d87c828f41d1c1707081fd7e81a33dae193f8845fc6bd82923c1400916bc2f0b3023dff36d3e5809764d974ef734ea21d080c1a2b69425c0b6d93cfc7457d2ab6eb3cf7d9e096cc21bfda0894cf6a5d014d07"}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xb6, "f9f828e2a84dccbe39f623b83e4d1857012cedac371849893c7522a78109018573eed4eb222965c96e31c1e64bdb2d0e57c72aae3996b85739082dcb5e2246ab98893ecd11cb81d89141434a472732806b2dc7ee35082d39bb62c0f7a5e126b16d261c66eefe32e2dcf4ee3508073b748e455b22fc3a5c581b810a03a328dc044d0698fb533f2e117a40ac28e6c05ab2f74f7eaec460ae8f753415224f4248b90358d30865080eed9acdc60e78a8d2d178f9ca3b5529"}]}, 0x160) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', r1, 0x2f, 0x2, 0x7f, 0x1, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x7, 0xa589}}) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x2f, 0x1, 0x7, 0x9e77, 0x10, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8, 0x1ff, 0x7b}}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x134, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xac2c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000780)={0x1, 0x1, 0x0, 0x877, 0x40}, 0xc) r5 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x4e24, 0x81, 0x4e24, 0x8, 0xd, 0x80, 0xe0, 0x88, r4, r5}, {0x189, 0xe56, 0xffff, 0x7, 0x8, 0x3, 0x1, 0x19c}, {0x5, 0x6, 0x0, 0xebc}, 0x8, 0x6e6bbc, 0x2, 0x0, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4d6, 0x33}, 0x2, @in=@local, 0x3504, 0x0, 0x1, 0x6, 0xdf, 0x100, 0x1}}, 0xe8) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000008c0)={0x3a, 0xe, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1e}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @local]}, 0x78) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x4000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000980)={'TPROXY\x00'}, &(0x7f00000009c0)=0x1e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'sit0\x00', r2, 0x4, 0x6, 0x1f, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x6, 0x7}}) io_setup(0x5, &(0x7f0000000ac0)=0x0) io_submit(r7, 0x0, &(0x7f0000000b00)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r9, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20000001) 04:39:07 executing program 3: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x40800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x8, 0x40, 0x0, 0x9, {{0x12, 0x4, 0x0, 0x3, 0x48, 0x64, 0x0, 0x43, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x18, 0xce, 0x0, 0x0, [0x8, 0xc9, 0x8, 0x1ff, 0x10001]}, @lsrr={0x83, 0x1b, 0xd6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100, @loopback, @broadcast]}]}}}}}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000280)={0x3c, 0x2b, '\x00', [@pad1, @generic={0xff, 0x92, "a3e989f66a181dd95ff776a8035344d15494a7507de16ce4b61fc655cf82d0013683b0b88f67668886a2afa07ea59b6235adff200a5104eeddb73f7492e8de3d87c828f41d1c1707081fd7e81a33dae193f8845fc6bd82923c1400916bc2f0b3023dff36d3e5809764d974ef734ea21d080c1a2b69425c0b6d93cfc7457d2ab6eb3cf7d9e096cc21bfda0894cf6a5d014d07"}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xb6, "f9f828e2a84dccbe39f623b83e4d1857012cedac371849893c7522a78109018573eed4eb222965c96e31c1e64bdb2d0e57c72aae3996b85739082dcb5e2246ab98893ecd11cb81d89141434a472732806b2dc7ee35082d39bb62c0f7a5e126b16d261c66eefe32e2dcf4ee3508073b748e455b22fc3a5c581b810a03a328dc044d0698fb533f2e117a40ac28e6c05ab2f74f7eaec460ae8f753415224f4248b90358d30865080eed9acdc60e78a8d2d178f9ca3b5529"}]}, 0x160) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', r1, 0x2f, 0x2, 0x7f, 0x1, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x7, 0xa589}}) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x2f, 0x1, 0x7, 0x9e77, 0x10, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8, 0x1ff, 0x7b}}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x134, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xac2c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000780)={0x1, 0x1, 0x0, 0x877, 0x40}, 0xc) r5 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x4e24, 0x81, 0x4e24, 0x8, 0xd, 0x80, 0xe0, 0x88, r4, r5}, {0x189, 0xe56, 0xffff, 0x7, 0x8, 0x3, 0x1, 0x19c}, {0x5, 0x6, 0x0, 0xebc}, 0x8, 0x6e6bbc, 0x2, 0x0, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4d6, 0x33}, 0x2, @in=@local, 0x3504, 0x0, 0x1, 0x6, 0xdf, 0x100, 0x1}}, 0xe8) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000008c0)={0x3a, 0xe, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1e}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @local]}, 0x78) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x4000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000980)={'TPROXY\x00'}, &(0x7f00000009c0)=0x1e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'sit0\x00', r2, 0x4, 0x6, 0x1f, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x6, 0x7}}) io_setup(0x5, &(0x7f0000000ac0)=0x0) io_submit(r7, 0x0, &(0x7f0000000b00)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r9, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20000001) 04:39:07 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x304, 0x2) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044804) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c5}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7, 0x10, 0x6, 0xe09, {{0x2a, 0x4, 0x3, 0x11, 0xa8, 0x67, 0x0, 0xdd, 0x0, 0x0, @private=0xa010100, @multicast1, {[@noop, @generic={0x86, 0x8, 'BkY5#^'}, @ssrr={0x89, 0x2b, 0xa3, [@loopback, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1, @broadcast, @multicast2, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x5b, 0x3, [{0x1, 0x6, "8f160a5f"}, {0x2, 0x11, "a7713553b8f47548baf49a38fbe705"}, {0x7, 0xd, "5d90c24020e470e80bd935"}, {0x0, 0x5, "739e43"}, {0x1, 0xd, "c617a7d005834f64931f43"}, {0x0, 0xf, "7c481d58ac3858b82cdc0da8eb"}, {0x0, 0x7, "2bdb52a85c"}, {0x7, 0x9, "b0e2f05f0e2b0b"}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', r2, 0x8, 0x7, 0x6, 0x5, {{0x20, 0x4, 0x1, 0x38, 0x80, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@ssrr={0x89, 0x7, 0x68, [@loopback]}, @cipso={0x86, 0x63, 0x2, [{0x2, 0xc, "eacf5f2875bd491539de"}, {0x5, 0xc, "3cb950579c517fead09d"}, {0x2, 0x2}, {0xc, 0x11, "f2968cb4f4063989f80f8e15a9e440"}, {0x1, 0xc, "5cd05016dbac44c46f96"}, {0x6, 0x12, "77794ea69c862ba07a07ff3f8cb4cb80"}, {0x1, 0x8, "1547a28ced9c"}, {0x6, 0x2}, {0x1, 0xa, "383ebdf42fd49d09"}]}]}}}}}) r3 = socket(0x25, 0x3, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000580)=0x9, &(0x7f00000005c0)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000600), 0x2) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000640), &(0x7f0000000680)=0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) io_pgetevents(0x0, 0xdd1, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000780)={r5, r6+60000000}, 0x0) io_pgetevents(0x0, 0x7fffffff, 0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x362]}, 0x8}) clock_getres(0x2, &(0x7f0000000940)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000980)={0x2, {{0xa, 0x4e21, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x88) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x2}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040810}, 0x884) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0) setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000b80)=0x9, 0x2) 04:39:07 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x304, 0x2) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044804) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c5}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7, 0x10, 0x6, 0xe09, {{0x2a, 0x4, 0x3, 0x11, 0xa8, 0x67, 0x0, 0xdd, 0x0, 0x0, @private=0xa010100, @multicast1, {[@noop, @generic={0x86, 0x8, 'BkY5#^'}, @ssrr={0x89, 0x2b, 0xa3, [@loopback, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1, @broadcast, @multicast2, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x5b, 0x3, [{0x1, 0x6, "8f160a5f"}, {0x2, 0x11, "a7713553b8f47548baf49a38fbe705"}, {0x7, 0xd, "5d90c24020e470e80bd935"}, {0x0, 0x5, "739e43"}, {0x1, 0xd, "c617a7d005834f64931f43"}, {0x0, 0xf, "7c481d58ac3858b82cdc0da8eb"}, {0x0, 0x7, "2bdb52a85c"}, {0x7, 0x9, "b0e2f05f0e2b0b"}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', r2, 0x8, 0x7, 0x6, 0x5, {{0x20, 0x4, 0x1, 0x38, 0x80, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@ssrr={0x89, 0x7, 0x68, [@loopback]}, @cipso={0x86, 0x63, 0x2, [{0x2, 0xc, "eacf5f2875bd491539de"}, {0x5, 0xc, "3cb950579c517fead09d"}, {0x2, 0x2}, {0xc, 0x11, "f2968cb4f4063989f80f8e15a9e440"}, {0x1, 0xc, "5cd05016dbac44c46f96"}, {0x6, 0x12, "77794ea69c862ba07a07ff3f8cb4cb80"}, {0x1, 0x8, "1547a28ced9c"}, {0x6, 0x2}, {0x1, 0xa, "383ebdf42fd49d09"}]}]}}}}}) r3 = socket(0x25, 0x3, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000580)=0x9, &(0x7f00000005c0)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000600), 0x2) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000640), &(0x7f0000000680)=0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) io_pgetevents(0x0, 0xdd1, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000780)={r5, r6+60000000}, 0x0) io_pgetevents(0x0, 0x7fffffff, 0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x362]}, 0x8}) clock_getres(0x2, &(0x7f0000000940)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000980)={0x2, {{0xa, 0x4e21, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x88) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x2}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040810}, 0x884) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0) setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000b80)=0x9, 0x2) 04:39:07 executing program 3: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x40800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x8, 0x40, 0x0, 0x9, {{0x12, 0x4, 0x0, 0x3, 0x48, 0x64, 0x0, 0x43, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x18, 0xce, 0x0, 0x0, [0x8, 0xc9, 0x8, 0x1ff, 0x10001]}, @lsrr={0x83, 0x1b, 0xd6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100, @loopback, @broadcast]}]}}}}}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000280)={0x3c, 0x2b, '\x00', [@pad1, @generic={0xff, 0x92, "a3e989f66a181dd95ff776a8035344d15494a7507de16ce4b61fc655cf82d0013683b0b88f67668886a2afa07ea59b6235adff200a5104eeddb73f7492e8de3d87c828f41d1c1707081fd7e81a33dae193f8845fc6bd82923c1400916bc2f0b3023dff36d3e5809764d974ef734ea21d080c1a2b69425c0b6d93cfc7457d2ab6eb3cf7d9e096cc21bfda0894cf6a5d014d07"}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xb6, "f9f828e2a84dccbe39f623b83e4d1857012cedac371849893c7522a78109018573eed4eb222965c96e31c1e64bdb2d0e57c72aae3996b85739082dcb5e2246ab98893ecd11cb81d89141434a472732806b2dc7ee35082d39bb62c0f7a5e126b16d261c66eefe32e2dcf4ee3508073b748e455b22fc3a5c581b810a03a328dc044d0698fb533f2e117a40ac28e6c05ab2f74f7eaec460ae8f753415224f4248b90358d30865080eed9acdc60e78a8d2d178f9ca3b5529"}]}, 0x160) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', r1, 0x2f, 0x2, 0x7f, 0x1, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x7, 0xa589}}) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x2f, 0x1, 0x7, 0x9e77, 0x10, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8, 0x1ff, 0x7b}}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x134, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xac2c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000780)={0x1, 0x1, 0x0, 0x877, 0x40}, 0xc) r5 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x4e24, 0x81, 0x4e24, 0x8, 0xd, 0x80, 0xe0, 0x88, r4, r5}, {0x189, 0xe56, 0xffff, 0x7, 0x8, 0x3, 0x1, 0x19c}, {0x5, 0x6, 0x0, 0xebc}, 0x8, 0x6e6bbc, 0x2, 0x0, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4d6, 0x33}, 0x2, @in=@local, 0x3504, 0x0, 0x1, 0x6, 0xdf, 0x100, 0x1}}, 0xe8) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000008c0)={0x3a, 0xe, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1e}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @local]}, 0x78) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x4000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000980)={'TPROXY\x00'}, &(0x7f00000009c0)=0x1e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'sit0\x00', r2, 0x4, 0x6, 0x1f, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x6, 0x7}}) io_setup(0x5, &(0x7f0000000ac0)=0x0) io_submit(r7, 0x0, &(0x7f0000000b00)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r9, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20000001) 04:39:08 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x304, 0x2) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044804) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c5}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7, 0x10, 0x6, 0xe09, {{0x2a, 0x4, 0x3, 0x11, 0xa8, 0x67, 0x0, 0xdd, 0x0, 0x0, @private=0xa010100, @multicast1, {[@noop, @generic={0x86, 0x8, 'BkY5#^'}, @ssrr={0x89, 0x2b, 0xa3, [@loopback, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1, @broadcast, @multicast2, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x5b, 0x3, [{0x1, 0x6, "8f160a5f"}, {0x2, 0x11, "a7713553b8f47548baf49a38fbe705"}, {0x7, 0xd, "5d90c24020e470e80bd935"}, {0x0, 0x5, "739e43"}, {0x1, 0xd, "c617a7d005834f64931f43"}, {0x0, 0xf, "7c481d58ac3858b82cdc0da8eb"}, {0x0, 0x7, "2bdb52a85c"}, {0x7, 0x9, "b0e2f05f0e2b0b"}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', r2, 0x8, 0x7, 0x6, 0x5, {{0x20, 0x4, 0x1, 0x38, 0x80, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@ssrr={0x89, 0x7, 0x68, [@loopback]}, @cipso={0x86, 0x63, 0x2, [{0x2, 0xc, "eacf5f2875bd491539de"}, {0x5, 0xc, "3cb950579c517fead09d"}, {0x2, 0x2}, {0xc, 0x11, "f2968cb4f4063989f80f8e15a9e440"}, {0x1, 0xc, "5cd05016dbac44c46f96"}, {0x6, 0x12, "77794ea69c862ba07a07ff3f8cb4cb80"}, {0x1, 0x8, "1547a28ced9c"}, {0x6, 0x2}, {0x1, 0xa, "383ebdf42fd49d09"}]}]}}}}}) r3 = socket(0x25, 0x3, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000580)=0x9, &(0x7f00000005c0)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000600), 0x2) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000640), &(0x7f0000000680)=0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) io_pgetevents(0x0, 0xdd1, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000780)={r5, r6+60000000}, 0x0) io_pgetevents(0x0, 0x7fffffff, 0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x362]}, 0x8}) clock_getres(0x2, &(0x7f0000000940)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000980)={0x2, {{0xa, 0x4e21, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x88) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x2}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040810}, 0x884) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0) setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000b80)=0x9, 0x2) 04:39:08 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:cert_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004004) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r4) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r8, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1dc, r9, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3d, 0xbe, "db57e2419f5124d55b9e3245971e103493d11da5d8134364b075ea7b1da56ef5fcbd22e2ea4833a7ad935470acace456c26059440aa82babdf"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa5, 0xbe, "a49c850aae91ad0a42bc43732620b6ec01267b22a4b594087a220a0a1013faa1558d4b413779d63a2a5a0a8291f2cff14f03d6cb35ef849bbe6bcd40292dafad0e7cf3744214a55f5469db6c8d454c2fa8f34a3461fe8cac7670fac5e8f39f22a6e37d34fbf7fa4b02f2b1fc6691eb2f7f2215dec6e78b473b643e79f9fbe8e1c64e64ac0a2cb14775399bc49c104b1111031b2318629fdb8c88bb6f8cf360e2b2"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa8, 0xac, "b423948c506888a69bfb4bc496d47c543d804dd3a5dc5b32ba6528244ef30de788394c9ab57ac164f35f8d0663c8526e1449732b7da11f7520c537c47e77ba314f36ff89e0aca98f9e8efaec1f1bc1d37b8d9faead023f14f291f1b4ed0e5775ee4ec655997b5f9464a256b74a9d9b9263b7221f534fb21b5dab24f0b0e90ee899ba98a935d79f91a2c783e0a0458646b246208ddb4836cf7a7ab97a3dc1d0c8a95180e3"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x8000}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x3]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40014}, 0x2000c0c0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 04:39:08 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x304, 0x2) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044804) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c5}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7, 0x10, 0x6, 0xe09, {{0x2a, 0x4, 0x3, 0x11, 0xa8, 0x67, 0x0, 0xdd, 0x0, 0x0, @private=0xa010100, @multicast1, {[@noop, @generic={0x86, 0x8, 'BkY5#^'}, @ssrr={0x89, 0x2b, 0xa3, [@loopback, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1, @broadcast, @multicast2, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x5b, 0x3, [{0x1, 0x6, "8f160a5f"}, {0x2, 0x11, "a7713553b8f47548baf49a38fbe705"}, {0x7, 0xd, "5d90c24020e470e80bd935"}, {0x0, 0x5, "739e43"}, {0x1, 0xd, "c617a7d005834f64931f43"}, {0x0, 0xf, "7c481d58ac3858b82cdc0da8eb"}, {0x0, 0x7, "2bdb52a85c"}, {0x7, 0x9, "b0e2f05f0e2b0b"}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', r2, 0x8, 0x7, 0x6, 0x5, {{0x20, 0x4, 0x1, 0x38, 0x80, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@ssrr={0x89, 0x7, 0x68, [@loopback]}, @cipso={0x86, 0x63, 0x2, [{0x2, 0xc, "eacf5f2875bd491539de"}, {0x5, 0xc, "3cb950579c517fead09d"}, {0x2, 0x2}, {0xc, 0x11, "f2968cb4f4063989f80f8e15a9e440"}, {0x1, 0xc, "5cd05016dbac44c46f96"}, {0x6, 0x12, "77794ea69c862ba07a07ff3f8cb4cb80"}, {0x1, 0x8, "1547a28ced9c"}, {0x6, 0x2}, {0x1, 0xa, "383ebdf42fd49d09"}]}]}}}}}) r3 = socket(0x25, 0x3, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000580)=0x9, &(0x7f00000005c0)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000600), 0x2) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000640), &(0x7f0000000680)=0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) io_pgetevents(0x0, 0xdd1, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000780)={r5, r6+60000000}, 0x0) io_pgetevents(0x0, 0x7fffffff, 0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x362]}, 0x8}) clock_getres(0x2, &(0x7f0000000940)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000980)={0x2, {{0xa, 0x4e21, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x88) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x2}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040810}, 0x884) openat$sr(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0) 04:39:26 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x304, 0x2) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044804) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c5}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7, 0x10, 0x6, 0xe09, {{0x2a, 0x4, 0x3, 0x11, 0xa8, 0x67, 0x0, 0xdd, 0x0, 0x0, @private=0xa010100, @multicast1, {[@noop, @generic={0x86, 0x8, 'BkY5#^'}, @ssrr={0x89, 0x2b, 0xa3, [@loopback, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1, @broadcast, @multicast2, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x5b, 0x3, [{0x1, 0x6, "8f160a5f"}, {0x2, 0x11, "a7713553b8f47548baf49a38fbe705"}, {0x7, 0xd, "5d90c24020e470e80bd935"}, {0x0, 0x5, "739e43"}, {0x1, 0xd, "c617a7d005834f64931f43"}, {0x0, 0xf, "7c481d58ac3858b82cdc0da8eb"}, {0x0, 0x7, "2bdb52a85c"}, {0x7, 0x9, "b0e2f05f0e2b0b"}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', r2, 0x8, 0x7, 0x6, 0x5, {{0x20, 0x4, 0x1, 0x38, 0x80, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@ssrr={0x89, 0x7, 0x68, [@loopback]}, @cipso={0x86, 0x63, 0x2, [{0x2, 0xc, "eacf5f2875bd491539de"}, {0x5, 0xc, "3cb950579c517fead09d"}, {0x2, 0x2}, {0xc, 0x11, "f2968cb4f4063989f80f8e15a9e440"}, {0x1, 0xc, "5cd05016dbac44c46f96"}, {0x6, 0x12, "77794ea69c862ba07a07ff3f8cb4cb80"}, {0x1, 0x8, "1547a28ced9c"}, {0x6, 0x2}, {0x1, 0xa, "383ebdf42fd49d09"}]}]}}}}}) r3 = socket(0x25, 0x3, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000580)=0x9, &(0x7f00000005c0)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000600), 0x2) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000640), &(0x7f0000000680)=0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) io_pgetevents(0x0, 0xdd1, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000780)={r5, r6+60000000}, 0x0) io_pgetevents(0x0, 0x7fffffff, 0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x362]}, 0x8}) clock_getres(0x2, &(0x7f0000000940)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000980)={0x2, {{0xa, 0x4e21, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x88) openat$sr(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0) 04:39:26 executing program 5: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005041}, 0x400c054) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044011) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x55}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x14080004}, 0x5) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x58eee835f54f5192}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1a080}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r2, 0x810, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004490) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xfd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hwclock_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000e40)={&(0x7f0000000d40), 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x19}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044474}, 0x4c891) 04:39:26 executing program 3: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x40800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x8, 0x40, 0x0, 0x9, {{0x12, 0x4, 0x0, 0x3, 0x48, 0x64, 0x0, 0x43, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x18, 0xce, 0x0, 0x0, [0x8, 0xc9, 0x8, 0x1ff, 0x10001]}, @lsrr={0x83, 0x1b, 0xd6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100, @loopback, @broadcast]}]}}}}}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000280)={0x3c, 0x2b, '\x00', [@pad1, @generic={0xff, 0x92, "a3e989f66a181dd95ff776a8035344d15494a7507de16ce4b61fc655cf82d0013683b0b88f67668886a2afa07ea59b6235adff200a5104eeddb73f7492e8de3d87c828f41d1c1707081fd7e81a33dae193f8845fc6bd82923c1400916bc2f0b3023dff36d3e5809764d974ef734ea21d080c1a2b69425c0b6d93cfc7457d2ab6eb3cf7d9e096cc21bfda0894cf6a5d014d07"}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xb6, "f9f828e2a84dccbe39f623b83e4d1857012cedac371849893c7522a78109018573eed4eb222965c96e31c1e64bdb2d0e57c72aae3996b85739082dcb5e2246ab98893ecd11cb81d89141434a472732806b2dc7ee35082d39bb62c0f7a5e126b16d261c66eefe32e2dcf4ee3508073b748e455b22fc3a5c581b810a03a328dc044d0698fb533f2e117a40ac28e6c05ab2f74f7eaec460ae8f753415224f4248b90358d30865080eed9acdc60e78a8d2d178f9ca3b5529"}]}, 0x160) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', r1, 0x2f, 0x2, 0x7f, 0x1, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x7, 0xa589}}) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x2f, 0x1, 0x7, 0x9e77, 0x10, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8, 0x1ff, 0x7b}}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x134, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xac2c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000780)={0x1, 0x1, 0x0, 0x877, 0x40}, 0xc) r5 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x4e24, 0x81, 0x4e24, 0x8, 0xd, 0x80, 0xe0, 0x88, r4, r5}, {0x189, 0xe56, 0xffff, 0x7, 0x8, 0x3, 0x1, 0x19c}, {0x5, 0x6, 0x0, 0xebc}, 0x8, 0x6e6bbc, 0x2, 0x0, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4d6, 0x33}, 0x2, @in=@local, 0x3504, 0x0, 0x1, 0x6, 0xdf, 0x100, 0x1}}, 0xe8) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000008c0)={0x3a, 0xe, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1e}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @local]}, 0x78) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x4000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000980)={'TPROXY\x00'}, &(0x7f00000009c0)=0x1e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'sit0\x00', r2, 0x4, 0x6, 0x1f, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x6, 0x7}}) io_setup(0x5, &(0x7f0000000ac0)=0x0) io_submit(r7, 0x0, &(0x7f0000000b00)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20000001) 04:39:26 executing program 6: r0 = gettid() waitid(0x1, r0, 0x0, 0x4, &(0x7f0000000000)) r1 = fork() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1, &(0x7f00000000c0)=""/119) r2 = fork() waitid(0x0, r2, &(0x7f0000000140), 0x2, 0x0) wait4(r0, 0x0, 0x1, &(0x7f00000001c0)) wait4(r2, &(0x7f0000000280), 0x4, &(0x7f00000002c0)) process_vm_readv(r1, &(0x7f0000000380), 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/231, 0xe7}, {&(0x7f0000000600)=""/184, 0xb8}, {&(0x7f00000006c0)=""/89, 0x59}], 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f00000008c0)=0xe8) r4 = getgid() r5 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000900)={{0x3, r3, r4, 0xee01, 0x0, 0x0, 0xa2}, 0xfffffff8, 0x4, 0x4, 0x7ff, r0, r5, 0x4}) r6 = fork() sched_setparam(r6, &(0x7f0000000980)=0x1) getrusage(0x1, &(0x7f00000009c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wg1\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, 0x0, 0x98e84c9e62d6a31a, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4008004) io_setup(0x8001, &(0x7f0000000bc0)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x9, &(0x7f0000000c00)=""/83) 04:39:26 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:cert_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004004) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r4) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r8, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1dc, r9, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3d, 0xbe, "db57e2419f5124d55b9e3245971e103493d11da5d8134364b075ea7b1da56ef5fcbd22e2ea4833a7ad935470acace456c26059440aa82babdf"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa5, 0xbe, "a49c850aae91ad0a42bc43732620b6ec01267b22a4b594087a220a0a1013faa1558d4b413779d63a2a5a0a8291f2cff14f03d6cb35ef849bbe6bcd40292dafad0e7cf3744214a55f5469db6c8d454c2fa8f34a3461fe8cac7670fac5e8f39f22a6e37d34fbf7fa4b02f2b1fc6691eb2f7f2215dec6e78b473b643e79f9fbe8e1c64e64ac0a2cb14775399bc49c104b1111031b2318629fdb8c88bb6f8cf360e2b2"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa8, 0xac, "b423948c506888a69bfb4bc496d47c543d804dd3a5dc5b32ba6528244ef30de788394c9ab57ac164f35f8d0663c8526e1449732b7da11f7520c537c47e77ba314f36ff89e0aca98f9e8efaec1f1bc1d37b8d9faead023f14f291f1b4ed0e5775ee4ec655997b5f9464a256b74a9d9b9263b7221f534fb21b5dab24f0b0e90ee899ba98a935d79f91a2c783e0a0458646b246208ddb4836cf7a7ab97a3dc1d0c8a95180e3"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x8000}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x3]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40014}, 0x2000c0c0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 04:39:26 executing program 2: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x1, 0x8, 0x1800}, {0x3, 0x3e00, 0x1000}, {0x2, 0x1, 0x800}], 0x3, &(0x7f0000000180)={0x77359400}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) io_pgetevents(0x0, 0x1, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000000300)=0xfffffffe) r0 = semget(0x0, 0x4, 0x280) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x400, 0x800}, {0x2, 0x2, 0x1800}, {0x4, 0x4, 0x800}], 0x3, &(0x7f00000003c0)={r1, r2+60000000}) pselect6(0x40, &(0x7f0000000400)={0xfffffffffffffffd, 0x9, 0x2, 0x4, 0x4, 0x5, 0x5, 0x8}, &(0x7f0000000440)={0x0, 0x4, 0x20, 0x0, 0x6, 0x0, 0x5, 0x4}, &(0x7f0000000480)={0x2, 0x6, 0x20, 0x1, 0x3, 0xffffffffffff0000, 0xffffffffffffff01, 0x7fffffff}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x5]}, 0x8}) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, 0x0, r3) r4 = request_key(&(0x7f0000000600)='rxrpc_s\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)='[-]\\\x00', 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0) add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = semget(0x0, 0x0, 0x9840a7d51ce5aec4) semctl$SEM_STAT(r5, 0x4, 0x12, &(0x7f0000000740)=""/123) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000007c0)=""/79, &(0x7f0000000840)=0x4f) pselect6(0x40, &(0x7f0000000880)={0x200, 0x1f, 0x5, 0xff, 0x313ea777, 0x6, 0x58b, 0x6ef}, &(0x7f00000008c0)={0x3910a88f, 0x6, 0x5, 0x3, 0xb2ac, 0x0, 0xaa45, 0x2}, &(0x7f0000000900)={0x2, 0x53, 0x800, 0x7, 0x3, 0x7ff, 0x8000, 0x2}, &(0x7f0000000940), &(0x7f00000009c0)={&(0x7f0000000980)={[0x200]}, 0x8}) r6 = geteuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1, r6, 0x0, 0xee00, 0xee00, 0x161}, 0x1, 0x1, 0xd3a, 0x2, 0x0, 0xffffffffffffffff, 0x1000}) 04:39:26 executing program 4: sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48d4}, 0x8040) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x25}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20000040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, 0x0, 0x4000000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x262080, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x67}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40014) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x5, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008050) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, &(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)='.\x00') prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x40000000) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x0, [0x5fa1, 0x8, 0x7]}, &(0x7f0000000a00)=0x44) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ac0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x138, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x6c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "97f840a0dc28b8ab296fc3fb277a68b9804b4010595f3bc9a12db3fba46fd101"}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}]}, @NL802154_ATTR_SEC_KEY={0x90, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "865c67941746962a0e563ad5debe6978"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d7f304b724694218e4239d7ebf26966e8879e5e1d5017813ef22c79faf3cdbda"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a64b5090be31b507af86d8149ea6019e2af0e7796b05f9d68c11a9a8e9b4107d"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2e}]}, @NL802154_ATTR_SEC_KEY={0x20, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x4001) keyctl$read(0xb, 0x0, &(0x7f0000000cc0)=""/107, 0x6b) 04:39:26 executing program 0: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c044) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5f15}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xde4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfe2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = accept4$inet(r0, &(0x7f0000000380)={0x2, 0x0, @multicast2}, &(0x7f00000003c0)=0x10, 0x800) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd4, 0x32}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1f, 0xfff, 0x8, 0x1000, 0x8, 0x6, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x18, 0x2, 0x60, 0x2, 0x30, 0x48, 0x6]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x1b, 0x5b, 0x30, 0x5, 0x1, 0xc, 0x3, 0x6, 0x5a, 0x6, 0x3, 0xb, 0x60, 0x6c, 0x16, 0x22, 0x4, 0x6c, 0x2, 0xc, 0x9, 0xc, 0x24, 0x4, 0x30]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x5}, {0x0, 0x8}, {0x4}, {0x6, 0x6}, {0x7}, {0x3, 0x6}, {0x0, 0x8}, {0x3, 0x2}, {0x7, 0x6}, {0x0, 0xa}, {0x3, 0x9}, {0x3, 0xa}, {0x3, 0x2}, {0x2, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x5, 0x5}, {0x2}, {0x4, 0x3}, {0x3, 0x5}, {0x5, 0x9}]}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0xcd5c0c01f618876f) syz_open_dev$hidraw(&(0x7f0000000640), 0x1, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@private0}}, &(0x7f0000000780)=0xe8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f00000007c0)={'ipvs\x00'}, &(0x7f0000000800)=0x1e) accept4$inet(r0, &(0x7f0000000840)={0x2, 0x0, @initdev}, &(0x7f0000000880)=0x10, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'erspan0\x00', r3, 0x8, 0x7800, 0x5, 0x8, {{0x15, 0x4, 0x0, 0x6, 0x54, 0x65, 0x0, 0x6e, 0x2f, 0x0, @empty, @loopback, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x40, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast, @private=0xa010102]}, @noop, @rr={0x7, 0x7, 0x22, [@broadcast]}, @noop, @generic={0x86, 0x6, "92aa7713"}, @ra={0x94, 0x4}]}}}}}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048004) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, r6, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd742}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x8840) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 04:39:26 executing program 2: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x1, 0x8, 0x1800}, {0x3, 0x3e00, 0x1000}, {0x2, 0x1, 0x800}], 0x3, &(0x7f0000000180)={0x77359400}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) io_pgetevents(0x0, 0x1, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000000300)=0xfffffffe) r0 = semget(0x0, 0x4, 0x280) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x400, 0x800}, {0x2, 0x2, 0x1800}, {0x4, 0x4, 0x800}], 0x3, &(0x7f00000003c0)={r1, r2+60000000}) pselect6(0x40, &(0x7f0000000400)={0xfffffffffffffffd, 0x9, 0x2, 0x4, 0x4, 0x5, 0x5, 0x8}, &(0x7f0000000440)={0x0, 0x4, 0x20, 0x0, 0x6, 0x0, 0x5, 0x4}, &(0x7f0000000480)={0x2, 0x6, 0x20, 0x1, 0x3, 0xffffffffffff0000, 0xffffffffffffff01, 0x7fffffff}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x5]}, 0x8}) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, 0x0, r3) r4 = request_key(&(0x7f0000000600)='rxrpc_s\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)='[-]\\\x00', 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0) add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = semget(0x0, 0x0, 0x9840a7d51ce5aec4) semctl$SEM_STAT(r5, 0x4, 0x12, &(0x7f0000000740)=""/123) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000007c0)=""/79, &(0x7f0000000840)=0x4f) pselect6(0x40, &(0x7f0000000880)={0x200, 0x1f, 0x5, 0xff, 0x313ea777, 0x6, 0x58b, 0x6ef}, &(0x7f00000008c0)={0x3910a88f, 0x6, 0x5, 0x3, 0xb2ac, 0x0, 0xaa45, 0x2}, &(0x7f0000000900)={0x2, 0x53, 0x800, 0x7, 0x3, 0x7ff, 0x8000, 0x2}, &(0x7f0000000940), &(0x7f00000009c0)={&(0x7f0000000980)={[0x200]}, 0x8}) r6 = geteuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1, r6, 0x0, 0xee00, 0xee00, 0x161}, 0x1, 0x1, 0xd3a, 0x2, 0x0, 0xffffffffffffffff, 0x1000}) 04:39:26 executing program 5: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005041}, 0x400c054) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044011) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x55}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x14080004}, 0x5) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x58eee835f54f5192}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1a080}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r2, 0x810, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004490) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xfd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hwclock_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000e40)={&(0x7f0000000d40), 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x19}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044474}, 0x4c891) 04:39:26 executing program 2: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x1, 0x8, 0x1800}, {0x3, 0x3e00, 0x1000}, {0x2, 0x1, 0x800}], 0x3, &(0x7f0000000180)={0x77359400}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) io_pgetevents(0x0, 0x1, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000000300)=0xfffffffe) r0 = semget(0x0, 0x4, 0x280) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x400, 0x800}, {0x2, 0x2, 0x1800}, {0x4, 0x4, 0x800}], 0x3, &(0x7f00000003c0)={r1, r2+60000000}) pselect6(0x40, &(0x7f0000000400)={0xfffffffffffffffd, 0x9, 0x2, 0x4, 0x4, 0x5, 0x5, 0x8}, &(0x7f0000000440)={0x0, 0x4, 0x20, 0x0, 0x6, 0x0, 0x5, 0x4}, &(0x7f0000000480)={0x2, 0x6, 0x20, 0x1, 0x3, 0xffffffffffff0000, 0xffffffffffffff01, 0x7fffffff}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x5]}, 0x8}) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, 0x0, r3) r4 = request_key(&(0x7f0000000600)='rxrpc_s\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)='[-]\\\x00', 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0) add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = semget(0x0, 0x0, 0x9840a7d51ce5aec4) semctl$SEM_STAT(r5, 0x4, 0x12, &(0x7f0000000740)=""/123) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000007c0)=""/79, &(0x7f0000000840)=0x4f) pselect6(0x40, &(0x7f0000000880)={0x200, 0x1f, 0x5, 0xff, 0x313ea777, 0x6, 0x58b, 0x6ef}, &(0x7f00000008c0)={0x3910a88f, 0x6, 0x5, 0x3, 0xb2ac, 0x0, 0xaa45, 0x2}, &(0x7f0000000900)={0x2, 0x53, 0x800, 0x7, 0x3, 0x7ff, 0x8000, 0x2}, &(0x7f0000000940), &(0x7f00000009c0)={&(0x7f0000000980)={[0x200]}, 0x8}) r6 = geteuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1, r6, 0x0, 0xee00, 0xee00, 0x161}, 0x1, 0x1, 0xd3a, 0x2, 0x0, 0xffffffffffffffff, 0x1000}) 04:39:39 executing program 6: r0 = gettid() waitid(0x1, r0, 0x0, 0x4, &(0x7f0000000000)) r1 = fork() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1, &(0x7f00000000c0)=""/119) r2 = fork() waitid(0x0, r2, &(0x7f0000000140), 0x2, 0x0) wait4(r0, 0x0, 0x1, &(0x7f00000001c0)) wait4(r2, &(0x7f0000000280), 0x4, &(0x7f00000002c0)) process_vm_readv(r1, &(0x7f0000000380), 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/231, 0xe7}, {&(0x7f0000000600)=""/184, 0xb8}, {&(0x7f00000006c0)=""/89, 0x59}], 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f00000008c0)=0xe8) r4 = getgid() r5 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000900)={{0x3, r3, r4, 0xee01, 0x0, 0x0, 0xa2}, 0xfffffff8, 0x4, 0x4, 0x7ff, r0, r5, 0x4}) r6 = fork() sched_setparam(r6, &(0x7f0000000980)=0x1) getrusage(0x1, &(0x7f00000009c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wg1\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, 0x0, 0x98e84c9e62d6a31a, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4008004) io_setup(0x8001, &(0x7f0000000bc0)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x9, &(0x7f0000000c00)=""/83) 04:39:39 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x304, 0x2) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044804) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c5}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7, 0x10, 0x6, 0xe09, {{0x2a, 0x4, 0x3, 0x11, 0xa8, 0x67, 0x0, 0xdd, 0x0, 0x0, @private=0xa010100, @multicast1, {[@noop, @generic={0x86, 0x8, 'BkY5#^'}, @ssrr={0x89, 0x2b, 0xa3, [@loopback, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1, @broadcast, @multicast2, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x5b, 0x3, [{0x1, 0x6, "8f160a5f"}, {0x2, 0x11, "a7713553b8f47548baf49a38fbe705"}, {0x7, 0xd, "5d90c24020e470e80bd935"}, {0x0, 0x5, "739e43"}, {0x1, 0xd, "c617a7d005834f64931f43"}, {0x0, 0xf, "7c481d58ac3858b82cdc0da8eb"}, {0x0, 0x7, "2bdb52a85c"}, {0x7, 0x9, "b0e2f05f0e2b0b"}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', r2, 0x8, 0x7, 0x6, 0x5, {{0x20, 0x4, 0x1, 0x38, 0x80, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@ssrr={0x89, 0x7, 0x68, [@loopback]}, @cipso={0x86, 0x63, 0x2, [{0x2, 0xc, "eacf5f2875bd491539de"}, {0x5, 0xc, "3cb950579c517fead09d"}, {0x2, 0x2}, {0xc, 0x11, "f2968cb4f4063989f80f8e15a9e440"}, {0x1, 0xc, "5cd05016dbac44c46f96"}, {0x6, 0x12, "77794ea69c862ba07a07ff3f8cb4cb80"}, {0x1, 0x8, "1547a28ced9c"}, {0x6, 0x2}, {0x1, 0xa, "383ebdf42fd49d09"}]}]}}}}}) r3 = socket(0x25, 0x3, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000580)=0x9, &(0x7f00000005c0)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000600), 0x2) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000640), &(0x7f0000000680)=0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) io_pgetevents(0x0, 0xdd1, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000780)={r5, r6+60000000}, 0x0) io_pgetevents(0x0, 0x7fffffff, 0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x362]}, 0x8}) clock_getres(0x2, &(0x7f0000000940)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000980)={0x2, {{0xa, 0x4e21, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x88) openat$sr(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0) 04:39:39 executing program 0: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c044) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5f15}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xde4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfe2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = accept4$inet(r0, &(0x7f0000000380)={0x2, 0x0, @multicast2}, &(0x7f00000003c0)=0x10, 0x800) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd4, 0x32}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1f, 0xfff, 0x8, 0x1000, 0x8, 0x6, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x18, 0x2, 0x60, 0x2, 0x30, 0x48, 0x6]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x1b, 0x5b, 0x30, 0x5, 0x1, 0xc, 0x3, 0x6, 0x5a, 0x6, 0x3, 0xb, 0x60, 0x6c, 0x16, 0x22, 0x4, 0x6c, 0x2, 0xc, 0x9, 0xc, 0x24, 0x4, 0x30]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x5}, {0x0, 0x8}, {0x4}, {0x6, 0x6}, {0x7}, {0x3, 0x6}, {0x0, 0x8}, {0x3, 0x2}, {0x7, 0x6}, {0x0, 0xa}, {0x3, 0x9}, {0x3, 0xa}, {0x3, 0x2}, {0x2, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x5, 0x5}, {0x2}, {0x4, 0x3}, {0x3, 0x5}, {0x5, 0x9}]}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0xcd5c0c01f618876f) syz_open_dev$hidraw(&(0x7f0000000640), 0x1, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@private0}}, &(0x7f0000000780)=0xe8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f00000007c0)={'ipvs\x00'}, &(0x7f0000000800)=0x1e) accept4$inet(r0, &(0x7f0000000840)={0x2, 0x0, @initdev}, &(0x7f0000000880)=0x10, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'erspan0\x00', r3, 0x8, 0x7800, 0x5, 0x8, {{0x15, 0x4, 0x0, 0x6, 0x54, 0x65, 0x0, 0x6e, 0x2f, 0x0, @empty, @loopback, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x40, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast, @private=0xa010102]}, @noop, @rr={0x7, 0x7, 0x22, [@broadcast]}, @noop, @generic={0x86, 0x6, "92aa7713"}, @ra={0x94, 0x4}]}}}}}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048004) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, r6, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd742}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x8840) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 04:39:39 executing program 2: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x1, 0x8, 0x1800}, {0x3, 0x3e00, 0x1000}, {0x2, 0x1, 0x800}], 0x3, &(0x7f0000000180)={0x77359400}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) io_pgetevents(0x0, 0x1, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000000300)=0xfffffffe) r0 = semget(0x0, 0x4, 0x280) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x400, 0x800}, {0x2, 0x2, 0x1800}, {0x4, 0x4, 0x800}], 0x3, &(0x7f00000003c0)={r1, r2+60000000}) pselect6(0x40, &(0x7f0000000400)={0xfffffffffffffffd, 0x9, 0x2, 0x4, 0x4, 0x5, 0x5, 0x8}, &(0x7f0000000440)={0x0, 0x4, 0x20, 0x0, 0x6, 0x0, 0x5, 0x4}, &(0x7f0000000480)={0x2, 0x6, 0x20, 0x1, 0x3, 0xffffffffffff0000, 0xffffffffffffff01, 0x7fffffff}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x5]}, 0x8}) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, 0x0, r3) r4 = request_key(&(0x7f0000000600)='rxrpc_s\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)='[-]\\\x00', 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0) add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = semget(0x0, 0x0, 0x9840a7d51ce5aec4) semctl$SEM_STAT(r5, 0x4, 0x12, &(0x7f0000000740)=""/123) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000007c0)=""/79, &(0x7f0000000840)=0x4f) pselect6(0x40, &(0x7f0000000880)={0x200, 0x1f, 0x5, 0xff, 0x313ea777, 0x6, 0x58b, 0x6ef}, &(0x7f00000008c0)={0x3910a88f, 0x6, 0x5, 0x3, 0xb2ac, 0x0, 0xaa45, 0x2}, &(0x7f0000000900)={0x2, 0x53, 0x800, 0x7, 0x3, 0x7ff, 0x8000, 0x2}, &(0x7f0000000940), &(0x7f00000009c0)={&(0x7f0000000980)={[0x200]}, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1, 0x0, 0x0, 0xee00, 0xee00, 0x161}, 0x1, 0x1, 0xd3a, 0x2, 0x0, 0xffffffffffffffff, 0x1000}) 04:39:39 executing program 4: sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48d4}, 0x8040) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x25}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20000040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, 0x0, 0x4000000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x262080, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x67}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40014) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x5, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008050) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, &(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)='.\x00') prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x40000000) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x0, [0x5fa1, 0x8, 0x7]}, &(0x7f0000000a00)=0x44) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ac0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x138, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x6c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "97f840a0dc28b8ab296fc3fb277a68b9804b4010595f3bc9a12db3fba46fd101"}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}]}, @NL802154_ATTR_SEC_KEY={0x90, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "865c67941746962a0e563ad5debe6978"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d7f304b724694218e4239d7ebf26966e8879e5e1d5017813ef22c79faf3cdbda"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a64b5090be31b507af86d8149ea6019e2af0e7796b05f9d68c11a9a8e9b4107d"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2e}]}, @NL802154_ATTR_SEC_KEY={0x20, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x4001) keyctl$read(0xb, 0x0, &(0x7f0000000cc0)=""/107, 0x6b) 04:39:39 executing program 5: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005041}, 0x400c054) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044011) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x55}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x14080004}, 0x5) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x58eee835f54f5192}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1a080}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r2, 0x810, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004490) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xfd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hwclock_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000e40)={&(0x7f0000000d40), 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x19}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044474}, 0x4c891) 04:39:39 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:cert_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004004) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r4) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r8, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1dc, r9, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3d, 0xbe, "db57e2419f5124d55b9e3245971e103493d11da5d8134364b075ea7b1da56ef5fcbd22e2ea4833a7ad935470acace456c26059440aa82babdf"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa5, 0xbe, "a49c850aae91ad0a42bc43732620b6ec01267b22a4b594087a220a0a1013faa1558d4b413779d63a2a5a0a8291f2cff14f03d6cb35ef849bbe6bcd40292dafad0e7cf3744214a55f5469db6c8d454c2fa8f34a3461fe8cac7670fac5e8f39f22a6e37d34fbf7fa4b02f2b1fc6691eb2f7f2215dec6e78b473b643e79f9fbe8e1c64e64ac0a2cb14775399bc49c104b1111031b2318629fdb8c88bb6f8cf360e2b2"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa8, 0xac, "b423948c506888a69bfb4bc496d47c543d804dd3a5dc5b32ba6528244ef30de788394c9ab57ac164f35f8d0663c8526e1449732b7da11f7520c537c47e77ba314f36ff89e0aca98f9e8efaec1f1bc1d37b8d9faead023f14f291f1b4ed0e5775ee4ec655997b5f9464a256b74a9d9b9263b7221f534fb21b5dab24f0b0e90ee899ba98a935d79f91a2c783e0a0458646b246208ddb4836cf7a7ab97a3dc1d0c8a95180e3"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x8000}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x3]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40014}, 0x2000c0c0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 04:39:39 executing program 3: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x40800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x8, 0x40, 0x0, 0x9, {{0x12, 0x4, 0x0, 0x3, 0x48, 0x64, 0x0, 0x43, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x18, 0xce, 0x0, 0x0, [0x8, 0xc9, 0x8, 0x1ff, 0x10001]}, @lsrr={0x83, 0x1b, 0xd6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100, @loopback, @broadcast]}]}}}}}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000280)={0x3c, 0x2b, '\x00', [@pad1, @generic={0xff, 0x92, "a3e989f66a181dd95ff776a8035344d15494a7507de16ce4b61fc655cf82d0013683b0b88f67668886a2afa07ea59b6235adff200a5104eeddb73f7492e8de3d87c828f41d1c1707081fd7e81a33dae193f8845fc6bd82923c1400916bc2f0b3023dff36d3e5809764d974ef734ea21d080c1a2b69425c0b6d93cfc7457d2ab6eb3cf7d9e096cc21bfda0894cf6a5d014d07"}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xb6, "f9f828e2a84dccbe39f623b83e4d1857012cedac371849893c7522a78109018573eed4eb222965c96e31c1e64bdb2d0e57c72aae3996b85739082dcb5e2246ab98893ecd11cb81d89141434a472732806b2dc7ee35082d39bb62c0f7a5e126b16d261c66eefe32e2dcf4ee3508073b748e455b22fc3a5c581b810a03a328dc044d0698fb533f2e117a40ac28e6c05ab2f74f7eaec460ae8f753415224f4248b90358d30865080eed9acdc60e78a8d2d178f9ca3b5529"}]}, 0x160) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', r1, 0x2f, 0x2, 0x7f, 0x1, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x7, 0xa589}}) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x2f, 0x1, 0x7, 0x9e77, 0x10, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8, 0x1ff, 0x7b}}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x134, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xac2c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000780)={0x1, 0x1, 0x0, 0x877, 0x40}, 0xc) r5 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x4e24, 0x81, 0x4e24, 0x8, 0xd, 0x80, 0xe0, 0x88, r4, r5}, {0x189, 0xe56, 0xffff, 0x7, 0x8, 0x3, 0x1, 0x19c}, {0x5, 0x6, 0x0, 0xebc}, 0x8, 0x6e6bbc, 0x2, 0x0, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4d6, 0x33}, 0x2, @in=@local, 0x3504, 0x0, 0x1, 0x6, 0xdf, 0x100, 0x1}}, 0xe8) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000008c0)={0x3a, 0xe, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1e}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @local]}, 0x78) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x4000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000980)={'TPROXY\x00'}, &(0x7f00000009c0)=0x1e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'sit0\x00', r2, 0x4, 0x6, 0x1f, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x6, 0x7}}) io_setup(0x5, &(0x7f0000000ac0)=0x0) io_submit(r7, 0x0, &(0x7f0000000b00)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20000001) 04:39:39 executing program 2: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x1, 0x8, 0x1800}, {0x3, 0x3e00, 0x1000}, {0x2, 0x1, 0x800}], 0x3, &(0x7f0000000180)={0x77359400}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) io_pgetevents(0x0, 0x1, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000000300)=0xfffffffe) r0 = semget(0x0, 0x4, 0x280) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x400, 0x800}, {0x2, 0x2, 0x1800}, {0x4, 0x4, 0x800}], 0x3, &(0x7f00000003c0)={r1, r2+60000000}) pselect6(0x40, &(0x7f0000000400)={0xfffffffffffffffd, 0x9, 0x2, 0x4, 0x4, 0x5, 0x5, 0x8}, &(0x7f0000000440)={0x0, 0x4, 0x20, 0x0, 0x6, 0x0, 0x5, 0x4}, &(0x7f0000000480)={0x2, 0x6, 0x20, 0x1, 0x3, 0xffffffffffff0000, 0xffffffffffffff01, 0x7fffffff}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x5]}, 0x8}) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, 0x0, r3) r4 = request_key(&(0x7f0000000600)='rxrpc_s\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)='[-]\\\x00', 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0) add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = semget(0x0, 0x0, 0x9840a7d51ce5aec4) semctl$SEM_STAT(r5, 0x4, 0x12, &(0x7f0000000740)=""/123) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000007c0)=""/79, &(0x7f0000000840)=0x4f) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1, 0x0, 0x0, 0xee00, 0xee00, 0x161}, 0x1, 0x1, 0xd3a, 0x2, 0x0, 0xffffffffffffffff, 0x1000}) 04:39:53 executing program 6: r0 = gettid() waitid(0x1, r0, 0x0, 0x4, &(0x7f0000000000)) r1 = fork() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1, &(0x7f00000000c0)=""/119) r2 = fork() waitid(0x0, r2, &(0x7f0000000140), 0x2, 0x0) wait4(r0, 0x0, 0x1, &(0x7f00000001c0)) wait4(r2, &(0x7f0000000280), 0x4, &(0x7f00000002c0)) process_vm_readv(r1, &(0x7f0000000380), 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/231, 0xe7}, {&(0x7f0000000600)=""/184, 0xb8}, {&(0x7f00000006c0)=""/89, 0x59}], 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f00000008c0)=0xe8) r4 = getgid() r5 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000900)={{0x3, r3, r4, 0xee01, 0x0, 0x0, 0xa2}, 0xfffffff8, 0x4, 0x4, 0x7ff, r0, r5, 0x4}) r6 = fork() sched_setparam(r6, &(0x7f0000000980)=0x1) getrusage(0x1, &(0x7f00000009c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wg1\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, 0x0, 0x98e84c9e62d6a31a, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4008004) io_setup(0x8001, &(0x7f0000000bc0)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x9, &(0x7f0000000c00)=""/83) 04:39:53 executing program 4: sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48d4}, 0x8040) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x25}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20000040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, 0x0, 0x4000000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x262080, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x67}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40014) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x5, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008050) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, &(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)='.\x00') prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x40000000) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x0, [0x5fa1, 0x8, 0x7]}, &(0x7f0000000a00)=0x44) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ac0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x138, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x6c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "97f840a0dc28b8ab296fc3fb277a68b9804b4010595f3bc9a12db3fba46fd101"}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}]}, @NL802154_ATTR_SEC_KEY={0x90, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "865c67941746962a0e563ad5debe6978"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d7f304b724694218e4239d7ebf26966e8879e5e1d5017813ef22c79faf3cdbda"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a64b5090be31b507af86d8149ea6019e2af0e7796b05f9d68c11a9a8e9b4107d"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2e}]}, @NL802154_ATTR_SEC_KEY={0x20, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x4001) keyctl$read(0xb, 0x0, &(0x7f0000000cc0)=""/107, 0x6b) 04:39:53 executing program 5: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005041}, 0x400c054) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044011) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x55}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x14080004}, 0x5) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x58eee835f54f5192}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1a080}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r2, 0x810, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004490) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xfd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hwclock_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan0\x00'}) 04:39:53 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x304, 0x2) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044804) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c5}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7, 0x10, 0x6, 0xe09, {{0x2a, 0x4, 0x3, 0x11, 0xa8, 0x67, 0x0, 0xdd, 0x0, 0x0, @private=0xa010100, @multicast1, {[@noop, @generic={0x86, 0x8, 'BkY5#^'}, @ssrr={0x89, 0x2b, 0xa3, [@loopback, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1, @broadcast, @multicast2, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x5b, 0x3, [{0x1, 0x6, "8f160a5f"}, {0x2, 0x11, "a7713553b8f47548baf49a38fbe705"}, {0x7, 0xd, "5d90c24020e470e80bd935"}, {0x0, 0x5, "739e43"}, {0x1, 0xd, "c617a7d005834f64931f43"}, {0x0, 0xf, "7c481d58ac3858b82cdc0da8eb"}, {0x0, 0x7, "2bdb52a85c"}, {0x7, 0x9, "b0e2f05f0e2b0b"}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', r2, 0x8, 0x7, 0x6, 0x5, {{0x20, 0x4, 0x1, 0x38, 0x80, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@ssrr={0x89, 0x7, 0x68, [@loopback]}, @cipso={0x86, 0x63, 0x2, [{0x2, 0xc, "eacf5f2875bd491539de"}, {0x5, 0xc, "3cb950579c517fead09d"}, {0x2, 0x2}, {0xc, 0x11, "f2968cb4f4063989f80f8e15a9e440"}, {0x1, 0xc, "5cd05016dbac44c46f96"}, {0x6, 0x12, "77794ea69c862ba07a07ff3f8cb4cb80"}, {0x1, 0x8, "1547a28ced9c"}, {0x6, 0x2}, {0x1, 0xa, "383ebdf42fd49d09"}]}]}}}}}) r3 = socket(0x25, 0x3, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000580)=0x9, &(0x7f00000005c0)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000600), 0x2) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000640), &(0x7f0000000680)=0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) io_pgetevents(0x0, 0xdd1, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000780)={r5, r6+60000000}, 0x0) io_pgetevents(0x0, 0x7fffffff, 0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x362]}, 0x8}) clock_getres(0x2, &(0x7f0000000940)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000980)={0x2, {{0xa, 0x4e21, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x88) openat$sr(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0) 04:39:53 executing program 2: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x1, 0x8, 0x1800}, {0x3, 0x3e00, 0x1000}, {0x2, 0x1, 0x800}], 0x3, &(0x7f0000000180)={0x77359400}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) io_pgetevents(0x0, 0x1, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000000300)=0xfffffffe) r0 = semget(0x0, 0x4, 0x280) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x400, 0x800}, {0x2, 0x2, 0x1800}, {0x4, 0x4, 0x800}], 0x3, &(0x7f00000003c0)={r1, r2+60000000}) pselect6(0x40, &(0x7f0000000400)={0xfffffffffffffffd, 0x9, 0x2, 0x4, 0x4, 0x5, 0x5, 0x8}, &(0x7f0000000440)={0x0, 0x4, 0x20, 0x0, 0x6, 0x0, 0x5, 0x4}, &(0x7f0000000480)={0x2, 0x6, 0x20, 0x1, 0x3, 0xffffffffffff0000, 0xffffffffffffff01, 0x7fffffff}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x5]}, 0x8}) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, 0x0, r3) r4 = request_key(&(0x7f0000000600)='rxrpc_s\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)='[-]\\\x00', 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0) add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = semget(0x0, 0x0, 0x9840a7d51ce5aec4) semctl$SEM_STAT(r5, 0x4, 0x12, &(0x7f0000000740)=""/123) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1, 0x0, 0x0, 0xee00, 0xee00, 0x161}, 0x1, 0x1, 0xd3a, 0x2, 0x0, 0xffffffffffffffff, 0x1000}) 04:39:53 executing program 0: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c044) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5f15}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xde4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfe2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = accept4$inet(r0, &(0x7f0000000380)={0x2, 0x0, @multicast2}, &(0x7f00000003c0)=0x10, 0x800) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd4, 0x32}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1f, 0xfff, 0x8, 0x1000, 0x8, 0x6, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x18, 0x2, 0x60, 0x2, 0x30, 0x48, 0x6]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x1b, 0x5b, 0x30, 0x5, 0x1, 0xc, 0x3, 0x6, 0x5a, 0x6, 0x3, 0xb, 0x60, 0x6c, 0x16, 0x22, 0x4, 0x6c, 0x2, 0xc, 0x9, 0xc, 0x24, 0x4, 0x30]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x5}, {0x0, 0x8}, {0x4}, {0x6, 0x6}, {0x7}, {0x3, 0x6}, {0x0, 0x8}, {0x3, 0x2}, {0x7, 0x6}, {0x0, 0xa}, {0x3, 0x9}, {0x3, 0xa}, {0x3, 0x2}, {0x2, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x5, 0x5}, {0x2}, {0x4, 0x3}, {0x3, 0x5}, {0x5, 0x9}]}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0xcd5c0c01f618876f) syz_open_dev$hidraw(&(0x7f0000000640), 0x1, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@private0}}, &(0x7f0000000780)=0xe8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f00000007c0)={'ipvs\x00'}, &(0x7f0000000800)=0x1e) accept4$inet(r0, &(0x7f0000000840)={0x2, 0x0, @initdev}, &(0x7f0000000880)=0x10, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'erspan0\x00', r3, 0x8, 0x7800, 0x5, 0x8, {{0x15, 0x4, 0x0, 0x6, 0x54, 0x65, 0x0, 0x6e, 0x2f, 0x0, @empty, @loopback, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x40, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast, @private=0xa010102]}, @noop, @rr={0x7, 0x7, 0x22, [@broadcast]}, @noop, @generic={0x86, 0x6, "92aa7713"}, @ra={0x94, 0x4}]}}}}}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048004) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, r6, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd742}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x8840) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 04:39:53 executing program 3: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x40800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x8, 0x40, 0x0, 0x9, {{0x12, 0x4, 0x0, 0x3, 0x48, 0x64, 0x0, 0x43, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x18, 0xce, 0x0, 0x0, [0x8, 0xc9, 0x8, 0x1ff, 0x10001]}, @lsrr={0x83, 0x1b, 0xd6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100, @loopback, @broadcast]}]}}}}}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000280)={0x3c, 0x2b, '\x00', [@pad1, @generic={0xff, 0x92, "a3e989f66a181dd95ff776a8035344d15494a7507de16ce4b61fc655cf82d0013683b0b88f67668886a2afa07ea59b6235adff200a5104eeddb73f7492e8de3d87c828f41d1c1707081fd7e81a33dae193f8845fc6bd82923c1400916bc2f0b3023dff36d3e5809764d974ef734ea21d080c1a2b69425c0b6d93cfc7457d2ab6eb3cf7d9e096cc21bfda0894cf6a5d014d07"}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xb6, "f9f828e2a84dccbe39f623b83e4d1857012cedac371849893c7522a78109018573eed4eb222965c96e31c1e64bdb2d0e57c72aae3996b85739082dcb5e2246ab98893ecd11cb81d89141434a472732806b2dc7ee35082d39bb62c0f7a5e126b16d261c66eefe32e2dcf4ee3508073b748e455b22fc3a5c581b810a03a328dc044d0698fb533f2e117a40ac28e6c05ab2f74f7eaec460ae8f753415224f4248b90358d30865080eed9acdc60e78a8d2d178f9ca3b5529"}]}, 0x160) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', r1, 0x2f, 0x2, 0x7f, 0x1, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x7, 0xa589}}) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x2f, 0x1, 0x7, 0x9e77, 0x10, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8, 0x1ff, 0x7b}}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x134, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xac2c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000780)={0x1, 0x1, 0x0, 0x877, 0x40}, 0xc) r5 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x4e24, 0x81, 0x4e24, 0x8, 0xd, 0x80, 0xe0, 0x88, r4, r5}, {0x189, 0xe56, 0xffff, 0x7, 0x8, 0x3, 0x1, 0x19c}, {0x5, 0x6, 0x0, 0xebc}, 0x8, 0x6e6bbc, 0x2, 0x0, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4d6, 0x33}, 0x2, @in=@local, 0x3504, 0x0, 0x1, 0x6, 0xdf, 0x100, 0x1}}, 0xe8) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000008c0)={0x3a, 0xe, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1e}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @local]}, 0x78) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x4000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000980)={'TPROXY\x00'}, &(0x7f00000009c0)=0x1e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'sit0\x00', r2, 0x4, 0x6, 0x1f, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x6, 0x7}}) io_setup(0x5, &(0x7f0000000ac0)=0x0) io_submit(r7, 0x0, &(0x7f0000000b00)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20000001) 04:39:53 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:cert_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004004) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r4) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r8, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1dc, r9, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3d, 0xbe, "db57e2419f5124d55b9e3245971e103493d11da5d8134364b075ea7b1da56ef5fcbd22e2ea4833a7ad935470acace456c26059440aa82babdf"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa5, 0xbe, "a49c850aae91ad0a42bc43732620b6ec01267b22a4b594087a220a0a1013faa1558d4b413779d63a2a5a0a8291f2cff14f03d6cb35ef849bbe6bcd40292dafad0e7cf3744214a55f5469db6c8d454c2fa8f34a3461fe8cac7670fac5e8f39f22a6e37d34fbf7fa4b02f2b1fc6691eb2f7f2215dec6e78b473b643e79f9fbe8e1c64e64ac0a2cb14775399bc49c104b1111031b2318629fdb8c88bb6f8cf360e2b2"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa8, 0xac, "b423948c506888a69bfb4bc496d47c543d804dd3a5dc5b32ba6528244ef30de788394c9ab57ac164f35f8d0663c8526e1449732b7da11f7520c537c47e77ba314f36ff89e0aca98f9e8efaec1f1bc1d37b8d9faead023f14f291f1b4ed0e5775ee4ec655997b5f9464a256b74a9d9b9263b7221f534fb21b5dab24f0b0e90ee899ba98a935d79f91a2c783e0a0458646b246208ddb4836cf7a7ab97a3dc1d0c8a95180e3"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x8000}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x3]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40014}, 0x2000c0c0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a80), 0xffffffffffffffff) 04:39:53 executing program 2: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x1, 0x8, 0x1800}, {0x3, 0x3e00, 0x1000}, {0x2, 0x1, 0x800}], 0x3, &(0x7f0000000180)={0x77359400}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) io_pgetevents(0x0, 0x1, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000000300)=0xfffffffe) r0 = semget(0x0, 0x4, 0x280) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x400, 0x800}, {0x2, 0x2, 0x1800}, {0x4, 0x4, 0x800}], 0x3, &(0x7f00000003c0)={r1, r2+60000000}) pselect6(0x40, &(0x7f0000000400)={0xfffffffffffffffd, 0x9, 0x2, 0x4, 0x4, 0x5, 0x5, 0x8}, &(0x7f0000000440)={0x0, 0x4, 0x20, 0x0, 0x6, 0x0, 0x5, 0x4}, &(0x7f0000000480)={0x2, 0x6, 0x20, 0x1, 0x3, 0xffffffffffff0000, 0xffffffffffffff01, 0x7fffffff}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x5]}, 0x8}) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, 0x0, r3) r4 = request_key(&(0x7f0000000600)='rxrpc_s\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)='[-]\\\x00', 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0) add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) semget(0x0, 0x0, 0x9840a7d51ce5aec4) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1, 0x0, 0x0, 0xee00, 0xee00, 0x161}, 0x1, 0x1, 0xd3a, 0x2, 0x0, 0xffffffffffffffff, 0x1000}) 04:39:54 executing program 5: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005041}, 0x400c054) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044011) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x55}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x14080004}, 0x5) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x58eee835f54f5192}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1a080}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r2, 0x810, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004490) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xfd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hwclock_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:39:54 executing program 2: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x1, 0x8, 0x1800}, {0x3, 0x3e00, 0x1000}, {0x2, 0x1, 0x800}], 0x3, &(0x7f0000000180)={0x77359400}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) io_pgetevents(0x0, 0x1, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000000300)=0xfffffffe) r0 = semget(0x0, 0x4, 0x280) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x400, 0x800}, {0x2, 0x2, 0x1800}, {0x4, 0x4, 0x800}], 0x3, &(0x7f00000003c0)={r1, r2+60000000}) pselect6(0x40, &(0x7f0000000400)={0xfffffffffffffffd, 0x9, 0x2, 0x4, 0x4, 0x5, 0x5, 0x8}, &(0x7f0000000440)={0x0, 0x4, 0x20, 0x0, 0x6, 0x0, 0x5, 0x4}, &(0x7f0000000480)={0x2, 0x6, 0x20, 0x1, 0x3, 0xffffffffffff0000, 0xffffffffffffff01, 0x7fffffff}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x5]}, 0x8}) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, 0x0, r3) r4 = request_key(&(0x7f0000000600)='rxrpc_s\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)='[-]\\\x00', 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0) add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1, 0x0, 0x0, 0xee00, 0xee00, 0x161}, 0x1, 0x1, 0xd3a, 0x2, 0x0, 0xffffffffffffffff, 0x1000}) 04:39:54 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x304, 0x2) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044804) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c5}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7, 0x10, 0x6, 0xe09, {{0x2a, 0x4, 0x3, 0x11, 0xa8, 0x67, 0x0, 0xdd, 0x0, 0x0, @private=0xa010100, @multicast1, {[@noop, @generic={0x86, 0x8, 'BkY5#^'}, @ssrr={0x89, 0x2b, 0xa3, [@loopback, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1, @broadcast, @multicast2, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x5b, 0x3, [{0x1, 0x6, "8f160a5f"}, {0x2, 0x11, "a7713553b8f47548baf49a38fbe705"}, {0x7, 0xd, "5d90c24020e470e80bd935"}, {0x0, 0x5, "739e43"}, {0x1, 0xd, "c617a7d005834f64931f43"}, {0x0, 0xf, "7c481d58ac3858b82cdc0da8eb"}, {0x0, 0x7, "2bdb52a85c"}, {0x7, 0x9, "b0e2f05f0e2b0b"}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', r2, 0x8, 0x7, 0x6, 0x5, {{0x20, 0x4, 0x1, 0x38, 0x80, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@ssrr={0x89, 0x7, 0x68, [@loopback]}, @cipso={0x86, 0x63, 0x2, [{0x2, 0xc, "eacf5f2875bd491539de"}, {0x5, 0xc, "3cb950579c517fead09d"}, {0x2, 0x2}, {0xc, 0x11, "f2968cb4f4063989f80f8e15a9e440"}, {0x1, 0xc, "5cd05016dbac44c46f96"}, {0x6, 0x12, "77794ea69c862ba07a07ff3f8cb4cb80"}, {0x1, 0x8, "1547a28ced9c"}, {0x6, 0x2}, {0x1, 0xa, "383ebdf42fd49d09"}]}]}}}}}) r3 = socket(0x25, 0x3, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000580)=0x9, &(0x7f00000005c0)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000600), 0x2) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000640), &(0x7f0000000680)=0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) io_pgetevents(0x0, 0xdd1, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000780)={r5, r6+60000000}, 0x0) io_pgetevents(0x0, 0x7fffffff, 0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x362]}, 0x8}) clock_getres(0x2, &(0x7f0000000940)) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x2}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040810}, 0x884) openat$sr(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0) 04:39:54 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:cert_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004004) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r4) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r8, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1dc, r9, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3d, 0xbe, "db57e2419f5124d55b9e3245971e103493d11da5d8134364b075ea7b1da56ef5fcbd22e2ea4833a7ad935470acace456c26059440aa82babdf"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa5, 0xbe, "a49c850aae91ad0a42bc43732620b6ec01267b22a4b594087a220a0a1013faa1558d4b413779d63a2a5a0a8291f2cff14f03d6cb35ef849bbe6bcd40292dafad0e7cf3744214a55f5469db6c8d454c2fa8f34a3461fe8cac7670fac5e8f39f22a6e37d34fbf7fa4b02f2b1fc6691eb2f7f2215dec6e78b473b643e79f9fbe8e1c64e64ac0a2cb14775399bc49c104b1111031b2318629fdb8c88bb6f8cf360e2b2"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa8, 0xac, "b423948c506888a69bfb4bc496d47c543d804dd3a5dc5b32ba6528244ef30de788394c9ab57ac164f35f8d0663c8526e1449732b7da11f7520c537c47e77ba314f36ff89e0aca98f9e8efaec1f1bc1d37b8d9faead023f14f291f1b4ed0e5775ee4ec655997b5f9464a256b74a9d9b9263b7221f534fb21b5dab24f0b0e90ee899ba98a935d79f91a2c783e0a0458646b246208ddb4836cf7a7ab97a3dc1d0c8a95180e3"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x8000}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x3]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40014}, 0x2000c0c0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a80), 0xffffffffffffffff) 04:39:54 executing program 2: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x1, 0x8, 0x1800}, {0x3, 0x3e00, 0x1000}, {0x2, 0x1, 0x800}], 0x3, &(0x7f0000000180)={0x77359400}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) io_pgetevents(0x0, 0x1, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000000300)=0xfffffffe) r0 = semget(0x0, 0x4, 0x280) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x400, 0x800}, {0x2, 0x2, 0x1800}, {0x4, 0x4, 0x800}], 0x3, &(0x7f00000003c0)={r1, r2+60000000}) pselect6(0x40, &(0x7f0000000400)={0xfffffffffffffffd, 0x9, 0x2, 0x4, 0x4, 0x5, 0x5, 0x8}, &(0x7f0000000440)={0x0, 0x4, 0x20, 0x0, 0x6, 0x0, 0x5, 0x4}, &(0x7f0000000480)={0x2, 0x6, 0x20, 0x1, 0x3, 0xffffffffffff0000, 0xffffffffffffff01, 0x7fffffff}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x5]}, 0x8}) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, 0x0, r3) r4 = request_key(&(0x7f0000000600)='rxrpc_s\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)='[-]\\\x00', 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1, 0x0, 0x0, 0xee00, 0xee00, 0x161}, 0x1, 0x1, 0xd3a, 0x2, 0x0, 0xffffffffffffffff, 0x1000}) 04:39:54 executing program 0: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c044) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5f15}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xde4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfe2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = accept4$inet(r0, &(0x7f0000000380)={0x2, 0x0, @multicast2}, &(0x7f00000003c0)=0x10, 0x800) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd4, 0x32}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1f, 0xfff, 0x8, 0x1000, 0x8, 0x6, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x18, 0x2, 0x60, 0x2, 0x30, 0x48, 0x6]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x1b, 0x5b, 0x30, 0x5, 0x1, 0xc, 0x3, 0x6, 0x5a, 0x6, 0x3, 0xb, 0x60, 0x6c, 0x16, 0x22, 0x4, 0x6c, 0x2, 0xc, 0x9, 0xc, 0x24, 0x4, 0x30]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x5}, {0x0, 0x8}, {0x4}, {0x6, 0x6}, {0x7}, {0x3, 0x6}, {0x0, 0x8}, {0x3, 0x2}, {0x7, 0x6}, {0x0, 0xa}, {0x3, 0x9}, {0x3, 0xa}, {0x3, 0x2}, {0x2, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x5, 0x5}, {0x2}, {0x4, 0x3}, {0x3, 0x5}, {0x5, 0x9}]}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0xcd5c0c01f618876f) syz_open_dev$hidraw(&(0x7f0000000640), 0x1, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@private0}}, &(0x7f0000000780)=0xe8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f00000007c0)={'ipvs\x00'}, &(0x7f0000000800)=0x1e) accept4$inet(r0, &(0x7f0000000840)={0x2, 0x0, @initdev}, &(0x7f0000000880)=0x10, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'erspan0\x00', r3, 0x8, 0x7800, 0x5, 0x8, {{0x15, 0x4, 0x0, 0x6, 0x54, 0x65, 0x0, 0x6e, 0x2f, 0x0, @empty, @loopback, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x40, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast, @private=0xa010102]}, @noop, @rr={0x7, 0x7, 0x22, [@broadcast]}, @noop, @generic={0x86, 0x6, "92aa7713"}, @ra={0x94, 0x4}]}}}}}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048004) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, r6, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd742}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x8840) 04:39:54 executing program 4: sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48d4}, 0x8040) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x25}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20000040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, 0x0, 0x4000000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x262080, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x67}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40014) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x5, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008050) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, &(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)='.\x00') prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x40000000) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x0, [0x5fa1, 0x8, 0x7]}, &(0x7f0000000a00)=0x44) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ac0)={'wpan4\x00'}) keyctl$read(0xb, 0x0, &(0x7f0000000cc0)=""/107, 0x6b) 04:39:54 executing program 6: r0 = gettid() waitid(0x1, r0, 0x0, 0x4, &(0x7f0000000000)) r1 = fork() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1, &(0x7f00000000c0)=""/119) r2 = fork() waitid(0x0, r2, &(0x7f0000000140), 0x2, 0x0) wait4(r0, 0x0, 0x1, &(0x7f00000001c0)) wait4(r2, &(0x7f0000000280), 0x4, &(0x7f00000002c0)) process_vm_readv(r1, &(0x7f0000000380), 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/231, 0xe7}, {&(0x7f0000000600)=""/184, 0xb8}, {&(0x7f00000006c0)=""/89, 0x59}], 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f00000008c0)=0xe8) r4 = getgid() r5 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000900)={{0x3, r3, r4, 0xee01, 0x0, 0x0, 0xa2}, 0xfffffff8, 0x4, 0x4, 0x7ff, r0, r5, 0x4}) r6 = fork() sched_setparam(r6, &(0x7f0000000980)=0x1) getrusage(0x1, &(0x7f00000009c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wg1\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, 0x0, 0x98e84c9e62d6a31a, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4008004) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x9, &(0x7f0000000c00)=""/83) 04:39:54 executing program 5: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005041}, 0x400c054) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044011) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x55}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x14080004}, 0x5) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x58eee835f54f5192}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1a080}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r2, 0x810, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004490) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xfd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hwclock_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 04:39:54 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x304, 0x2) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044804) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c5}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7, 0x10, 0x6, 0xe09, {{0x2a, 0x4, 0x3, 0x11, 0xa8, 0x67, 0x0, 0xdd, 0x0, 0x0, @private=0xa010100, @multicast1, {[@noop, @generic={0x86, 0x8, 'BkY5#^'}, @ssrr={0x89, 0x2b, 0xa3, [@loopback, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1, @broadcast, @multicast2, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x5b, 0x3, [{0x1, 0x6, "8f160a5f"}, {0x2, 0x11, "a7713553b8f47548baf49a38fbe705"}, {0x7, 0xd, "5d90c24020e470e80bd935"}, {0x0, 0x5, "739e43"}, {0x1, 0xd, "c617a7d005834f64931f43"}, {0x0, 0xf, "7c481d58ac3858b82cdc0da8eb"}, {0x0, 0x7, "2bdb52a85c"}, {0x7, 0x9, "b0e2f05f0e2b0b"}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', r2, 0x8, 0x7, 0x6, 0x5, {{0x20, 0x4, 0x1, 0x38, 0x80, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@ssrr={0x89, 0x7, 0x68, [@loopback]}, @cipso={0x86, 0x63, 0x2, [{0x2, 0xc, "eacf5f2875bd491539de"}, {0x5, 0xc, "3cb950579c517fead09d"}, {0x2, 0x2}, {0xc, 0x11, "f2968cb4f4063989f80f8e15a9e440"}, {0x1, 0xc, "5cd05016dbac44c46f96"}, {0x6, 0x12, "77794ea69c862ba07a07ff3f8cb4cb80"}, {0x1, 0x8, "1547a28ced9c"}, {0x6, 0x2}, {0x1, 0xa, "383ebdf42fd49d09"}]}]}}}}}) r3 = socket(0x25, 0x3, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000580)=0x9, &(0x7f00000005c0)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000600), 0x2) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000640), &(0x7f0000000680)=0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) io_pgetevents(0x0, 0xdd1, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000780)={r5, r6+60000000}, 0x0) io_pgetevents(0x0, 0x7fffffff, 0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x362]}, 0x8}) clock_getres(0x2, &(0x7f0000000940)) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x2}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040810}, 0x884) openat$sr(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0) 04:39:54 executing program 2: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x1, 0x8, 0x1800}, {0x3, 0x3e00, 0x1000}, {0x2, 0x1, 0x800}], 0x3, &(0x7f0000000180)={0x77359400}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) io_pgetevents(0x0, 0x1, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000000300)=0xfffffffe) r0 = semget(0x0, 0x4, 0x280) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x400, 0x800}, {0x2, 0x2, 0x1800}, {0x4, 0x4, 0x800}], 0x3, &(0x7f00000003c0)={r1, r2+60000000}) pselect6(0x40, &(0x7f0000000400)={0xfffffffffffffffd, 0x9, 0x2, 0x4, 0x4, 0x5, 0x5, 0x8}, &(0x7f0000000440)={0x0, 0x4, 0x20, 0x0, 0x6, 0x0, 0x5, 0x4}, &(0x7f0000000480)={0x2, 0x6, 0x20, 0x1, 0x3, 0xffffffffffff0000, 0xffffffffffffff01, 0x7fffffff}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x5]}, 0x8}) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, 0x0, r3) request_key(&(0x7f0000000600)='rxrpc_s\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)='[-]\\\x00', 0xffffffffffffffff) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1, 0x0, 0x0, 0xee00, 0xee00, 0x161}, 0x1, 0x1, 0xd3a, 0x2, 0x0, 0xffffffffffffffff, 0x1000}) 04:39:54 executing program 3: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x40800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x8, 0x40, 0x0, 0x9, {{0x12, 0x4, 0x0, 0x3, 0x48, 0x64, 0x0, 0x43, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x18, 0xce, 0x0, 0x0, [0x8, 0xc9, 0x8, 0x1ff, 0x10001]}, @lsrr={0x83, 0x1b, 0xd6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100, @loopback, @broadcast]}]}}}}}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000280)={0x3c, 0x2b, '\x00', [@pad1, @generic={0xff, 0x92, "a3e989f66a181dd95ff776a8035344d15494a7507de16ce4b61fc655cf82d0013683b0b88f67668886a2afa07ea59b6235adff200a5104eeddb73f7492e8de3d87c828f41d1c1707081fd7e81a33dae193f8845fc6bd82923c1400916bc2f0b3023dff36d3e5809764d974ef734ea21d080c1a2b69425c0b6d93cfc7457d2ab6eb3cf7d9e096cc21bfda0894cf6a5d014d07"}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xb6, "f9f828e2a84dccbe39f623b83e4d1857012cedac371849893c7522a78109018573eed4eb222965c96e31c1e64bdb2d0e57c72aae3996b85739082dcb5e2246ab98893ecd11cb81d89141434a472732806b2dc7ee35082d39bb62c0f7a5e126b16d261c66eefe32e2dcf4ee3508073b748e455b22fc3a5c581b810a03a328dc044d0698fb533f2e117a40ac28e6c05ab2f74f7eaec460ae8f753415224f4248b90358d30865080eed9acdc60e78a8d2d178f9ca3b5529"}]}, 0x160) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', r1, 0x2f, 0x2, 0x7f, 0x1, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x7, 0xa589}}) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x2f, 0x1, 0x7, 0x9e77, 0x10, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8, 0x1ff, 0x7b}}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x134, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xac2c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000780)={0x1, 0x1, 0x0, 0x877, 0x40}, 0xc) r5 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x4e24, 0x81, 0x4e24, 0x8, 0xd, 0x80, 0xe0, 0x88, r4, r5}, {0x189, 0xe56, 0xffff, 0x7, 0x8, 0x3, 0x1, 0x19c}, {0x5, 0x6, 0x0, 0xebc}, 0x8, 0x6e6bbc, 0x2, 0x0, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4d6, 0x33}, 0x2, @in=@local, 0x3504, 0x0, 0x1, 0x6, 0xdf, 0x100, 0x1}}, 0xe8) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000008c0)={0x3a, 0xe, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1e}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @local]}, 0x78) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x4000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000980)={'TPROXY\x00'}, &(0x7f00000009c0)=0x1e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'sit0\x00', r2, 0x4, 0x6, 0x1f, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x6, 0x7}}) io_setup(0x5, &(0x7f0000000ac0)=0x0) io_submit(r7, 0x0, &(0x7f0000000b00)) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20000001) 04:39:54 executing program 0: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c044) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5f15}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xde4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfe2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = accept4$inet(r0, &(0x7f0000000380)={0x2, 0x0, @multicast2}, &(0x7f00000003c0)=0x10, 0x800) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd4, 0x32}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1f, 0xfff, 0x8, 0x1000, 0x8, 0x6, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x18, 0x2, 0x60, 0x2, 0x30, 0x48, 0x6]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x1b, 0x5b, 0x30, 0x5, 0x1, 0xc, 0x3, 0x6, 0x5a, 0x6, 0x3, 0xb, 0x60, 0x6c, 0x16, 0x22, 0x4, 0x6c, 0x2, 0xc, 0x9, 0xc, 0x24, 0x4, 0x30]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x5}, {0x0, 0x8}, {0x4}, {0x6, 0x6}, {0x7}, {0x3, 0x6}, {0x0, 0x8}, {0x3, 0x2}, {0x7, 0x6}, {0x0, 0xa}, {0x3, 0x9}, {0x3, 0xa}, {0x3, 0x2}, {0x2, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x5, 0x5}, {0x2}, {0x4, 0x3}, {0x3, 0x5}, {0x5, 0x9}]}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0xcd5c0c01f618876f) syz_open_dev$hidraw(&(0x7f0000000640), 0x1, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@private0}}, &(0x7f0000000780)=0xe8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f00000007c0)={'ipvs\x00'}, &(0x7f0000000800)=0x1e) accept4$inet(r0, &(0x7f0000000840)={0x2, 0x0, @initdev}, &(0x7f0000000880)=0x10, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'erspan0\x00', r3, 0x8, 0x7800, 0x5, 0x8, {{0x15, 0x4, 0x0, 0x6, 0x54, 0x65, 0x0, 0x6e, 0x2f, 0x0, @empty, @loopback, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x40, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast, @private=0xa010102]}, @noop, @rr={0x7, 0x7, 0x22, [@broadcast]}, @noop, @generic={0x86, 0x6, "92aa7713"}, @ra={0x94, 0x4}]}}}}}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048004) pipe(&(0x7f0000000a80)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), 0xffffffffffffffff) 04:39:54 executing program 4: sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48d4}, 0x8040) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x25}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20000040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, 0x0, 0x4000000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x262080, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x67}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40014) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x5, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008050) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, &(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)='.\x00') prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x40000000) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x0, [0x5fa1, 0x8, 0x7]}, &(0x7f0000000a00)=0x44) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r1) keyctl$read(0xb, 0x0, &(0x7f0000000cc0)=""/107, 0x6b) 04:40:09 executing program 6: r0 = gettid() waitid(0x1, r0, 0x0, 0x4, &(0x7f0000000000)) r1 = fork() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1, &(0x7f00000000c0)=""/119) r2 = fork() waitid(0x0, r2, &(0x7f0000000140), 0x2, 0x0) wait4(r0, 0x0, 0x1, &(0x7f00000001c0)) wait4(r2, &(0x7f0000000280), 0x4, &(0x7f00000002c0)) process_vm_readv(r1, &(0x7f0000000380), 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/231, 0xe7}, {&(0x7f0000000600)=""/184, 0xb8}, {&(0x7f00000006c0)=""/89, 0x59}], 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f00000008c0)=0xe8) r4 = getgid() r5 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000900)={{0x3, r3, r4, 0xee01, 0x0, 0x0, 0xa2}, 0xfffffff8, 0x4, 0x4, 0x7ff, r0, r5, 0x4}) r6 = fork() sched_setparam(r6, &(0x7f0000000980)=0x1) getrusage(0x1, &(0x7f00000009c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wg1\x00'}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x9, &(0x7f0000000c00)=""/83) 04:40:09 executing program 0: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c044) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5f15}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xde4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfe2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = accept4$inet(r0, &(0x7f0000000380)={0x2, 0x0, @multicast2}, &(0x7f00000003c0)=0x10, 0x800) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd4, 0x32}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1f, 0xfff, 0x8, 0x1000, 0x8, 0x6, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x18, 0x2, 0x60, 0x2, 0x30, 0x48, 0x6]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x1b, 0x5b, 0x30, 0x5, 0x1, 0xc, 0x3, 0x6, 0x5a, 0x6, 0x3, 0xb, 0x60, 0x6c, 0x16, 0x22, 0x4, 0x6c, 0x2, 0xc, 0x9, 0xc, 0x24, 0x4, 0x30]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x5}, {0x0, 0x8}, {0x4}, {0x6, 0x6}, {0x7}, {0x3, 0x6}, {0x0, 0x8}, {0x3, 0x2}, {0x7, 0x6}, {0x0, 0xa}, {0x3, 0x9}, {0x3, 0xa}, {0x3, 0x2}, {0x2, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x5, 0x5}, {0x2}, {0x4, 0x3}, {0x3, 0x5}, {0x5, 0x9}]}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0xcd5c0c01f618876f) syz_open_dev$hidraw(&(0x7f0000000640), 0x1, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@private0}}, &(0x7f0000000780)=0xe8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f00000007c0)={'ipvs\x00'}, &(0x7f0000000800)=0x1e) accept4$inet(r0, &(0x7f0000000840)={0x2, 0x0, @initdev}, &(0x7f0000000880)=0x10, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'erspan0\x00', r3, 0x8, 0x7800, 0x5, 0x8, {{0x15, 0x4, 0x0, 0x6, 0x54, 0x65, 0x0, 0x6e, 0x2f, 0x0, @empty, @loopback, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x40, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast, @private=0xa010102]}, @noop, @rr={0x7, 0x7, 0x22, [@broadcast]}, @noop, @generic={0x86, 0x6, "92aa7713"}, @ra={0x94, 0x4}]}}}}}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048004) pipe(&(0x7f0000000a80)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), 0xffffffffffffffff) 04:40:09 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:cert_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004004) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r4) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r8, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a80), 0xffffffffffffffff) 04:40:09 executing program 4: sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48d4}, 0x8040) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x25}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20000040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, 0x0, 0x4000000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x262080, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x67}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40014) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x5, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008050) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, &(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)='.\x00') prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x40000000) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x0, [0x5fa1, 0x8, 0x7]}, &(0x7f0000000a00)=0x44) keyctl$read(0xb, 0x0, &(0x7f0000000cc0)=""/107, 0x6b) 04:40:09 executing program 2: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x1, 0x8, 0x1800}, {0x3, 0x3e00, 0x1000}, {0x2, 0x1, 0x800}], 0x3, &(0x7f0000000180)={0x77359400}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) io_pgetevents(0x0, 0x1, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000000300)=0xfffffffe) r0 = semget(0x0, 0x4, 0x280) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x400, 0x800}, {0x2, 0x2, 0x1800}, {0x4, 0x4, 0x800}], 0x3, &(0x7f00000003c0)={r1, r2+60000000}) pselect6(0x40, &(0x7f0000000400)={0xfffffffffffffffd, 0x9, 0x2, 0x4, 0x4, 0x5, 0x5, 0x8}, &(0x7f0000000440)={0x0, 0x4, 0x20, 0x0, 0x6, 0x0, 0x5, 0x4}, &(0x7f0000000480)={0x2, 0x6, 0x20, 0x1, 0x3, 0xffffffffffff0000, 0xffffffffffffff01, 0x7fffffff}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x5]}, 0x8}) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, 0x0, r3) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1, 0x0, 0x0, 0xee00, 0xee00, 0x161}, 0x1, 0x1, 0xd3a, 0x2, 0x0, 0xffffffffffffffff, 0x1000}) 04:40:09 executing program 5: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005041}, 0x400c054) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044011) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x55}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x14080004}, 0x5) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x58eee835f54f5192}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1a080}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r2, 0x810, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004490) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xfd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) 04:40:09 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x304, 0x2) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044804) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c5}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7, 0x10, 0x6, 0xe09, {{0x2a, 0x4, 0x3, 0x11, 0xa8, 0x67, 0x0, 0xdd, 0x0, 0x0, @private=0xa010100, @multicast1, {[@noop, @generic={0x86, 0x8, 'BkY5#^'}, @ssrr={0x89, 0x2b, 0xa3, [@loopback, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1, @broadcast, @multicast2, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x5b, 0x3, [{0x1, 0x6, "8f160a5f"}, {0x2, 0x11, "a7713553b8f47548baf49a38fbe705"}, {0x7, 0xd, "5d90c24020e470e80bd935"}, {0x0, 0x5, "739e43"}, {0x1, 0xd, "c617a7d005834f64931f43"}, {0x0, 0xf, "7c481d58ac3858b82cdc0da8eb"}, {0x0, 0x7, "2bdb52a85c"}, {0x7, 0x9, "b0e2f05f0e2b0b"}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', r2, 0x8, 0x7, 0x6, 0x5, {{0x20, 0x4, 0x1, 0x38, 0x80, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@ssrr={0x89, 0x7, 0x68, [@loopback]}, @cipso={0x86, 0x63, 0x2, [{0x2, 0xc, "eacf5f2875bd491539de"}, {0x5, 0xc, "3cb950579c517fead09d"}, {0x2, 0x2}, {0xc, 0x11, "f2968cb4f4063989f80f8e15a9e440"}, {0x1, 0xc, "5cd05016dbac44c46f96"}, {0x6, 0x12, "77794ea69c862ba07a07ff3f8cb4cb80"}, {0x1, 0x8, "1547a28ced9c"}, {0x6, 0x2}, {0x1, 0xa, "383ebdf42fd49d09"}]}]}}}}}) r3 = socket(0x25, 0x3, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000580)=0x9, &(0x7f00000005c0)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000600), 0x2) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000640), &(0x7f0000000680)=0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) io_pgetevents(0x0, 0xdd1, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000780)={r5, r6+60000000}, 0x0) io_pgetevents(0x0, 0x7fffffff, 0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x362]}, 0x8}) clock_getres(0x2, &(0x7f0000000940)) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x2}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040810}, 0x884) openat$sr(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0) 04:40:09 executing program 3: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x40800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x8, 0x40, 0x0, 0x9, {{0x12, 0x4, 0x0, 0x3, 0x48, 0x64, 0x0, 0x43, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x18, 0xce, 0x0, 0x0, [0x8, 0xc9, 0x8, 0x1ff, 0x10001]}, @lsrr={0x83, 0x1b, 0xd6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100, @loopback, @broadcast]}]}}}}}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000280)={0x3c, 0x2b, '\x00', [@pad1, @generic={0xff, 0x92, "a3e989f66a181dd95ff776a8035344d15494a7507de16ce4b61fc655cf82d0013683b0b88f67668886a2afa07ea59b6235adff200a5104eeddb73f7492e8de3d87c828f41d1c1707081fd7e81a33dae193f8845fc6bd82923c1400916bc2f0b3023dff36d3e5809764d974ef734ea21d080c1a2b69425c0b6d93cfc7457d2ab6eb3cf7d9e096cc21bfda0894cf6a5d014d07"}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xb6, "f9f828e2a84dccbe39f623b83e4d1857012cedac371849893c7522a78109018573eed4eb222965c96e31c1e64bdb2d0e57c72aae3996b85739082dcb5e2246ab98893ecd11cb81d89141434a472732806b2dc7ee35082d39bb62c0f7a5e126b16d261c66eefe32e2dcf4ee3508073b748e455b22fc3a5c581b810a03a328dc044d0698fb533f2e117a40ac28e6c05ab2f74f7eaec460ae8f753415224f4248b90358d30865080eed9acdc60e78a8d2d178f9ca3b5529"}]}, 0x160) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', r1, 0x2f, 0x2, 0x7f, 0x1, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x7, 0xa589}}) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x2f, 0x1, 0x7, 0x9e77, 0x10, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8, 0x1ff, 0x7b}}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x134, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xac2c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000780)={0x1, 0x1, 0x0, 0x877, 0x40}, 0xc) r5 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x4e24, 0x81, 0x4e24, 0x8, 0xd, 0x80, 0xe0, 0x88, r4, r5}, {0x189, 0xe56, 0xffff, 0x7, 0x8, 0x3, 0x1, 0x19c}, {0x5, 0x6, 0x0, 0xebc}, 0x8, 0x6e6bbc, 0x2, 0x0, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4d6, 0x33}, 0x2, @in=@local, 0x3504, 0x0, 0x1, 0x6, 0xdf, 0x100, 0x1}}, 0xe8) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000008c0)={0x3a, 0xe, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1e}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @local]}, 0x78) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x4000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000980)={'TPROXY\x00'}, &(0x7f00000009c0)=0x1e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'sit0\x00', r2, 0x4, 0x6, 0x1f, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x6, 0x7}}) io_setup(0x5, &(0x7f0000000ac0)=0x0) io_submit(r7, 0x0, &(0x7f0000000b00)) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20000001) [ 187.735224] Bluetooth: hci3: command 0x0406 tx timeout [ 187.735286] Bluetooth: hci1: command 0x0406 tx timeout [ 187.736339] Bluetooth: hci6: command 0x0406 tx timeout [ 187.737086] Bluetooth: hci0: command 0x0406 tx timeout [ 187.738039] Bluetooth: hci4: command 0x0406 tx timeout [ 187.738738] Bluetooth: hci5: command 0x0406 tx timeout [ 187.739710] Bluetooth: hci2: command 0x0406 tx timeout [ 188.759013] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 188.759654] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.760073] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.760600] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 188.761211] Call Trace: [ 188.761406] [ 188.761583] __schedule+0x893/0x2470 [ 188.761972] ? io_schedule_timeout+0x150/0x150 [ 188.762581] ? do_raw_spin_lock+0x121/0x260 [ 188.763065] ? rwlock_bug.part.0+0x90/0x90 [ 188.763995] schedule+0xda/0x1b0 [ 188.764628] rescuer_thread+0x851/0xdb0 [ 188.765075] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.765594] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.766103] ? lockdep_hardirqs_on+0x79/0x100 [ 188.766559] ? worker_thread+0x1260/0x1260 [ 188.767035] kthread+0x2ed/0x3a0 [ 188.767390] ? kthread_complete_and_exit+0x40/0x40 [ 188.767861] ret_from_fork+0x22/0x30 [ 188.768286] [ 188.768514] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 188.769168] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.769661] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.770456] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 188.771314] Call Trace: [ 188.771582] [ 188.771804] __schedule+0x893/0x2470 [ 188.772212] ? io_schedule_timeout+0x150/0x150 [ 188.772646] ? do_raw_spin_lock+0x121/0x260 [ 188.773122] ? rwlock_bug.part.0+0x90/0x90 [ 188.773532] schedule+0xda/0x1b0 [ 188.773875] rescuer_thread+0x851/0xdb0 [ 188.774315] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.774826] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.775344] ? lockdep_hardirqs_on+0x79/0x100 [ 188.775803] ? worker_thread+0x1260/0x1260 [ 188.776271] kthread+0x2ed/0x3a0 [ 188.776624] ? kthread_complete_and_exit+0x40/0x40 [ 188.777130] ret_from_fork+0x22/0x30 [ 188.777530] [ 188.777754] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 188.778424] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.778954] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.779731] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 188.780569] Call Trace: [ 188.780837] [ 188.781079] __schedule+0x893/0x2470 [ 188.781449] ? io_schedule_timeout+0x150/0x150 [ 188.781911] ? do_raw_spin_lock+0x121/0x260 [ 188.782383] ? rwlock_bug.part.0+0x90/0x90 [ 188.782798] schedule+0xda/0x1b0 [ 188.783183] rescuer_thread+0x851/0xdb0 [ 188.783565] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.784080] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.784554] ? lockdep_hardirqs_on+0x79/0x100 [ 188.785040] ? worker_thread+0x1260/0x1260 [ 188.785451] kthread+0x2ed/0x3a0 [ 188.785791] ? kthread_complete_and_exit+0x40/0x40 [ 188.786291] ret_from_fork+0x22/0x30 [ 188.786694] [ 188.786956] INFO: task netns:6 blocked for more than 143 seconds. [ 188.787552] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.788072] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.788825] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 188.789664] Call Trace: [ 188.789919] [ 188.790161] __schedule+0x893/0x2470 [ 188.790464] ? io_schedule_timeout+0x150/0x150 [ 188.790823] ? do_raw_spin_lock+0x121/0x260 [ 188.791206] ? rwlock_bug.part.0+0x90/0x90 [ 188.791548] schedule+0xda/0x1b0 [ 188.791823] rescuer_thread+0x851/0xdb0 [ 188.792170] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.792557] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.792966] ? lockdep_hardirqs_on+0x79/0x100 [ 188.793324] ? worker_thread+0x1260/0x1260 [ 188.793662] kthread+0x2ed/0x3a0 [ 188.793954] ? kthread_complete_and_exit+0x40/0x40 [ 188.794335] ret_from_fork+0x22/0x30 [ 188.794640] [ 188.794827] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 188.795356] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.795762] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.796367] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 188.797041] Workqueue: 0x0 (ata_sff) [ 188.797341] Call Trace: [ 188.797544] [ 188.797727] __schedule+0x893/0x2470 [ 188.798057] ? io_schedule_timeout+0x150/0x150 [ 188.798434] schedule+0xda/0x1b0 [ 188.798704] worker_thread+0x15f/0x1260 [ 188.799068] ? process_one_work+0x16a0/0x16a0 [ 188.799421] kthread+0x2ed/0x3a0 [ 188.799694] ? kthread_complete_and_exit+0x40/0x40 [ 188.800093] ret_from_fork+0x22/0x30 [ 188.800399] [ 188.800582] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 188.801106] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.801511] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.802117] task:kworker/0:0H state:I stack:29464 pid:8 ppid:2 flags:0x00004000 [ 188.802750] Workqueue: 0x0 (kblockd) [ 188.803083] Call Trace: [ 188.803287] [ 188.803472] __schedule+0x893/0x2470 [ 188.803771] ? io_schedule_timeout+0x150/0x150 [ 188.804163] schedule+0xda/0x1b0 [ 188.804433] worker_thread+0x15f/0x1260 [ 188.804764] ? process_one_work+0x16a0/0x16a0 [ 188.805151] kthread+0x2ed/0x3a0 [ 188.805418] ? kthread_complete_and_exit+0x40/0x40 [ 188.805796] ret_from_fork+0x22/0x30 [ 188.806121] [ 188.806307] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 188.806811] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.807260] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.807837] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 188.808492] Call Trace: [ 188.808700] [ 188.808879] __schedule+0x893/0x2470 [ 188.809200] ? io_schedule_timeout+0x150/0x150 [ 188.809559] ? do_raw_spin_lock+0x121/0x260 [ 188.809895] ? rwlock_bug.part.0+0x90/0x90 [ 188.810258] schedule+0xda/0x1b0 [ 188.810538] rescuer_thread+0x851/0xdb0 [ 188.810853] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.811275] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.811665] ? lockdep_hardirqs_on+0x79/0x100 [ 188.812044] ? worker_thread+0x1260/0x1260 [ 188.812382] kthread+0x2ed/0x3a0 [ 188.812653] ? kthread_complete_and_exit+0x40/0x40 [ 188.813061] ret_from_fork+0x22/0x30 [ 188.813367] [ 188.813551] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 188.814119] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.814523] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.815121] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 188.815727] Call Trace: [ 188.815919] [ 188.816121] __schedule+0x893/0x2470 [ 188.816408] ? io_schedule_timeout+0x150/0x150 [ 188.816749] ? mark_held_locks+0x9e/0xe0 [ 188.817086] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.817463] schedule+0xda/0x1b0 [ 188.817725] rcu_tasks_one_gp+0x3db/0xc10 [ 188.818072] rcu_tasks_kthread+0x80/0xa0 [ 188.818383] ? rcu_tasks_postscan+0x10/0x10 [ 188.818700] kthread+0x2ed/0x3a0 [ 188.818992] ? kthread_complete_and_exit+0x40/0x40 [ 188.819362] ret_from_fork+0x22/0x30 [ 188.819657] [ 188.819855] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 188.820403] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.820826] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.821445] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 188.822112] Workqueue: 0x0 (events_highpri) [ 188.822467] Call Trace: [ 188.822665] [ 188.822850] __schedule+0x893/0x2470 [ 188.823200] ? io_schedule_timeout+0x150/0x150 [ 188.823578] schedule+0xda/0x1b0 [ 188.823866] worker_thread+0x15f/0x1260 [ 188.824221] ? process_one_work+0x16a0/0x16a0 [ 188.824584] kthread+0x2ed/0x3a0 [ 188.824859] ? kthread_complete_and_exit+0x40/0x40 [ 188.825271] ret_from_fork+0x22/0x30 [ 188.825585] [ 188.825774] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 188.826321] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.826731] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.827357] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 188.828042] Call Trace: [ 188.828251] [ 188.828434] __schedule+0x893/0x2470 [ 188.828736] ? io_schedule_timeout+0x150/0x150 [ 188.829119] ? do_raw_spin_lock+0x121/0x260 [ 188.829467] ? rwlock_bug.part.0+0x90/0x90 [ 188.829814] schedule+0xda/0x1b0 [ 188.830112] rescuer_thread+0x851/0xdb0 [ 188.830432] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.830831] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.831262] ? lockdep_hardirqs_on+0x79/0x100 [ 188.831616] ? worker_thread+0x1260/0x1260 [ 188.831984] kthread+0x2ed/0x3a0 [ 188.832256] ? kthread_complete_and_exit+0x40/0x40 [ 188.832645] ret_from_fork+0x22/0x30 [ 188.832987] [ 188.833248] [ 188.833248] Showing all locks held in the system: [ 188.833731] 1 lock held by rcu_tasks_kthre/11: [ 188.834104] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 188.834871] 1 lock held by khungtaskd/25: [ 188.835228] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 188.835980] 1 lock held by systemd-journal/111: [ 188.836341] 1 lock held by in:imklog/188: [ 188.836657] #0: ffff88800d3c45e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 188.837340] 2 locks held by syz-executor/4305: [ 188.837689] [ 188.837826] ============================================= [ 188.837826] [ 191.831141] Bluetooth: hci7: command 0x0406 tx timeout 04:40:23 executing program 6: r0 = gettid() waitid(0x1, r0, 0x0, 0x4, &(0x7f0000000000)) r1 = fork() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1, &(0x7f00000000c0)=""/119) r2 = fork() waitid(0x0, r2, &(0x7f0000000140), 0x2, 0x0) wait4(r0, 0x0, 0x1, &(0x7f00000001c0)) wait4(r2, &(0x7f0000000280), 0x4, &(0x7f00000002c0)) process_vm_readv(r1, &(0x7f0000000380), 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/231, 0xe7}, {&(0x7f0000000600)=""/184, 0xb8}, {&(0x7f00000006c0)=""/89, 0x59}], 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f00000008c0)=0xe8) r4 = getgid() r5 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000900)={{0x3, r3, r4, 0xee01, 0x0, 0x0, 0xa2}, 0xfffffff8, 0x4, 0x4, 0x7ff, r0, r5, 0x4}) r6 = fork() sched_setparam(r6, &(0x7f0000000980)=0x1) getrusage(0x1, &(0x7f00000009c0)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x9, &(0x7f0000000c00)=""/83) 04:40:23 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:cert_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004004) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r4) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r8, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a80), 0xffffffffffffffff) 04:40:23 executing program 5: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005041}, 0x400c054) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044011) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x55}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x14080004}, 0x5) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x58eee835f54f5192}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1a080}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r2, 0x810, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004490) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xfd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) 04:40:23 executing program 4: sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48d4}, 0x8040) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x25}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20000040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, 0x0, 0x4000000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x262080, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x67}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40014) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x5, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008050) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, &(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)='.\x00') prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x40000000) keyctl$read(0xb, 0x0, &(0x7f0000000cc0)=""/107, 0x6b) 04:40:23 executing program 2: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x1, 0x8, 0x1800}, {0x3, 0x3e00, 0x1000}, {0x2, 0x1, 0x800}], 0x3, &(0x7f0000000180)={0x77359400}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) io_pgetevents(0x0, 0x1, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000000300)=0xfffffffe) r0 = semget(0x0, 0x4, 0x280) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x400, 0x800}, {0x2, 0x2, 0x1800}, {0x4, 0x4, 0x800}], 0x3, &(0x7f00000003c0)={r1, r2+60000000}) pselect6(0x40, &(0x7f0000000400)={0xfffffffffffffffd, 0x9, 0x2, 0x4, 0x4, 0x5, 0x5, 0x8}, &(0x7f0000000440)={0x0, 0x4, 0x20, 0x0, 0x6, 0x0, 0x5, 0x4}, &(0x7f0000000480)={0x2, 0x6, 0x20, 0x1, 0x3, 0xffffffffffff0000, 0xffffffffffffff01, 0x7fffffff}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x5]}, 0x8}) add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1, 0x0, 0x0, 0xee00, 0xee00, 0x161}, 0x1, 0x1, 0xd3a, 0x2, 0x0, 0xffffffffffffffff, 0x1000}) 04:40:23 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x304, 0x2) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044804) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c5}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7, 0x10, 0x6, 0xe09, {{0x2a, 0x4, 0x3, 0x11, 0xa8, 0x67, 0x0, 0xdd, 0x0, 0x0, @private=0xa010100, @multicast1, {[@noop, @generic={0x86, 0x8, 'BkY5#^'}, @ssrr={0x89, 0x2b, 0xa3, [@loopback, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1, @broadcast, @multicast2, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x5b, 0x3, [{0x1, 0x6, "8f160a5f"}, {0x2, 0x11, "a7713553b8f47548baf49a38fbe705"}, {0x7, 0xd, "5d90c24020e470e80bd935"}, {0x0, 0x5, "739e43"}, {0x1, 0xd, "c617a7d005834f64931f43"}, {0x0, 0xf, "7c481d58ac3858b82cdc0da8eb"}, {0x0, 0x7, "2bdb52a85c"}, {0x7, 0x9, "b0e2f05f0e2b0b"}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', r2, 0x8, 0x7, 0x6, 0x5, {{0x20, 0x4, 0x1, 0x38, 0x80, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@ssrr={0x89, 0x7, 0x68, [@loopback]}, @cipso={0x86, 0x63, 0x2, [{0x2, 0xc, "eacf5f2875bd491539de"}, {0x5, 0xc, "3cb950579c517fead09d"}, {0x2, 0x2}, {0xc, 0x11, "f2968cb4f4063989f80f8e15a9e440"}, {0x1, 0xc, "5cd05016dbac44c46f96"}, {0x6, 0x12, "77794ea69c862ba07a07ff3f8cb4cb80"}, {0x1, 0x8, "1547a28ced9c"}, {0x6, 0x2}, {0x1, 0xa, "383ebdf42fd49d09"}]}]}}}}}) r3 = socket(0x25, 0x3, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000580)=0x9, &(0x7f00000005c0)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000600), 0x2) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000640), &(0x7f0000000680)=0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) io_pgetevents(0x0, 0xdd1, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000780)={r5, r6+60000000}, 0x0) io_pgetevents(0x0, 0x7fffffff, 0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x362]}, 0x8}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000980)={0x2, {{0xa, 0x4e21, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x88) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x2}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040810}, 0x884) openat$sr(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0) 04:40:23 executing program 0: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c044) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5f15}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xde4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfe2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = accept4$inet(r0, &(0x7f0000000380)={0x2, 0x0, @multicast2}, &(0x7f00000003c0)=0x10, 0x800) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd4, 0x32}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1f, 0xfff, 0x8, 0x1000, 0x8, 0x6, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x18, 0x2, 0x60, 0x2, 0x30, 0x48, 0x6]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x1b, 0x5b, 0x30, 0x5, 0x1, 0xc, 0x3, 0x6, 0x5a, 0x6, 0x3, 0xb, 0x60, 0x6c, 0x16, 0x22, 0x4, 0x6c, 0x2, 0xc, 0x9, 0xc, 0x24, 0x4, 0x30]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x5}, {0x0, 0x8}, {0x4}, {0x6, 0x6}, {0x7}, {0x3, 0x6}, {0x0, 0x8}, {0x3, 0x2}, {0x7, 0x6}, {0x0, 0xa}, {0x3, 0x9}, {0x3, 0xa}, {0x3, 0x2}, {0x2, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x5, 0x5}, {0x2}, {0x4, 0x3}, {0x3, 0x5}, {0x5, 0x9}]}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0xcd5c0c01f618876f) syz_open_dev$hidraw(&(0x7f0000000640), 0x1, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@private0}}, &(0x7f0000000780)=0xe8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f00000007c0)={'ipvs\x00'}, &(0x7f0000000800)=0x1e) accept4$inet(r0, &(0x7f0000000840)={0x2, 0x0, @initdev}, &(0x7f0000000880)=0x10, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'erspan0\x00', r3, 0x8, 0x7800, 0x5, 0x8, {{0x15, 0x4, 0x0, 0x6, 0x54, 0x65, 0x0, 0x6e, 0x2f, 0x0, @empty, @loopback, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x40, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast, @private=0xa010102]}, @noop, @rr={0x7, 0x7, 0x22, [@broadcast]}, @noop, @generic={0x86, 0x6, "92aa7713"}, @ra={0x94, 0x4}]}}}}}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048004) pipe(&(0x7f0000000a80)) 04:40:23 executing program 3: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x40800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x8, 0x40, 0x0, 0x9, {{0x12, 0x4, 0x0, 0x3, 0x48, 0x64, 0x0, 0x43, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x18, 0xce, 0x0, 0x0, [0x8, 0xc9, 0x8, 0x1ff, 0x10001]}, @lsrr={0x83, 0x1b, 0xd6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100, @loopback, @broadcast]}]}}}}}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000280)={0x3c, 0x2b, '\x00', [@pad1, @generic={0xff, 0x92, "a3e989f66a181dd95ff776a8035344d15494a7507de16ce4b61fc655cf82d0013683b0b88f67668886a2afa07ea59b6235adff200a5104eeddb73f7492e8de3d87c828f41d1c1707081fd7e81a33dae193f8845fc6bd82923c1400916bc2f0b3023dff36d3e5809764d974ef734ea21d080c1a2b69425c0b6d93cfc7457d2ab6eb3cf7d9e096cc21bfda0894cf6a5d014d07"}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xb6, "f9f828e2a84dccbe39f623b83e4d1857012cedac371849893c7522a78109018573eed4eb222965c96e31c1e64bdb2d0e57c72aae3996b85739082dcb5e2246ab98893ecd11cb81d89141434a472732806b2dc7ee35082d39bb62c0f7a5e126b16d261c66eefe32e2dcf4ee3508073b748e455b22fc3a5c581b810a03a328dc044d0698fb533f2e117a40ac28e6c05ab2f74f7eaec460ae8f753415224f4248b90358d30865080eed9acdc60e78a8d2d178f9ca3b5529"}]}, 0x160) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', r1, 0x2f, 0x2, 0x7f, 0x1, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x7, 0xa589}}) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x2f, 0x1, 0x7, 0x9e77, 0x10, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8, 0x1ff, 0x7b}}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x134, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xac2c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000780)={0x1, 0x1, 0x0, 0x877, 0x40}, 0xc) r5 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x4e24, 0x81, 0x4e24, 0x8, 0xd, 0x80, 0xe0, 0x88, r4, r5}, {0x189, 0xe56, 0xffff, 0x7, 0x8, 0x3, 0x1, 0x19c}, {0x5, 0x6, 0x0, 0xebc}, 0x8, 0x6e6bbc, 0x2, 0x0, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4d6, 0x33}, 0x2, @in=@local, 0x3504, 0x0, 0x1, 0x6, 0xdf, 0x100, 0x1}}, 0xe8) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000008c0)={0x3a, 0xe, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1e}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @local]}, 0x78) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x4000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000980)={'TPROXY\x00'}, &(0x7f00000009c0)=0x1e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'sit0\x00', r2, 0x4, 0x6, 0x1f, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x6, 0x7}}) io_setup(0x5, &(0x7f0000000ac0)=0x0) io_submit(r7, 0x0, &(0x7f0000000b00)) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20000001) [ 193.565878] cgroup: fork rejected by pids controller in /syz6 04:40:23 executing program 2: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x1, 0x8, 0x1800}, {0x3, 0x3e00, 0x1000}, {0x2, 0x1, 0x800}], 0x3, &(0x7f0000000180)={0x77359400}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) io_pgetevents(0x0, 0x1, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000000300)=0xfffffffe) r0 = semget(0x0, 0x4, 0x280) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x400, 0x800}, {0x2, 0x2, 0x1800}, {0x4, 0x4, 0x800}], 0x3, &(0x7f00000003c0)={r1, r2+60000000}) pselect6(0x40, &(0x7f0000000400)={0xfffffffffffffffd, 0x9, 0x2, 0x4, 0x4, 0x5, 0x5, 0x8}, &(0x7f0000000440)={0x0, 0x4, 0x20, 0x0, 0x6, 0x0, 0x5, 0x4}, &(0x7f0000000480)={0x2, 0x6, 0x20, 0x1, 0x3, 0xffffffffffff0000, 0xffffffffffffff01, 0x7fffffff}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x5]}, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1, 0x0, 0x0, 0xee00, 0xee00, 0x161}, 0x1, 0x1, 0xd3a, 0x2, 0x0, 0xffffffffffffffff, 0x1000}) 04:40:23 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x304, 0x2) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044804) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c5}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7, 0x10, 0x6, 0xe09, {{0x2a, 0x4, 0x3, 0x11, 0xa8, 0x67, 0x0, 0xdd, 0x0, 0x0, @private=0xa010100, @multicast1, {[@noop, @generic={0x86, 0x8, 'BkY5#^'}, @ssrr={0x89, 0x2b, 0xa3, [@loopback, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1, @broadcast, @multicast2, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x5b, 0x3, [{0x1, 0x6, "8f160a5f"}, {0x2, 0x11, "a7713553b8f47548baf49a38fbe705"}, {0x7, 0xd, "5d90c24020e470e80bd935"}, {0x0, 0x5, "739e43"}, {0x1, 0xd, "c617a7d005834f64931f43"}, {0x0, 0xf, "7c481d58ac3858b82cdc0da8eb"}, {0x0, 0x7, "2bdb52a85c"}, {0x7, 0x9, "b0e2f05f0e2b0b"}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', r2, 0x8, 0x7, 0x6, 0x5, {{0x20, 0x4, 0x1, 0x38, 0x80, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@ssrr={0x89, 0x7, 0x68, [@loopback]}, @cipso={0x86, 0x63, 0x2, [{0x2, 0xc, "eacf5f2875bd491539de"}, {0x5, 0xc, "3cb950579c517fead09d"}, {0x2, 0x2}, {0xc, 0x11, "f2968cb4f4063989f80f8e15a9e440"}, {0x1, 0xc, "5cd05016dbac44c46f96"}, {0x6, 0x12, "77794ea69c862ba07a07ff3f8cb4cb80"}, {0x1, 0x8, "1547a28ced9c"}, {0x6, 0x2}, {0x1, 0xa, "383ebdf42fd49d09"}]}]}}}}}) r3 = socket(0x25, 0x3, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000580)=0x9, &(0x7f00000005c0)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000600), 0x2) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000640), &(0x7f0000000680)=0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) io_pgetevents(0x0, 0xdd1, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000780)={r5, r6+60000000}, 0x0) io_pgetevents(0x0, 0x7fffffff, 0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x362]}, 0x8}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000980)={0x2, {{0xa, 0x4e21, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x88) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x2}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040810}, 0x884) openat$sr(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0) 04:40:23 executing program 6: r0 = gettid() waitid(0x1, r0, 0x0, 0x4, &(0x7f0000000000)) r1 = fork() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1, &(0x7f00000000c0)=""/119) r2 = fork() waitid(0x0, r2, &(0x7f0000000140), 0x2, 0x0) wait4(r0, 0x0, 0x1, &(0x7f00000001c0)) wait4(r2, &(0x7f0000000280), 0x4, &(0x7f00000002c0)) process_vm_readv(r1, &(0x7f0000000380), 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/231, 0xe7}, {&(0x7f0000000600)=""/184, 0xb8}, {&(0x7f00000006c0)=""/89, 0x59}], 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f00000008c0)=0xe8) r4 = getgid() r5 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000900)={{0x3, r3, r4, 0xee01, 0x0, 0x0, 0xa2}, 0xfffffff8, 0x4, 0x4, 0x7ff, r0, r5, 0x4}) r6 = fork() sched_setparam(r6, &(0x7f0000000980)=0x1) getrusage(0x1, &(0x7f00000009c0)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x9, &(0x7f0000000c00)=""/83) 04:40:23 executing program 5: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005041}, 0x400c054) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044011) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x55}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x14080004}, 0x5) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x58eee835f54f5192}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1a080}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r2, 0x810, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004490) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) 04:40:23 executing program 2: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x1, 0x8, 0x1800}, {0x3, 0x3e00, 0x1000}, {0x2, 0x1, 0x800}], 0x3, &(0x7f0000000180)={0x77359400}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) io_pgetevents(0x0, 0x1, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000000300)=0xfffffffe) r0 = semget(0x0, 0x4, 0x280) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x400, 0x800}, {0x2, 0x2, 0x1800}, {0x4, 0x4, 0x800}], 0x3, &(0x7f00000003c0)={r1, r2+60000000}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1, 0x0, 0x0, 0xee00, 0xee00, 0x161}, 0x1, 0x1, 0xd3a, 0x2, 0x0, 0xffffffffffffffff, 0x1000}) 04:40:23 executing program 4: sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48d4}, 0x8040) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x25}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20000040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, 0x0, 0x4000000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x262080, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x67}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40014) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x5, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008050) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, &(0x7f0000000680)='ceph\x00', &(0x7f00000006c0)='.\x00') prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) keyctl$read(0xb, 0x0, &(0x7f0000000cc0)=""/107, 0x6b) 04:40:23 executing program 2: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x1, 0x8, 0x1800}, {0x3, 0x3e00, 0x1000}, {0x2, 0x1, 0x800}], 0x3, &(0x7f0000000180)={0x77359400}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) io_pgetevents(0x0, 0x1, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000000300)=0xfffffffe) semget(0x0, 0x4, 0x280) clock_gettime(0x0, &(0x7f0000000380)) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1, 0x0, 0x0, 0xee00, 0xee00, 0x161}, 0x1, 0x1, 0xd3a, 0x2, 0x0, 0xffffffffffffffff, 0x1000}) 04:40:23 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x304, 0x2) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044804) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c5}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7, 0x10, 0x6, 0xe09, {{0x2a, 0x4, 0x3, 0x11, 0xa8, 0x67, 0x0, 0xdd, 0x0, 0x0, @private=0xa010100, @multicast1, {[@noop, @generic={0x86, 0x8, 'BkY5#^'}, @ssrr={0x89, 0x2b, 0xa3, [@loopback, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1, @broadcast, @multicast2, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x5b, 0x3, [{0x1, 0x6, "8f160a5f"}, {0x2, 0x11, "a7713553b8f47548baf49a38fbe705"}, {0x7, 0xd, "5d90c24020e470e80bd935"}, {0x0, 0x5, "739e43"}, {0x1, 0xd, "c617a7d005834f64931f43"}, {0x0, 0xf, "7c481d58ac3858b82cdc0da8eb"}, {0x0, 0x7, "2bdb52a85c"}, {0x7, 0x9, "b0e2f05f0e2b0b"}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', r2, 0x8, 0x7, 0x6, 0x5, {{0x20, 0x4, 0x1, 0x38, 0x80, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@ssrr={0x89, 0x7, 0x68, [@loopback]}, @cipso={0x86, 0x63, 0x2, [{0x2, 0xc, "eacf5f2875bd491539de"}, {0x5, 0xc, "3cb950579c517fead09d"}, {0x2, 0x2}, {0xc, 0x11, "f2968cb4f4063989f80f8e15a9e440"}, {0x1, 0xc, "5cd05016dbac44c46f96"}, {0x6, 0x12, "77794ea69c862ba07a07ff3f8cb4cb80"}, {0x1, 0x8, "1547a28ced9c"}, {0x6, 0x2}, {0x1, 0xa, "383ebdf42fd49d09"}]}]}}}}}) r3 = socket(0x25, 0x3, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000580)=0x9, &(0x7f00000005c0)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000600), 0x2) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000640), &(0x7f0000000680)=0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) io_pgetevents(0x0, 0xdd1, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000780)={r5, r6+60000000}, 0x0) io_pgetevents(0x0, 0x7fffffff, 0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x362]}, 0x8}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000980)={0x2, {{0xa, 0x4e21, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x88) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x2}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040810}, 0x884) openat$sr(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0) 04:40:23 executing program 3: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x40800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x8, 0x40, 0x0, 0x9, {{0x12, 0x4, 0x0, 0x3, 0x48, 0x64, 0x0, 0x43, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x18, 0xce, 0x0, 0x0, [0x8, 0xc9, 0x8, 0x1ff, 0x10001]}, @lsrr={0x83, 0x1b, 0xd6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100, @loopback, @broadcast]}]}}}}}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000280)={0x3c, 0x2b, '\x00', [@pad1, @generic={0xff, 0x92, "a3e989f66a181dd95ff776a8035344d15494a7507de16ce4b61fc655cf82d0013683b0b88f67668886a2afa07ea59b6235adff200a5104eeddb73f7492e8de3d87c828f41d1c1707081fd7e81a33dae193f8845fc6bd82923c1400916bc2f0b3023dff36d3e5809764d974ef734ea21d080c1a2b69425c0b6d93cfc7457d2ab6eb3cf7d9e096cc21bfda0894cf6a5d014d07"}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xb6, "f9f828e2a84dccbe39f623b83e4d1857012cedac371849893c7522a78109018573eed4eb222965c96e31c1e64bdb2d0e57c72aae3996b85739082dcb5e2246ab98893ecd11cb81d89141434a472732806b2dc7ee35082d39bb62c0f7a5e126b16d261c66eefe32e2dcf4ee3508073b748e455b22fc3a5c581b810a03a328dc044d0698fb533f2e117a40ac28e6c05ab2f74f7eaec460ae8f753415224f4248b90358d30865080eed9acdc60e78a8d2d178f9ca3b5529"}]}, 0x160) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', r1, 0x2f, 0x2, 0x7f, 0x1, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x7, 0xa589}}) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x2f, 0x1, 0x7, 0x9e77, 0x10, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8, 0x1ff, 0x7b}}) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x134, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xac2c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x10000000}, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000780)={0x1, 0x1, 0x0, 0x877, 0x40}, 0xc) r5 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x4e24, 0x81, 0x4e24, 0x8, 0xd, 0x80, 0xe0, 0x88, r4, r5}, {0x189, 0xe56, 0xffff, 0x7, 0x8, 0x3, 0x1, 0x19c}, {0x5, 0x6, 0x0, 0xebc}, 0x8, 0x6e6bbc, 0x2, 0x0, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4d6, 0x33}, 0x2, @in=@local, 0x3504, 0x0, 0x1, 0x6, 0xdf, 0x100, 0x1}}, 0xe8) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000008c0)={0x3a, 0xe, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1e}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @local]}, 0x78) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x4000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000980)={'TPROXY\x00'}, &(0x7f00000009c0)=0x1e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'sit0\x00', r2, 0x4, 0x6, 0x1f, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x6, 0x7}}) io_setup(0x5, &(0x7f0000000ac0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20000001) 04:40:23 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:cert_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004004) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r4) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r8, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a80), 0xffffffffffffffff) 04:40:23 executing program 5: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005041}, 0x400c054) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-{\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044011) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x55}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x14080004}, 0x5) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x58eee835f54f5192}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1a080}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r2, 0x810, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004490) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) 04:40:23 executing program 0: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c044) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5f15}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xde4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfe2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = accept4$inet(r0, &(0x7f0000000380)={0x2, 0x0, @multicast2}, &(0x7f00000003c0)=0x10, 0x800) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xbc, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd4, 0x32}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1f, 0xfff, 0x8, 0x1000, 0x8, 0x6, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x18, 0x2, 0x60, 0x2, 0x30, 0x48, 0x6]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x1b, 0x5b, 0x30, 0x5, 0x1, 0xc, 0x3, 0x6, 0x5a, 0x6, 0x3, 0xb, 0x60, 0x6c, 0x16, 0x22, 0x4, 0x6c, 0x2, 0xc, 0x9, 0xc, 0x24, 0x4, 0x30]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x5}, {0x0, 0x8}, {0x4}, {0x6, 0x6}, {0x7}, {0x3, 0x6}, {0x0, 0x8}, {0x3, 0x2}, {0x7, 0x6}, {0x0, 0xa}, {0x3, 0x9}, {0x3, 0xa}, {0x3, 0x2}, {0x2, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x5, 0x5}, {0x2}, {0x4, 0x3}, {0x3, 0x5}, {0x5, 0x9}]}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0xcd5c0c01f618876f) syz_open_dev$hidraw(&(0x7f0000000640), 0x1, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@private0}}, &(0x7f0000000780)=0xe8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f00000007c0)={'ipvs\x00'}, &(0x7f0000000800)=0x1e) accept4$inet(r0, &(0x7f0000000840)={0x2, 0x0, @initdev}, &(0x7f0000000880)=0x10, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'erspan0\x00', r3, 0x8, 0x7800, 0x5, 0x8, {{0x15, 0x4, 0x0, 0x6, 0x54, 0x65, 0x0, 0x6e, 0x2f, 0x0, @empty, @loopback, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x40, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast, @private=0xa010102]}, @noop, @rr={0x7, 0x7, 0x22, [@broadcast]}, @noop, @generic={0x86, 0x6, "92aa7713"}, @ra={0x94, 0x4}]}}}}}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048004) pipe(&(0x7f0000000a80)) 04:40:23 executing program 2: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) semtimedop(0xffffffffffffffff, &(0x7f0000000140)=[{0x1, 0x8, 0x1800}, {0x3, 0x3e00, 0x1000}, {0x2, 0x1, 0x800}], 0x3, &(0x7f0000000180)={0x77359400}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) io_pgetevents(0x0, 0x1, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000000300)=0xfffffffe) semget(0x0, 0x4, 0x280) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a00)={{0x1, 0x0, 0x0, 0xee00, 0xee00, 0x161}, 0x1, 0x1, 0xd3a, 0x2, 0x0, 0xffffffffffffffff, 0x1000}) 04:40:23 executing program 6: r0 = gettid() waitid(0x1, r0, 0x0, 0x4, &(0x7f0000000000)) r1 = fork() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1, &(0x7f00000000c0)=""/119) r2 = fork() waitid(0x0, r2, &(0x7f0000000140), 0x2, 0x0) wait4(r0, 0x0, 0x1, &(0x7f00000001c0)) wait4(r2, &(0x7f0000000280), 0x4, &(0x7f00000002c0)) process_vm_readv(r1, &(0x7f0000000380), 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/231, 0xe7}, {&(0x7f0000000600)=""/184, 0xb8}, {&(0x7f00000006c0)=""/89, 0x59}], 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f00000008c0)=0xe8) r4 = getgid() r5 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000900)={{0x3, r3, r4, 0xee01, 0x0, 0x0, 0xa2}, 0xfffffff8, 0x4, 0x4, 0x7ff, r0, r5, 0x4}) r6 = fork() sched_setparam(r6, &(0x7f0000000980)=0x1) getrusage(0x1, &(0x7f00000009c0)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x9, &(0x7f0000000c00)=""/83) 04:40:23 executing program 1: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x304, 0x2) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044804) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c5}, 0x20040084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x7, 0x10, 0x6, 0xe09, {{0x2a, 0x4, 0x3, 0x11, 0xa8, 0x67, 0x0, 0xdd, 0x0, 0x0, @private=0xa010100, @multicast1, {[@noop, @generic={0x86, 0x8, 'BkY5#^'}, @ssrr={0x89, 0x2b, 0xa3, [@loopback, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1, @broadcast, @multicast2, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x5b, 0x3, [{0x1, 0x6, "8f160a5f"}, {0x2, 0x11, "a7713553b8f47548baf49a38fbe705"}, {0x7, 0xd, "5d90c24020e470e80bd935"}, {0x0, 0x5, "739e43"}, {0x1, 0xd, "c617a7d005834f64931f43"}, {0x0, 0xf, "7c481d58ac3858b82cdc0da8eb"}, {0x0, 0x7, "2bdb52a85c"}, {0x7, 0x9, "b0e2f05f0e2b0b"}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', r2, 0x8, 0x7, 0x6, 0x5, {{0x20, 0x4, 0x1, 0x38, 0x80, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@ssrr={0x89, 0x7, 0x68, [@loopback]}, @cipso={0x86, 0x63, 0x2, [{0x2, 0xc, "eacf5f2875bd491539de"}, {0x5, 0xc, "3cb950579c517fead09d"}, {0x2, 0x2}, {0xc, 0x11, "f2968cb4f4063989f80f8e15a9e440"}, {0x1, 0xc, "5cd05016dbac44c46f96"}, {0x6, 0x12, "77794ea69c862ba07a07ff3f8cb4cb80"}, {0x1, 0x8, "1547a28ced9c"}, {0x6, 0x2}, {0x1, 0xa, "383ebdf42fd49d09"}]}]}}}}}) r3 = socket(0x25, 0x3, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000580)=0x9, &(0x7f00000005c0)=0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000600), 0x2) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000640), &(0x7f0000000680)=0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) io_pgetevents(0x0, 0xdd1, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000780)={r5, r6+60000000}, 0x0) clock_getres(0x2, &(0x7f0000000940)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000980)={0x2, {{0xa, 0x4e21, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x88) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x2}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040810}, 0x884) openat$sr(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0) VM DIAGNOSIS: 04:40:18 Registers: info registers vcpu 0 RAX=fffffffffffd12d0 RBX=000055cf36f58e00 RCX=000055cf36dfe108 RDX=0000000000000fa1 RSI=000055cf36e1ea50 RDI=0000000000000000 RBP=00007f7950048370 RSP=00007f7957ffe9f0 R8 =00007f7950048578 R9 =0000000000000000 R10=0000000000000009 R11=0000000000000286 R12=0000000000000001 R13=000055cf36f61830 R14=00007f7950048370 R15=0000000000000000 RIP=000055cf36dcf227 RFL=00000297 [--S-APC] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7957fff700 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc4d791e830 CR3=000000001aafe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 20205d3138353236 372e38383120205b YMM01=0000000000000000 0000000000000000 5f6e6970735f7761 725f6f64203f2020 YMM02=0000000000000000 0000000000000000 656d69745f656c75 64656863735f6f69 YMM03=0000000000000000 0000000000000000 205b203a6c656e72 656b2072656c6c61 YMM04=0000000000000000 0000000000000000 6620202020202032 3a64697070202020 YMM05=0000000000000000 0000000000000000 61747320493a6574 6174732020202020 YMM06=0000000000000000 0000000000000000 205d303036303637 2e38383120205b20 YMM07=0000000000000000 0000000000000000 732038313a30343a 3430203220207463 YMM08=0000000000000000 0000000000000000 7475636578652d7a 7973223d6d6d6f63 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff823bb06c RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f800 R8 =0000000000000004 R9 =0000000000000010 R10=0000000000000005 R11=0000000000000001 R12=0000000000002710 R13=0000000000000060 R14=fffffbfff0ecb584 R15=dffffc0000000000 RIP=ffffffff823bb0c1 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b00601f648 CR3=0000000037cea000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00000000ff000000 0000000000000000 YMM01=0000000000000000 0000000000000000 636f6c63006b6165 6c6d656d6b2f6775 YMM02=0000000000000000 0000000000000000 0000000000ffffff ff00000000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000