0a50f4d7fbacfeebeee8e7c43cf4240e0c2ea9fe56bc00821aa8ce7f1635007b056e2ba071e82bb5dd8ed2625641473eea432e67fd0f711e01995ffeb7d78522ab828e4918c5d565671b14383f7c89618cbce26fab5551a55c4f1d9df7405eb5797c3ecd9c26f3c0f09bc6515c7706e410ef07815bcae9544ad6f12802"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x168, 0x13, 0x0, 0x0, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x4, 0x3, 0x100, 0x1}}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x100, 0x200, 0x20000000, 0x6, 0x3}}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x3, 0x1, 0x6}, 0x1}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x5321}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}]}, {0x7b, 0x6, "fadb4562e3a43cc3cfacb191425a2cb9e2f3a07ff58db0108c852ba0eb67b9d12dc6fdf0b91451f5458f85c9e9d514c449c045d901360bbed48161a4e4d76aad2c4393effa6ef2aad5d79caad7aded519c8a7b2d89bd65ff15fcb3b5041816061017a605bf05eb46881552f4d20ab3d31c91b9f0814d5b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x104, 0x14, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, '/dev/vcs#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xff, 0x8, 0x838b, 0xffffff4d}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7, 0xffffffffffffffff, 0x3e9, 0x2}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xe, 0x3, '/dev/vcs#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1a, 0x1, 0x0, 0x400, 0x6e}}]}, {0x66, 0x6, "3e0aac60f2165bc4690bb0491adf4e646481ea97bb631677a89a64e068f01b5deaa86d9c0f65f75194ac22c12a34c93ec5fe1275282accaf7048b2015cdd4fbe1c4a154ac55846f5abc9c4ad6021488893921256f09ca20b8badc9c8102b902fb1d5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x190, 0x13, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x96c, 0x6, 0x20000000, 0xfffffff7, 0x5}}, @TCA_DEF_DATA={0xe, 0x3, '/dev/vcs#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xdd, 0x3, 0x7, 0xff, 0x7fff}}, @TCA_DEF_DATA={0xe, 0x3, '%//*.--^U\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x41a3, 0x4, 0x3, 0x3, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x80, 0x7, 0x8, 0x100}}]}, {0xd9, 0x6, "7d4a4c9927ba66c6e4c8c61a252de6d4d82b037f2db9878828f2a63d0b1ed919033b2913889f06002928372c993181e159562da28f11ed9979a54b8b572b297cbf669737314ca2a4a10f3d84a55583c6f407180321f815f6c813f7bf28694c724bc94f605611e6cce541654e0a9597136f488c2a50f81609db318a4935354f9920f04a200b7ceb7cdf72610386ca113daa9298c9aa213643fc438d1298aa15597c22b08f11ed48aa3ea180c0c4ccd8332b9d6aba91319edd5136364d23fd203c590b4bf17bfa9413eb1ff80558ac9e4f8ad80de165"}, {0xc, 0x7, {0xf4e1f61be18a56ab}}, {0xc, 0x8, {0x745c20fe94e683bf, 0xbd5b51dc32f073a4}}}}, @m_ipt={0x258, 0x6, 0x0, 0x0, {{0x8}, {0x150, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x125, 0x6, {0x3f, 'mangle\x00', 0x71, 0x9, "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"}}]}, {0xe3, 0x6, "3c74c3576fd45dd60dafbbd03687c54f85a8e5f53a62884d44361a2e85a1cd36945912bb1e6dac4c45379ada05bd7d898bd6424e228bb10807e8c7570c17236e51969ca4788b9f57dc3d071e8d6413205b371a2b7d1e6cd60cfe88907fe7d56f784e92b2e8da45a28ed124f2e401bd47d6b1109e885f97fc1a7d70c2ad9bb38ea5d21a28f50b87686a5b83b652ac5995ea889642d8359f6587dddbc2db1b01ecdd8596d0bcb3be2ba51e7d0f4615f6aba3cec025b292d8e59952a57b7e56fb5d5feba0efce963883217017aaa1f76d15fdd59ce2ea4c79b6011de4223bc52c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x14c, 0x17, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x8001, 0x0, 0xa0, 0x3}, 0x21}}]}, {0x101, 0x6, "dd123402fcc6f2206188cf5a47c20d770c233437709fb7b7bc0a4de8380ed86d1ff68e389e2805dabfa873acab8a82343a5e7c0b014b139879b3248875776b7a23efc12e63ad23c7e8fce087c7da6872ea992e0910c36b5dd75262513c453e5327857bdfc68cc27f8415bcef3bcc530029ba7030417283282cfb8a804cbb422d6fa09177619140e66ebc087bfe89df4f79bfd7070f32da9e4673f4a3331746881d9c38e4b3afa8f511fda5cd9882814069e2e517018d4ba2576f152b934e6f0aff1c889b9c14435636aac0ee302972fef9b87761939ab43bb86b6720307147ba3cb59f320669495cb9151a381e7fd235cbebeb9190ba376909a4608a8e"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x2bdc, 0x1, [@m_police={0x1a44, 0x1e, 0x0, 0x0, {{0xb}, {0x19f4, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8c, 0x6, 0x3, 0x184000, 0x3, {0x3, 0x0, 0x2, 0x4a, 0xffff, 0x4c}, {0x20, 0x0, 0x9, 0x8001, 0x9, 0x4}, 0x1, 0x7fff, 0xfffffffe}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x0, 0x8, 0x0, {0xde, 0x1, 0x0, 0x1, 0xfff8, 0x867}, {0x81, 0x2, 0x3f, 0x0, 0x7ff, 0x7}, 0x7, 0x80000001, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x20}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x400, 0x80, 0x5, 0x0, 0x8, 0xff, 0x7, 0x1, 0x10000, 0x1, 0x10000, 0xfffffff7, 0x0, 0x200, 0x0, 0x4fa8, 0x9, 0x3ba, 0x3, 0x3, 0x80, 0x9, 0xd50, 0x4, 0x7, 0x6, 0x81, 0x7, 0x4, 0x1f, 0x4, 0x8, 0xe9, 0x9, 0x4, 0x1, 0x1f, 0x1000, 0xfffffff8, 0x1, 0xd0, 0x101, 0xc57, 0x1000, 0xffffffff, 0x80000, 0xfffffffe, 0x0, 0x6, 0x1d6, 0x80000000, 0xffffffff, 0x4, 0x8, 0x6, 0x7, 0x7a3d, 0x0, 0x5, 0x1, 0x0, 0x4, 0x1, 0x7, 0x7fff, 0x5, 0x6, 0x4, 0x1, 0x4, 0x7, 0x10001, 0x7fff, 0x8, 0x7ff, 0xfff0000, 0x200, 0x3, 0x4, 0x400, 0x5, 0x37, 0x725, 0x1ff, 0x6f0e, 0x4, 0xfffffffe, 0x9, 0x4, 0x3ff, 0x7fff, 0x9, 0x7, 0xb0, 0x6, 0x80000000, 0x30f9d8ba, 0x1, 0x7ff, 0x7ff, 0xffffff0d, 0x3ff, 0x8001, 0x2, 0x6, 0x8, 0x20, 0x80000000, 0x3, 0x9a, 0x7fffffff, 0x1f, 0x8, 0x0, 0xfffff000, 0x100, 0x1d2139ab, 0x1ff, 0x10001, 0xfffffe01, 0x80000001, 0xe15, 0x5, 0xc4fb, 0xd463, 0x5, 0x40000000, 0x8, 0xfffffff7, 0x2, 0x7fa7, 0x101, 0xffffffff, 0x4, 0x1, 0x0, 0x6, 0x6, 0x8, 0x6, 0x4, 0x3, 0x3, 0x0, 0xa6, 0x3, 0x5, 0x4, 0x10001, 0x311, 0x1, 0x100, 0x700000, 0x1, 0x1, 0x10001, 0x631, 0x4, 0x80000001, 0x3f, 0x4, 0x80, 0x4, 0x800, 0x7ff, 0x823, 0x5, 0x12, 0x6, 0x7a52138a, 0x8, 0x9, 0x7f, 0x0, 0x7, 0x6, 0x6, 0x8001, 0x870f, 0x3, 0x40, 0x4, 0xb1, 0x9, 0x6, 0x6, 0x8000, 0x8001, 0x8001, 0x7, 0x1, 0x1f, 0x9, 0x9, 0x1, 0x44090187, 0x2, 0x3, 0x1, 0xfffffff7, 0x4, 0x80000000, 0x1, 0x5, 0x9, 0x3f, 0x5, 0xaf5, 0xa000, 0x0, 0x8, 0x2, 0xf97, 0x4, 0x4, 0xffffffff, 0x8001, 0x3f, 0x7ff, 0xdf0, 0xffffff8d, 0x54ee, 0x9ffcb8a, 0x401, 0x6, 0x4, 0x2, 0x1f, 0x8000, 0xff, 0x7, 0x9, 0x800, 0x76, 0x1, 0x9, 0x54f2, 0x727, 0x1, 0x0, 0x5, 0xfffffff7, 0x6f9, 0x5, 0x1000, 0x3, 0xbd4, 0x1, 0x81, 0x200, 0x16, 0x6, 0xfffffffc, 0x10000]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x20, 0x9, 0x0, 0x1ff, 0x5, 0x10001, 0xda, 0x1000, 0x4, 0x3f, 0x8, 0x0, 0x800000, 0x1, 0x401, 0x9, 0x8, 0xfffffffe, 0x6, 0x0, 0x3, 0x20, 0x9, 0x352f, 0x3ff, 0x3f6189c7, 0x6, 0x2, 0x1, 0x1, 0x88c, 0xffff, 0x7e, 0x20, 0x32, 0x8001, 0xb9d, 0x4, 0x4, 0x9, 0x1, 0x4, 0x401, 0x1, 0x0, 0x1000, 0xf49c, 0x400, 0xe8d, 0x6832, 0x7, 0x6, 0x0, 0x4, 0x1, 0x400, 0xfff, 0x3, 0x1, 0x8001, 0x5, 0x7f, 0x7, 0xdf, 0x40, 0x6, 0x76d, 0x40, 0x1, 0x2, 0xcc, 0x7fffffff, 0x3e1, 0x1, 0x7, 0x59, 0x1, 0xff, 0x2, 0x3, 0x3ff, 0x3, 0x8001, 0x9, 0x3, 0x8, 0x597, 0x9b400000, 0x2, 0x8, 0x8, 0xff, 0x8, 0x3, 0xffff, 0x6, 0x8, 0x401, 0x9, 0x1000, 0x9, 0x7fff, 0x8, 0xff, 0x0, 0xfffffffc, 0x8, 0x4be, 0x1, 0x1, 0x3ff, 0x6dbeda7d, 0x80000001, 0xf04, 0x4, 0x4, 0x0, 0x6, 0x9, 0x4, 0x401, 0x93, 0x0, 0x400, 0x8, 0x7, 0x2, 0x92, 0x6, 0x2, 0x400, 0x2, 0x8, 0xffff0001, 0xd498, 0x4d2be2d, 0x4, 0x4, 0x3, 0x2, 0x40, 0x80000001, 0x5, 0x6, 0x8, 0x358, 0x8, 0x100, 0x8, 0x2, 0x7ff, 0x1, 0x0, 0x3, 0x8, 0xfff, 0x20, 0xff, 0x1ff, 0xfffffff9, 0xc90f, 0x8000, 0x18000, 0xf280, 0x8001, 0xfff, 0x8, 0x1, 0x1000, 0x6, 0x80000001, 0x3, 0xfff, 0x505, 0x9, 0x9, 0x886, 0x802, 0x3f, 0x10000, 0x1, 0x8, 0x8, 0x8, 0x4, 0x1f, 0x7, 0x3, 0x43e, 0xffffffff, 0x1, 0x7f, 0x40, 0x3c75a1f4, 0xffffffff, 0x80, 0x2, 0x7fffffff, 0x4, 0x80, 0x4, 0x9, 0x101, 0x401, 0x101, 0x80, 0x1ff, 0x8, 0x7, 0x6, 0x9, 0x200, 0xfffffff9, 0x13d, 0x9, 0x0, 0xba3, 0xfffffff8, 0x7, 0x4, 0x4, 0x4, 0x2, 0x3f, 0xec50, 0x1ff, 0x800, 0x6, 0x4, 0x7fffffff, 0x7, 0x3, 0x8, 0x7f, 0x401, 0x4, 0x9, 0x5, 0x5, 0x400, 0x2, 0x5, 0x4, 0x7fffffff, 0x2, 0x1, 0x10001, 0x100, 0xfffffff7, 0xfb4c, 0x0, 0xfffffffd, 0xfffffff8, 0x1, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x3, 0x4, 0x35, 0x6, 0xa6, 0x1, 0x10000, 0x8, 0x4, 0x4ab, 0x1000, 0x1, 0x9, 0xfffff772, 0x1, 0x4, 0x200, 0x4, 0x27780, 0xfffffffe, 0x6, 0x3f, 0xf93, 0x3, 0x1ff, 0x8, 0x8, 0x800, 0x1ff, 0x1, 0x7ff, 0x3f, 0x7fff, 0x3, 0x8, 0x3, 0x746, 0x3, 0x8000, 0x4, 0xf8, 0x4, 0x20, 0x2, 0xfffffffa, 0x9b3, 0x5, 0xffff, 0x2, 0x1, 0xbc, 0x5, 0x0, 0xd2, 0x3, 0x1f, 0xffffff80, 0x388b, 0x8, 0x6, 0x3, 0x3, 0x21c6, 0x2, 0x0, 0xa2d, 0x7, 0x6, 0x8, 0x5, 0x9, 0xff, 0x7a, 0x3, 0xd3c8, 0x2800, 0x8, 0x4, 0x4, 0x401, 0x1, 0x800, 0x6, 0x8001, 0x4, 0xffff, 0x6cc8, 0x9, 0xfff, 0x0, 0x685d, 0x80, 0x0, 0x9, 0x8, 0x3, 0x99, 0xffffffff, 0x3, 0x0, 0x4e, 0x4, 0x1000, 0x401, 0x7, 0xffff, 0x5, 0xd0, 0x0, 0x4b9, 0x9, 0x9, 0x3, 0x1, 0x80, 0x4, 0x2, 0x2, 0x81, 0xaf63, 0x6, 0x101, 0x200, 0x9, 0x7, 0x7, 0x3, 0xf43f, 0x40, 0x80000001, 0x4, 0x7f, 0x6, 0x4, 0x0, 0x6, 0x0, 0x490, 0x3, 0x101, 0xfffffff7, 0x0, 0x713fbad2, 0x81, 0x7fff, 0x8, 0x0, 0x0, 0x3d, 0x7, 0x0, 0x8576f383, 0x4, 0x5, 0x100, 0x32a9, 0xee0, 0x800, 0x4, 0x2, 0x80, 0x1, 0x3f, 0x81, 0x7f, 0x80000001, 0x9, 0x5, 0x800, 0x5, 0x0, 0x76, 0x2, 0xc8a3, 0xffffffff, 0x8, 0x7, 0x2aa, 0x8000, 0x3f, 0xcf58, 0xdd, 0x2, 0xfffffffd, 0x1, 0x6, 0x7, 0x4, 0xebf0, 0xe0d, 0x8001, 0x2, 0x8, 0x5, 0x10000, 0x2, 0x5, 0x8, 0xc6b, 0x80, 0x8, 0xad0, 0x8, 0xec2, 0xf0, 0x2, 0x8, 0x7, 0x400, 0xb5e, 0x7ff, 0x9, 0x8, 0x0, 0x200, 0xd540, 0x1, 0xfff, 0x1, 0xef4, 0x81, 0xc76d, 0x8, 0x10001, 0x693, 0x0, 0x7, 0x3ff, 0x10000, 0x1e8, 0x80, 0x2, 0x101, 0x7, 0x7, 0x1, 0xffffffe0, 0x8001, 0x1, 0x0, 0x4c, 0xffffffff, 0x5, 0x809f, 0x401, 0x6b, 0x6, 0x75, 0x7, 0x80000000, 0x5, 0x8a, 0x1, 0x0, 0x6]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x366, 0x3ff, 0x4, {0x2, 0x0, 0x5, 0x14, 0x9, 0x7f}, {0x8e, 0x0, 0x1, 0xffff, 0x1, 0xc29}, 0x5, 0x0, 0x200}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xf1b8c84e09880c9d, 0x9ecd, 0x9, 0x0, {0x20, 0x2, 0x40, 0x1, 0x41, 0xffff}, {0x5, 0x2, 0x3ff, 0x9, 0xd2}, 0x5, 0xa7d2, 0xd4b}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x79b0}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x2, 0x1ff, 0x51, 0x6, {0xe7, 0x2, 0x8, 0x5, 0x0, 0x7}, {0x1f, 0x0, 0x2, 0x7, 0x2, 0x563f}, 0x2, 0x8000, 0x80000000}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x13a3e03c}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}], [@TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x1, 0x40, 0x80000001, 0x4, 0x1, 0xfffffbdc, 0x5244, 0x8, 0x27, 0x9, 0x3, 0x5, 0x1, 0x4ed, 0x1ff, 0x4, 0xffffffff, 0x80, 0x5, 0xffffffff, 0x10000, 0x7, 0x8000, 0x10000, 0x7, 0x2c7b, 0x80, 0x0, 0xfc6, 0x9, 0x8, 0x4, 0x8, 0x8001, 0xfb, 0x3c6d, 0xe781, 0xffffffc0, 0x9, 0x6, 0x0, 0x3ff, 0x80000001, 0x401, 0x3ff, 0x8, 0x1, 0x3c7, 0x4, 0x5, 0x40, 0x1ff, 0x2, 0x6, 0x0, 0xcbf, 0x7, 0x254, 0x7ff, 0x400, 0x100, 0x20, 0x20, 0x3, 0x5, 0x80, 0x9, 0x6, 0x5, 0x7f, 0x5c7c8a96, 0x400, 0x1c00000, 0x3ff, 0xfffffffb, 0x2, 0xb7, 0x0, 0x8001, 0x9, 0x2, 0xffff, 0x8, 0x7f, 0xaf29, 0x5, 0xcd69, 0x1000, 0x80000000, 0x6, 0x8, 0x7, 0x79d7, 0x80000000, 0x7, 0x7ff, 0x80000001, 0x1, 0x2, 0xf23, 0x0, 0x2, 0x9, 0x0, 0x48, 0x1, 0xfffffff9, 0x3012, 0x3ff, 0x10000, 0x7, 0x4, 0x8, 0x1000, 0x0, 0x200, 0x8, 0xaed7, 0x59a, 0x6, 0x9, 0x0, 0x5, 0x6, 0x0, 0x0, 0x10001, 0x4, 0x6, 0x1, 0xff, 0x35d7a34c, 0x8, 0xc1aa, 0x0, 0x7, 0x6, 0x1, 0x3, 0x2, 0x7, 0x3, 0x3, 0x1, 0x40, 0x8000, 0x2, 0x0, 0x8, 0x9, 0x9, 0x9, 0x0, 0x4, 0xff, 0x3, 0x6, 0x5, 0x6, 0x4, 0x0, 0x7bd9, 0x6, 0x80000000, 0xfffffff7, 0x2, 0x2, 0x20, 0x7fffffff, 0x3, 0x6, 0xffffc999, 0x5, 0xfffffffa, 0x7, 0x4, 0xc0, 0xdfdb, 0x5, 0x5d5d, 0x0, 0x1, 0x5, 0x1, 0x8c0, 0xa649, 0x4da, 0xfffff3e6, 0x8e9, 0x1ff, 0xa2f4, 0x4, 0x3, 0x8000, 0x3, 0x200, 0x200, 0x9, 0x9, 0x0, 0x18000000, 0xd5, 0x7c, 0x9, 0x9, 0x101, 0xe834, 0x100, 0x4, 0xfffffffd, 0xfff, 0xfffff801, 0x2, 0x1f, 0x4, 0x541b, 0x8, 0x6, 0x2, 0x4, 0x40, 0x10001, 0x3, 0x5, 0xff, 0x1, 0xffff, 0x5, 0x8, 0x77, 0x1, 0x1ff, 0x10000, 0x7, 0x10000, 0xd418, 0x17fc7d33, 0x3, 0x1, 0x4, 0x6, 0x9eb, 0x0, 0x3, 0x0, 0x7, 0x3, 0x1f, 0xffffffff, 0x779, 0x2, 0xff, 0x2, 0x7fffffff, 0x8000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x80000000, 0x20, 0x91, 0x7ff, 0xffff, 0x5, 0x5, 0x7fff, 0xffff, 0x3, 0xee0f, 0x9, 0x0, 0x5, 0x7, 0x3, 0x7fff, 0x1, 0x2, 0x800, 0x81, 0x8, 0x6, 0x6, 0xfffffc00, 0x1, 0x1, 0xdf, 0x81, 0x3cf33f9, 0x1, 0x81, 0x3f, 0x8, 0x2, 0x80, 0x6, 0x1, 0x5, 0x7, 0xf051, 0xfffffff8, 0x0, 0x7, 0x7, 0xde, 0x8, 0x9, 0x4, 0x3, 0x100, 0xffff, 0xed9, 0xfffffff7, 0x9412, 0x6, 0x10000, 0x4, 0x8, 0x5, 0x9, 0x5b6a, 0xbf13, 0x3, 0x4, 0x1, 0x4, 0x1, 0x0, 0x3, 0x0, 0x4, 0x81, 0x1, 0x5, 0x5, 0xfffeffff, 0x7, 0x0, 0xffffff4d, 0x6, 0x9, 0x4, 0x6, 0x13, 0x1, 0x1, 0x3, 0x25, 0x4c, 0x5, 0x9, 0x9, 0x4, 0x0, 0x7, 0xfffffff8, 0x79, 0x8, 0xffff7fff, 0x6, 0x0, 0x3e8899aa, 0x7, 0xffff, 0xfffffe00, 0x1, 0x1000, 0x81, 0x5, 0x4, 0x5, 0x7, 0xfffffff7, 0xfff, 0x10001, 0x2, 0x10000, 0x0, 0x100, 0xb0fd, 0x2, 0x1, 0x0, 0x3f8d, 0x9427, 0xf2f5, 0x80000000, 0x0, 0x4, 0x9, 0xfffffeff, 0xffffffff, 0xfffffffd, 0x9, 0x4, 0x2, 0x6, 0xfffffffd, 0x4, 0x40, 0x7, 0x7f, 0xd3, 0x3, 0x10001, 0x4, 0x5, 0x400, 0x4, 0x5, 0x10001, 0x5, 0x4, 0x4, 0xffffffff, 0x10001, 0x80000000, 0xffffffff, 0x4000, 0x4, 0x5, 0x81, 0x1000000, 0x80000000, 0x400, 0x9, 0xf2af, 0x719, 0x5, 0x6, 0xfffffff8, 0xfffffff8, 0x72, 0x4, 0x9, 0x8000, 0x1, 0x9, 0x101, 0x9, 0x1, 0xff, 0x6b20, 0x2, 0x0, 0xee, 0x3f, 0x3, 0x10001, 0xffff, 0x80000000, 0xffff, 0x3, 0xec4e, 0x6, 0x4, 0x4, 0x0, 0x3, 0x6, 0x800, 0x1, 0x800, 0x7513b5c4, 0xfffffe00, 0x3, 0x5, 0x80000000, 0x9, 0x23e82df5, 0x4, 0xea9, 0x4, 0x5134, 0x5, 0xaee, 0x1, 0x7ff, 0x8, 0x0, 0x80000000, 0x4, 0x10000, 0x401, 0x0, 0x45d1, 0x8, 0x6d91c957, 0x6, 0x3, 0x5, 0x3, 0x800, 0xffffff7f, 0xe6, 0xf4, 0x80, 0x40, 0xa5d9, 0xfffffffa, 0x7, 0x83, 0xffff5166, 0x0, 0x17b, 0x1ff, 0x48000000, 0x2, 0x8, 0x940b, 0x4, 0x8, 0xd, 0x3f]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x80000000, 0x61, 0x7, 0xffff, 0x3, 0x9, 0x6050, 0x8, 0x87ea, 0x8001, 0x7c0, 0x0, 0x9, 0x80000001, 0x2, 0x2, 0x9, 0xd16d, 0x1, 0x46, 0xdb5, 0x1, 0x3, 0x4921c4e5, 0x7, 0x3, 0x3, 0x5d, 0x5423, 0x5, 0x1ff, 0xe79c, 0x2, 0x0, 0xffffff00, 0x7, 0x5, 0x1, 0x8000, 0x20, 0x10001, 0x0, 0x6, 0xfffffff8, 0x32, 0x780558dc, 0x4, 0xfea, 0x200, 0x6, 0x3, 0x6, 0x0, 0xfffffffa, 0x1, 0x8, 0x22, 0x4, 0x1, 0x3, 0x1f, 0x7, 0xff, 0x1000, 0x3, 0x80000000, 0x7ff, 0x5, 0x1, 0x3af4348c, 0x200000, 0x101, 0x8001, 0xfffffff7, 0x5, 0x8a, 0xfff, 0x93b, 0x2, 0x5, 0x3, 0x7, 0x100, 0x3, 0x3b3, 0xe00000, 0x80, 0x2, 0x20, 0x100, 0x7f, 0xfff, 0x6, 0xa71, 0x3ff, 0x2, 0x20, 0x200, 0x5, 0x40, 0x80000001, 0x2, 0x400, 0x2, 0x3, 0x1ff, 0x4, 0x2, 0x884a, 0x9, 0x7, 0x1, 0x295, 0x4, 0xe22b, 0x7, 0x8, 0x9, 0x400, 0x3, 0x8, 0xd79, 0x2, 0x7, 0x1, 0x0, 0xd8e2, 0x6, 0x10000, 0xf6, 0x800, 0x7, 0x6, 0x1, 0x1000, 0x401, 0x7fff, 0x18, 0x8, 0xd7a3, 0xff, 0x20, 0xa, 0x9, 0x81, 0x0, 0x8000, 0x1, 0x3, 0x1, 0x4, 0x6, 0x7ff, 0x80, 0x37, 0x2, 0x9, 0x1128, 0x6, 0xeb, 0x3ff, 0x9, 0x9, 0xffff226e, 0x2, 0x0, 0x6, 0x9, 0x4, 0xbe7, 0x3, 0xfff, 0xa8, 0xfffff800, 0x3, 0x5, 0x9, 0x0, 0x40, 0x8001, 0x1ff, 0x1, 0x9, 0x7fff, 0x8, 0x80, 0xfff, 0x10001, 0x4, 0x101, 0x7, 0xffffffff, 0xfffff000, 0x6, 0x6, 0x9, 0x3, 0x310b8afc, 0x1, 0x6, 0x37, 0x4, 0x82, 0x800, 0xffff, 0x9, 0x9, 0xecda, 0x80, 0x9, 0x4, 0x7f, 0x1, 0x7, 0xffffb5d7, 0x9, 0x400, 0x10000, 0x8bf9, 0x1f, 0x3, 0x7fffffff, 0x2e, 0x0, 0x10001, 0x5b5ea33f, 0x6, 0xfffff800, 0xffff, 0x9, 0x80000001, 0x795, 0x1, 0x7fff, 0x36cd, 0xad4, 0x1f, 0x5, 0x81, 0x2, 0x5, 0xffffffff, 0x1, 0x8, 0x8, 0xc797, 0x3, 0x1ff, 0x9, 0x1, 0x2, 0x5, 0x2, 0x5, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x81}], [], [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}]]}, {0x26, 0x6, "a301df3f4e0d07691cdaedfdf226e6dcac6e64c23017bf73bb09d0f1632ab867674a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ipt={0x108, 0x18, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}]}, {0x89, 0x6, "4350db65a1d39241e1b6de049b9d5d4d2df504ce761f39ecfcb53281480bb2b36b30dd9775558dc1380d0681a971251192d6477b80255a7091d4c8fe6d22eab43e236a74dfd44fbe372b92617812231ef86fc402713367ca2174c17419b3f610b439dc2077bc2533a03442ced879ffd0c1fe78bc67f6816c732b3e5de78f5de0ab2f8cfd76"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x118, 0x6, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4427, 0x12, 0x3, 0x8000, 0x7fffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xfffffff9, 0x2, 0x200}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1f8b, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xff, 0x7, 0x0, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9b4, 0x4, 0x3, 0x4, 0x7fffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xa6d, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe5, 0x8, 0x1, 0xd1, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x183c, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1f05, 0x1}}]}, {0x41, 0x6, "84142927445181102b00d17eae114a075c7f4ed00fefbdd30ec24dfb11469c742ef5a7e322bfcba76eb9873e436148f6c9b0e3becfc86ff451d063728b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x1d4, 0xf, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xe5, 0x8001, 0x5, 0x200, 0x7}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5, 0x3, 0x7, 0x8c}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb4fb, 0x7fff, 0x8, 0x80000001, 0x10d880}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xffff, 0x3, 0x6, 0xffffff01}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x200, 0x4, 0x81, 0x9}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0xfffffffe, 0x0, 0x3, 0x2}, 0x2, r8}}]}, {0xe6, 0x6, "421e3c33e233bdc663dfb822d65c12996fae1e6e7d2bbd33062dc635b9382d8e48ef17cf02ea09a325f0daa2d9ccbbbabf12f42263436f7258d426762b46d266463c9662f0b2b4d23dea14fbf91eae9920d081bdb4b54af92e2fccbe4ce83fe95e9410ac6068648922f14b812cfd37efbee9ea9cd9379052368979f46100c767d938dd85d2a35642cf4f4d0c190e336523145ea3eb8f049e2ac696f1795f0d797c57eb9b8254dc381399bf6247c7ff5947a5927f8eef2442284fc5464627d06850458f3beaf65914b775c0350cf85ed8b6924618146f3771a8b28c0a1b1f6943fa5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0xda0, 0x0, 0x0, 0x0, {{0xb}, {0xd08, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x0, 0x8, 0x10001, 0xd5b1, {0x7f, 0x0, 0x4, 0x2, 0x7ff, 0x3}, {0x0, 0x2, 0x81, 0x1, 0x0, 0xa9d}, 0xb0f3, 0xffe, 0x5}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x81, 0x1, 0x8000, 0x7f, 0x8, 0x4, 0x2a640000, 0x7, 0x8, 0x4, 0x7fffffff, 0x8, 0xb1, 0x80000000, 0x40000000, 0xffff, 0x40, 0xfff, 0x6, 0x8, 0x80000001, 0x2982, 0x9, 0x2, 0x8001, 0x0, 0x9, 0x7fff, 0x9, 0x6, 0xe94, 0x8, 0x4, 0x2, 0x98, 0x7, 0x1d7, 0x7, 0x2, 0x80, 0x1, 0x401, 0xfffffe00, 0x2, 0x5, 0xdfe, 0x2, 0x7fffffff, 0x1, 0x6, 0x8, 0x0, 0x4, 0x1f, 0x80000000, 0xfffffffc, 0x401, 0x0, 0x1, 0x5, 0x1f, 0x80000001, 0x1, 0x4, 0x4, 0x2, 0x81, 0x3, 0x2, 0xaf13, 0x9, 0x1, 0x6, 0x3, 0x800, 0x401, 0x81, 0x1, 0xff, 0x7, 0x80, 0x4, 0x8, 0x5, 0x7f, 0x80, 0x200, 0x20, 0x0, 0x8, 0x924, 0x8, 0x9, 0x4, 0x4, 0x6, 0x1, 0xcef, 0x1, 0x9, 0x5, 0x7, 0x7, 0x9, 0x20, 0x6, 0x6, 0x653, 0x8, 0x0, 0x1, 0x400, 0x5, 0x9, 0x3, 0x4, 0x4, 0x9, 0x7, 0x0, 0x5, 0x2, 0x10000, 0x0, 0x9, 0x3ff, 0x9, 0x800, 0x9, 0x0, 0x3ff, 0x80, 0x7, 0x0, 0x400, 0x1, 0x4, 0x1000, 0x6, 0x7, 0x3, 0xe87, 0xffff, 0xfffffff8, 0x6, 0x2, 0x7fff, 0x4, 0x4, 0x8000, 0x9, 0xbb1, 0x3, 0x10001, 0x1, 0x7fff, 0x10000, 0x8, 0x5, 0x9, 0x8000, 0x9, 0x2dc, 0x137, 0x100, 0x2, 0x9, 0x80000000, 0x0, 0x200, 0x400, 0x10001, 0x101, 0x1e81f37e, 0xc4cb625, 0x7, 0x80000000, 0x1d6, 0x4, 0xffff, 0x8, 0x4, 0x8, 0x6, 0x4, 0x72, 0x8, 0x4, 0x40, 0xff, 0x8, 0x6, 0x4, 0x0, 0x1, 0x1, 0x4680b77e, 0x4, 0x4, 0x38c7, 0x4, 0x9, 0x2, 0x1000, 0x800, 0x3, 0x6, 0x9, 0x8, 0xf2, 0x3a, 0x7, 0x8001, 0x401, 0x8, 0x60b, 0x9, 0x1, 0x40, 0xbcc1, 0x1c, 0x2, 0x9, 0x2, 0x3, 0x715, 0x7ff, 0xfff, 0x3c6034b5, 0x9d8, 0x1000, 0x80000000, 0x9, 0x0, 0x101, 0x3ff, 0x0, 0x5, 0x3, 0xce, 0x5098ab85, 0x2, 0xffffffff, 0x40, 0x45dd, 0x1, 0xa9, 0x4, 0x8000, 0x6, 0x3f, 0x1, 0x7f, 0xffffcf9f, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0xffff, 0x3, 0x5, {0x0, 0x2, 0x1, 0x0, 0x4, 0x7ff}, {0x0, 0x1, 0x4, 0x7f, 0x7, 0x5}, 0x200, 0xff, 0xe4cc0000}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x20, 0x1ff, 0xa7, 0x8000, 0x4, 0x5, 0x0, 0x1, 0x6, 0x8, 0x80, 0x2, 0x2, 0x100, 0x3, 0x4800000, 0xaf3, 0x1000, 0x2, 0x4, 0x0, 0x2, 0xff, 0x6, 0x9, 0x200, 0xd61, 0x0, 0x1, 0x7fffffff, 0x80, 0x4, 0x6, 0x101, 0x3, 0x8, 0x5, 0x9, 0x1f, 0x9, 0x2d7, 0xfbbeff, 0x200, 0x7, 0x0, 0x800, 0x400, 0x7, 0x83c7, 0x8001, 0x1, 0x200, 0x4, 0xf25, 0x90a9, 0x6, 0x3, 0xff, 0x591e9ed2, 0x1ff, 0x7, 0x7, 0x101, 0x5, 0x26d80558, 0x0, 0xc1c, 0xa089, 0xff, 0x400, 0x9, 0x6, 0x7fffffff, 0x8, 0x10001, 0x0, 0x0, 0xe50, 0x0, 0x9, 0x7fffffff, 0x6, 0xfffff56f, 0x1, 0x8, 0x5ec, 0x6, 0x4000, 0xe1, 0x8f29, 0x40, 0x200, 0x5, 0x9f, 0x0, 0x1, 0x5, 0x9, 0x4, 0x23, 0x7, 0x4, 0x3, 0x80000000, 0x8f, 0x7fffffff, 0x7, 0x400, 0x6, 0x9, 0x0, 0x4, 0x8, 0x8, 0x3, 0xd122, 0x80000001, 0x9, 0xa6a, 0x18000000, 0x3f, 0x20, 0x7, 0x9, 0x1, 0x101, 0x8, 0xffffff15, 0x6, 0x3fd, 0x3, 0x0, 0x1, 0x1, 0xa, 0xf4d, 0x7, 0x1, 0x6700000, 0x1ff, 0x1000, 0x80000000, 0x5, 0x2, 0xdd3, 0x3, 0x1, 0x1, 0x80000001, 0xfff, 0x3, 0x2eee, 0x5, 0x6, 0x40, 0x6, 0x10000, 0xfff, 0xffff, 0x9, 0x3, 0x1f, 0x200, 0x7, 0x4, 0x45b7, 0x7, 0x10000, 0xb1c, 0x6, 0x0, 0x1, 0xa4, 0xff, 0x10000, 0x15, 0x9, 0x8, 0x6, 0x6, 0xa, 0x9, 0xc243, 0xfffffffa, 0x400, 0x5, 0x20, 0x4, 0xfffffff9, 0x6, 0x4, 0x4, 0x8, 0x1, 0x9, 0x9, 0x3, 0x6, 0xac, 0xfff, 0x65, 0x7ff, 0x40, 0x76f0, 0xffffffff, 0x4, 0x7, 0x1, 0x3f, 0x9, 0x0, 0xffffffff, 0x1, 0x101, 0x5, 0x1, 0x7, 0xfffffff7, 0xffff, 0x7f, 0x6, 0x4, 0x40, 0x80000000, 0x0, 0x3c39, 0x80000001, 0x7, 0x0, 0x101, 0x3, 0x3, 0x4, 0x80000000, 0x400, 0x7, 0x200, 0x3f, 0x4, 0x2f2, 0x8a, 0x9, 0x2cc, 0x4, 0x80000000, 0x1, 0x10, 0x2, 0x5, 0x0, 0x8, 0x7, 0xffff, 0xffff, 0x7f, 0xc140]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x7, 0x1, 0xffffffff, {0x3, 0x0, 0x6, 0x4127, 0x1, 0x1000}, {0x1, 0x1, 0x5, 0x81, 0x101, 0x3}, 0x93, 0x100, 0x1f}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x93dc, 0x0, 0x15534, 0x6a, 0x8, 0x7, 0x7f, 0x81d, 0x0, 0x5, 0x20, 0x2, 0x8001, 0x1000, 0x0, 0x7ff, 0x7, 0x8001, 0x2eb3, 0x400, 0x80, 0x0, 0x7ff, 0x0, 0x4, 0x8, 0x5, 0x816, 0xffffffff, 0x84fa, 0x3, 0x6, 0x29, 0x6, 0x1, 0xb586, 0xa5, 0x3, 0x67, 0x4, 0x2, 0x0, 0x6, 0x8, 0x2, 0x9, 0x1, 0x7fffffff, 0x800, 0x3, 0xfffffffe, 0x9, 0x2, 0x1, 0x3, 0x7, 0x4, 0x1, 0x5, 0x7, 0x1, 0x1, 0x0, 0xedef, 0x7, 0x5, 0x99, 0xec7, 0x7fff, 0x2, 0x1000, 0x1, 0x8, 0x4, 0x4, 0x80, 0x7b1, 0x1000, 0x6, 0x2, 0x7, 0x1f5, 0x0, 0x7, 0x4, 0x9b1, 0xa741, 0x7, 0xfff, 0xb9ae, 0x2, 0x4, 0x400, 0x2, 0xffffffff, 0x1f, 0x1, 0x1672, 0x0, 0xf4, 0x40a, 0x10000, 0x1, 0xdea9, 0x10001, 0x1, 0x0, 0x8, 0x3, 0x1000, 0x67f, 0x6, 0x5, 0x1000, 0xff, 0x9, 0x2307e8b6, 0x7fffffff, 0x1, 0x80000001, 0x800, 0x1, 0x2, 0x8001, 0x6, 0x8001, 0x6, 0x401, 0x8, 0x80000000, 0x9, 0x0, 0x0, 0x9, 0x7, 0x83, 0x955, 0x6, 0x4, 0x2, 0x800, 0x8000, 0x7ff, 0x9, 0x8, 0x7, 0x101, 0x81, 0x3, 0x1000, 0x1, 0x8, 0x4, 0x6, 0x3, 0x5, 0x200, 0x2adf, 0x6, 0x40, 0x2, 0x4, 0x10000, 0x2, 0x71b7, 0xde7, 0x2, 0x400, 0x8001, 0x401, 0xc0, 0x1ff, 0x1, 0x201593c2, 0x2, 0x1, 0x8, 0x0, 0x1, 0x3ff, 0x3ff, 0x6, 0x8, 0x8, 0x8, 0x169b0, 0x0, 0x80000000, 0x7, 0x6, 0x80000000, 0x2, 0x800, 0x9, 0x7fff, 0x400, 0x8, 0x9, 0x400, 0x8, 0x100, 0x10001, 0x8, 0x5000000, 0x8, 0x7, 0x4, 0x2, 0x3ff, 0x5, 0x66c4, 0x5, 0x7fffffff, 0x654a, 0x9, 0x5, 0x11, 0x7, 0x40, 0x1, 0x4, 0x6, 0x5, 0x3ff, 0x3f, 0x80000000, 0x8000, 0x9, 0x0, 0x3, 0x7fffffff, 0x5, 0x7f, 0x7, 0x40, 0x6, 0x6, 0x800, 0x6, 0x7, 0x272e6bc9, 0x9, 0x6, 0x8, 0x6, 0x1d, 0x8, 0x101, 0x6f, 0x1, 0x9, 0x1, 0x7, 0x80, 0x4, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x691}]]}, {0x6f, 0x6, "2275f96f57dd30fed71a83fd62d7437c50303d4cae47b76b405542785e03186cf31ad30236a3157df6dcc85fca73cbfc444031788d9dda73e2d620e0a746ae8ae2aa5d11f93b7e9568f04d7a46b8a6b29809e1b5900e58172db4442619702d6ee5f000dac6925960746b86"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x5}}}}]}, {0x13c4, 0x1, [@m_ipt={0x11fc, 0xc, 0x0, 0x0, {{0x8}, {0x11ac, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x6a, 0x6, {0x7, 'security\x00', 0x79, 0x200, "d850185bd8828d6401564884422e644a8b116ed36989805abadcd8a22812fe9d906a5ec3831eff221d300dc7cf37a71c9682eba5d5d153a73f33af944ec7638c"}}, @TCA_IPT_TARG={0x102a, 0x6, {0x2, 'mangle\x00', 0x8, 0x58d, "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"}}, @TCA_IPT_TARG={0x8b, 0x6, {0x7, 'mangle\x00', 0xdb, 0x5, "f21be647757d145864ae8e496afdc1505d8a12d685ae6157832e2e8051a1753d31553514ec40f125c70c8da9c26a791c5615be63a2f1c4412e81fade65202999cabc8b731acd1adf2d00a1b67e5856882e4f390c04c70dccda0126298a3af48ee2"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x101}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x2a, 0x6, "a151675001b3fcd673ce286f6c901d9ca6a49dea94ab2b3a951d4fe682baf1da0c02f07e2b0e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_ct={0x8c, 0x2, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010100}, @TCA_CT_ACTION={0x6, 0x3, 0xa}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xcc0}, @TCA_CT_MARK={0x8, 0x5, 0x2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x42}}]}, {0xf, 0x6, "7376e1ddab4bb690839acf"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x138, 0x1d, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x4272}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x28}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7ff}, @TCA_CT_ZONE={0x6, 0x4, 0x20}, @TCA_CT_LABELS_MASK={0x14, 0x8, "b46a3c3ec8f9754e47efa857b5f46edc"}, @TCA_CT_PARMS={0x18, 0x1, {0x8, 0x2, 0xffffffffffffffff, 0x8c, 0x9}}]}, {0xa2, 0x6, "82bf646ff3ea6e9a9e619422068f0298c9196e6348879adfd9306e2adff3be79d1a57017ce659044231304bc2676b4cf6f2c479f4466721b0e9dd54503b8c7c5410488ebc4fbcbebe9bf13b3d7e2e0d9b75638b33a95f457d2ff8c70a911cdc0c5530229a46928c22b3e9d679dd8f818e43a32a51484caa562b4d498b47eb281d726f74433a39afd1edf5b4b9693783ce035b9906ba0f4bcbd34a4f0a708"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x1c0, 0x1, [@m_mpls={0x144, 0x16, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xffffffff, 0x4, 0x0, 0xc6}, 0x3}}]}, {0xfc, 0x6, "12a7e4925b01136f7acf3c840fdac96dd3282b8616548275cfb21ec20ed7d323784e01f4cff9da17220536d121157201fa9d3777c88da71d13d76892ec97c37b063106ddfc4ac77fe3e3728eee76300033d193c024b2849e0dd8ecee67c370ab6eb621e7b3a4b56a84fcbc10e6d19dd28549e0bcf08bcd170af83075527ddf30107134bce612044f9b6f5d658575b92fbe481ea2b2c748d6a651271a411d364b3f48791d98188dc7f72d391d70564431c66d048b1f6cf44f6660f82ab6212041565877c6c3eb960a1dfee75112ab44c925438482ece79ccc7ea65371f88d6a8a05747fcc02ea9453853a75a3ddb495cb7e3e4389a066ffa3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x78, 0x1f, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x13d2, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1f46, 0xffffffffffffffff}}]}, {0x31, 0x6, "7136956f26bc025ac21319c01368ef8631dcdf0fb63ebbc68dd5239563ef7a89b7770ee953ae7001139fd1d331"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}]}, {0x4}]}, 0x6644}, 0x1, 0x0, 0x0, 0x40440d4}, 0x1) write$rfkill(r0, &(0x7f0000000080)={0x4}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x20, 0x10, 0x3, 0x2, {{0x12, 0x4, 0x1, 0x6, 0x48, 0x64, 0x0, 0x0, 0x29, 0x0, @multicast1, @multicast2, {[@end, @timestamp_addr={0x44, 0x1c, 0xce, 0x1, 0x4, [{@private=0xa010101, 0x4}, {@remote, 0xb52}, {@local, 0x101}]}, @end, @rr={0x7, 0x13, 0x60, [@multicast1, @multicast1, @rand_addr=0x64010102, @broadcast]}]}}}}}) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) accept4(r2, &(0x7f0000007fc0)=@xdp, &(0x7f0000008040)=0x80, 0x0) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000007f80)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) (async) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x7800, 0x700, 0xffff, 0x7, {{0x2a, 0x4, 0x0, 0x3, 0xa8, 0x66, 0x0, 0x52, 0x29, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0xf, 0xf3, [@remote, @loopback, @empty]}, @end, @timestamp_prespec={0x44, 0x24, 0xe4, 0x3, 0x7, [{@broadcast, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x200}, {@remote, 0x16}]}, @lsrr={0x83, 0x13, 0x57, [@dev={0xac, 0x14, 0x14, 0x37}, @local, @private=0xa010100, @loopback]}, @timestamp_addr={0x44, 0x4c, 0xa, 0x1, 0x9, [{@empty, 0x2}, {@multicast1, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfe2}, {@private=0xa010100, 0x5}, {@private=0xa010102}, {@loopback, 0xffff}, {@empty, 0x8}, {@empty, 0x7d8675ec}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xcae1}]}]}}}}}) (async) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000007f40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000007f00)={&(0x7f0000000480)=@newtaction={0x6644, 0x30, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{0x1b90, 0x1, [@m_tunnel_key={0x98, 0x18, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0xf6da835, 0x3, 0x3, 0x81}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}]}, {0xc, 0x6, "7260585b6890b27f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0xa8, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, '/dev/vcs#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x80000001, 0x4, 0x3, 0x7}}]}, {0x51, 0x6, "9d99ebb5a9347044c8809e88ddce1de5170396e7b6794a955246d919c7a8da2bb062a98811a33a14919f75c2c816c871b42bf08589466edc427e6d8f8e3601f73a7633d2a988533a7afff0ef3d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x98, 0x9, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x65, 0x6, "28c8081f590561e46c3e6a0fcf4677e5ed009f91dd9a7bd5d96b36be9a60a0e969d80ef9bcf2ced077ced5be91268057b189fa57c991fcedffd8059f3fb908df497fec13286b8c3df77589aab2d6bab70e96570426ef197a4d3424e2f73341a684"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x19b4, 0xd, 0x0, 0x0, {{0xb}, {0x1980, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x800, 0x7fffffff, 0x9, 0x7, 0x3, 0x34d262e8, 0x80000000, 0x4, 0x6, 0x1, 0x9, 0xd5d2, 0x9, 0xffff, 0x5, 0x9, 0x2, 0x1, 0x9, 0x8, 0x1, 0xab, 0x9, 0x590e, 0x1, 0xa2b, 0x3, 0x8, 0x8, 0x3, 0x100, 0xff, 0x7, 0x9, 0x5, 0x20, 0x2, 0x4, 0x101, 0xffffff22, 0x3, 0x7, 0x3, 0x10000000, 0x2, 0x4, 0x0, 0x7, 0xfffffeff, 0x7, 0x3, 0x0, 0x5, 0x6, 0x5, 0x8000, 0x7, 0x8, 0x9, 0x4, 0x6, 0x2, 0x14, 0x6, 0x800, 0x2, 0xa9, 0x3, 0xbd, 0x2, 0x20, 0x1, 0x5, 0x2, 0x6, 0x3, 0x7fffffff, 0x8, 0x2, 0x81, 0x8, 0x8, 0x9, 0x0, 0xcf6, 0x8, 0xff, 0x20, 0x5, 0x5, 0x1f, 0x50aa, 0x3, 0x3, 0x6, 0x8, 0x400, 0x8, 0x3, 0xff, 0x3, 0xfef2, 0xb33, 0x8, 0xfffffff7, 0x80000001, 0x7, 0x1, 0x9, 0x8, 0x6, 0x4, 0x81, 0x40, 0x10001, 0x1, 0xcd, 0x4, 0x1000, 0xfff, 0x800, 0x100, 0x200, 0x8, 0x2, 0x2525, 0xfff, 0x10000, 0x6, 0x80000001, 0x7, 0x6, 0x4, 0x4, 0x5a67679f, 0x5, 0x8, 0xffff, 0x4, 0x7f, 0xaa, 0x8, 0x5, 0x0, 0x91f, 0x1000, 0x1, 0xffffffab, 0x2, 0x2, 0x3000, 0x3, 0x2, 0x5, 0x7, 0x2, 0x5, 0x0, 0x401, 0x1, 0x0, 0x5, 0xe, 0x6, 0x5, 0x3, 0xb0fe, 0x1, 0x7376, 0x9, 0x0, 0x80, 0xffffffff, 0x7ea, 0x5, 0x3, 0x6f8448e6, 0x20000, 0x1, 0x7ff, 0xc0000000, 0x1, 0x8, 0xfffffffc, 0xffffffff, 0xffffffff, 0xfffff2a0, 0x9, 0x1f, 0x0, 0x10000, 0x853, 0x7, 0x4, 0x4, 0x5, 0x4, 0x100, 0x4, 0x86b, 0x3, 0x7fff, 0x6, 0x81, 0x7, 0x10000, 0xffffffff, 0x2, 0x8, 0xba, 0x2, 0x5f8b, 0x101, 0xffff, 0x7, 0x0, 0x9, 0x19, 0x1, 0x4bd, 0x7, 0x2, 0x1, 0x5, 0x7f, 0x4, 0x9, 0x2, 0x0, 0x7, 0x4, 0xfef, 0x4, 0x8000, 0x4, 0xe8, 0x6, 0x10000, 0x8d8, 0x2, 0x7, 0x5, 0x0, 0x40, 0x7fffffff, 0x1, 0x90000, 0x400, 0x9, 0x3f, 0xff, 0x1ff, 0x10001, 0x2, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x1, 0x3a, 0x1f, {0x9, 0x2, 0x80, 0x9, 0x7, 0x80000001}, {0x7, 0x1, 0x2, 0x0, 0x3, 0x2}, 0x80000001, 0x8, 0x80000001}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x9, 0xe3b, 0x81, 0x2, 0x8, 0x7ff, 0x3, 0x1f, 0xe6b, 0x1, 0x9, 0x10000, 0x0, 0x2, 0xfff, 0x10001, 0x2, 0x80000000, 0x80000001, 0x0, 0x0, 0x5, 0x5, 0x5, 0x3, 0x8, 0x7, 0x100, 0x3f, 0x9, 0x8, 0x7ff, 0xe1, 0xfffffff8, 0x800, 0x0, 0x0, 0x9, 0x3, 0x77, 0xb6b6, 0x8, 0x30192106, 0x3, 0x3, 0x20, 0x3f, 0x8, 0x0, 0x2, 0xc3d, 0x7, 0x1, 0xffff, 0x1, 0x20, 0x300000, 0x300000, 0x80000000, 0x8, 0x4, 0xfffffff8, 0x5, 0xff, 0x7, 0x8, 0x0, 0x4d, 0x401, 0x1000, 0x7ff, 0x4, 0x9, 0x0, 0x1f, 0x9, 0x4, 0x1ff, 0x101, 0x9, 0x8, 0x0, 0x5, 0x13b3, 0xb533, 0x55, 0x2, 0x9, 0x1ff, 0x6, 0x0, 0x6, 0x3b1a, 0x0, 0x401, 0xfffff1c4, 0x100, 0x20000000, 0x80000000, 0x8, 0x8, 0x7, 0x4, 0x1, 0x0, 0x6f, 0x3, 0xffffffff, 0x3, 0x3ff, 0x8, 0x9, 0x3, 0x5, 0x3, 0x6, 0x4, 0xff, 0x9, 0x2, 0xfffffffd, 0x8000, 0x3, 0xb4f7, 0x235e7f3b, 0x3ff, 0x20, 0x81, 0x3, 0xb0fee2b4, 0xf3, 0x2800000, 0x24, 0x2, 0x65e, 0x9, 0x10000, 0x4, 0x6, 0x401, 0x8001, 0x81, 0xb71, 0xfffffff8, 0x3, 0x5, 0x8000, 0x5bfb, 0xcea, 0x6, 0x3, 0x0, 0x4, 0x0, 0xd07, 0x0, 0x6, 0x4, 0x20, 0x5, 0x4bd, 0x0, 0x3f, 0x5, 0x0, 0x7fff, 0x3f, 0x9, 0xfffffffd, 0xee830000, 0x6, 0x800, 0x6, 0x3b46, 0x7, 0x717, 0xee, 0x9, 0x7fff, 0xfffffff8, 0x1, 0x8, 0x7, 0x7, 0xeb5, 0x1000, 0x10000, 0x8, 0xcba, 0x3, 0xc9, 0x1, 0x1, 0x3, 0x2, 0x3, 0x7, 0xa0a0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x401, 0x9, 0xff, 0x7, 0x3, 0x1ff, 0x1ff, 0x1ff, 0x80, 0x84, 0xfffffffa, 0x114, 0xffffffe0, 0x7, 0x1, 0x0, 0x100, 0xff, 0x8, 0x0, 0xf46, 0x7, 0x1, 0x100, 0x8, 0x87a, 0xfffff870, 0x6, 0x0, 0x7, 0x4, 0x8, 0x1f552ea3, 0x407, 0x3ff, 0x5, 0x1f, 0x5, 0x1a9, 0x40, 0x400, 0xfffffff8, 0x0, 0x6, 0x4, 0x10000, 0x8, 0x8, 0xfff, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3e70, 0x10001, 0xcc, 0x0, 0x8, 0x0, 0xffffffff, 0x5, 0x9, 0x81, 0x3ff, 0x0, 0x1f, 0x7, 0x7fff, 0x80000001, 0x7, 0x2, 0x61, 0xff, 0x4b, 0xfffff800, 0xfffffffb, 0x90, 0x5, 0xf6, 0x0, 0x80000001, 0x2, 0x2, 0x1, 0x7ff, 0x9, 0x8, 0x7c00000, 0x8000, 0x2, 0x401, 0x7, 0x20000, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x1000, 0x9, 0x9, 0x6, 0x5, 0x975, 0x3ff, 0x7, 0x52, 0x7, 0x29b80, 0x12b0, 0x401, 0x4, 0x1b, 0x1e, 0xfffffffd, 0x5, 0x200, 0x3, 0x8000, 0x0, 0x7f, 0x0, 0xfffffff9, 0x0, 0x4, 0x0, 0x2, 0x1000, 0x7a, 0xffffffff, 0xfff, 0x3, 0x7, 0x8000, 0x8000, 0x3ff, 0x1, 0x6, 0x6, 0x3, 0x8, 0xfffffffd, 0x3ff, 0xea3, 0x1, 0x1, 0x618, 0xf04, 0x7, 0x0, 0x8, 0x800, 0x7, 0x8, 0x0, 0x10000, 0xfffeffff, 0x8, 0x3, 0x8029, 0x2, 0x20, 0xa7, 0x6, 0x401, 0x5, 0x1, 0x1, 0xfffffff7, 0x80, 0x400, 0x1, 0x0, 0x6a1f, 0x7, 0x401, 0x67d, 0xfffffffd, 0x1ff, 0x5, 0x80000001, 0x9, 0x100, 0x5, 0x8001, 0xfffffbff, 0x4, 0x10000, 0x80, 0x5c4, 0x80, 0x1000, 0x100, 0x1, 0xfffffff7, 0x100, 0x5, 0x0, 0x7, 0x0, 0xfffffffe, 0x0, 0xfffffffa, 0x5, 0x31b5, 0x4, 0x8, 0x20, 0x1, 0x9, 0x5, 0x1, 0x9735, 0x9, 0x6, 0xffffffff, 0x4, 0x7, 0x1, 0x2, 0x1, 0x6, 0x4, 0x7fff, 0x4, 0x6, 0x213, 0xfffffffc, 0x6, 0x7fffffff, 0x4, 0x66b, 0x0, 0xe47, 0x8, 0x368, 0x8, 0x1, 0xf12, 0x80000001, 0x6, 0x1ff, 0xffff, 0x80000001, 0x0, 0xffff, 0x700000, 0xd2e9, 0xffffffff, 0x8, 0x3e68, 0x0, 0x33, 0x3, 0x8000, 0x3, 0x0, 0xd0f, 0x8, 0x2, 0x8, 0x9, 0xffff, 0x2, 0x8a2, 0x6, 0x9, 0x80000000, 0x401, 0x6, 0x400, 0x3, 0x9, 0x8, 0x5, 0x5, 0x0, 0x3f, 0x3, 0x4, 0x1, 0x100, 0x3, 0x20, 0x1, 0x4, 0x6, 0x6, 0x8001, 0x6, 0x2, 0x8, 0x80000001, 0x8000, 0x5, 0x99b3, 0xfffffffc, 0x8, 0xfffffff8, 0x1, 0xe0000000, 0x80, 0x4, 0xd8, 0xdfd, 0x17, 0x7fff, 0x7, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x14}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x101, 0x4906, 0x81, 0x40, 0x101, 0x1, 0x1f, 0x1f, 0x80000000, 0x2, 0x200, 0x0, 0x6, 0x7, 0x80000001, 0x0, 0x10001, 0x9, 0x91, 0x1, 0x9, 0x8, 0x3, 0x31, 0xd646, 0x2, 0x0, 0x6, 0x3, 0x2, 0x0, 0x4, 0x8, 0x5d, 0xffff7564, 0x5, 0x80, 0x1, 0x2, 0x1000, 0x3, 0x5, 0x2, 0x400, 0xe80, 0x7, 0x4, 0x9, 0xff, 0x7, 0x7, 0x8000, 0x1, 0x6, 0x3, 0x8, 0x8, 0x4, 0x6, 0x1, 0x9, 0x4, 0x4, 0x8, 0x80, 0x3432, 0x1, 0x8, 0x3, 0xc49, 0x0, 0x5, 0x8, 0x4, 0x6, 0x4, 0x8bc1, 0x6, 0x3, 0x1, 0xfffff522, 0x352, 0x8, 0x101, 0x5, 0xbe99, 0xf4, 0x9, 0x8, 0x0, 0x5, 0x7, 0xfffffc01, 0x3, 0x7, 0x7fffffff, 0x512b00, 0x74a, 0xd5, 0x8001, 0x8, 0x0, 0x3, 0x84, 0x80000001, 0x6, 0xe11, 0x7f, 0x3, 0xffff, 0x932d, 0x7, 0x4, 0x6, 0x0, 0x7, 0xffff8000, 0x5, 0xfffffffc, 0x401, 0x4f, 0x9, 0x81, 0x81a7, 0xae46, 0x1, 0x8, 0x4, 0x1, 0x7fffffff, 0x7ff, 0xff800000, 0xffffff00, 0x8, 0x7, 0xfffffb1d, 0x400, 0xac1, 0x0, 0x1, 0x2, 0x8, 0x200, 0x72a4cc27, 0x1, 0x1a7, 0x10001, 0xa4b6, 0x7, 0x1, 0x1, 0x4, 0x8001, 0x3, 0x9, 0x7f, 0x200, 0x5c, 0xfff, 0x5, 0x6, 0x968e, 0x5c49, 0x3, 0x0, 0x8, 0x2, 0x6, 0x2, 0x4, 0x400, 0x2b, 0x80, 0x9, 0x3, 0xb80, 0x44, 0x7, 0x0, 0x800, 0xe1, 0x3c46, 0x0, 0x5, 0x9, 0x249, 0x848e, 0x8000, 0x1, 0xfffffff9, 0x3f, 0x1, 0x80000000, 0x7f, 0x5, 0x9, 0x8, 0xfffffffd, 0xff, 0x19492edd, 0x2, 0x3, 0x2, 0x2, 0x7fff, 0xff, 0x0, 0x2, 0x24f44000, 0xffffffff, 0xff, 0x8, 0x8, 0x5, 0x0, 0x8, 0x2, 0x10001, 0x7fffffff, 0x4, 0xbac, 0x2, 0xfffffff7, 0x80, 0x0, 0x95e, 0x200, 0x5, 0x7, 0x0, 0xffff8000, 0x6, 0x9, 0x1, 0x2, 0x93aa, 0x1, 0x5, 0x7, 0x9, 0x9, 0xfffffff8, 0x4, 0xfffffff7, 0x3, 0x10001, 0x7, 0x9, 0x4, 0x3, 0x3, 0x8, 0x0, 0x2, 0x80]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x661, 0x1, 0x1, 0xffffffff, 0x0, 0x5, 0x2, 0x0, 0xfffffffe, 0x9947, 0x200, 0x9, 0x5, 0xfffffffd, 0x5, 0x9, 0x1, 0x7fff, 0xfffffffd, 0x9, 0x9, 0x3b4788c1, 0x3f, 0x5, 0x4, 0xffff, 0x81, 0x101, 0xd298, 0x76e, 0x9f, 0x80000000, 0x9, 0xffff, 0xffff, 0x400, 0x8, 0x6, 0x6, 0x3ff, 0x6, 0x80, 0x5, 0x997, 0xfffffff9, 0x8e5, 0x9, 0x6, 0x5, 0x1000, 0x100, 0x4, 0x124f, 0x3, 0x7ff, 0x10001, 0x5, 0x3, 0x20, 0xa0000000, 0x80000001, 0x8, 0x6, 0x7, 0x0, 0x14f6, 0x3, 0x0, 0x7fffffff, 0xffffffff, 0x2, 0x9be, 0x1, 0xb8e, 0x4, 0x63f, 0x200, 0x1, 0x6, 0x7, 0xde60, 0x1, 0x2, 0x2, 0xd18, 0x9, 0x0, 0x7fff, 0x6, 0x3, 0xe597, 0xb8c, 0x80000001, 0x5, 0x5, 0xffff, 0x2, 0x0, 0x1, 0x5, 0x6, 0x80, 0xa5, 0x0, 0x8, 0x5, 0x4b, 0x4, 0x2, 0xffff0000, 0x3ff, 0x1, 0x80000000, 0x8, 0x9, 0x7, 0x74, 0x7, 0x6, 0x7f, 0x40000000, 0x8000, 0x4, 0x918e, 0x197, 0x6, 0x2, 0x757, 0x1, 0x5, 0x2, 0x3, 0x800, 0x3, 0x7, 0x1, 0x3ff, 0x8, 0x74, 0x2, 0x8, 0x8, 0x6, 0x78, 0x0, 0xa317, 0xfffffffa, 0x7fffffff, 0x800, 0x7, 0x7, 0x3, 0xa3, 0xffffffff, 0xdff, 0x2, 0x1, 0x90, 0x9, 0x3, 0x478840fb, 0xfffffe00, 0x9, 0x7f, 0x81, 0x101, 0x7, 0x200, 0xdc, 0x8, 0x1, 0x10001, 0x6, 0x4c51, 0x1f, 0x3, 0x401, 0x9, 0x6, 0x20, 0x56000, 0x6, 0x9, 0x3, 0xffffffff, 0x80000000, 0xfffffff7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x77, 0x6, 0x7, 0x8, 0x0, 0x5, 0x2, 0x8000, 0x9, 0x7, 0xfff, 0x0, 0x82b4, 0xfffffffc, 0x200, 0x8cbe, 0x400, 0x8, 0x80000000, 0x3, 0x200, 0xffffff80, 0x9, 0x2, 0x4, 0xff, 0x0, 0x5, 0xd41, 0x4, 0x2, 0x12a, 0x7, 0x9d, 0x4, 0x4, 0x3, 0x5, 0x180, 0x8, 0xda, 0x101, 0x4, 0x1e, 0x1, 0x1, 0x80000001, 0x4d, 0xfff, 0x20, 0x2, 0x4, 0x10000, 0xff, 0x40, 0x40988e9, 0x0, 0x9, 0x81, 0x0, 0x2000, 0x5, 0xe571]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}], [], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x3, 0x27, 0x8000, 0x3, {0x4, 0x0, 0xc321, 0x81, 0x5, 0x20}, {0xf8, 0x0, 0x7fff, 0x6, 0x1, 0x5}, 0xc000000, 0xc5d, 0xfffffff8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x9, 0x3, 0x3, 0xffff, 0x6, 0x8000, 0x80000001, 0xfffffffc, 0x1, 0x3f, 0x8, 0x3, 0x6, 0xfffffbff, 0xfffffff8, 0x10001, 0xc4bc, 0x8, 0x4, 0x9, 0x18, 0x8, 0x7ff, 0x2, 0x2, 0xffffd4cf, 0x1, 0xff, 0xc3, 0x7fffffff, 0x81, 0x20, 0x3ff, 0x8, 0x4, 0x100, 0x3, 0x1, 0x3ff, 0x2, 0xa4, 0xffffff80, 0x7ff, 0x1d94, 0x3, 0x20, 0x100, 0x4, 0x7, 0x9, 0x51, 0x2, 0x40, 0x6c, 0x8, 0x9, 0x5b, 0x7, 0x39b399a0, 0x6, 0x9, 0x0, 0xfffffe00, 0x40, 0x6, 0x7, 0xb6, 0xffffffff, 0x3, 0x1, 0x6, 0x8, 0x6, 0x0, 0x8, 0x2, 0x3, 0x0, 0x100, 0x6, 0x7fff, 0xffffff5c, 0x1000, 0x0, 0xe2d5, 0x40, 0x5, 0xd5, 0x7, 0xfad074a, 0x6, 0x2, 0x9, 0x1, 0x7ff, 0x9, 0x6, 0x9, 0x3, 0xf83, 0x8, 0x4c, 0x5, 0x1f, 0x6, 0xffff8000, 0x49, 0x4, 0x6, 0x86c, 0x8001, 0x55f, 0x4, 0x2, 0x3, 0x10000, 0xfffffff9, 0x0, 0xffffffff, 0x400, 0x0, 0x6, 0xfffffffe, 0x80000, 0xb3, 0x10000, 0x0, 0x20000000, 0x1000, 0xfffffffa, 0x66d, 0x2, 0x6, 0x8, 0x401, 0x4, 0x1, 0x9, 0xf7420000, 0xff, 0x9, 0x7, 0x1, 0x4, 0xfffffffb, 0x1, 0x40000, 0x80, 0xfffffff8, 0x0, 0x6, 0x10, 0xfff, 0x8, 0x0, 0x2, 0x5, 0x81, 0x3, 0x6, 0xd4fb, 0x8, 0xfff, 0x4, 0x7f, 0x5, 0x8, 0x9, 0x48, 0x4ea, 0x4, 0x2, 0x3ff, 0x80000000, 0x8e80, 0x7, 0x4, 0x10001, 0x5, 0xffffffff, 0x4, 0x0, 0x200, 0x7, 0x8, 0x4, 0x10000, 0x83d4, 0x38, 0x4, 0x5, 0x7fff, 0x9810, 0x7, 0x10001, 0x7c, 0xc8da, 0xff, 0x8, 0x80000000, 0x4, 0x1, 0xfffffff8, 0x9, 0x4, 0x81, 0x46, 0x9, 0x6, 0x4, 0x7, 0x7, 0x8, 0x2, 0x1, 0x7, 0xab, 0x3, 0x4, 0x98d8, 0x7fffffff, 0x5, 0x9, 0xff, 0x474c, 0x7, 0x61d, 0xff, 0x7, 0x0, 0x2, 0x5, 0x48, 0x101, 0x800, 0xb70, 0x1ff, 0x140b, 0x99, 0x0, 0x1, 0x0, 0xd4f4c27, 0x4, 0x3, 0x6, 0x3, 0x0, 0x87d, 0x7fffffff, 0x1, 0x1, 0x8, 0x800, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0xd6, 0x69cd, 0xfff, {0x0, 0x0, 0x3800, 0x400, 0x1f, 0x9}, {0x4, 0x1, 0x1, 0xfff, 0x8001, 0x8001}, 0x8, 0x7, 0x80000001}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]]}, {0x9, 0x6, "324856aac9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x93c, 0x1, [@m_mirred={0x98, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4839, 0x5, 0x4, 0x8}, 0x4, r1}}]}, {0x4c, 0x6, "20293a51a6c51a4cd44ffbbdba101663079091d3f4dfddcec59763da655a554fe57fc79460d7a72e2bdb7781ca506cbe854246d85e1f8c7051a3eb70b62233add34fa367096b460c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x100, 0x5, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1000, 0x9, 0x4, 0x4, 0x10001}, 0x6}}]}, {0xad, 0x6, "aec965e8aecb3baeb5cbf20a33e87627e8432f9c51ffa4609e2867ab60b5cc66404827210f27bfe6bc1c30ce0a50f4d7fbacfeebeee8e7c43cf4240e0c2ea9fe56bc00821aa8ce7f1635007b056e2ba071e82bb5dd8ed2625641473eea432e67fd0f711e01995ffeb7d78522ab828e4918c5d565671b14383f7c89618cbce26fab5551a55c4f1d9df7405eb5797c3ecd9c26f3c0f09bc6515c7706e410ef07815bcae9544ad6f12802"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x168, 0x13, 0x0, 0x0, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x4, 0x3, 0x100, 0x1}}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x100, 0x200, 0x20000000, 0x6, 0x3}}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x3, 0x1, 0x6}, 0x1}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x5321}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}]}, {0x7b, 0x6, "fadb4562e3a43cc3cfacb191425a2cb9e2f3a07ff58db0108c852ba0eb67b9d12dc6fdf0b91451f5458f85c9e9d514c449c045d901360bbed48161a4e4d76aad2c4393effa6ef2aad5d79caad7aded519c8a7b2d89bd65ff15fcb3b5041816061017a605bf05eb46881552f4d20ab3d31c91b9f0814d5b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x104, 0x14, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, '/dev/vcs#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xff, 0x8, 0x838b, 0xffffff4d}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7, 0xffffffffffffffff, 0x3e9, 0x2}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xe, 0x3, '/dev/vcs#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1a, 0x1, 0x0, 0x400, 0x6e}}]}, {0x66, 0x6, "3e0aac60f2165bc4690bb0491adf4e646481ea97bb631677a89a64e068f01b5deaa86d9c0f65f75194ac22c12a34c93ec5fe1275282accaf7048b2015cdd4fbe1c4a154ac55846f5abc9c4ad6021488893921256f09ca20b8badc9c8102b902fb1d5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x190, 0x13, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x96c, 0x6, 0x20000000, 0xfffffff7, 0x5}}, @TCA_DEF_DATA={0xe, 0x3, '/dev/vcs#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xdd, 0x3, 0x7, 0xff, 0x7fff}}, @TCA_DEF_DATA={0xe, 0x3, '%//*.--^U\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x41a3, 0x4, 0x3, 0x3, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x80, 0x7, 0x8, 0x100}}]}, {0xd9, 0x6, "7d4a4c9927ba66c6e4c8c61a252de6d4d82b037f2db9878828f2a63d0b1ed919033b2913889f06002928372c993181e159562da28f11ed9979a54b8b572b297cbf669737314ca2a4a10f3d84a55583c6f407180321f815f6c813f7bf28694c724bc94f605611e6cce541654e0a9597136f488c2a50f81609db318a4935354f9920f04a200b7ceb7cdf72610386ca113daa9298c9aa213643fc438d1298aa15597c22b08f11ed48aa3ea180c0c4ccd8332b9d6aba91319edd5136364d23fd203c590b4bf17bfa9413eb1ff80558ac9e4f8ad80de165"}, {0xc, 0x7, {0xf4e1f61be18a56ab}}, {0xc, 0x8, {0x745c20fe94e683bf, 0xbd5b51dc32f073a4}}}}, @m_ipt={0x258, 0x6, 0x0, 0x0, {{0x8}, {0x150, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x125, 0x6, {0x3f, 'mangle\x00', 0x71, 0x9, "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"}}]}, {0xe3, 0x6, "3c74c3576fd45dd60dafbbd03687c54f85a8e5f53a62884d44361a2e85a1cd36945912bb1e6dac4c45379ada05bd7d898bd6424e228bb10807e8c7570c17236e51969ca4788b9f57dc3d071e8d6413205b371a2b7d1e6cd60cfe88907fe7d56f784e92b2e8da45a28ed124f2e401bd47d6b1109e885f97fc1a7d70c2ad9bb38ea5d21a28f50b87686a5b83b652ac5995ea889642d8359f6587dddbc2db1b01ecdd8596d0bcb3be2ba51e7d0f4615f6aba3cec025b292d8e59952a57b7e56fb5d5feba0efce963883217017aaa1f76d15fdd59ce2ea4c79b6011de4223bc52c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x14c, 0x17, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x8001, 0x0, 0xa0, 0x3}, 0x21}}]}, {0x101, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x2bdc, 0x1, [@m_police={0x1a44, 0x1e, 0x0, 0x0, {{0xb}, {0x19f4, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8c, 0x6, 0x3, 0x184000, 0x3, {0x3, 0x0, 0x2, 0x4a, 0xffff, 0x4c}, {0x20, 0x0, 0x9, 0x8001, 0x9, 0x4}, 0x1, 0x7fff, 0xfffffffe}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x0, 0x8, 0x0, {0xde, 0x1, 0x0, 0x1, 0xfff8, 0x867}, {0x81, 0x2, 0x3f, 0x0, 0x7ff, 0x7}, 0x7, 0x80000001, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x20}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x400, 0x80, 0x5, 0x0, 0x8, 0xff, 0x7, 0x1, 0x10000, 0x1, 0x10000, 0xfffffff7, 0x0, 0x200, 0x0, 0x4fa8, 0x9, 0x3ba, 0x3, 0x3, 0x80, 0x9, 0xd50, 0x4, 0x7, 0x6, 0x81, 0x7, 0x4, 0x1f, 0x4, 0x8, 0xe9, 0x9, 0x4, 0x1, 0x1f, 0x1000, 0xfffffff8, 0x1, 0xd0, 0x101, 0xc57, 0x1000, 0xffffffff, 0x80000, 0xfffffffe, 0x0, 0x6, 0x1d6, 0x80000000, 0xffffffff, 0x4, 0x8, 0x6, 0x7, 0x7a3d, 0x0, 0x5, 0x1, 0x0, 0x4, 0x1, 0x7, 0x7fff, 0x5, 0x6, 0x4, 0x1, 0x4, 0x7, 0x10001, 0x7fff, 0x8, 0x7ff, 0xfff0000, 0x200, 0x3, 0x4, 0x400, 0x5, 0x37, 0x725, 0x1ff, 0x6f0e, 0x4, 0xfffffffe, 0x9, 0x4, 0x3ff, 0x7fff, 0x9, 0x7, 0xb0, 0x6, 0x80000000, 0x30f9d8ba, 0x1, 0x7ff, 0x7ff, 0xffffff0d, 0x3ff, 0x8001, 0x2, 0x6, 0x8, 0x20, 0x80000000, 0x3, 0x9a, 0x7fffffff, 0x1f, 0x8, 0x0, 0xfffff000, 0x100, 0x1d2139ab, 0x1ff, 0x10001, 0xfffffe01, 0x80000001, 0xe15, 0x5, 0xc4fb, 0xd463, 0x5, 0x40000000, 0x8, 0xfffffff7, 0x2, 0x7fa7, 0x101, 0xffffffff, 0x4, 0x1, 0x0, 0x6, 0x6, 0x8, 0x6, 0x4, 0x3, 0x3, 0x0, 0xa6, 0x3, 0x5, 0x4, 0x10001, 0x311, 0x1, 0x100, 0x700000, 0x1, 0x1, 0x10001, 0x631, 0x4, 0x80000001, 0x3f, 0x4, 0x80, 0x4, 0x800, 0x7ff, 0x823, 0x5, 0x12, 0x6, 0x7a52138a, 0x8, 0x9, 0x7f, 0x0, 0x7, 0x6, 0x6, 0x8001, 0x870f, 0x3, 0x40, 0x4, 0xb1, 0x9, 0x6, 0x6, 0x8000, 0x8001, 0x8001, 0x7, 0x1, 0x1f, 0x9, 0x9, 0x1, 0x44090187, 0x2, 0x3, 0x1, 0xfffffff7, 0x4, 0x80000000, 0x1, 0x5, 0x9, 0x3f, 0x5, 0xaf5, 0xa000, 0x0, 0x8, 0x2, 0xf97, 0x4, 0x4, 0xffffffff, 0x8001, 0x3f, 0x7ff, 0xdf0, 0xffffff8d, 0x54ee, 0x9ffcb8a, 0x401, 0x6, 0x4, 0x2, 0x1f, 0x8000, 0xff, 0x7, 0x9, 0x800, 0x76, 0x1, 0x9, 0x54f2, 0x727, 0x1, 0x0, 0x5, 0xfffffff7, 0x6f9, 0x5, 0x1000, 0x3, 0xbd4, 0x1, 0x81, 0x200, 0x16, 0x6, 0xfffffffc, 0x10000]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x20, 0x9, 0x0, 0x1ff, 0x5, 0x10001, 0xda, 0x1000, 0x4, 0x3f, 0x8, 0x0, 0x800000, 0x1, 0x401, 0x9, 0x8, 0xfffffffe, 0x6, 0x0, 0x3, 0x20, 0x9, 0x352f, 0x3ff, 0x3f6189c7, 0x6, 0x2, 0x1, 0x1, 0x88c, 0xffff, 0x7e, 0x20, 0x32, 0x8001, 0xb9d, 0x4, 0x4, 0x9, 0x1, 0x4, 0x401, 0x1, 0x0, 0x1000, 0xf49c, 0x400, 0xe8d, 0x6832, 0x7, 0x6, 0x0, 0x4, 0x1, 0x400, 0xfff, 0x3, 0x1, 0x8001, 0x5, 0x7f, 0x7, 0xdf, 0x40, 0x6, 0x76d, 0x40, 0x1, 0x2, 0xcc, 0x7fffffff, 0x3e1, 0x1, 0x7, 0x59, 0x1, 0xff, 0x2, 0x3, 0x3ff, 0x3, 0x8001, 0x9, 0x3, 0x8, 0x597, 0x9b400000, 0x2, 0x8, 0x8, 0xff, 0x8, 0x3, 0xffff, 0x6, 0x8, 0x401, 0x9, 0x1000, 0x9, 0x7fff, 0x8, 0xff, 0x0, 0xfffffffc, 0x8, 0x4be, 0x1, 0x1, 0x3ff, 0x6dbeda7d, 0x80000001, 0xf04, 0x4, 0x4, 0x0, 0x6, 0x9, 0x4, 0x401, 0x93, 0x0, 0x400, 0x8, 0x7, 0x2, 0x92, 0x6, 0x2, 0x400, 0x2, 0x8, 0xffff0001, 0xd498, 0x4d2be2d, 0x4, 0x4, 0x3, 0x2, 0x40, 0x80000001, 0x5, 0x6, 0x8, 0x358, 0x8, 0x100, 0x8, 0x2, 0x7ff, 0x1, 0x0, 0x3, 0x8, 0xfff, 0x20, 0xff, 0x1ff, 0xfffffff9, 0xc90f, 0x8000, 0x18000, 0xf280, 0x8001, 0xfff, 0x8, 0x1, 0x1000, 0x6, 0x80000001, 0x3, 0xfff, 0x505, 0x9, 0x9, 0x886, 0x802, 0x3f, 0x10000, 0x1, 0x8, 0x8, 0x8, 0x4, 0x1f, 0x7, 0x3, 0x43e, 0xffffffff, 0x1, 0x7f, 0x40, 0x3c75a1f4, 0xffffffff, 0x80, 0x2, 0x7fffffff, 0x4, 0x80, 0x4, 0x9, 0x101, 0x401, 0x101, 0x80, 0x1ff, 0x8, 0x7, 0x6, 0x9, 0x200, 0xfffffff9, 0x13d, 0x9, 0x0, 0xba3, 0xfffffff8, 0x7, 0x4, 0x4, 0x4, 0x2, 0x3f, 0xec50, 0x1ff, 0x800, 0x6, 0x4, 0x7fffffff, 0x7, 0x3, 0x8, 0x7f, 0x401, 0x4, 0x9, 0x5, 0x5, 0x400, 0x2, 0x5, 0x4, 0x7fffffff, 0x2, 0x1, 0x10001, 0x100, 0xfffffff7, 0xfb4c, 0x0, 0xfffffffd, 0xfffffff8, 0x1, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x3, 0x4, 0x35, 0x6, 0xa6, 0x1, 0x10000, 0x8, 0x4, 0x4ab, 0x1000, 0x1, 0x9, 0xfffff772, 0x1, 0x4, 0x200, 0x4, 0x27780, 0xfffffffe, 0x6, 0x3f, 0xf93, 0x3, 0x1ff, 0x8, 0x8, 0x800, 0x1ff, 0x1, 0x7ff, 0x3f, 0x7fff, 0x3, 0x8, 0x3, 0x746, 0x3, 0x8000, 0x4, 0xf8, 0x4, 0x20, 0x2, 0xfffffffa, 0x9b3, 0x5, 0xffff, 0x2, 0x1, 0xbc, 0x5, 0x0, 0xd2, 0x3, 0x1f, 0xffffff80, 0x388b, 0x8, 0x6, 0x3, 0x3, 0x21c6, 0x2, 0x0, 0xa2d, 0x7, 0x6, 0x8, 0x5, 0x9, 0xff, 0x7a, 0x3, 0xd3c8, 0x2800, 0x8, 0x4, 0x4, 0x401, 0x1, 0x800, 0x6, 0x8001, 0x4, 0xffff, 0x6cc8, 0x9, 0xfff, 0x0, 0x685d, 0x80, 0x0, 0x9, 0x8, 0x3, 0x99, 0xffffffff, 0x3, 0x0, 0x4e, 0x4, 0x1000, 0x401, 0x7, 0xffff, 0x5, 0xd0, 0x0, 0x4b9, 0x9, 0x9, 0x3, 0x1, 0x80, 0x4, 0x2, 0x2, 0x81, 0xaf63, 0x6, 0x101, 0x200, 0x9, 0x7, 0x7, 0x3, 0xf43f, 0x40, 0x80000001, 0x4, 0x7f, 0x6, 0x4, 0x0, 0x6, 0x0, 0x490, 0x3, 0x101, 0xfffffff7, 0x0, 0x713fbad2, 0x81, 0x7fff, 0x8, 0x0, 0x0, 0x3d, 0x7, 0x0, 0x8576f383, 0x4, 0x5, 0x100, 0x32a9, 0xee0, 0x800, 0x4, 0x2, 0x80, 0x1, 0x3f, 0x81, 0x7f, 0x80000001, 0x9, 0x5, 0x800, 0x5, 0x0, 0x76, 0x2, 0xc8a3, 0xffffffff, 0x8, 0x7, 0x2aa, 0x8000, 0x3f, 0xcf58, 0xdd, 0x2, 0xfffffffd, 0x1, 0x6, 0x7, 0x4, 0xebf0, 0xe0d, 0x8001, 0x2, 0x8, 0x5, 0x10000, 0x2, 0x5, 0x8, 0xc6b, 0x80, 0x8, 0xad0, 0x8, 0xec2, 0xf0, 0x2, 0x8, 0x7, 0x400, 0xb5e, 0x7ff, 0x9, 0x8, 0x0, 0x200, 0xd540, 0x1, 0xfff, 0x1, 0xef4, 0x81, 0xc76d, 0x8, 0x10001, 0x693, 0x0, 0x7, 0x3ff, 0x10000, 0x1e8, 0x80, 0x2, 0x101, 0x7, 0x7, 0x1, 0xffffffe0, 0x8001, 0x1, 0x0, 0x4c, 0xffffffff, 0x5, 0x809f, 0x401, 0x6b, 0x6, 0x75, 0x7, 0x80000000, 0x5, 0x8a, 0x1, 0x0, 0x6]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x366, 0x3ff, 0x4, {0x2, 0x0, 0x5, 0x14, 0x9, 0x7f}, {0x8e, 0x0, 0x1, 0xffff, 0x1, 0xc29}, 0x5, 0x0, 0x200}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xf1b8c84e09880c9d, 0x9ecd, 0x9, 0x0, {0x20, 0x2, 0x40, 0x1, 0x41, 0xffff}, {0x5, 0x2, 0x3ff, 0x9, 0xd2}, 0x5, 0xa7d2, 0xd4b}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x79b0}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x2, 0x1ff, 0x51, 0x6, {0xe7, 0x2, 0x8, 0x5, 0x0, 0x7}, {0x1f, 0x0, 0x2, 0x7, 0x2, 0x563f}, 0x2, 0x8000, 0x80000000}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x13a3e03c}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}], [@TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x1, 0x40, 0x80000001, 0x4, 0x1, 0xfffffbdc, 0x5244, 0x8, 0x27, 0x9, 0x3, 0x5, 0x1, 0x4ed, 0x1ff, 0x4, 0xffffffff, 0x80, 0x5, 0xffffffff, 0x10000, 0x7, 0x8000, 0x10000, 0x7, 0x2c7b, 0x80, 0x0, 0xfc6, 0x9, 0x8, 0x4, 0x8, 0x8001, 0xfb, 0x3c6d, 0xe781, 0xffffffc0, 0x9, 0x6, 0x0, 0x3ff, 0x80000001, 0x401, 0x3ff, 0x8, 0x1, 0x3c7, 0x4, 0x5, 0x40, 0x1ff, 0x2, 0x6, 0x0, 0xcbf, 0x7, 0x254, 0x7ff, 0x400, 0x100, 0x20, 0x20, 0x3, 0x5, 0x80, 0x9, 0x6, 0x5, 0x7f, 0x5c7c8a96, 0x400, 0x1c00000, 0x3ff, 0xfffffffb, 0x2, 0xb7, 0x0, 0x8001, 0x9, 0x2, 0xffff, 0x8, 0x7f, 0xaf29, 0x5, 0xcd69, 0x1000, 0x80000000, 0x6, 0x8, 0x7, 0x79d7, 0x80000000, 0x7, 0x7ff, 0x80000001, 0x1, 0x2, 0xf23, 0x0, 0x2, 0x9, 0x0, 0x48, 0x1, 0xfffffff9, 0x3012, 0x3ff, 0x10000, 0x7, 0x4, 0x8, 0x1000, 0x0, 0x200, 0x8, 0xaed7, 0x59a, 0x6, 0x9, 0x0, 0x5, 0x6, 0x0, 0x0, 0x10001, 0x4, 0x6, 0x1, 0xff, 0x35d7a34c, 0x8, 0xc1aa, 0x0, 0x7, 0x6, 0x1, 0x3, 0x2, 0x7, 0x3, 0x3, 0x1, 0x40, 0x8000, 0x2, 0x0, 0x8, 0x9, 0x9, 0x9, 0x0, 0x4, 0xff, 0x3, 0x6, 0x5, 0x6, 0x4, 0x0, 0x7bd9, 0x6, 0x80000000, 0xfffffff7, 0x2, 0x2, 0x20, 0x7fffffff, 0x3, 0x6, 0xffffc999, 0x5, 0xfffffffa, 0x7, 0x4, 0xc0, 0xdfdb, 0x5, 0x5d5d, 0x0, 0x1, 0x5, 0x1, 0x8c0, 0xa649, 0x4da, 0xfffff3e6, 0x8e9, 0x1ff, 0xa2f4, 0x4, 0x3, 0x8000, 0x3, 0x200, 0x200, 0x9, 0x9, 0x0, 0x18000000, 0xd5, 0x7c, 0x9, 0x9, 0x101, 0xe834, 0x100, 0x4, 0xfffffffd, 0xfff, 0xfffff801, 0x2, 0x1f, 0x4, 0x541b, 0x8, 0x6, 0x2, 0x4, 0x40, 0x10001, 0x3, 0x5, 0xff, 0x1, 0xffff, 0x5, 0x8, 0x77, 0x1, 0x1ff, 0x10000, 0x7, 0x10000, 0xd418, 0x17fc7d33, 0x3, 0x1, 0x4, 0x6, 0x9eb, 0x0, 0x3, 0x0, 0x7, 0x3, 0x1f, 0xffffffff, 0x779, 0x2, 0xff, 0x2, 0x7fffffff, 0x8000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x80000000, 0x20, 0x91, 0x7ff, 0xffff, 0x5, 0x5, 0x7fff, 0xffff, 0x3, 0xee0f, 0x9, 0x0, 0x5, 0x7, 0x3, 0x7fff, 0x1, 0x2, 0x800, 0x81, 0x8, 0x6, 0x6, 0xfffffc00, 0x1, 0x1, 0xdf, 0x81, 0x3cf33f9, 0x1, 0x81, 0x3f, 0x8, 0x2, 0x80, 0x6, 0x1, 0x5, 0x7, 0xf051, 0xfffffff8, 0x0, 0x7, 0x7, 0xde, 0x8, 0x9, 0x4, 0x3, 0x100, 0xffff, 0xed9, 0xfffffff7, 0x9412, 0x6, 0x10000, 0x4, 0x8, 0x5, 0x9, 0x5b6a, 0xbf13, 0x3, 0x4, 0x1, 0x4, 0x1, 0x0, 0x3, 0x0, 0x4, 0x81, 0x1, 0x5, 0x5, 0xfffeffff, 0x7, 0x0, 0xffffff4d, 0x6, 0x9, 0x4, 0x6, 0x13, 0x1, 0x1, 0x3, 0x25, 0x4c, 0x5, 0x9, 0x9, 0x4, 0x0, 0x7, 0xfffffff8, 0x79, 0x8, 0xffff7fff, 0x6, 0x0, 0x3e8899aa, 0x7, 0xffff, 0xfffffe00, 0x1, 0x1000, 0x81, 0x5, 0x4, 0x5, 0x7, 0xfffffff7, 0xfff, 0x10001, 0x2, 0x10000, 0x0, 0x100, 0xb0fd, 0x2, 0x1, 0x0, 0x3f8d, 0x9427, 0xf2f5, 0x80000000, 0x0, 0x4, 0x9, 0xfffffeff, 0xffffffff, 0xfffffffd, 0x9, 0x4, 0x2, 0x6, 0xfffffffd, 0x4, 0x40, 0x7, 0x7f, 0xd3, 0x3, 0x10001, 0x4, 0x5, 0x400, 0x4, 0x5, 0x10001, 0x5, 0x4, 0x4, 0xffffffff, 0x10001, 0x80000000, 0xffffffff, 0x4000, 0x4, 0x5, 0x81, 0x1000000, 0x80000000, 0x400, 0x9, 0xf2af, 0x719, 0x5, 0x6, 0xfffffff8, 0xfffffff8, 0x72, 0x4, 0x9, 0x8000, 0x1, 0x9, 0x101, 0x9, 0x1, 0xff, 0x6b20, 0x2, 0x0, 0xee, 0x3f, 0x3, 0x10001, 0xffff, 0x80000000, 0xffff, 0x3, 0xec4e, 0x6, 0x4, 0x4, 0x0, 0x3, 0x6, 0x800, 0x1, 0x800, 0x7513b5c4, 0xfffffe00, 0x3, 0x5, 0x80000000, 0x9, 0x23e82df5, 0x4, 0xea9, 0x4, 0x5134, 0x5, 0xaee, 0x1, 0x7ff, 0x8, 0x0, 0x80000000, 0x4, 0x10000, 0x401, 0x0, 0x45d1, 0x8, 0x6d91c957, 0x6, 0x3, 0x5, 0x3, 0x800, 0xffffff7f, 0xe6, 0xf4, 0x80, 0x40, 0xa5d9, 0xfffffffa, 0x7, 0x83, 0xffff5166, 0x0, 0x17b, 0x1ff, 0x48000000, 0x2, 0x8, 0x940b, 0x4, 0x8, 0xd, 0x3f]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x80000000, 0x61, 0x7, 0xffff, 0x3, 0x9, 0x6050, 0x8, 0x87ea, 0x8001, 0x7c0, 0x0, 0x9, 0x80000001, 0x2, 0x2, 0x9, 0xd16d, 0x1, 0x46, 0xdb5, 0x1, 0x3, 0x4921c4e5, 0x7, 0x3, 0x3, 0x5d, 0x5423, 0x5, 0x1ff, 0xe79c, 0x2, 0x0, 0xffffff00, 0x7, 0x5, 0x1, 0x8000, 0x20, 0x10001, 0x0, 0x6, 0xfffffff8, 0x32, 0x780558dc, 0x4, 0xfea, 0x200, 0x6, 0x3, 0x6, 0x0, 0xfffffffa, 0x1, 0x8, 0x22, 0x4, 0x1, 0x3, 0x1f, 0x7, 0xff, 0x1000, 0x3, 0x80000000, 0x7ff, 0x5, 0x1, 0x3af4348c, 0x200000, 0x101, 0x8001, 0xfffffff7, 0x5, 0x8a, 0xfff, 0x93b, 0x2, 0x5, 0x3, 0x7, 0x100, 0x3, 0x3b3, 0xe00000, 0x80, 0x2, 0x20, 0x100, 0x7f, 0xfff, 0x6, 0xa71, 0x3ff, 0x2, 0x20, 0x200, 0x5, 0x40, 0x80000001, 0x2, 0x400, 0x2, 0x3, 0x1ff, 0x4, 0x2, 0x884a, 0x9, 0x7, 0x1, 0x295, 0x4, 0xe22b, 0x7, 0x8, 0x9, 0x400, 0x3, 0x8, 0xd79, 0x2, 0x7, 0x1, 0x0, 0xd8e2, 0x6, 0x10000, 0xf6, 0x800, 0x7, 0x6, 0x1, 0x1000, 0x401, 0x7fff, 0x18, 0x8, 0xd7a3, 0xff, 0x20, 0xa, 0x9, 0x81, 0x0, 0x8000, 0x1, 0x3, 0x1, 0x4, 0x6, 0x7ff, 0x80, 0x37, 0x2, 0x9, 0x1128, 0x6, 0xeb, 0x3ff, 0x9, 0x9, 0xffff226e, 0x2, 0x0, 0x6, 0x9, 0x4, 0xbe7, 0x3, 0xfff, 0xa8, 0xfffff800, 0x3, 0x5, 0x9, 0x0, 0x40, 0x8001, 0x1ff, 0x1, 0x9, 0x7fff, 0x8, 0x80, 0xfff, 0x10001, 0x4, 0x101, 0x7, 0xffffffff, 0xfffff000, 0x6, 0x6, 0x9, 0x3, 0x310b8afc, 0x1, 0x6, 0x37, 0x4, 0x82, 0x800, 0xffff, 0x9, 0x9, 0xecda, 0x80, 0x9, 0x4, 0x7f, 0x1, 0x7, 0xffffb5d7, 0x9, 0x400, 0x10000, 0x8bf9, 0x1f, 0x3, 0x7fffffff, 0x2e, 0x0, 0x10001, 0x5b5ea33f, 0x6, 0xfffff800, 0xffff, 0x9, 0x80000001, 0x795, 0x1, 0x7fff, 0x36cd, 0xad4, 0x1f, 0x5, 0x81, 0x2, 0x5, 0xffffffff, 0x1, 0x8, 0x8, 0xc797, 0x3, 0x1ff, 0x9, 0x1, 0x2, 0x5, 0x2, 0x5, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x81}], [], [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}]]}, {0x26, 0x6, "a301df3f4e0d07691cdaedfdf226e6dcac6e64c23017bf73bb09d0f1632ab867674a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ipt={0x108, 0x18, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}]}, {0x89, 0x6, "4350db65a1d39241e1b6de049b9d5d4d2df504ce761f39ecfcb53281480bb2b36b30dd9775558dc1380d0681a971251192d6477b80255a7091d4c8fe6d22eab43e236a74dfd44fbe372b92617812231ef86fc402713367ca2174c17419b3f610b439dc2077bc2533a03442ced879ffd0c1fe78bc67f6816c732b3e5de78f5de0ab2f8cfd76"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x118, 0x6, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4427, 0x12, 0x3, 0x8000, 0x7fffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xfffffff9, 0x2, 0x200}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1f8b, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xff, 0x7, 0x0, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9b4, 0x4, 0x3, 0x4, 0x7fffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xa6d, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe5, 0x8, 0x1, 0xd1, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x183c, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1f05, 0x1}}]}, {0x41, 0x6, "84142927445181102b00d17eae114a075c7f4ed00fefbdd30ec24dfb11469c742ef5a7e322bfcba76eb9873e436148f6c9b0e3becfc86ff451d063728b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x1d4, 0xf, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xe5, 0x8001, 0x5, 0x200, 0x7}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5, 0x3, 0x7, 0x8c}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb4fb, 0x7fff, 0x8, 0x80000001, 0x10d880}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xffff, 0x3, 0x6, 0xffffff01}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x200, 0x4, 0x81, 0x9}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0xfffffffe, 0x0, 0x3, 0x2}, 0x2, r8}}]}, {0xe6, 0x6, "421e3c33e233bdc663dfb822d65c12996fae1e6e7d2bbd33062dc635b9382d8e48ef17cf02ea09a325f0daa2d9ccbbbabf12f42263436f7258d426762b46d266463c9662f0b2b4d23dea14fbf91eae9920d081bdb4b54af92e2fccbe4ce83fe95e9410ac6068648922f14b812cfd37efbee9ea9cd9379052368979f46100c767d938dd85d2a35642cf4f4d0c190e336523145ea3eb8f049e2ac696f1795f0d797c57eb9b8254dc381399bf6247c7ff5947a5927f8eef2442284fc5464627d06850458f3beaf65914b775c0350cf85ed8b6924618146f3771a8b28c0a1b1f6943fa5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0xda0, 0x0, 0x0, 0x0, {{0xb}, {0xd08, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x0, 0x8, 0x10001, 0xd5b1, {0x7f, 0x0, 0x4, 0x2, 0x7ff, 0x3}, {0x0, 0x2, 0x81, 0x1, 0x0, 0xa9d}, 0xb0f3, 0xffe, 0x5}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x81, 0x1, 0x8000, 0x7f, 0x8, 0x4, 0x2a640000, 0x7, 0x8, 0x4, 0x7fffffff, 0x8, 0xb1, 0x80000000, 0x40000000, 0xffff, 0x40, 0xfff, 0x6, 0x8, 0x80000001, 0x2982, 0x9, 0x2, 0x8001, 0x0, 0x9, 0x7fff, 0x9, 0x6, 0xe94, 0x8, 0x4, 0x2, 0x98, 0x7, 0x1d7, 0x7, 0x2, 0x80, 0x1, 0x401, 0xfffffe00, 0x2, 0x5, 0xdfe, 0x2, 0x7fffffff, 0x1, 0x6, 0x8, 0x0, 0x4, 0x1f, 0x80000000, 0xfffffffc, 0x401, 0x0, 0x1, 0x5, 0x1f, 0x80000001, 0x1, 0x4, 0x4, 0x2, 0x81, 0x3, 0x2, 0xaf13, 0x9, 0x1, 0x6, 0x3, 0x800, 0x401, 0x81, 0x1, 0xff, 0x7, 0x80, 0x4, 0x8, 0x5, 0x7f, 0x80, 0x200, 0x20, 0x0, 0x8, 0x924, 0x8, 0x9, 0x4, 0x4, 0x6, 0x1, 0xcef, 0x1, 0x9, 0x5, 0x7, 0x7, 0x9, 0x20, 0x6, 0x6, 0x653, 0x8, 0x0, 0x1, 0x400, 0x5, 0x9, 0x3, 0x4, 0x4, 0x9, 0x7, 0x0, 0x5, 0x2, 0x10000, 0x0, 0x9, 0x3ff, 0x9, 0x800, 0x9, 0x0, 0x3ff, 0x80, 0x7, 0x0, 0x400, 0x1, 0x4, 0x1000, 0x6, 0x7, 0x3, 0xe87, 0xffff, 0xfffffff8, 0x6, 0x2, 0x7fff, 0x4, 0x4, 0x8000, 0x9, 0xbb1, 0x3, 0x10001, 0x1, 0x7fff, 0x10000, 0x8, 0x5, 0x9, 0x8000, 0x9, 0x2dc, 0x137, 0x100, 0x2, 0x9, 0x80000000, 0x0, 0x200, 0x400, 0x10001, 0x101, 0x1e81f37e, 0xc4cb625, 0x7, 0x80000000, 0x1d6, 0x4, 0xffff, 0x8, 0x4, 0x8, 0x6, 0x4, 0x72, 0x8, 0x4, 0x40, 0xff, 0x8, 0x6, 0x4, 0x0, 0x1, 0x1, 0x4680b77e, 0x4, 0x4, 0x38c7, 0x4, 0x9, 0x2, 0x1000, 0x800, 0x3, 0x6, 0x9, 0x8, 0xf2, 0x3a, 0x7, 0x8001, 0x401, 0x8, 0x60b, 0x9, 0x1, 0x40, 0xbcc1, 0x1c, 0x2, 0x9, 0x2, 0x3, 0x715, 0x7ff, 0xfff, 0x3c6034b5, 0x9d8, 0x1000, 0x80000000, 0x9, 0x0, 0x101, 0x3ff, 0x0, 0x5, 0x3, 0xce, 0x5098ab85, 0x2, 0xffffffff, 0x40, 0x45dd, 0x1, 0xa9, 0x4, 0x8000, 0x6, 0x3f, 0x1, 0x7f, 0xffffcf9f, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0xffff, 0x3, 0x5, {0x0, 0x2, 0x1, 0x0, 0x4, 0x7ff}, {0x0, 0x1, 0x4, 0x7f, 0x7, 0x5}, 0x200, 0xff, 0xe4cc0000}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x20, 0x1ff, 0xa7, 0x8000, 0x4, 0x5, 0x0, 0x1, 0x6, 0x8, 0x80, 0x2, 0x2, 0x100, 0x3, 0x4800000, 0xaf3, 0x1000, 0x2, 0x4, 0x0, 0x2, 0xff, 0x6, 0x9, 0x200, 0xd61, 0x0, 0x1, 0x7fffffff, 0x80, 0x4, 0x6, 0x101, 0x3, 0x8, 0x5, 0x9, 0x1f, 0x9, 0x2d7, 0xfbbeff, 0x200, 0x7, 0x0, 0x800, 0x400, 0x7, 0x83c7, 0x8001, 0x1, 0x200, 0x4, 0xf25, 0x90a9, 0x6, 0x3, 0xff, 0x591e9ed2, 0x1ff, 0x7, 0x7, 0x101, 0x5, 0x26d80558, 0x0, 0xc1c, 0xa089, 0xff, 0x400, 0x9, 0x6, 0x7fffffff, 0x8, 0x10001, 0x0, 0x0, 0xe50, 0x0, 0x9, 0x7fffffff, 0x6, 0xfffff56f, 0x1, 0x8, 0x5ec, 0x6, 0x4000, 0xe1, 0x8f29, 0x40, 0x200, 0x5, 0x9f, 0x0, 0x1, 0x5, 0x9, 0x4, 0x23, 0x7, 0x4, 0x3, 0x80000000, 0x8f, 0x7fffffff, 0x7, 0x400, 0x6, 0x9, 0x0, 0x4, 0x8, 0x8, 0x3, 0xd122, 0x80000001, 0x9, 0xa6a, 0x18000000, 0x3f, 0x20, 0x7, 0x9, 0x1, 0x101, 0x8, 0xffffff15, 0x6, 0x3fd, 0x3, 0x0, 0x1, 0x1, 0xa, 0xf4d, 0x7, 0x1, 0x6700000, 0x1ff, 0x1000, 0x80000000, 0x5, 0x2, 0xdd3, 0x3, 0x1, 0x1, 0x80000001, 0xfff, 0x3, 0x2eee, 0x5, 0x6, 0x40, 0x6, 0x10000, 0xfff, 0xffff, 0x9, 0x3, 0x1f, 0x200, 0x7, 0x4, 0x45b7, 0x7, 0x10000, 0xb1c, 0x6, 0x0, 0x1, 0xa4, 0xff, 0x10000, 0x15, 0x9, 0x8, 0x6, 0x6, 0xa, 0x9, 0xc243, 0xfffffffa, 0x400, 0x5, 0x20, 0x4, 0xfffffff9, 0x6, 0x4, 0x4, 0x8, 0x1, 0x9, 0x9, 0x3, 0x6, 0xac, 0xfff, 0x65, 0x7ff, 0x40, 0x76f0, 0xffffffff, 0x4, 0x7, 0x1, 0x3f, 0x9, 0x0, 0xffffffff, 0x1, 0x101, 0x5, 0x1, 0x7, 0xfffffff7, 0xffff, 0x7f, 0x6, 0x4, 0x40, 0x80000000, 0x0, 0x3c39, 0x80000001, 0x7, 0x0, 0x101, 0x3, 0x3, 0x4, 0x80000000, 0x400, 0x7, 0x200, 0x3f, 0x4, 0x2f2, 0x8a, 0x9, 0x2cc, 0x4, 0x80000000, 0x1, 0x10, 0x2, 0x5, 0x0, 0x8, 0x7, 0xffff, 0xffff, 0x7f, 0xc140]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x7, 0x1, 0xffffffff, {0x3, 0x0, 0x6, 0x4127, 0x1, 0x1000}, {0x1, 0x1, 0x5, 0x81, 0x101, 0x3}, 0x93, 0x100, 0x1f}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x93dc, 0x0, 0x15534, 0x6a, 0x8, 0x7, 0x7f, 0x81d, 0x0, 0x5, 0x20, 0x2, 0x8001, 0x1000, 0x0, 0x7ff, 0x7, 0x8001, 0x2eb3, 0x400, 0x80, 0x0, 0x7ff, 0x0, 0x4, 0x8, 0x5, 0x816, 0xffffffff, 0x84fa, 0x3, 0x6, 0x29, 0x6, 0x1, 0xb586, 0xa5, 0x3, 0x67, 0x4, 0x2, 0x0, 0x6, 0x8, 0x2, 0x9, 0x1, 0x7fffffff, 0x800, 0x3, 0xfffffffe, 0x9, 0x2, 0x1, 0x3, 0x7, 0x4, 0x1, 0x5, 0x7, 0x1, 0x1, 0x0, 0xedef, 0x7, 0x5, 0x99, 0xec7, 0x7fff, 0x2, 0x1000, 0x1, 0x8, 0x4, 0x4, 0x80, 0x7b1, 0x1000, 0x6, 0x2, 0x7, 0x1f5, 0x0, 0x7, 0x4, 0x9b1, 0xa741, 0x7, 0xfff, 0xb9ae, 0x2, 0x4, 0x400, 0x2, 0xffffffff, 0x1f, 0x1, 0x1672, 0x0, 0xf4, 0x40a, 0x10000, 0x1, 0xdea9, 0x10001, 0x1, 0x0, 0x8, 0x3, 0x1000, 0x67f, 0x6, 0x5, 0x1000, 0xff, 0x9, 0x2307e8b6, 0x7fffffff, 0x1, 0x80000001, 0x800, 0x1, 0x2, 0x8001, 0x6, 0x8001, 0x6, 0x401, 0x8, 0x80000000, 0x9, 0x0, 0x0, 0x9, 0x7, 0x83, 0x955, 0x6, 0x4, 0x2, 0x800, 0x8000, 0x7ff, 0x9, 0x8, 0x7, 0x101, 0x81, 0x3, 0x1000, 0x1, 0x8, 0x4, 0x6, 0x3, 0x5, 0x200, 0x2adf, 0x6, 0x40, 0x2, 0x4, 0x10000, 0x2, 0x71b7, 0xde7, 0x2, 0x400, 0x8001, 0x401, 0xc0, 0x1ff, 0x1, 0x201593c2, 0x2, 0x1, 0x8, 0x0, 0x1, 0x3ff, 0x3ff, 0x6, 0x8, 0x8, 0x8, 0x169b0, 0x0, 0x80000000, 0x7, 0x6, 0x80000000, 0x2, 0x800, 0x9, 0x7fff, 0x400, 0x8, 0x9, 0x400, 0x8, 0x100, 0x10001, 0x8, 0x5000000, 0x8, 0x7, 0x4, 0x2, 0x3ff, 0x5, 0x66c4, 0x5, 0x7fffffff, 0x654a, 0x9, 0x5, 0x11, 0x7, 0x40, 0x1, 0x4, 0x6, 0x5, 0x3ff, 0x3f, 0x80000000, 0x8000, 0x9, 0x0, 0x3, 0x7fffffff, 0x5, 0x7f, 0x7, 0x40, 0x6, 0x6, 0x800, 0x6, 0x7, 0x272e6bc9, 0x9, 0x6, 0x8, 0x6, 0x1d, 0x8, 0x101, 0x6f, 0x1, 0x9, 0x1, 0x7, 0x80, 0x4, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x691}]]}, {0x6f, 0x6, "2275f96f57dd30fed71a83fd62d7437c50303d4cae47b76b405542785e03186cf31ad30236a3157df6dcc85fca73cbfc444031788d9dda73e2d620e0a746ae8ae2aa5d11f93b7e9568f04d7a46b8a6b29809e1b5900e58172db4442619702d6ee5f000dac6925960746b86"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x5}}}}]}, {0x13c4, 0x1, [@m_ipt={0x11fc, 0xc, 0x0, 0x0, {{0x8}, {0x11ac, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x6a, 0x6, {0x7, 'security\x00', 0x79, 0x200, "d850185bd8828d6401564884422e644a8b116ed36989805abadcd8a22812fe9d906a5ec3831eff221d300dc7cf37a71c9682eba5d5d153a73f33af944ec7638c"}}, @TCA_IPT_TARG={0x102a, 0x6, {0x2, 'mangle\x00', 0x8, 0x58d, "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"}}, @TCA_IPT_TARG={0x8b, 0x6, {0x7, 'mangle\x00', 0xdb, 0x5, "f21be647757d145864ae8e496afdc1505d8a12d685ae6157832e2e8051a1753d31553514ec40f125c70c8da9c26a791c5615be63a2f1c4412e81fade65202999cabc8b731acd1adf2d00a1b67e5856882e4f390c04c70dccda0126298a3af48ee2"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x101}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x2a, 0x6, "a151675001b3fcd673ce286f6c901d9ca6a49dea94ab2b3a951d4fe682baf1da0c02f07e2b0e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_ct={0x8c, 0x2, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010100}, @TCA_CT_ACTION={0x6, 0x3, 0xa}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xcc0}, @TCA_CT_MARK={0x8, 0x5, 0x2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x42}}]}, {0xf, 0x6, "7376e1ddab4bb690839acf"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x138, 0x1d, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x4272}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x28}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7ff}, @TCA_CT_ZONE={0x6, 0x4, 0x20}, @TCA_CT_LABELS_MASK={0x14, 0x8, "b46a3c3ec8f9754e47efa857b5f46edc"}, @TCA_CT_PARMS={0x18, 0x1, {0x8, 0x2, 0xffffffffffffffff, 0x8c, 0x9}}]}, {0xa2, 0x6, "82bf646ff3ea6e9a9e619422068f0298c9196e6348879adfd9306e2adff3be79d1a57017ce659044231304bc2676b4cf6f2c479f4466721b0e9dd54503b8c7c5410488ebc4fbcbebe9bf13b3d7e2e0d9b75638b33a95f457d2ff8c70a911cdc0c5530229a46928c22b3e9d679dd8f818e43a32a51484caa562b4d498b47eb281d726f74433a39afd1edf5b4b9693783ce035b9906ba0f4bcbd34a4f0a708"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x1c0, 0x1, [@m_mpls={0x144, 0x16, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xffffffff, 0x4, 0x0, 0xc6}, 0x3}}]}, {0xfc, 0x6, "12a7e4925b01136f7acf3c840fdac96dd3282b8616548275cfb21ec20ed7d323784e01f4cff9da17220536d121157201fa9d3777c88da71d13d76892ec97c37b063106ddfc4ac77fe3e3728eee76300033d193c024b2849e0dd8ecee67c370ab6eb621e7b3a4b56a84fcbc10e6d19dd28549e0bcf08bcd170af83075527ddf30107134bce612044f9b6f5d658575b92fbe481ea2b2c748d6a651271a411d364b3f48791d98188dc7f72d391d70564431c66d048b1f6cf44f6660f82ab6212041565877c6c3eb960a1dfee75112ab44c925438482ece79ccc7ea65371f88d6a8a05747fcc02ea9453853a75a3ddb495cb7e3e4389a066ffa3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x78, 0x1f, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x13d2, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1f46, 0xffffffffffffffff}}]}, {0x31, 0x6, "7136956f26bc025ac21319c01368ef8631dcdf0fb63ebbc68dd5239563ef7a89b7770ee953ae7001139fd1d331"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}]}, {0x4}]}, 0x6644}, 0x1, 0x0, 0x0, 0x40440d4}, 0x1) (async) write$rfkill(r0, &(0x7f0000000080)={0x4}, 0x8) (async) 09:12:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x9}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x612481) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0x20000000}) (async) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1f, 0x210200) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000100)={0x9, 0x1, 0x1}) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:38 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x9e, 0x2}, 0xfeb4) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) write$rfkill(r0, &(0x7f0000000080)={0x9e, 0x2}, 0xfeb4) (async) 09:12:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xe6d, 0x280) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 09:12:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0xa}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x22c01) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x44982) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x0, 0x80000001}) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000400)=ANY=[@ANYBLOB="0400000000000000050000000000000062040000000000000200000000000000ff00000000000000098095000000000008000000000000000000000000000000000000000700000000000000040105ce0000000007000000000000000000000000000043ca00000000000000000000020000000005000000000000000600000000000000f7ffffffffffffffff20041f00000000020000000000000000000000b385000000000000000000000000000000000000b408000000000000a4230000000000000300000000000000030f207f000000000400000000000000000000000000000000000000007e5d95dfe10000000000000000ffff002e830000000000000400000000000003000000000000000012047f0700000000ffffffffffffffff00000000000000000000000000000000000000946bc0a708f539e07c0f777cbbafc049a7af6e000000000000000000000000000b764d4d273db07a42dfe379f4f0857743a04567734de14de9f1acd27540795528488af79c0d98de088b659711b5ec43ec4c25d76e76d04c3bfbdf25a63790ba9bd8564ec0757c5244687977724cdf299f90097992397329003c056660dfcacc9d516275634710f238e422ab982c1b9d1b7158aa4945741e92e3920d1b2f532632eb57a252fbde1a0e9da1f33ce7f0b33a26f771c6f3fa87ba00fdd2d11265c279c3015bec1f3e9a0c03b934612c51d21642cb2600161efd7e37eb376e7933ee52c87787a346595cfa8a14d3011d7670984cff3f3978a32d3baebff44123c77bff6dc0"]) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000240)) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000100)) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x14302, 0x0) write$rfkill(r3, &(0x7f0000000080)={0xfffffffe, 0xfc, 0x0, 0x8}, 0x8) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000180)=0x100000000) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000140)) 09:12:38 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) 09:12:38 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x9e, 0x2}, 0xfeb4) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) write$rfkill(r0, &(0x7f0000000080)={0x9e, 0x2}, 0xfeb4) (async) 09:12:38 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) 09:12:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4800}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0xb}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x22c01) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x44982) (async, rerun: 64) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x0, 0x80000001}) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) (async) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000240)) (async, rerun: 64) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000100)) (async, rerun: 64) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x14302, 0x0) write$rfkill(r3, &(0x7f0000000080)={0xfffffffe, 0xfc, 0x0, 0x8}, 0x8) (async) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000180)=0x100000000) (async) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000140)) 09:12:38 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x4, 0x16000) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) 09:12:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4c00}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async, rerun: 64) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) (rerun: 64) 09:12:38 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xe6d, 0x280) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 09:12:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0xc}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x4, 0x16000) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) syz_open_dev$vcsn(&(0x7f00000000c0), 0x4, 0x16000) (async) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) (async) 09:12:38 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x22c01) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x44982) (async) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) (async, rerun: 32) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x0, 0x80000001}) (async, rerun: 32) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000400)=ANY=[@ANYBLOB="0400000000000000050000000000000062040000000000000200000000000000ff00000000000000098095000000000008000000000000000000000000000000000000000700000000000000040105ce0000000007000000000000000000000000000043ca00000000000000000000020000000005000000000000000600000000000000f7ffffffffffffffff20041f00000000020000000000000000000000b385000000000000000000000000000000000000b408000000000000a4230000000000000300000000000000030f207f000000000400000000000000000000000000000000000000007e5d95dfe10000000000000000ffff002e830000000000000400000000000003000000000000000012047f0700000000ffffffffffffffff00000000000000000000000000000000000000946bc0a708f539e07c0f777cbbafc049a7af6e000000000000000000000000000b764d4d273db07a42dfe379f4f0857743a04567734de14de9f1acd27540795528488af79c0d98de088b659711b5ec43ec4c25d76e76d04c3bfbdf25a63790ba9bd8564ec0757c5244687977724cdf299f90097992397329003c056660dfcacc9d516275634710f238e422ab982c1b9d1b7158aa4945741e92e3920d1b2f532632eb57a252fbde1a0e9da1f33ce7f0b33a26f771c6f3fa87ba00fdd2d11265c279c3015bec1f3e9a0c03b934612c51d21642cb2600161efd7e37eb376e7933ee52c87787a346595cfa8a14d3011d7670984cff3f3978a32d3baebff44123c77bff6dc0"]) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000240)) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000100)) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x14302, 0x0) write$rfkill(r3, &(0x7f0000000080)={0xfffffffe, 0xfc, 0x0, 0x8}, 0x8) (async, rerun: 64) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000180)=0x100000000) (rerun: 64) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000140)) 09:12:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6800}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000}) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6c00}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0xd}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000}) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:38 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xe6d, 0x280) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) syz_open_dev$vcsn(&(0x7f0000000000), 0xe6d, 0x280) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) (async) 09:12:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7400}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000}) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000}) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) 09:12:38 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) 09:12:38 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x4, 0x16000) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) 09:12:38 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) (async) 09:12:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x77}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x801) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r3, &(0x7f0000000080), 0x87fff78) 09:12:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0xe}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x2401) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x10001, 0x0, &(0x7f0000000000)=[r0, r1, r2]}, 0x3) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa07}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6023}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 09:12:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7a00}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x40000) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) recvfrom$packet(r0, &(0x7f00000000c0)=""/254, 0xfe, 0x40002000, &(0x7f0000000240)={0x11, 0x17, r1, 0x1, 0x7f, 0x6, @local}, 0x14) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r2, &(0x7f0000000080)={0x7ffd, 0x0, 0x0, 0x0, 0x6}, 0x8) syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x24200) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x240440d1) 09:12:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x77}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x801) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r3, &(0x7f0000000080), 0x87fff78) 09:12:38 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) 09:12:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x40000) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) recvfrom$packet(r0, &(0x7f00000000c0)=""/254, 0xfe, 0x40002000, &(0x7f0000000240)={0x11, 0x17, r1, 0x1, 0x7f, 0x6, @local}, 0x14) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r2, &(0x7f0000000080)={0x7ffd, 0x0, 0x0, 0x0, 0x6}, 0x8) syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x24200) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x240440d1) 09:12:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x77}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x801) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r3, &(0x7f0000000080), 0x87fff78) 09:12:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd500}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x2401) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x10001, 0x0, &(0x7f0000000000)=[r0, r1, r2]}, 0x3) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa07}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6023}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 09:12:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfe03}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x2401) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x10001, 0x0, &(0x7f0000000000)=[r0, r1, r2]}, 0x3) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa07}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6023}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x2401) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x10001, 0x0, &(0x7f0000000000)=[r0, r1, r2]}, 0x3) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) socket$netlink(0x10, 0x3, 0x4) (async) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa07}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6023}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) 09:12:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000002c0)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/177, 0xb1}) write$rfkill(r1, &(0x7f0000000080), 0xf78) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newrule={0x34, 0x20, 0x100, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x0, 0x81, 0x40, 0x0, 0x0, 0x0, 0x20012}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010102}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x1}, @FRA_DST={0x8, 0x1, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000089}, 0x1) syz_open_dev$usbmon(&(0x7f0000000300), 0x2, 0x80002) 09:12:38 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) 09:12:38 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x40000) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) recvfrom$packet(r0, &(0x7f00000000c0)=""/254, 0xfe, 0x40002000, &(0x7f0000000240)={0x11, 0x17, r1, 0x1, 0x7f, 0x6, @local}, 0x14) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r2, &(0x7f0000000080)={0x7ffd, 0x0, 0x0, 0x0, 0x6}, 0x8) syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x24200) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x240440d1) syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x40000) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) (async) recvfrom$packet(r0, &(0x7f00000000c0)=""/254, 0xfe, 0x40002000, &(0x7f0000000240)={0x11, 0x17, r1, 0x1, 0x7f, 0x6, @local}, 0x14) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r2, &(0x7f0000000080)={0x7ffd, 0x0, 0x0, 0x0, 0x6}, 0x8) (async) syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x24200) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x240440d1) (async) 09:12:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff00}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r1}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x20}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5d9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000002c0)=0x4) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/177, 0xb1}) (async) write$rfkill(r1, &(0x7f0000000080), 0xf78) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newrule={0x34, 0x20, 0x100, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x0, 0x81, 0x40, 0x0, 0x0, 0x0, 0x20012}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010102}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x1}, @FRA_DST={0x8, 0x1, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000089}, 0x1) (async) syz_open_dev$usbmon(&(0x7f0000000300), 0x2, 0x80002) 09:12:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}}) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2500) write$rfkill(r1, &(0x7f0000000080), 0x7ffff000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 09:12:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) 09:12:38 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r1}, 0x14}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x20}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5d9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ed688}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000002c0)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async, rerun: 64) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/177, 0xb1}) (async) write$rfkill(r1, &(0x7f0000000080), 0xf78) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newrule={0x34, 0x20, 0x100, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x0, 0x81, 0x40, 0x0, 0x0, 0x0, 0x20012}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010102}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x1}, @FRA_DST={0x8, 0x1, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000089}, 0x1) (async, rerun: 32) syz_open_dev$usbmon(&(0x7f0000000300), 0x2, 0x80002) 09:12:38 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) 09:12:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}}) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2500) write$rfkill(r1, &(0x7f0000000080), 0x7ffff000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 09:12:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r1}, 0x14}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x20}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5d9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}}) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2500) write$rfkill(r1, &(0x7f0000000080), 0x7ffff000) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 09:12:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = syz_io_uring_setup(0x79e, &(0x7f0000000040)={0x0, 0x606d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x20000014}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) syz_io_uring_setup(0x728b, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x40, {0x0, r0}, 0x80000001, 0x7, 0x0, {0x0, 0x0, r0}}, 0xffffff80) r5 = syz_io_uring_setup(0x54b1, &(0x7f0000000140)={0x0, 0x5819, 0x8, 0x1, 0x79}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_enter(r5, 0x48b3, 0x2d59, 0x3, &(0x7f0000000240)={[0xffffffffffffffff]}, 0x8) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x10, 0x4) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_enter(r6, 0x604, 0x57b, 0x0, &(0x7f0000000300)={[0x69c]}, 0x8) 09:12:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd8, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x45}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x63}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040040}, 0x400c0) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r4, &(0x7f0000000040), 0x8) 09:12:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:38 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x80000000, 0x3f}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x7, 0x0, 0x0, 0xff}, 0x8) 09:12:39 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = syz_io_uring_setup(0x79e, &(0x7f0000000040)={0x0, 0x606d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x20000014}) (async) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) syz_io_uring_setup(0x728b, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x40, {0x0, r0}, 0x80000001, 0x7, 0x0, {0x0, 0x0, r0}}, 0xffffff80) r5 = syz_io_uring_setup(0x54b1, &(0x7f0000000140)={0x0, 0x5819, 0x8, 0x1, 0x79}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_enter(r5, 0x48b3, 0x2d59, 0x3, &(0x7f0000000240)={[0xffffffffffffffff]}, 0x8) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x10, 0x4) (async) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) io_uring_enter(r6, 0x604, 0x57b, 0x0, &(0x7f0000000300)={[0x69c]}, 0x8) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x80000000, 0x3f}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x7, 0x0, 0x0, 0xff}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x80000000, 0x3f}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x7, 0x0, 0x0, 0xff}, 0x8) (async) 09:12:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd8, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x45}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x63}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040040}, 0x400c0) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r4, &(0x7f0000000040), 0x8) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 4: getitimer(0x1, &(0x7f0000000040)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ack_update_msk\x00', r0}, 0x10) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd8, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x45}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x63}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040040}, 0x400c0) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r4, &(0x7f0000000040), 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd8, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x45}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x63}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040040}, 0x400c0) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r4, &(0x7f0000000040), 0x8) (async) 09:12:39 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = syz_io_uring_setup(0x79e, &(0x7f0000000040)={0x0, 0x606d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x20000014}) (async) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) syz_io_uring_setup(0x728b, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x40, {0x0, r0}, 0x80000001, 0x7, 0x0, {0x0, 0x0, r0}}, 0xffffff80) r5 = syz_io_uring_setup(0x54b1, &(0x7f0000000140)={0x0, 0x5819, 0x8, 0x1, 0x79}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_enter(r5, 0x48b3, 0x2d59, 0x3, &(0x7f0000000240)={[0xffffffffffffffff]}, 0x8) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x10, 0x4) (async) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) io_uring_enter(r6, 0x604, 0x57b, 0x0, &(0x7f0000000300)={[0x69c]}, 0x8) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x80000000, 0x3f}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x7, 0x0, 0x0, 0xff}, 0x8) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10}) 09:12:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x875cf60e90a34964) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x18, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r3, &(0x7f0000000080), 0x87fff78) 09:12:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) r2 = gettid() syz_open_procfs$namespace(r2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000000000000b2c103243a77edc32a4bb4e34eb44809f711baa9f7fb217be85c62d4c9ba93100af4696be3068c3304f9a39c5046071ec0da1656a7810000bfed103b1099fa6882e19ea01be023660ad7507288fa6b7f4e45d0fbefce0a14132f39fd3b873a29a95a09b3dbffffffffb76c50f3942af68ba524d4102e6bb2573bcc3aa2a41bf44bb2aee3de8d4c1f7891f93bc3aa4dc2a2936a80c092e4daa47d0fc1b6e9fb13c97a0600000068a6a04ab07b3e6df45ba0f34c83eb8b7146251cb33dd8dd1575365d889e9dc41ab6891f66d881c809037147"], 0x14}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) accept4(r5, &(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x80, 0x0) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000280)='ns/pid\x00') io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@RTM_NEWNSID={0x34, 0x58, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_PID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x8000) write$rfkill(r0, &(0x7f0000000080)={0x100000}, 0x8) 09:12:39 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10}) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0xa}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 4: getitimer(0x1, &(0x7f0000000040)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ack_update_msk\x00', r0}, 0x10) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) getitimer(0x1, &(0x7f0000000040)) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2401) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ack_update_msk\x00', r0}, 0x10) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) 09:12:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x875cf60e90a34964) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x18, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r3, &(0x7f0000000080), 0x87fff78) 09:12:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) (async, rerun: 32) r2 = gettid() (rerun: 32) syz_open_procfs$namespace(r2, 0x0) (async, rerun: 32) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000000000000b2c103243a77edc32a4bb4e34eb44809f711baa9f7fb217be85c62d4c9ba93100af4696be3068c3304f9a39c5046071ec0da1656a7810000bfed103b1099fa6882e19ea01be023660ad7507288fa6b7f4e45d0fbefce0a14132f39fd3b873a29a95a09b3dbffffffffb76c50f3942af68ba524d4102e6bb2573bcc3aa2a41bf44bb2aee3de8d4c1f7891f93bc3aa4dc2a2936a80c092e4daa47d0fc1b6e9fb13c97a0600000068a6a04ab07b3e6df45ba0f34c83eb8b7146251cb33dd8dd1575365d889e9dc41ab6891f66d881c809037147"], 0x14}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) accept4(r5, &(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x80, 0x0) (async) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000280)='ns/pid\x00') (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@RTM_NEWNSID={0x34, 0x58, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_PID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x8000) (async, rerun: 32) write$rfkill(r0, &(0x7f0000000080)={0x100000}, 0x8) (rerun: 32) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10}) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0xb}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) write$rfkill(r0, &(0x7f0000000080)={0x10000000, 0x0, 0x2}, 0x8) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0xc}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) r2 = gettid() syz_open_procfs$namespace(r2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000000000000b2c103243a77edc32a4bb4e34eb44809f711baa9f7fb217be85c62d4c9ba93100af4696be3068c3304f9a39c5046071ec0da1656a7810000bfed103b1099fa6882e19ea01be023660ad7507288fa6b7f4e45d0fbefce0a14132f39fd3b873a29a95a09b3dbffffffffb76c50f3942af68ba524d4102e6bb2573bcc3aa2a41bf44bb2aee3de8d4c1f7891f93bc3aa4dc2a2936a80c092e4daa47d0fc1b6e9fb13c97a0600000068a6a04ab07b3e6df45ba0f34c83eb8b7146251cb33dd8dd1575365d889e9dc41ab6891f66d881c809037147"], 0x14}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) accept4(r5, &(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x80, 0x0) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000280)='ns/pid\x00') io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@RTM_NEWNSID={0x34, 0x58, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_PID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x8000) write$rfkill(r0, &(0x7f0000000080)={0x100000}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) (async) gettid() (async) syz_open_procfs$namespace(r2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000000000000b2c103243a77edc32a4bb4e34eb44809f711baa9f7fb217be85c62d4c9ba93100af4696be3068c3304f9a39c5046071ec0da1656a7810000bfed103b1099fa6882e19ea01be023660ad7507288fa6b7f4e45d0fbefce0a14132f39fd3b873a29a95a09b3dbffffffffb76c50f3942af68ba524d4102e6bb2573bcc3aa2a41bf44bb2aee3de8d4c1f7891f93bc3aa4dc2a2936a80c092e4daa47d0fc1b6e9fb13c97a0600000068a6a04ab07b3e6df45ba0f34c83eb8b7146251cb33dd8dd1575365d889e9dc41ab6891f66d881c809037147"], 0x14}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) accept4(r5, &(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x80, 0x0) (async) gettid() (async) syz_open_procfs$namespace(r6, &(0x7f0000000280)='ns/pid\x00') (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@RTM_NEWNSID={0x34, 0x58, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_PID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x8000) (async) write$rfkill(r0, &(0x7f0000000080)={0x100000}, 0x8) (async) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) (async) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) write$rfkill(r0, &(0x7f0000000080)={0x10000000, 0x0, 0x2}, 0x8) 09:12:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x875cf60e90a34964) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x18, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async, rerun: 32) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (rerun: 32) write$rfkill(r3, &(0x7f0000000080), 0x87fff78) 09:12:39 executing program 4: getitimer(0x1, &(0x7f0000000040)) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ack_update_msk\x00', r0}, 0x10) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) read$rfkill(r0, &(0x7f0000000040), 0x8) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0xd}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) (async) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) write$rfkill(r0, &(0x7f0000000080)={0x10000000, 0x0, 0x2}, 0x8) 09:12:39 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x40}, 0x8) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0xe}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) read$rfkill(r0, &(0x7f0000000040), 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) read$rfkill(r0, &(0x7f0000000040), 0x8) (async) 09:12:39 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x40}, 0x8) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) read$rfkill(r0, &(0x7f0000000040), 0x8) 09:12:39 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async, rerun: 64) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x40}, 0x8) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0xf78) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfff, 0x96001) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getanyicast={0x14, 0x3e, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) 09:12:39 executing program 3: sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048140) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYBLOB="010000000000000000001f00000008005bf778729a363d1e63eb0200ecd874f7085e86a81f339fab5e5ccad77ef0e5109dd01499b3e79d7b14047106d8eefd894ff6d1a300d09b0a521a5ac2d327616448bd50fb9b", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c040}, 0x40000) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x4c}}, 0x40089) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r9, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r10, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r10, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x40}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008080}, 0x40) write$rfkill(r7, &(0x7f0000000080), 0xfffffdef) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0xf78) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x95}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc33}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x911) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0xf78) 09:12:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfff, 0x96001) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getanyicast={0x14, 0x3e, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfff, 0x96001) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getanyicast={0x14, 0x3e, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) 09:12:39 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x95}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc33}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x911) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 3: sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048140) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYBLOB="010000000000000000001f00000008005bf778729a363d1e63eb0200ecd874f7085e86a81f339fab5e5ccad77ef0e5109dd01499b3e79d7b14047106d8eefd894ff6d1a300d09b0a521a5ac2d327616448bd50fb9b", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c040}, 0x40000) (async) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x4c}}, 0x40089) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r9, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r10, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r10, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x40}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008080}, 0x40) (async) write$rfkill(r7, &(0x7f0000000080), 0xfffffdef) 09:12:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000000c0)={{0x2, 0x3, 0x20, 0x2, 0x20}, 0x0, 0x80, 'id1\x00', 'timer0\x00', 0x0, 0x2000, 0x8, 0x4, 0x4c82}) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000040)={0x8cb5}) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) r1 = syz_io_uring_setup(0x263a, &(0x7f00000000c0)={0x0, 0xb93, 0x28, 0x0, 0x1a0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x1, 0x0, 0x1, {0x0, r4}}, 0x81) io_uring_setup(0x3dbc, &(0x7f0000000280)={0x0, 0x98be, 0x0, 0x0, 0x2ec, 0x0, r2}) connect$packet(r2, &(0x7f0000000380)={0x11, 0x10, 0x0, 0x1, 0x7, 0x6, @local}, 0x14) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x78f) 09:12:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000000c0)={{0x2, 0x3, 0x20, 0x2, 0x20}, 0x0, 0x80, 'id1\x00', 'timer0\x00', 0x0, 0x2000, 0x8, 0x4, 0x4c82}) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000040)={0x8cb5}) write$rfkill(r0, &(0x7f0000000080), 0xf78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000000c0)={{0x2, 0x3, 0x20, 0x2, 0x20}, 0x0, 0x80, 'id1\x00', 'timer0\x00', 0x0, 0x2000, 0x8, 0x4, 0x4c82}) (async) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) (async) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000040)={0x8cb5}) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) 09:12:39 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x95}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc33}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x911) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x95}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc33}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x911) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000000c0)={{0x2, 0x3, 0x20, 0x2, 0x20}, 0x0, 0x80, 'id1\x00', 'timer0\x00', 0x0, 0x2000, 0x8, 0x4, 0x4c82}) (async) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000040)={0x8cb5}) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:39 executing program 3: sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048140) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYBLOB="010000000000000000001f00000008005bf778729a363d1e63eb0200ecd874f7085e86a81f339fab5e5ccad77ef0e5109dd01499b3e79d7b14047106d8eefd894ff6d1a300d09b0a521a5ac2d327616448bd50fb9b", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c040}, 0x40000) (async) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x4c}}, 0x40089) (async) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r9, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r10, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r10, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x40}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008080}, 0x40) (async, rerun: 32) write$rfkill(r7, &(0x7f0000000080), 0xfffffdef) (rerun: 32) 09:12:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x9, 0x7f}, 0x0, 0x8, 0x4116, {0x3}, 0x5, 0x9}) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) read$rfkill(r1, &(0x7f0000000040), 0x8) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) r1 = syz_io_uring_setup(0x263a, &(0x7f00000000c0)={0x0, 0xb93, 0x28, 0x0, 0x1a0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x1, 0x0, 0x1, {0x0, r4}}, 0x81) io_uring_setup(0x3dbc, &(0x7f0000000280)={0x0, 0x98be, 0x0, 0x0, 0x2ec, 0x0, r2}) connect$packet(r2, &(0x7f0000000380)={0x11, 0x10, 0x0, 0x1, 0x7, 0x6, @local}, 0x14) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x78f) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) syz_io_uring_setup(0x263a, &(0x7f00000000c0)={0x0, 0xb93, 0x28, 0x0, 0x1a0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) (async) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x1, 0x0, 0x1, {0x0, r4}}, 0x81) (async) io_uring_setup(0x3dbc, &(0x7f0000000280)={0x0, 0x98be, 0x0, 0x0, 0x2ec, 0x0, r2}) (async) connect$packet(r2, &(0x7f0000000380)={0x11, 0x10, 0x0, 0x1, 0x7, 0x6, @local}, 0x14) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r4) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) (async) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x78f) (async) 09:12:39 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000000}) 09:12:39 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0x7fe0, 0x0, 'client1\x00', 0xffffffff80000006, "3b6121948213551b", "265f348835c14ecf5626403158848f0abe9385d3ac40d27a04d25cebf2c13aac", 0x7, 0x8}) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x11000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x9, 0x7f}, 0x0, 0x8, 0x4116, {0x3}, 0x5, 0x9}) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) read$rfkill(r1, &(0x7f0000000040), 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x9, 0x7f}, 0x0, 0x8, 0x4116, {0x3}, 0x5, 0x9}) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) read$rfkill(r1, &(0x7f0000000040), 0x8) (async) 09:12:39 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000000}) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x12000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) r1 = syz_io_uring_setup(0x263a, &(0x7f00000000c0)={0x0, 0xb93, 0x28, 0x0, 0x1a0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) (async) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x1, 0x0, 0x1, {0x0, r4}}, 0x81) io_uring_setup(0x3dbc, &(0x7f0000000280)={0x0, 0x98be, 0x0, 0x0, 0x2ec, 0x0, r2}) (async) connect$packet(r2, &(0x7f0000000380)={0x11, 0x10, 0x0, 0x1, 0x7, 0x6, @local}, 0x14) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) (async) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x78f) 09:12:39 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0x7fe0, 0x0, 'client1\x00', 0xffffffff80000006, "3b6121948213551b", "265f348835c14ecf5626403158848f0abe9385d3ac40d27a04d25cebf2c13aac", 0x7, 0x8}) 09:12:39 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000000}) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000000}) (async) 09:12:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) syz_open_dev$vcsn(&(0x7f00000000c0), 0x2, 0x80) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x100000001, 0x80000) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000040)) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000180)=0x39) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000140)) ioctl$BLKPG(r4, 0x1269, &(0x7f00000003c0)={0xfff, 0x3, 0x89, &(0x7f0000000300)="7ff9127b1d225906be7f8fa719f5aa8c691448534841f167f75649a0f6021cc21543ac4718130bd12e0280d784ee444e2faaca9ed8bb6263536611ed18f0007dcb8aacaeee2b8281c036d388febb9cae1d11fc572ce45d12fa94275dbe7ab40d0f9358ef7919624cf6ed660b82e175c511f9f2e6a470076232ccfa292c4dc488bd553f03049fd6477f"}) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x9, 0x7f}, 0x0, 0x8, 0x4116, {0x3}, 0x5, 0x9}) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) read$rfkill(r1, &(0x7f0000000040), 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x9, 0x7f}, 0x0, 0x8, 0x4116, {0x3}, 0x5, 0x9}) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) read$rfkill(r1, &(0x7f0000000040), 0x8) (async) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0x7fe0, 0x0, 'client1\x00', 0xffffffff80000006, "3b6121948213551b", "265f348835c14ecf5626403158848f0abe9385d3ac40d27a04d25cebf2c13aac", 0x7, 0x8}) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 3: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xfffffdef) 09:12:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) syz_open_dev$vcsn(&(0x7f00000000c0), 0x2, 0x80) (async) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) (async, rerun: 32) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (rerun: 32) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x100000001, 0x80000) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000180)=0x39) (async) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000140)) ioctl$BLKPG(r4, 0x1269, &(0x7f00000003c0)={0xfff, 0x3, 0x89, &(0x7f0000000300)="7ff9127b1d225906be7f8fa719f5aa8c691448534841f167f75649a0f6021cc21543ac4718130bd12e0280d784ee444e2faaca9ed8bb6263536611ed18f0007dcb8aacaeee2b8281c036d388febb9cae1d11fc572ce45d12fa94275dbe7ab40d0f9358ef7919624cf6ed660b82e175c511f9f2e6a470076232ccfa292c4dc488bd553f03049fd6477f"}) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 09:12:39 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = io_uring_setup(0x81d, &(0x7f00000000c0)={0x0, 0x4844, 0x2, 0x3, 0xc4, 0x0, r0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14200000", @ANYRES16=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00'], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x20040000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getqdisc={0x28, 0x26, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff2, 0x8}, {0xc, 0xfff3}, {0x7, 0xb}}, [{0x4}]}, 0x28}}, 0x80) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) epoll_wait(r6, &(0x7f00000003c0)=[{}], 0x1, 0x4) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BLKROTATIONAL(r6, 0x127e, &(0x7f0000000440)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000040)={0x6000000c}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x20010, r1, 0x8000000) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xa}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) syz_open_dev$vcsn(&(0x7f00000000c0), 0x2, 0x80) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) (async, rerun: 64) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x100000001, 0x80000) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000040)) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000180)=0x39) (async) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000140)) (async, rerun: 64) ioctl$BLKPG(r4, 0x1269, &(0x7f00000003c0)={0xfff, 0x3, 0x89, &(0x7f0000000300)="7ff9127b1d225906be7f8fa719f5aa8c691448534841f167f75649a0f6021cc21543ac4718130bd12e0280d784ee444e2faaca9ed8bb6263536611ed18f0007dcb8aacaeee2b8281c036d388febb9cae1d11fc572ce45d12fa94275dbe7ab40d0f9358ef7919624cf6ed660b82e175c511f9f2e6a470076232ccfa292c4dc488bd553f03049fd6477f"}) (async, rerun: 64) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 09:12:39 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) r1 = io_uring_setup(0x81d, &(0x7f00000000c0)={0x0, 0x4844, 0x2, 0x3, 0xc4, 0x0, r0}) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14200000", @ANYRES16=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00'], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x20040000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getqdisc={0x28, 0x26, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff2, 0x8}, {0xc, 0xfff3}, {0x7, 0xb}}, [{0x4}]}, 0x28}}, 0x80) (async) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) epoll_wait(r6, &(0x7f00000003c0)=[{}], 0x1, 0x4) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) ioctl$BLKROTATIONAL(r6, 0x127e, &(0x7f0000000440)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000040)={0x6000000c}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x20010, r1, 0x8000000) 09:12:39 executing program 3: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xfffffdef) 09:12:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xb, 0x7ba001) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) connect$packet(r0, &(0x7f0000000400)={0x11, 0x905201d39d63a96d, 0x0, 0x1, 0x8, 0x6, @local}, 0x14) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000100c30000000080000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000940)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r6 = gettid() r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x91da0c5c15d5929}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0x40) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) epoll_wait(r8, &(0x7f00000003c0)=[{}], 0x1, 0x4) kcmp$KCMP_EPOLL_TFD(0x0, r6, 0x7, r7, &(0x7f00000000c0)={r8, r0, 0xfffffffb}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xf6, r5, 0x1, 0x3f, 0x6, @remote}, 0x14) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xb}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x25000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = io_uring_setup(0x81d, &(0x7f00000000c0)={0x0, 0x4844, 0x2, 0x3, 0xc4, 0x0, r0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14200000", @ANYRES16=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00'], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x20040000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getqdisc={0x28, 0x26, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff2, 0x8}, {0xc, 0xfff3}, {0x7, 0xb}}, [{0x4}]}, 0x28}}, 0x80) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) epoll_wait(r6, &(0x7f00000003c0)=[{}], 0x1, 0x4) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BLKROTATIONAL(r6, 0x127e, &(0x7f0000000440)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000040)={0x6000000c}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x20010, r1, 0x8000000) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) io_uring_setup(0x81d, &(0x7f00000000c0)={0x0, 0x4844, 0x2, 0x3, 0xc4, 0x0, r0}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14200000", @ANYRES16=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00'], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x20040000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getqdisc={0x28, 0x26, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff2, 0x8}, {0xc, 0xfff3}, {0x7, 0xb}}, [{0x4}]}, 0x28}}, 0x80) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) epoll_wait(r6, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) ioctl$BLKROTATIONAL(r6, 0x127e, &(0x7f0000000440)) (async) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000040)={0x6000000c}) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x20010, r1, 0x8000000) (async) 09:12:39 executing program 3: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xfffffdef) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xc}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="e0200000", @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf2501000000140002007767310000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843080007006800000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e060006004e22000008000500000000000800050001000000240003000000000000000000000000000000000000000000000000000000000000000000080005000100000024000300"/218], 0xe0}, 0x1, 0x0, 0x0, 0x24000000}, 0x4080) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000003c0)=[{}], 0x1, 0x4) r4 = syz_io_uring_setup(0x4d4a, &(0x7f0000000340)={0x0, 0x3e99, 0x10, 0x3, 0x1c8, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@struct={0x4, 0x7, 0x0, 0x4, 0x1, 0x0, [{0xb, 0x5, 0x8}, {0x7, 0x0, 0xfff}, {0xf, 0x1, 0x296}, {0x4, 0x0, 0x7fffffff}, {0x91, 0x3, 0x9}, {0x7, 0x0, 0x4}, {0x1, 0x2, 0x9}]}, @const={0xa, 0x0, 0x0, 0xa, 0x3}, @typedef={0x2, 0x0, 0x0, 0x8, 0x4}, @ptr={0x1}]}, {0x0, [0x30]}}, &(0x7f0000000580)=""/27, 0x9f, 0x1b, 0x1}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES8=r1, @ANYBLOB="0000200500000000000000000000fc07000000937fe403ffffffffa1"], 0x14}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000640)={0x5, 0x0, &(0x7f0000000600)=[r4, r5, r6, r7, r0, r8, r1, r9, r1]}, 0x9) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000280)={0x5, 0x75, 0x0, 'queue1\x00', 0x80000001}) 09:12:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x80000001, 0x1000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) [ 2947.011439][T12588] selinux_netlink_send: 9 callbacks suppressed [ 2947.011453][T12588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=12588 comm=syz-executor.0 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xd}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x48000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x62, 0x90000000, 0x10000, 0x201, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x48) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xf8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x23}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x1) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) epoll_wait(r8, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x3, 0x0, 0x9, 0x7, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7573}, @alu={0x7, 0x1, 0x2, 0xb, 0x6, 0x20, 0x8}]}, &(0x7f00000000c0)='syzkaller\x00', 0xc508, 0x2f, &(0x7f0000000100)=""/47, 0x40f00, 0x4, '\x00', r4, 0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x3, 0xe929, 0x800}, 0x10, 0x0, r5, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r6, r8, 0x1]}, 0x80) r9 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2680) write$rfkill(r9, &(0x7f0000000080), 0x87fff78) [ 2947.061843][T12603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12603 comm=syz-executor.0 09:12:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xb, 0x7ba001) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) connect$packet(r0, &(0x7f0000000400)={0x11, 0x905201d39d63a96d, 0x0, 0x1, 0x8, 0x6, @local}, 0x14) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000100c30000000080000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000940)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r6 = gettid() r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x91da0c5c15d5929}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0x40) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) epoll_wait(r8, &(0x7f00000003c0)=[{}], 0x1, 0x4) kcmp$KCMP_EPOLL_TFD(0x0, r6, 0x7, r7, &(0x7f00000000c0)={r8, r0, 0xfffffffb}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xf6, r5, 0x1, 0x3f, 0x6, @remote}, 0x14) syz_open_dev$vcsn(&(0x7f0000000040), 0xb, 0x7ba001) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) connect$packet(r0, &(0x7f0000000400)={0x11, 0x905201d39d63a96d, 0x0, 0x1, 0x8, 0x6, @local}, 0x14) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000100c30000000080000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000940)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000580)={'wg0\x00'}) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) gettid() (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x91da0c5c15d5929}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0x40) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async) epoll_wait(r8, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) kcmp$KCMP_EPOLL_TFD(0x0, r6, 0x7, r7, &(0x7f00000000c0)={r8, r0, 0xfffffffb}) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0xf6, r5, 0x1, 0x3f, 0x6, @remote}, 0x14) (async) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xe}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="e0200000", @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf2501000000140002007767310000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843080007006800000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e060006004e22000008000500000000000800050001000000240003000000000000000000000000000000000000000000000000000000000000000000080005000100000024000300"/218], 0xe0}, 0x1, 0x0, 0x0, 0x24000000}, 0x4080) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000003c0)=[{}], 0x1, 0x4) r4 = syz_io_uring_setup(0x4d4a, &(0x7f0000000340)={0x0, 0x3e99, 0x10, 0x3, 0x1c8, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@struct={0x4, 0x7, 0x0, 0x4, 0x1, 0x0, [{0xb, 0x5, 0x8}, {0x7, 0x0, 0xfff}, {0xf, 0x1, 0x296}, {0x4, 0x0, 0x7fffffff}, {0x91, 0x3, 0x9}, {0x7, 0x0, 0x4}, {0x1, 0x2, 0x9}]}, @const={0xa, 0x0, 0x0, 0xa, 0x3}, @typedef={0x2, 0x0, 0x0, 0x8, 0x4}, @ptr={0x1}]}, {0x0, [0x30]}}, &(0x7f0000000580)=""/27, 0x9f, 0x1b, 0x1}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES8=r1, @ANYBLOB="0000200500000000000000000000fc07000000937fe403ffffffffa1"], 0x14}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000640)={0x5, 0x0, &(0x7f0000000600)=[r4, r5, r6, r7, r0, r8, r1, r9, r1]}, 0x9) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000280)={0x5, 0x75, 0x0, 'queue1\x00', 0x80000001}) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="e0200000", @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf2501000000140002007767310000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843080007006800000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e060006004e22000008000500000000000800050001000000240003000000000000000000000000000000000000000000000000000000000000000000080005000100000024000300"/218], 0xe0}, 0x1, 0x0, 0x0, 0x24000000}, 0x4080) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) epoll_wait(0xffffffffffffffff, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) syz_io_uring_setup(0x4d4a, &(0x7f0000000340)={0x0, 0x3e99, 0x10, 0x3, 0x1c8, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@struct={0x4, 0x7, 0x0, 0x4, 0x1, 0x0, [{0xb, 0x5, 0x8}, {0x7, 0x0, 0xfff}, {0xf, 0x1, 0x296}, {0x4, 0x0, 0x7fffffff}, {0x91, 0x3, 0x9}, {0x7, 0x0, 0x4}, {0x1, 0x2, 0x9}]}, @const={0xa, 0x0, 0x0, 0xa, 0x3}, @typedef={0x2, 0x0, 0x0, 0x8, 0x4}, @ptr={0x1}]}, {0x0, [0x30]}}, &(0x7f0000000580)=""/27, 0x9f, 0x1b, 0x1}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES8=r1, @ANYBLOB="0000200500000000000000000000fc07000000937fe403ffffffffa1"], 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000640)={0x5, 0x0, &(0x7f0000000600)=[r4, r5, r6, r7, r0, r8, r1, r9, r1]}, 0x9) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000280)={0x5, 0x75, 0x0, 'queue1\x00', 0x80000001}) (async) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4c000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x80000001, 0x1000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x68000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="e0200000", @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf2501000000140002007767310000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843080007006800000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e060006004e22000008000500000000000800050001000000240003000000000000000000000000000000000000000000000000000000000000000000080005000100000024000300"/218], 0xe0}, 0x1, 0x0, 0x0, 0x24000000}, 0x4080) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) r4 = syz_io_uring_setup(0x4d4a, &(0x7f0000000340)={0x0, 0x3e99, 0x10, 0x3, 0x1c8, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@struct={0x4, 0x7, 0x0, 0x4, 0x1, 0x0, [{0xb, 0x5, 0x8}, {0x7, 0x0, 0xfff}, {0xf, 0x1, 0x296}, {0x4, 0x0, 0x7fffffff}, {0x91, 0x3, 0x9}, {0x7, 0x0, 0x4}, {0x1, 0x2, 0x9}]}, @const={0xa, 0x0, 0x0, 0xa, 0x3}, @typedef={0x2, 0x0, 0x0, 0x8, 0x4}, @ptr={0x1}]}, {0x0, [0x30]}}, &(0x7f0000000580)=""/27, 0x9f, 0x1b, 0x1}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES8=r1, @ANYBLOB="0000200500000000000000000000fc07000000937fe403ffffffffa1"], 0x14}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000640)={0x5, 0x0, &(0x7f0000000600)=[r4, r5, r6, r7, r0, r8, r1, r9, r1]}, 0x9) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000280)={0x5, 0x75, 0x0, 'queue1\x00', 0x80000001}) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x80000001, 0x1000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) [ 2947.115736][T12612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=12612 comm=syz-executor.1 [ 2947.135673][T12622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=12622 comm=syz-executor.0 [ 2947.148777][T12612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12612 comm=syz-executor.1 09:12:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6c000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x11}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2947.172172][T12622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12622 comm=syz-executor.0 09:12:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x74000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xb, 0x7ba001) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async, rerun: 64) connect$packet(r0, &(0x7f0000000400)={0x11, 0x905201d39d63a96d, 0x0, 0x1, 0x8, 0x6, @local}, 0x14) (async, rerun: 64) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000100c30000000080000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000940)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async, rerun: 32) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) r6 = gettid() (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x91da0c5c15d5929}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0x40) (async) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async) epoll_wait(r8, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) kcmp$KCMP_EPOLL_TFD(0x0, r6, 0x7, r7, &(0x7f00000000c0)={r8, r0, 0xfffffffb}) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0xf6, r5, 0x1, 0x3f, 0x6, @remote}, 0x14) 09:12:40 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async, rerun: 32) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x62, 0x90000000, 0x10000, 0x201, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x48) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) (rerun: 32) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xf8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x23}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x1) (async) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async, rerun: 32) epoll_wait(r8, &(0x7f00000003c0)=[{}], 0x1, 0x4) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x3, 0x0, 0x9, 0x7, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7573}, @alu={0x7, 0x1, 0x2, 0xb, 0x6, 0x20, 0x8}]}, &(0x7f00000000c0)='syzkaller\x00', 0xc508, 0x2f, &(0x7f0000000100)=""/47, 0x40f00, 0x4, '\x00', r4, 0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x3, 0xe929, 0x800}, 0x10, 0x0, r5, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r6, r8, 0x1]}, 0x80) (async) r9 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2680) write$rfkill(r9, &(0x7f0000000080), 0x87fff78) 09:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x12}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x25}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 0: socketpair(0x0, 0x80000, 0xb9e, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000b76e2d1dcb5300c92f200996a7d42ff24ecaf73b5d1c4d19ef1ef38c4506c741cf1e5b6b7acc80804d21c4440f8d0e3cac1114a85cf1ce3ef37bde0711d526e3c434f5d74e8bdbd351e5ddefc59f84c78dbc9ccb2fc6eac7fe8072e8af6deec88d78f4ea9d81272424b733d86c8498db8d4e8d44008e1a6e139eaf7b71dcba80d1aebf8421ef3842dae4b65e8140cfcad15dc36ea8", @ANYRES16=r1, @ANYBLOB="00022dbd7000fbdbdf250e00000008000400fdffffff"], 0x1c}}, 0x40801) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x2401) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x18c, 0x0, 0x10, 0x70bd27, 0x4, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2d}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2139}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x39}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa9e}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0xfd}, 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r5, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xd8, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc2}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x59}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) 09:12:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7a000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2947.460826][T12670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=12670 comm=syz-executor.1 [ 2947.483979][T12670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=12670 comm=syz-executor.1 09:12:40 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x1, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=@ipv6_delroute={0x110, 0x19, 0x4, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xff, 0xfc, 0x0, 0xff, 0xc, 0x200}, [@RTA_METRICS={0x5d, 0x8, 0x0, 0x1, "bad3141e618e31954a3857b6fa646622f60546c8f13d8f7c280a97214236e8ab92e7b42002fc8a85069b6a5d29511ccbd73bcc13b0cae4cb420c25d87354d04e6b893a2c58e86f16461c0c6c19d2bcf7c5fc3bdc24acef948f"}, @RTA_GATEWAY={0x14, 0x5, @private1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_METRICS={0x75, 0x8, 0x0, 0x1, "bbcd433361cc67b98eec7e4375bd5622acaeacbd7d7f7c9a78962dce1da4fa0b4851b67f751105cc2c463366abc659bc0cfb3891c849e60dcc695b91dfa1d049faba95aa147e64c7f838858c7a379db6ae1ec5d2a16b1b3141991b85a765e820d3f09abb8e126ea31e30400f8ab18158af"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20008010}, 0xc010001) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r5, &(0x7f0000000080), 0xfffffdef) write$rfkill(r5, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x0, 0x1}, 0x8) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r7}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000840)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000940)={0x108, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x946e}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xa}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x44}, 0x20040850) r9 = accept4(r5, &(0x7f0000000100)=@tipc, &(0x7f0000000180)=0x80, 0x800) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x1d}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0xc0) 09:12:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x85ffffff}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2947.502237][T12670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=12670 comm=syz-executor.1 [ 2947.502556][T12671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12671 comm=syz-executor.1 09:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x48}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) r1 = socket(0x18, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe11ec0f005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) recvfrom$packet(r0, &(0x7f0000000140)=""/132, 0x84, 0x40022002, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x81}, 0x14) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r5, &(0x7f0000000080), 0x7ffff000) 09:12:40 executing program 0: socketpair(0x0, 0x80000, 0xb9e, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000b76e2d1dcb5300c92f200996a7d42ff24ecaf73b5d1c4d19ef1ef38c4506c741cf1e5b6b7acc80804d21c4440f8d0e3cac1114a85cf1ce3ef37bde0711d526e3c434f5d74e8bdbd351e5ddefc59f84c78dbc9ccb2fc6eac7fe8072e8af6deec88d78f4ea9d81272424b733d86c8498db8d4e8d44008e1a6e139eaf7b71dcba80d1aebf8421ef3842dae4b65e8140cfcad15dc36ea8", @ANYRES16=r1, @ANYBLOB="00022dbd7000fbdbdf250e00000008000400fdffffff"], 0x1c}}, 0x40801) (async, rerun: 64) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x2401) (rerun: 64) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x18c, 0x0, 0x10, 0x70bd27, 0x4, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2d}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2139}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x39}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa9e}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0xfd}, 0x8) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r5, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xd8, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc2}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x59}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) 09:12:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88d61e00}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x62, 0x90000000, 0x10000, 0x201, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x48) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xf8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x23}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x1) (async) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async, rerun: 64) epoll_wait(r8, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x3, 0x0, 0x9, 0x7, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7573}, @alu={0x7, 0x1, 0x2, 0xb, 0x6, 0x20, 0x8}]}, &(0x7f00000000c0)='syzkaller\x00', 0xc508, 0x2f, &(0x7f0000000100)=""/47, 0x40f00, 0x4, '\x00', r4, 0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x3, 0xe929, 0x800}, 0x10, 0x0, r5, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r6, r8, 0x1]}, 0x80) (async) r9 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2680) write$rfkill(r9, &(0x7f0000000080), 0x87fff78) 09:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x4c}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 1: write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x6, 0x0, 0x40, 0x0, 0x1}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x200, 0x448680) write$rfkill(r0, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x0, 0x1}, 0x8) epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xecec, &(0x7f0000000180), 0x8) epoll_pwait2(r0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={[0x3f80000000]}, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x20000) 09:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x68}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd5000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 1: write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x6, 0x0, 0x40, 0x0, 0x1}, 0x8) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x200, 0x448680) write$rfkill(r0, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x0, 0x1}, 0x8) epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xecec, &(0x7f0000000180), 0x8) epoll_pwait2(r0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={[0x3f80000000]}, 0x8) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x20000) 09:12:40 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x1, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=@ipv6_delroute={0x110, 0x19, 0x4, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xff, 0xfc, 0x0, 0xff, 0xc, 0x200}, [@RTA_METRICS={0x5d, 0x8, 0x0, 0x1, "bad3141e618e31954a3857b6fa646622f60546c8f13d8f7c280a97214236e8ab92e7b42002fc8a85069b6a5d29511ccbd73bcc13b0cae4cb420c25d87354d04e6b893a2c58e86f16461c0c6c19d2bcf7c5fc3bdc24acef948f"}, @RTA_GATEWAY={0x14, 0x5, @private1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_METRICS={0x75, 0x8, 0x0, 0x1, "bbcd433361cc67b98eec7e4375bd5622acaeacbd7d7f7c9a78962dce1da4fa0b4851b67f751105cc2c463366abc659bc0cfb3891c849e60dcc695b91dfa1d049faba95aa147e64c7f838858c7a379db6ae1ec5d2a16b1b3141991b85a765e820d3f09abb8e126ea31e30400f8ab18158af"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20008010}, 0xc010001) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r5, &(0x7f0000000080), 0xfffffdef) (async) write$rfkill(r5, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x0, 0x1}, 0x8) (async) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000040)) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r7}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000840)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000940)={0x108, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x946e}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xa}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x44}, 0x20040850) (async) r9 = accept4(r5, &(0x7f0000000100)=@tipc, &(0x7f0000000180)=0x80, 0x800) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x1d}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0xc0) 09:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x6c}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfe030000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 1: write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x6, 0x0, 0x40, 0x0, 0x1}, 0x8) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x200, 0x448680) write$rfkill(r0, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x0, 0x1}, 0x8) epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xecec, &(0x7f0000000180), 0x8) epoll_pwait2(r0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={[0x3f80000000]}, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x20000) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x6, 0x0, 0x40, 0x0, 0x1}, 0x8) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x200, 0x448680) (async) write$rfkill(r0, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x0, 0x1}, 0x8) (async) epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xecec, &(0x7f0000000180), 0x8) (async) epoll_pwait2(r0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={[0x3f80000000]}, 0x8) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x20000) (async) 09:12:40 executing program 0: socketpair(0x0, 0x80000, 0xb9e, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000b76e2d1dcb5300c92f200996a7d42ff24ecaf73b5d1c4d19ef1ef38c4506c741cf1e5b6b7acc80804d21c4440f8d0e3cac1114a85cf1ce3ef37bde0711d526e3c434f5d74e8bdbd351e5ddefc59f84c78dbc9ccb2fc6eac7fe8072e8af6deec88d78f4ea9d81272424b733d86c8498db8d4e8d44008e1a6e139eaf7b71dcba80d1aebf8421ef3842dae4b65e8140cfcad15dc36ea8", @ANYRES16=r1, @ANYBLOB="00022dbd7000fbdbdf250e00000008000400fdffffff"], 0x1c}}, 0x40801) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x2401) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x18c, 0x0, 0x10, 0x70bd27, 0x4, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2d}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2139}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x39}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa9e}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084) (async, rerun: 64) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0xfd}, 0x8) (rerun: 64) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r5, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xd8, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc2}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x59}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) 09:12:40 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) r1 = socket(0x18, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (rerun: 32) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe11ec0f005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) recvfrom$packet(r0, &(0x7f0000000140)=""/132, 0x84, 0x40022002, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x81}, 0x14) (async) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r5, &(0x7f0000000080), 0x7ffff000) 09:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x74}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x120, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8481f0e7f16e79b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000800}, 0xc4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x49, 0xff, 0x470, 0x411, 0xffffffffffffffff, 0x7b7, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x8000}, 0x48) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff000000}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffff85}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x7a}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r5, &(0x7f0000000080), 0xf78) 09:12:40 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x1, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=@ipv6_delroute={0x110, 0x19, 0x4, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xff, 0xfc, 0x0, 0xff, 0xc, 0x200}, [@RTA_METRICS={0x5d, 0x8, 0x0, 0x1, "bad3141e618e31954a3857b6fa646622f60546c8f13d8f7c280a97214236e8ab92e7b42002fc8a85069b6a5d29511ccbd73bcc13b0cae4cb420c25d87354d04e6b893a2c58e86f16461c0c6c19d2bcf7c5fc3bdc24acef948f"}, @RTA_GATEWAY={0x14, 0x5, @private1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_METRICS={0x75, 0x8, 0x0, 0x1, "bbcd433361cc67b98eec7e4375bd5622acaeacbd7d7f7c9a78962dce1da4fa0b4851b67f751105cc2c463366abc659bc0cfb3891c849e60dcc695b91dfa1d049faba95aa147e64c7f838858c7a379db6ae1ec5d2a16b1b3141991b85a765e820d3f09abb8e126ea31e30400f8ab18158af"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20008010}, 0xc010001) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r5, &(0x7f0000000080), 0xfffffdef) write$rfkill(r5, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x0, 0x1}, 0x8) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r7}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000840)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000940)={0x108, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x946e}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xa}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x44}, 0x20040850) r9 = accept4(r5, &(0x7f0000000100)=@tipc, &(0x7f0000000180)=0x80, 0x800) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x1d}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0xc0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg0\x00'}) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x1, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=@ipv6_delroute={0x110, 0x19, 0x4, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xff, 0xfc, 0x0, 0xff, 0xc, 0x200}, [@RTA_METRICS={0x5d, 0x8, 0x0, 0x1, "bad3141e618e31954a3857b6fa646622f60546c8f13d8f7c280a97214236e8ab92e7b42002fc8a85069b6a5d29511ccbd73bcc13b0cae4cb420c25d87354d04e6b893a2c58e86f16461c0c6c19d2bcf7c5fc3bdc24acef948f"}, @RTA_GATEWAY={0x14, 0x5, @private1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_METRICS={0x75, 0x8, 0x0, 0x1, "bbcd433361cc67b98eec7e4375bd5622acaeacbd7d7f7c9a78962dce1da4fa0b4851b67f751105cc2c463366abc659bc0cfb3891c849e60dcc695b91dfa1d049faba95aa147e64c7f838858c7a379db6ae1ec5d2a16b1b3141991b85a765e820d3f09abb8e126ea31e30400f8ab18158af"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20008010}, 0xc010001) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r5, &(0x7f0000000080), 0xfffffdef) (async) write$rfkill(r5, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x0, 0x1}, 0x8) (async) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r7}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000840)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000940)={0x108, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x946e}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xa}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x44}, 0x20040850) (async) accept4(r5, &(0x7f0000000100)=@tipc, &(0x7f0000000180)=0x80, 0x800) (async) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x1d}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0xc0) (async) 09:12:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xd5}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) r1 = socket(0x18, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe11ec0f005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) recvfrom$packet(r0, &(0x7f0000000140)=""/132, 0x84, 0x40022002, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x81}, 0x14) (async) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r5, &(0x7f0000000080), 0x7ffff000) 09:12:40 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x120, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8481f0e7f16e79b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000800}, 0xc4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x49, 0xff, 0x470, 0x411, 0xffffffffffffffff, 0x7b7, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x8000}, 0x48) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x120, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8481f0e7f16e79b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000800}, 0xc4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x49, 0xff, 0x470, 0x411, 0xffffffffffffffff, 0x7b7, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x8000}, 0x48) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) 09:12:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, 0x0, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x0) (async, rerun: 32) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) (async, rerun: 32) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r5, &(0x7f0000000080), 0xf78) 09:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x300}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x3f3}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x2}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x500}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x3}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x600}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x30}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2000c084) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0xfffffdef) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x1, 0x4) r2 = accept$phonet_pipe(r1, 0x0, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0xffffffffffffffff, 0x2, 0x0, 0x0, 0x962}, 0x6fe, 0x5}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004045}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000140)={'wg2\x00'}) 09:12:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, 0x0, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r5, &(0x7f0000000080), 0xf78) 09:12:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x4}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x700}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x120, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8481f0e7f16e79b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000800}, 0xc4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x49, 0xff, 0x470, 0x411, 0xffffffffffffffff, 0x7b7, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x8000}, 0x48) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x120, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8481f0e7f16e79b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000800}, 0xc4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x49, 0xff, 0x470, 0x411, 0xffffffffffffffff, 0x7b7, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x8000}, 0x48) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) 09:12:40 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000000c0)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0x7ffff000) 09:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x900}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x5}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) write$rfkill(r1, &(0x7f0000000040)={0xfffffff9, 0x1, 0x1, 0x1}, 0x8) 09:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xa00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x6}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xb00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x30}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2000c084) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0xfffffdef) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x1, 0x4) r2 = accept$phonet_pipe(r1, 0x0, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0xffffffffffffffff, 0x2, 0x0, 0x0, 0x962}, 0x6fe, 0x5}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004045}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000140)={'wg2\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x30}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2000c084) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r1, &(0x7f0000000080), 0xfffffdef) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x1, 0x4) (async) accept$phonet_pipe(r1, 0x0, &(0x7f0000000040)) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0xffffffffffffffff, 0x2, 0x0, 0x0, 0x962}, 0x6fe, 0x5}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004045}, 0x44) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000140)={'wg2\x00'}) (async) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x7}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xc00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x483) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) write$rfkill(r0, &(0x7f0000000040)={0x3f, 0x9, 0x3, 0x1, 0x1}, 0x8) 09:12:41 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000000c0)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0x7ffff000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) (async) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000000c0)) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r1, &(0x7f0000000080), 0x7ffff000) (async) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) write$rfkill(r1, &(0x7f0000000040)={0xfffffff9, 0x1, 0x1, 0x1}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) write$rfkill(r1, &(0x7f0000000040)={0xfffffff9, 0x1, 0x1, 0x1}, 0x8) (async) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xd00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x8}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000000c0)) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0x7ffff000) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) write$rfkill(r1, &(0x7f0000000040)={0xfffffff9, 0x1, 0x1, 0x1}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) write$rfkill(r1, &(0x7f0000000040)={0xfffffff9, 0x1, 0x1, 0x1}, 0x8) (async) 09:12:41 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x483) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) write$rfkill(r0, &(0x7f0000000040)={0x3f, 0x9, 0x3, 0x1, 0x1}, 0x8) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, 0x8) 09:12:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x30}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2000c084) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0xfffffdef) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x1, 0x4) (async) r2 = accept$phonet_pipe(r1, 0x0, &(0x7f0000000040)) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0xffffffffffffffff, 0x2, 0x0, 0x0, 0x962}, 0x6fe, 0x5}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004045}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000140)={'wg2\x00'}) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xe00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x9}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xb66, 0x20000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x400, 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x1100}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffffffffffff, 0x12701) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x8, 0x208000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r3}, 0x14}}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x432, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x20}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x8854) sendmsg$nl_route(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd28, 0x25dfdbfe, {0x7, r5}, ["", "", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0xc005) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000002c0)) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf250c00000008000b00fc0a000008000b00400000000800030049fff52502dfdd750671189b484e084744a67bd0b39159ad9b83575f8cef9d6502b4eb86ff095f8d2e88f0e588af698e7a885a9b250558aff5cac647b3279d751b9e186bbe25e7baa2ecf849f5187d3be39d33e9d9b25bc008f0bfa1bbcb981bf9e5c548400d02e982f526be9754aa596be35356c0316207bb85b1f7fd6c14061b7d68c5d006597646dcb409e451bf8caa06e24a13ac7d79992e0d0c0a95125aa9b4a600", @ANYRES32=0x0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) 09:12:41 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x483) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) write$rfkill(r0, &(0x7f0000000040)={0x3f, 0x9, 0x3, 0x1, 0x1}, 0x8) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0xa}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, 0x8) (async) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xb66, 0x20000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x400, 0x4) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffffffffffff, 0x12701) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x8, 0x208000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r3}, 0x14}}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x432, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x20}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x8854) (async) sendmsg$nl_route(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd28, 0x25dfdbfe, {0x7, r5}, ["", "", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0xc005) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000002c0)) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}}, 0x80) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf250c00000008000b00fc0a000008000b00400000000800030049fff52502dfdd750671189b484e084744a67bd0b39159ad9b83575f8cef9d6502b4eb86ff095f8d2e88f0e588af698e7a885a9b250558aff5cac647b3279d751b9e186bbe25e7baa2ecf849f5187d3be39d33e9d9b25bc008f0bfa1bbcb981bf9e5c548400d02e982f526be9754aa596be35356c0316207bb85b1f7fd6c14061b7d68c5d006597646dcb409e451bf8caa06e24a13ac7d79992e0d0c0a95125aa9b4a600", @ANYRES32=0x0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0xb}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x1200}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, 0x8) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xb66, 0x20000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x400, 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) write$rfkill(r0, &(0x7f0000000080), 0xf78) syz_open_dev$vcsn(&(0x7f0000000040), 0xb66, 0x20000) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x400, 0x4) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0xc}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 0: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xf78) 09:12:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffffffffffff, 0x12701) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x8, 0x208000) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r3}, 0x14}}, 0x0) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) (async, rerun: 64) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x432, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x20}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x8854) sendmsg$nl_route(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd28, 0x25dfdbfe, {0x7, r5}, ["", "", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0xc005) (async, rerun: 64) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000002c0)) (async, rerun: 64) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf250c00000008000b00fc0a000008000b00400000000800030049fff52502dfdd750671189b484e084744a67bd0b39159ad9b83575f8cef9d6502b4eb86ff095f8d2e88f0e588af698e7a885a9b250558aff5cac647b3279d751b9e186bbe25e7baa2ecf849f5187d3be39d33e9d9b25bc008f0bfa1bbcb981bf9e5c548400d02e982f526be9754aa596be35356c0316207bb85b1f7fd6c14061b7d68c5d006597646dcb409e451bf8caa06e24a13ac7d79992e0d0c0a95125aa9b4a600", @ANYRES32=0x0, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x4}, 0x8) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0xd}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2500}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 0: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xf78) write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xf78) (async) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x4}, 0x8) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0xe}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x4000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 0: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xf78) write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xf78) (async) 09:12:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x200, 0x8000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10, 0x800) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x80000004}) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r3 = gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, r1, &(0x7f0000000100)={r0, r4, 0xfff}) write$rfkill(r2, &(0x7f0000000080), 0xfffffdef) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_wait(r5, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8) 09:12:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x38, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xffffffffffffffb5, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x87fff78) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="94000000e2d762d6df256de84d6b52fb41e93fb021d704cdec619366ce479e2c2fc5b9f0abaf3ad8e595bc0e36649765f884e8eff45f506086370c3bbba7bfdb1f960049703ad083d71a468027e88ab7b469ca5c1b12ac4e983df2468b8955a53f5bc1b8f6accf38bc84c9cfc6a535ed310bf927bcc7dea21dfe7960d8dfb57fd815490fbd5a5dcfed2fbaba419f6aa7647d5d07950a0f3e102d26e9e4ec4e90b9bd5b897c39f88ca02b5f623f1b625ca620de77c7b4dddfef74805e62e01e", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="5400228008000200030000000500010005000000050004000100000005000400010000000500010005000000080002000000000008000300060000000800030003000000050004000000000005000100e40000000c0006000200000002000000"], 0x94}, 0x1, 0x0, 0x0, 0x4081}, 0x20004010) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x10}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x4}, 0x8) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x4800}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x8) 09:12:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x200, 0x8000) (async) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10, 0x800) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x80000004}) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r3 = gettid() (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, r1, &(0x7f0000000100)={r0, r4, 0xfff}) (async) write$rfkill(r2, &(0x7f0000000080), 0xfffffdef) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) epoll_wait(r5, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x11}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x8) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x4c00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x200, 0x8000) (async) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10, 0x800) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x80000004}) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r3 = gettid() (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, r1, &(0x7f0000000100)={r0, r4, 0xfff}) (async) write$rfkill(r2, &(0x7f0000000080), 0xfffffdef) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_wait(r5, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x12}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x38, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xffffffffffffffb5, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x87fff78) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="94000000e2d762d6df256de84d6b52fb41e93fb021d704cdec619366ce479e2c2fc5b9f0abaf3ad8e595bc0e36649765f884e8eff45f506086370c3bbba7bfdb1f960049703ad083d71a468027e88ab7b469ca5c1b12ac4e983df2468b8955a53f5bc1b8f6accf38bc84c9cfc6a535ed310bf927bcc7dea21dfe7960d8dfb57fd815490fbd5a5dcfed2fbaba419f6aa7647d5d07950a0f3e102d26e9e4ec4e90b9bd5b897c39f88ca02b5f623f1b625ca620de77c7b4dddfef74805e62e01e", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="5400228008000200030000000500010005000000050004000100000005000400010000000500010005000000080002000000000008000300060000000800030003000000050004000000000005000100e40000000c0006000200000002000000"], 0x94}, 0x1, 0x0, 0x0, 0x4081}, 0x20004010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x38, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xffffffffffffffb5, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x87fff78) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000f10a6d1c4c26de7f00000c000600007f00000000000008000300615cc60abbb041a802744f3d0f0b852ac6ee4e85d420a7e2f4f0c0e2ea7e5a838e38d5de400d21a2dfb138f7aa6f031f35b90401ffd135e3166f8ea0aaef67dbd4e36121026c9a6098a5cd284701ef01856b10411e4b50ee84fc76c3e887b5af00d972e8f3fd478a9542af0b3d2dadf4c3dd7fbca8fb4f026db164d7d62b4a05693c0b89e38b339164ae044b3d0bf703dd377cbaff408443778e5839057b443d3e862b6f1df268ec38853d943e6dde4d457bd085ef3af0a9a205d95e5013859555e0cfde9028ad58bf2b12c7b88664129211db1c7cf7de80c22ad891c78a17dd95fa8a0300f8a93e50e360dd421dd8d2141fa29abe7df147997248f21c33c0a6eabc075f25cacc826f696cc72fcbf05f804202d0f5d9ac7cbb38335f3aff8659ab49b494b1e159e49805b585958fc2c847a214b1998515e52d7add5e30f940f10d6ea24f1d2aa53686a5bbbc134f93c86c19d9ae", @ANYRES32=r11, @ANYBLOB], 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="94000000e2d762d6df256de84d6b52fb41e93fb021d704cdec619366ce479e2c2fc5b9f0abaf3ad8e595bc0e36649765f884e8eff45f506086370c3bbba7bfdb1f960049703ad083d71a468027e88ab7b469ca5c1b12ac4e983df2468b8955a53f5bc1b8f6accf38bc84c9cfc6a535ed310bf927bcc7dea21dfe7960d8dfb57fd815490fbd5a5dcfed2fbaba419f6aa7647d5d07950a0f3e102d26e9e4ec4e90b9bd5b897c39f88ca02b5f623f1b625ca620de77c7b4dddfef74805e62e01e", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="5400228008000200030000000500010005000000050004000100000005000400010000000500010005000000080002000000000008000300060000000800030003000000050004000000000005000100e40000000c0006000200000002000000"], 0x94}, 0x1, 0x0, 0x0, 0x4081}, 0x20004010) (async) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x8) (async) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x6800}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) write$rfkill(r1, &(0x7f0000000100)={0x8000000, 0x6, 0x1, 0x1, 0x1}, 0x8) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x18}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 09:12:41 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x8004) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r3, 0xc05, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x80}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}}, 0x40000) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r8 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r8, &(0x7f0000000080), 0x7ffff000) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r9) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000006c4f5f22edb443769fdca904800c93950ff9f5b6f873d4f3d0e71a8615818f95cb8c8d93171bdf5d5bd8a48d31221976fcae0cb7776066ea2e3d6cd6bc219e9a1ffe8d7ac78f5c938f2a4e55c4d1b8bef2f6c95cecf063688c37fdab4c2d4bf8ce80c9d6f96f87b2f39b803078a01849f018a83b2dd6e0301a22d67d4a", @ANYRES16=r0, @ANYBLOB="00022abd7000fedbdf250900000005001d000a0000000800140014000000050015000400000005001d0003000000050013008100000005001500800000000800140005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x607001) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x25}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x8004) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x80) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r3, 0xc05, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x80}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}}, 0x40000) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) r8 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r8, &(0x7f0000000080), 0x7ffff000) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r9) (async) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000006c4f5f22edb443769fdca904800c93950ff9f5b6f873d4f3d0e71a8615818f95cb8c8d93171bdf5d5bd8a48d31221976fcae0cb7776066ea2e3d6cd6bc219e9a1ffe8d7ac78f5c938f2a4e55c4d1b8bef2f6c95cecf063688c37fdab4c2d4bf8ce80c9d6f96f87b2f39b803078a01849f018a83b2dd6e0301a22d67d4a", @ANYRES16=r0, @ANYBLOB="00022abd7000fedbdf250900000005001d000a0000000800140014000000050015000400000005001d0003000000050013008100000005001500800000000800140005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) 09:12:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x38, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xffffffffffffffb5, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0) (async, rerun: 64) write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x87fff78) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB], 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="94000000e2d762d6df256de84d6b52fb41e93fb021d704cdec619366ce479e2c2fc5b9f0abaf3ad8e595bc0e36649765f884e8eff45f506086370c3bbba7bfdb1f960049703ad083d71a468027e88ab7b469ca5c1b12ac4e983df2468b8955a53f5bc1b8f6accf38bc84c9cfc6a535ed310bf927bcc7dea21dfe7960d8dfb57fd815490fbd5a5dcfed2fbaba419f6aa7647d5d07950a0f3e102d26e9e4ec4e90b9bd5b897c39f88ca02b5f623f1b625ca620de77c7b4dddfef74805e62e01e", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="5400228008000200030000000500010005000000050004000100000005000400010000000500010005000000080002000000000008000300060000000800030003000000050004000000000005000100e40000000c0006000200000002000000"], 0x94}, 0x1, 0x0, 0x0, 0x4081}, 0x20004010) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x6c00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x607001) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x48}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x8004) (async, rerun: 32) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r3, 0xc05, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x80}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}}, 0x40000) (async, rerun: 32) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x6c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (rerun: 32) r8 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r8, &(0x7f0000000080), 0x7ffff000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r9) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000006c4f5f22edb443769fdca904800c93950ff9f5b6f873d4f3d0e71a8615818f95cb8c8d93171bdf5d5bd8a48d31221976fcae0cb7776066ea2e3d6cd6bc219e9a1ffe8d7ac78f5c938f2a4e55c4d1b8bef2f6c95cecf063688c37fdab4c2d4bf8ce80c9d6f96f87b2f39b803078a01849f018a83b2dd6e0301a22d67d4a", @ANYRES16=r0, @ANYBLOB="00022abd7000fedbdf250900000005001d000a0000000800140014000000050015000400000005001d0003000000050013008100000005001500800000000800140005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) 09:12:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) write$rfkill(r1, &(0x7f0000000100)={0x8000000, 0x6, 0x1, 0x1, 0x1}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) (async) write$rfkill(r1, &(0x7f0000000100)={0x8000000, 0x6, 0x1, 0x1, 0x1}, 0x8) (async) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x7400}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x607001) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:41 executing program 1: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x44}}, 0x200400d0) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r7, &(0x7f0000000080), 0x87fff78) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r8}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r8, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0x30}}, 0x40000) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x4c}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7f, 0x504c3) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x2}, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x7a00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x68}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 1: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x0) (async) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x44}}, 0x200400d0) (async) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r7, &(0x7f0000000080), 0x87fff78) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r8}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r8, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0x30}}, 0x40000) 09:12:41 executing program 0: r0 = gettid() syz_open_procfs$namespace(r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r1, r2}) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r3, &(0x7f0000000080), 0xf78) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7f, 0x504c3) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x2}, 0x8) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (rerun: 32) 09:12:41 executing program 0: r0 = gettid() syz_open_procfs$namespace(r0, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r1, r2}) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r3, &(0x7f0000000080), 0xf78) 09:12:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) write$rfkill(r1, &(0x7f0000000100)={0x8000000, 0x6, 0x1, 0x1, 0x1}, 0x8) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xd500}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x6c}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7f, 0x504c3) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x2}, 0x8) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 09:12:41 executing program 1: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x44}}, 0x200400d0) (async) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r7, &(0x7f0000000080), 0x87fff78) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r8}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r8, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0x30}}, 0x40000) 09:12:41 executing program 0: r0 = gettid() syz_open_procfs$namespace(r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async, rerun: 32) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async, rerun: 32) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r1, r2}) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r3, &(0x7f0000000080), 0xf78) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x16102) write$rfkill(r0, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x1}, 0x8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x70ee, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x500, 0x4) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xf303}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x74}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x400) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x206080) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000000c0)) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x7a}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000180)={0x1000, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0x20, 0x0, 'client1\x00', 0xffffffff80000006, "d271b5918d5259b8", "aeb0c5cdabc1189c857c41de2c0628f7920ee9f626db18c1043761bf4988f4e8", 0x7, 0xfffffff7}) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x1ff, 0x7fffffff, 0x7ff, 0x5, 0x1, 0xffff}) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x16102) write$rfkill(r0, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x1}, 0x8) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x70ee, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x500, 0x4) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xff00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000180)={0x1000, 0x0, 0x6}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0x20, 0x0, 'client1\x00', 0xffffffff80000006, "d271b5918d5259b8", "aeb0c5cdabc1189c857c41de2c0628f7920ee9f626db18c1043761bf4988f4e8", 0x7, 0xfffffff7}) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x400) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x206080) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000000c0)) syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x400) (async) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x206080) (async) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000000c0)) (async) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0xd5}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x400) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x206080) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000000c0)) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x16102) write$rfkill(r0, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x1}, 0x8) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x70ee, 0x4) (async, rerun: 32) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x500, 0x4) 09:12:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x1ff, 0x7fffffff, 0x7ff, 0x5, 0x1, 0xffff}) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x1ff, 0x7fffffff, 0x7ff, 0x5, 0x1, 0xffff}) (async) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000180)={0x1000, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0x20, 0x0, 'client1\x00', 0xffffffff80000006, "d271b5918d5259b8", "aeb0c5cdabc1189c857c41de2c0628f7920ee9f626db18c1043761bf4988f4e8", 0x7, 0xfffffff7}) write$rfkill(r0, &(0x7f0000000080), 0xf78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000180)={0x1000, 0x0, 0x6}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0x20, 0x0, 'client1\x00', 0xffffffff80000006, "d271b5918d5259b8", "aeb0c5cdabc1189c857c41de2c0628f7920ee9f626db18c1043761bf4988f4e8", 0x7, 0xfffffff7}) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x2}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x7, 0x0, &(0x7f00000000c0)=[r1, r0, r0, r0, r0, r2]}, 0x6) socketpair(0x0, 0x2, 0xff, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000800) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0x4) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000000c0)) 09:12:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x4000004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000000580)=""/4096, 0x18, 0x1000, 0x1}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001600)={r2, 0x20, &(0x7f0000000540)={&(0x7f0000000480)=""/137, 0x89, 0x0, &(0x7f0000001580)=""/115, 0x73}}, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000001740)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x44010}, 0x8880) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x801) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="000000000000000300a21583c560d1bebc722600000000001f000000", @ANYRES32=0x0, @ANYRESOCT], 0x1c}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000001780)={0x38, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x38}}, 0x1) write$rfkill(r4, &(0x7f0000000080), 0x87fff78) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000240)=0x4) 09:12:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x1ff, 0x7fffffff, 0x7ff, 0x5, 0x1, 0xffff}) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x7, 0x0, &(0x7f00000000c0)=[r1, r0, r0, r0, r0, r2]}, 0x6) socketpair(0x0, 0x2, 0xff, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000800) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x7, 0x0, &(0x7f00000000c0)=[r1, r0, r0, r0, r0, r2]}, 0x6) (async) socketpair(0x0, 0x2, 0xff, &(0x7f0000000240)) (async) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000800) (async) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x3}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x40}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newchain={0x3c, 0x64, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x2}, {0xfff3, 0xb}, {0x6, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x80}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x1, 0x1f}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x4}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0x4) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000000c0)) 09:12:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x4000004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000000580)=""/4096, 0x18, 0x1000, 0x1}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001600)={r2, 0x20, &(0x7f0000000540)={&(0x7f0000000480)=""/137, 0x89, 0x0, &(0x7f0000001580)=""/115, 0x73}}, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000001740)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x44010}, 0x8880) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x801) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="000000000000000300a21583c560d1bebc722600000000001f000000", @ANYRES32=0x0, @ANYRESOCT], 0x1c}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000001780)={0x38, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x38}}, 0x1) write$rfkill(r4, &(0x7f0000000080), 0x87fff78) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000240)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x4000004) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000000580)=""/4096, 0x18, 0x1000, 0x1}, 0x20) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001600)={r2, 0x20, &(0x7f0000000540)={&(0x7f0000000480)=""/137, 0x89, 0x0, &(0x7f0000001580)=""/115, 0x73}}, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000001740)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x44010}, 0x8880) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, 0x0, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x801) (async) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="000000000000000300a21583c560d1bebc722600000000001f000000", @ANYRES32=0x0, @ANYRESOCT], 0x1c}}, 0x0) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000001780)={0x38, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x38}}, 0x1) (async) write$rfkill(r4, &(0x7f0000000080), 0x87fff78) (async) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000240)=0x4) (async) 09:12:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x40}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newchain={0x3c, 0x64, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x2}, {0xfff3, 0xb}, {0x6, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x80}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x1, 0x1f}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x40}, 0x8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newchain={0x3c, 0x64, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x2}, {0xfff3, 0xb}, {0x6, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x80}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x1, 0x1f}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (async) 09:12:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x7, 0x0, &(0x7f00000000c0)=[r1, r0, r0, r0, r0, r2]}, 0x6) socketpair(0x0, 0x2, 0xff, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000800) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x4000004) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000000580)=""/4096, 0x18, 0x1000, 0x1}, 0x20) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001600)={r2, 0x20, &(0x7f0000000540)={&(0x7f0000000480)=""/137, 0x89, 0x0, &(0x7f0000001580)=""/115, 0x73}}, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000001740)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x44010}, 0x8880) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x801) (async) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="000000000000000300a21583c560d1bebc722600000000001f000000", @ANYRES32=0x0, @ANYRESOCT], 0x1c}}, 0x0) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000001780)={0x38, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x38}}, 0x1) write$rfkill(r4, &(0x7f0000000080), 0x87fff78) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000240)=0x4) 09:12:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x40}, 0x8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newchain={0x3c, 0x64, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x2}, {0xfff3, 0xb}, {0x6, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x80}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x1, 0x1f}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0x4) (async) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000000c0)) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x5}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5000001, 0x12, r0, 0x10000000) 09:12:41 executing program 4: socketpair(0x3, 0x1, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="003f00071f00001f000000014a1000e800650000b82f9078ffffffffac14142344072cc7a0467444341b31ac1414bb00000008ac1414aa00000005ac1414aa00000006000000007fffffff6401010000000002ac141421000000010727527f00000164010100e0000002e0000001ac141441000000007f000001e000005b000000004424c9017f00000100000000ac1414bb0000000064010100000000067f0000010000001f442c6db1ac1e0101a86b28e948da1c09000003ffe000000100000007e0000002000000000000000000000007440331440c6e83ac1414bb000000078911f2544c238e4ea0f5aadce9fb0e6937dd23d0140000"]}) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080)={0x1000}, 0x8) 09:12:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180), 0xfffffffffffffffa, 0x321082) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000040)) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000140)) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) read$rfkill(r2, &(0x7f00000000c0), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r5}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x104, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c08d}, 0x800) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x40, 0x4) 09:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x6}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x10001, 0x42401) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x7}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5000001, 0x12, r0, 0x10000000) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x10001, 0x42401) write$rfkill(r0, &(0x7f0000000080), 0xf78) syz_open_dev$vcsn(&(0x7f0000000040), 0x10001, 0x42401) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) 09:12:42 executing program 4: socketpair(0x3, 0x1, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="003f00071f00001f000000014a1000e800650000b82f9078ffffffffac14142344072cc7a0467444341b31ac1414bb00000008ac1414aa00000005ac1414aa00000006000000007fffffff6401010000000002ac141421000000010727527f00000164010100e0000002e0000001ac141441000000007f000001e000005b000000004424c9017f00000100000000ac1414bb0000000064010100000000067f0000010000001f442c6db1ac1e0101a86b28e948da1c09000003ffe000000100000007e0000002000000000000000000000007440331440c6e83ac1414bb000000078911f2544c238e4ea0f5aadce9fb0e6937dd23d0140000"]}) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080)={0x1000}, 0x8) socketpair(0x3, 0x1, 0x7, &(0x7f0000000040)) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="003f00071f00001f000000014a1000e800650000b82f9078ffffffffac14142344072cc7a0467444341b31ac1414bb00000008ac1414aa00000005ac1414aa00000006000000007fffffff6401010000000002ac141421000000010727527f00000164010100e0000002e0000001ac141441000000007f000001e000005b000000004424c9017f00000100000000ac1414bb0000000064010100000000067f0000010000001f442c6db1ac1e0101a86b28e948da1c09000003ffe000000100000007e0000002000000000000000000000007440331440c6e83ac1414bb000000078911f2544c238e4ea0f5aadce9fb0e6937dd23d0140000"]}) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r1, &(0x7f0000000080)={0x1000}, 0x8) (async) 09:12:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180), 0xfffffffffffffffa, 0x321082) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000040)) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000140)) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) read$rfkill(r2, &(0x7f00000000c0), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r5}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x104, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c08d}, 0x800) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x40, 0x4) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000180), 0xfffffffffffffffa, 0x321082) (async) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000140)) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) read$rfkill(r2, &(0x7f00000000c0), 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r5}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x104, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c08d}, 0x800) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x40, 0x4) (async) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5000001, 0x12, r0, 0x10000000) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5000001, 0x12, r0, 0x10000000) (async) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x10001, 0x42401) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x8}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x9}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 4: socketpair(0x3, 0x1, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="003f00071f00001f000000014a1000e800650000b82f9078ffffffffac14142344072cc7a0467444341b31ac1414bb00000008ac1414aa00000005ac1414aa00000006000000007fffffff6401010000000002ac141421000000010727527f00000164010100e0000002e0000001ac141441000000007f000001e000005b000000004424c9017f00000100000000ac1414bb0000000064010100000000067f0000010000001f442c6db1ac1e0101a86b28e948da1c09000003ffe000000100000007e0000002000000000000000000000007440331440c6e83ac1414bb000000078911f2544c238e4ea0f5aadce9fb0e6937dd23d0140000"]}) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080)={0x1000}, 0x8) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd2a, 0x94ee, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x16}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 09:12:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x8) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000180), 0xfffffffffffffffa, 0x321082) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000140)) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) read$rfkill(r2, &(0x7f00000000c0), 0x8) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r5}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x104, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c08d}, 0x800) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x40, 0x4) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd2a, 0x94ee, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x16}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd2a, 0x94ee, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x16}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0xa}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x32601) write$rfkill(r0, &(0x7f0000000080), 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x56, 0xd7b6, 0x400, 0xd11, r1, 0x777, '\x00', 0x0, r2, 0x5, 0x1, 0x5}, 0x48) 09:12:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x124, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa43c}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb81}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x11}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6610}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x16a4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x44eab372}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x36}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40800}, 0x48080) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd2a, 0x94ee, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x16}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd2a, 0x94ee, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x16}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0xb}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) recvfrom$packet(r0, &(0x7f00000000c0)=""/252, 0xfc, 0x100, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x32601) write$rfkill(r0, &(0x7f0000000080), 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x56, 0xd7b6, 0x400, 0xd11, r1, 0x777, '\x00', 0x0, r2, 0x5, 0x1, 0x5}, 0x48) syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x32601) (async) write$rfkill(r0, &(0x7f0000000080), 0x8) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x56, 0xd7b6, 0x400, 0xd11, r1, 0x777, '\x00', 0x0, r2, 0x5, 0x1, 0x5}, 0x48) (async) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x124, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa43c}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb81}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x11}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6610}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x16a4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x44eab372}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x36}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40800}, 0x48080) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0xc}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) recvfrom$packet(r0, &(0x7f00000000c0)=""/252, 0xfc, 0x100, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080), 0xf78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) recvfrom$packet(r0, &(0x7f00000000c0)=""/252, 0xfc, 0x100, 0x0, 0x0) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) 09:12:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async, rerun: 32) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (rerun: 32) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x124, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa43c}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb81}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x11}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6610}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x16a4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x44eab372}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x36}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40800}, 0x48080) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0xd}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x32601) write$rfkill(r0, &(0x7f0000000080), 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x56, 0xd7b6, 0x400, 0xd11, r1, 0x777, '\x00', 0x0, r2, 0x5, 0x1, 0x5}, 0x48) syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x32601) (async) write$rfkill(r0, &(0x7f0000000080), 0x8) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x56, 0xd7b6, 0x400, 0xd11, r1, 0x777, '\x00', 0x0, r2, 0x5, 0x1, 0x5}, 0x48) (async) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) recvfrom$packet(r0, &(0x7f00000000c0)=""/252, 0xfc, 0x100, 0x0, 0x0) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000040)={0xfffffffe, 0x9, 0x0, 0x1, 0x3}, 0x4) 09:12:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x424040, 0x0) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0xe}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x424040, 0x0) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000040)={0xfffffffe, 0x9, 0x0, 0x1, 0x3}, 0x4) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x10}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) accept4$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, &(0x7f00000002c0)=0x10, 0x80800) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="7da6530000000000000000000100000000"], 0x14}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4048090}, 0x40) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "496fdedf776187c97fb1579640b93eacbed35942dbe3289734145702e069b5f1"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "492c5ea5e955130fad48ca78660e0f8cf094de7da5fa62508ef231130f2cacce"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcf12}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) 09:12:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x424040, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x424040, 0x0) (async) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000040)={0xfffffffe, 0x9, 0x0, 0x1, 0x3}, 0x4) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) accept4$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, &(0x7f00000002c0)=0x10, 0x80800) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="7da6530000000000000000000100000000"], 0x14}}, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) (async) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4048090}, 0x40) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "496fdedf776187c97fb1579640b93eacbed35942dbe3289734145702e069b5f1"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "492c5ea5e955130fad48ca78660e0f8cf094de7da5fa62508ef231130f2cacce"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcf12}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x11}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c43ebcd498fdd2d4ea3bfc69afc9772a8e90ec20dff1319f46cba72306af5b0ee287c32b57d1acf8b1b064fb596d", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x480040) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0, r1, r0, r2, r0, r3], 0x6) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x202101) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 3: ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000100)={0x85}) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x100000000, 0x1) read$rfkill(r1, &(0x7f00000000c0), 0x8) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x12}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async, rerun: 32) accept4$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, &(0x7f00000002c0)=0x10, 0x80800) (rerun: 32) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="7da6530000000000000000000100000000"], 0x14}}, 0x0) (async, rerun: 64) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf3}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4048090}, 0x40) (async, rerun: 64) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "496fdedf776187c97fb1579640b93eacbed35942dbe3289734145702e069b5f1"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "492c5ea5e955130fad48ca78660e0f8cf094de7da5fa62508ef231130f2cacce"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async, rerun: 64) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcf12}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = io_uring_setup(0x5bd5, &(0x7f00000000c0)={0x0, 0x1305, 0x20, 0x3, 0xab, 0x0, r0}) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c43ebcd498fdd2d4ea3bfc69afc9772a8e90ec20dff1319f46cba72306af5b0ee287c32b57d1acf8b1b064fb596d", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x480040) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0, r1, r0, r2, r0, r3], 0x6) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:42 executing program 3: ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000100)={0x85}) (async, rerun: 64) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (rerun: 64) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x100000000, 0x1) read$rfkill(r1, &(0x7f00000000c0), 0x8) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x8, 0x5, 0xe1ff62d, &(0x7f00000003c0)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0x1000, 0x4) r2 = io_uring_setup(0x516, &(0x7f00000000c0)={0x0, 0xc75a, 0x4, 0x3, 0x2a9, 0x0, r0}) r3 = accept4(r1, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f00000001c0)=0x80, 0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r5 = io_uring_setup(0x5dae, &(0x7f0000000280)={0x0, 0x8bef, 0x0, 0x2, 0x261, 0x0, r0}) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='svcrdma_qp_error\x00'}, 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0x3ff, 0x0, &(0x7f0000000340)=[r3, r4, r5, r6, r1]}, 0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x9}, 0x8) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x18}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c43ebcd498fdd2d4ea3bfc69afc9772a8e90ec20dff1319f46cba72306af5b0ee287c32b57d1acf8b1b064fb596d", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x480040) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0, r1, r0, r2, r0, r3], 0x6) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = io_uring_setup(0x5bd5, &(0x7f00000000c0)={0x0, 0x1305, 0x20, 0x3, 0xab, 0x0, r0}) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x25}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 3: ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000100)={0x85}) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x100000000, 0x1) read$rfkill(r1, &(0x7f00000000c0), 0x8) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socketpair(0x8, 0x5, 0xe1ff62d, &(0x7f00000003c0)) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0x1000, 0x4) r2 = io_uring_setup(0x516, &(0x7f00000000c0)={0x0, 0xc75a, 0x4, 0x3, 0x2a9, 0x0, r0}) r3 = accept4(r1, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f00000001c0)=0x80, 0x80000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) r5 = io_uring_setup(0x5dae, &(0x7f0000000280)={0x0, 0x8bef, 0x0, 0x2, 0x261, 0x0, r0}) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='svcrdma_qp_error\x00'}, 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0x3ff, 0x0, &(0x7f0000000340)=[r3, r4, r5, r6, r1]}, 0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x9}, 0x8) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = io_uring_setup(0x5bd5, &(0x7f00000000c0)={0x0, 0x1305, 0x20, 0x3, 0xab, 0x0, r0}) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080), 0xf78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) io_uring_setup(0x5bd5, &(0x7f00000000c0)={0x0, 0x1305, 0x20, 0x3, 0xab, 0x0, r0}) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) 09:12:42 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x40) write$rfkill(r0, &(0x7f0000000080)={0x2000000, 0x2}, 0x8) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x8, 0x5, 0xe1ff62d, &(0x7f00000003c0)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0x1000, 0x4) r2 = io_uring_setup(0x516, &(0x7f00000000c0)={0x0, 0xc75a, 0x4, 0x3, 0x2a9, 0x0, r0}) r3 = accept4(r1, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f00000001c0)=0x80, 0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r5 = io_uring_setup(0x5dae, &(0x7f0000000280)={0x0, 0x8bef, 0x0, 0x2, 0x261, 0x0, r0}) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='svcrdma_qp_error\x00'}, 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0x3ff, 0x0, &(0x7f0000000340)=[r3, r4, r5, r6, r1]}, 0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x9}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x8, 0x5, 0xe1ff62d, &(0x7f00000003c0)) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0x1000, 0x4) (async) io_uring_setup(0x516, &(0x7f00000000c0)={0x0, 0xc75a, 0x4, 0x3, 0x2a9, 0x0, r0}) (async) accept4(r1, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f00000001c0)=0x80, 0x80000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) io_uring_setup(0x5dae, &(0x7f0000000280)={0x0, 0x8bef, 0x0, 0x2, 0x261, 0x0, r0}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='svcrdma_qp_error\x00'}, 0x10) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0x3ff, 0x0, &(0x7f0000000340)=[r3, r4, r5, r6, r1]}, 0x5) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x9}, 0x8) (async) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x48}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x40) write$rfkill(r0, &(0x7f0000000080)={0x2000000, 0x2}, 0x8) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x4c}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r0, &(0x7f00000003c0), 0x0, 0x7) write$rfkill(r1, &(0x7f0000000040)={0x6, 0x9, 0x1, 0x0, 0x7}, 0x8) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x68}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x40) write$rfkill(r0, &(0x7f0000000080)={0x2000000, 0x2}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x40) (async) write$rfkill(r0, &(0x7f0000000080)={0x2000000, 0x2}, 0x8) (async) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x6c}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r0, &(0x7f00000003c0), 0x0, 0x7) write$rfkill(r1, &(0x7f0000000040)={0x6, 0x9, 0x1, 0x0, 0x7}, 0x8) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r0, &(0x7f00000003c0), 0x0, 0x7) (async) write$rfkill(r1, &(0x7f0000000040)={0x6, 0x9, 0x1, 0x0, 0x7}, 0x8) (async) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) (async) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@const={0x10, 0x0, 0x0, 0xa, 0x1}, @const={0x10, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30]}}, &(0x7f00000000c0)=""/21, 0x33, 0x15, 0x1}, 0x20) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x7a4d, 0x180000, 0x7c, &(0x7f0000000140)="1206591a1bb34b8dfdef55457c4c402ea672e5fb3147d339c86cc1717c89c4259d409d191418439f4ccc72cf653faa82dffed56a96657ecc6669493c8d0e854a8df83846fc165509276b44cce4818e14e7c0d9be9315cae4af560e967bd0e6c35b984493638bad73b885339c017ec64803ef3f8232ba25b60d127426"}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000ff01000070b9d72fd4bf0f0e0c8a299cf0e85d787c0ff3b3051a86dcabed8ebbdf63bf8b92a9f10b5f2159d1a9353313501be2d832944fc69ef013be7ca36757eaa407f787886f334ff15d7c6a91db8071b47e", @ANYRES16=0x0, @ANYBLOB="000400"/14], 0x14}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000000000067494aae73b65f6331c58c59d473f8a7ef3539e6231bb08ea2b97c3dd57b5f884e05bd2625c79a22da240070095d30c00c302c34058ac0d49c0354bf5d841dba19a57d7d5d2ce00fb125b8919004f6a6ebfa13d9df4edada52219e4dd9a0a7a6a9d1dd08c9b34e64ea1d255529ae4860b83972a357e8337a8e08cee4cdb81544f24f3765529baa1c356e6a9be68f8480faa5c701c9f95c0c0110517941e8"], 0x14}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x6, 0x0, &(0x7f0000000240)=[r2, r1, r4, 0xffffffffffffffff, r3, r3]}, 0x6) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@const={0x10, 0x0, 0x0, 0xa, 0x1}, @const={0x10, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30]}}, &(0x7f00000000c0)=""/21, 0x33, 0x15, 0x1}, 0x20) (async, rerun: 32) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x7a4d, 0x180000, 0x7c, &(0x7f0000000140)="1206591a1bb34b8dfdef55457c4c402ea672e5fb3147d339c86cc1717c89c4259d409d191418439f4ccc72cf653faa82dffed56a96657ecc6669493c8d0e854a8df83846fc165509276b44cce4818e14e7c0d9be9315cae4af560e967bd0e6c35b984493638bad73b885339c017ec64803ef3f8232ba25b60d127426"}) (rerun: 32) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async, rerun: 32) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000ff01000070b9d72fd4bf0f0e0c8a299cf0e85d787c0ff3b3051a86dcabed8ebbdf63bf8b92a9f10b5f2159d1a9353313501be2d832944fc69ef013be7ca36757eaa407f787886f334ff15d7c6a91db8071b47e", @ANYRES16=0x0, @ANYBLOB="000400"/14], 0x14}}, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000000000067494aae73b65f6331c58c59d473f8a7ef3539e6231bb08ea2b97c3dd57b5f884e05bd2625c79a22da240070095d30c00c302c34058ac0d49c0354bf5d841dba19a57d7d5d2ce00fb125b8919004f6a6ebfa13d9df4edada52219e4dd9a0a7a6a9d1dd08c9b34e64ea1d255529ae4860b83972a357e8337a8e08cee4cdb81544f24f3765529baa1c356e6a9be68f8480faa5c701c9f95c0c0110517941e8"], 0x14}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x6, 0x0, &(0x7f0000000240)=[r2, r1, r4, 0xffffffffffffffff, r3, r3]}, 0x6) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r0, &(0x7f00000003c0), 0x0, 0x7) write$rfkill(r1, &(0x7f0000000040)={0x6, 0x9, 0x1, 0x0, 0x7}, 0x8) (async) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 09:12:42 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x400) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x54480, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x81, 0x0, 0x2, 0x0, 0x1}, 0x8) 09:12:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x9, 0xea, 0x81, 0x400, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x2, 0x2, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140), 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000012c0), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0x4) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040004) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) epoll_wait(r8, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xe, 0x8, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @generic={0x40, 0x1, 0xd, 0x7f, 0x40}, @exit], &(0x7f0000000140)='GPL\x00', 0xfb, 0x1000, &(0x7f0000000180)=""/4096, 0x40f00, 0xd, '\x00', r7, 0x18, r8, 0x8, &(0x7f0000001180)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000011c0)={0x3, 0x4, 0x2, 0x2}, 0x10}, 0x80) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x74}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@const={0x10, 0x0, 0x0, 0xa, 0x1}, @const={0x10, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30]}}, &(0x7f00000000c0)=""/21, 0x33, 0x15, 0x1}, 0x20) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x7a4d, 0x180000, 0x7c, &(0x7f0000000140)="1206591a1bb34b8dfdef55457c4c402ea672e5fb3147d339c86cc1717c89c4259d409d191418439f4ccc72cf653faa82dffed56a96657ecc6669493c8d0e854a8df83846fc165509276b44cce4818e14e7c0d9be9315cae4af560e967bd0e6c35b984493638bad73b885339c017ec64803ef3f8232ba25b60d127426"}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000ff01000070b9d72fd4bf0f0e0c8a299cf0e85d787c0ff3b3051a86dcabed8ebbdf63bf8b92a9f10b5f2159d1a9353313501be2d832944fc69ef013be7ca36757eaa407f787886f334ff15d7c6a91db8071b47e", @ANYRES16=0x0, @ANYBLOB="000400"/14], 0x14}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000000000067494aae73b65f6331c58c59d473f8a7ef3539e6231bb08ea2b97c3dd57b5f884e05bd2625c79a22da240070095d30c00c302c34058ac0d49c0354bf5d841dba19a57d7d5d2ce00fb125b8919004f6a6ebfa13d9df4edada52219e4dd9a0a7a6a9d1dd08c9b34e64ea1d255529ae4860b83972a357e8337a8e08cee4cdb81544f24f3765529baa1c356e6a9be68f8480faa5c701c9f95c0c0110517941e8"], 0x14}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x6, 0x0, &(0x7f0000000240)=[r2, r1, r4, 0xffffffffffffffff, r3, r3]}, 0x6) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@const={0x10, 0x0, 0x0, 0xa, 0x1}, @const={0x10, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30]}}, &(0x7f00000000c0)=""/21, 0x33, 0x15, 0x1}, 0x20) (async) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x7a4d, 0x180000, 0x7c, &(0x7f0000000140)="1206591a1bb34b8dfdef55457c4c402ea672e5fb3147d339c86cc1717c89c4259d409d191418439f4ccc72cf653faa82dffed56a96657ecc6669493c8d0e854a8df83846fc165509276b44cce4818e14e7c0d9be9315cae4af560e967bd0e6c35b984493638bad73b885339c017ec64803ef3f8232ba25b60d127426"}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000ff01000070b9d72fd4bf0f0e0c8a299cf0e85d787c0ff3b3051a86dcabed8ebbdf63bf8b92a9f10b5f2159d1a9353313501be2d832944fc69ef013be7ca36757eaa407f787886f334ff15d7c6a91db8071b47e", @ANYRES16=0x0, @ANYBLOB="000400"/14], 0x14}}, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000000000067494aae73b65f6331c58c59d473f8a7ef3539e6231bb08ea2b97c3dd57b5f884e05bd2625c79a22da240070095d30c00c302c34058ac0d49c0354bf5d841dba19a57d7d5d2ce00fb125b8919004f6a6ebfa13d9df4edada52219e4dd9a0a7a6a9d1dd08c9b34e64ea1d255529ae4860b83972a357e8337a8e08cee4cdb81544f24f3765529baa1c356e6a9be68f8480faa5c701c9f95c0c0110517941e8"], 0x14}}, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x6, 0x0, &(0x7f0000000240)=[r2, r1, r4, 0xffffffffffffffff, r3, r3]}, 0x6) (async) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async) 09:12:42 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x400) (async, rerun: 32) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) (rerun: 32) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x54480, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x81, 0x0, 0x2, 0x0, 0x1}, 0x8) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x42401) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r0, r1, r2], 0x3) write$rfkill(r0, &(0x7f0000000080), 0xf78) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x10) 09:12:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x9, 0xea, 0x81, 0x400, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x2, 0x2, 0x4}, 0x48) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140), 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000012c0), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (rerun: 64) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040004) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) epoll_wait(r8, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xe, 0x8, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @generic={0x40, 0x1, 0xd, 0x7f, 0x40}, @exit], &(0x7f0000000140)='GPL\x00', 0xfb, 0x1000, &(0x7f0000000180)=""/4096, 0x40f00, 0xd, '\x00', r7, 0x18, r8, 0x8, &(0x7f0000001180)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000011c0)={0x3, 0x4, 0x2, 0x2}, 0x10}, 0x80) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x7a}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x1}, 0x8) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x42401) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r0, r1, r2], 0x3) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x10) 09:12:42 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x400) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x54480, 0x0) (async, rerun: 64) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) (rerun: 64) write$rfkill(r0, &(0x7f0000000080)={0x81, 0x0, 0x2, 0x0, 0x1}, 0x8) 09:12:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x9, 0xea, 0x81, 0x400, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x2, 0x2, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140), 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000012c0), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0x4) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040004) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) epoll_wait(r8, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xe, 0x8, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @generic={0x40, 0x1, 0xd, 0x7f, 0x40}, @exit], &(0x7f0000000140)='GPL\x00', 0xfb, 0x1000, &(0x7f0000000180)=""/4096, 0x40f00, 0xd, '\x00', r7, 0x18, r8, 0x8, &(0x7f0000001180)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000011c0)={0x3, 0x4, 0x2, 0x2}, 0x10}, 0x80) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x9, 0xea, 0x81, 0x400, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x2, 0x2, 0x4}, 0x48) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140), 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000012c0), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040004) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000580)={'wg0\x00'}) (async) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async) epoll_wait(r8, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xe, 0x8, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @generic={0x40, 0x1, 0xd, 0x7f, 0x40}, @exit], &(0x7f0000000140)='GPL\x00', 0xfb, 0x1000, &(0x7f0000000180)=""/4096, 0x40f00, 0xd, '\x00', r7, 0x18, r8, 0x8, &(0x7f0000001180)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000011c0)={0x3, 0x4, 0x2, 0x2}, 0x10}, 0x80) (async) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0xd5}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x1}, 0x8) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f3}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x42401) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r0, r1, r2], 0x3) write$rfkill(r0, &(0x7f0000000080), 0xf78) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x10) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x300}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x1}, 0x8) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x82400) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) r2 = epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r3, &(0x7f00000000c0)={r2, r0, 0x7fff}) r4 = gettid() syz_open_procfs$namespace(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0xb) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r5, &(0x7f0000000040)={r0, r0, 0x8}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x8) 09:12:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x600001) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0xe234, 0x20000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) socket$nl_generic(0x10, 0x3, 0x10) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05d505be4824c7827ca5fa230dbd042df870885c6a268270eef952c734b7890f9c7431978896114ea1691e27861f2e9443e4078b7282804bec448f2ac9683f1223c9b6f2f8033f690b3af6eab76a6be89ad64ea9278870df57c5fdb50fdbce67ba35fa6737cd01ec328b6f0dc3d451f4547a073749220daa119063bcb3cae77e1f1a906e3205a7eef92cf4c8d9f016ef004ad6abf0210054e15a7cf2cd945de10f0bf0773d27859ee7d4dd6ee715903cf6b2e25c9761fbae5d00000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf250b0000000800040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8042}, 0x20000000) 09:12:42 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x24a001) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x3fe}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) socket$nl_generic(0x10, 0x3, 0x10) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05d505be4824c7827ca5fa230dbd042df870885c6a268270eef952c734b7890f9c7431978896114ea1691e27861f2e9443e4078b7282804bec448f2ac9683f1223c9b6f2f8033f690b3af6eab76a6be89ad64ea9278870df57c5fdb50fdbce67ba35fa6737cd01ec328b6f0dc3d451f4547a073749220daa119063bcb3cae77e1f1a906e3205a7eef92cf4c8d9f016ef004ad6abf0210054e15a7cf2cd945de10f0bf0773d27859ee7d4dd6ee715903cf6b2e25c9761fbae5d00000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf250b0000000800040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8042}, 0x20000000) 09:12:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async, rerun: 64) syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x600001) (rerun: 64) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0xe234, 0x20000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) 09:12:42 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x24a001) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x500}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x82400) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) r2 = epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r3, &(0x7f00000000c0)={r2, r0, 0x7fff}) r4 = gettid() syz_open_procfs$namespace(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0xb) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r5, &(0x7f0000000040)={r0, r0, 0x8}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x82400) (async) gettid() (async) syz_open_procfs$namespace(r1, 0x0) (async) epoll_create1(0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r3, &(0x7f00000000c0)={r2, r0, 0x7fff}) (async) gettid() (async) syz_open_procfs$namespace(r4, 0x0) (async) socket$netlink(0x10, 0x3, 0xb) (async) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r5, &(0x7f0000000040)={r0, r0, 0x8}) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x8) (async) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x600}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x24a001) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async, rerun: 64) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05d505be4824c7827ca5fa230dbd042df870885c6a268270eef952c734b7890f9c7431978896114ea1691e27861f2e9443e4078b7282804bec448f2ac9683f1223c9b6f2f8033f690b3af6eab76a6be89ad64ea9278870df57c5fdb50fdbce67ba35fa6737cd01ec328b6f0dc3d451f4547a073749220daa119063bcb3cae77e1f1a906e3205a7eef92cf4c8d9f016ef004ad6abf0210054e15a7cf2cd945de10f0bf0773d27859ee7d4dd6ee715903cf6b2e25c9761fbae5d00000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf250b0000000800040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8042}, 0x20000000) 09:12:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x600001) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0xe234, 0x20000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x600001) (async) syz_open_dev$vcsn(&(0x7f0000000100), 0xe234, 0x20000) (async) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) (async) 09:12:42 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x30000000}) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa400) write$rfkill(r2, &(0x7f0000000080), 0xf78) 09:12:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x82400) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) (async) r2 = epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r3, &(0x7f00000000c0)={r2, r0, 0x7fff}) r4 = gettid() syz_open_procfs$namespace(r4, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0xb) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r5, &(0x7f0000000040)={r0, r0, 0x8}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x8) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) write$rfkill(r1, &(0x7f00000000c0)={0x2, 0x6, 0x1, 0x1, 0x8}, 0x8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) socket$netlink(0x10, 0x3, 0x14) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x700}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x30000000}) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa400) write$rfkill(r2, &(0x7f0000000080), 0xf78) 09:12:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8045}, 0x8084) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r2, &(0x7f0000000080), 0x7ffff000) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) write$rfkill(r1, &(0x7f00000000c0)={0x2, 0x6, 0x1, 0x1, 0x8}, 0x8) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) (async) socket$netlink(0x10, 0x3, 0x14) 09:12:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x200000000, 0x12401) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x900}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x30000000}) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa400) write$rfkill(r2, &(0x7f0000000080), 0xf78) 09:12:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, 0x0, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8045}, 0x8084) (async, rerun: 32) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (rerun: 32) write$rfkill(r2, &(0x7f0000000080), 0x7ffff000) 09:12:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x200000000, 0x12401) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) syz_open_dev$vcsn(&(0x7f0000000000), 0x200000000, 0x12401) (async) socket$packet(0x11, 0x2, 0x300) (async) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0xa00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) write$rfkill(r1, &(0x7f00000000c0)={0x2, 0x6, 0x1, 0x1, 0x8}, 0x8) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async, rerun: 32) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async, rerun: 32) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) (async) socket$netlink(0x10, 0x3, 0x14) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r3, &(0x7f0000000080), 0xf78) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x54, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x246}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x98}, 0x1, 0x0, 0x0, 0x40085}, 0x1) r9 = socket(0x1, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) 09:12:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x200000000, 0x12401) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x3, 0x3, 0x0, 0xfd}, 0x8) 09:12:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8045}, 0x8084) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r2, &(0x7f0000000080), 0x7ffff000) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0xb00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x30401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) 09:12:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r3, &(0x7f0000000080), 0xf78) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x54, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x246}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x98}, 0x1, 0x0, 0x0, 0x40085}, 0x1) r9 = socket(0x1, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r3, &(0x7f0000000080), 0xf78) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x54, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x246}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x98}, 0x1, 0x0, 0x0, 0x40085}, 0x1) (async) socket(0x1, 0x3, 0x3) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) (async) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x3, 0x3, 0x0, 0xfd}, 0x8) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0xc00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x30401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) (rerun: 64) 09:12:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd2c, 0x1f, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}]}, 0x2c}}, 0x4002800) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x909, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xf0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x3, 0x3, 0x0, 0xfd}, 0x8) 09:12:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r3, &(0x7f0000000080), 0xf78) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x54, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x246}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x98}, 0x1, 0x0, 0x0, 0x40085}, 0x1) r9 = socket(0x1, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r3, &(0x7f0000000080), 0xf78) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x54, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x246}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x98}, 0x1, 0x0, 0x0, 0x40085}, 0x1) (async) socket(0x1, 0x3, 0x3) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) (async) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0xd00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd2c, 0x1f, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}]}, 0x2c}}, 0x4002800) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x909, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xf0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 09:12:42 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x1000, 0x0, &(0x7f00000000c0)=[r2, 0xffffffffffffffff, r3, r0, r4, r5, r6, r0]}, 0x8) 09:12:42 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x30401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x30401, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) (async) 09:12:42 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) 09:12:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0xe00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x1100}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x1000, 0x0, &(0x7f00000000c0)=[r2, 0xffffffffffffffff, r3, r0, r4, r5, r6, r0]}, 0x8) 09:12:43 executing program 3: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xfffffdef) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) read$rfkill(r0, &(0x7f0000000040), 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, 0x0, r0, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x9, 0x0, 0x93}, 0x10}, 0x80) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) 09:12:43 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) 09:12:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd2c, 0x1f, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}]}, 0x2c}}, 0x4002800) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x8) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x909, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xf0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x1200}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 3: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xfffffdef) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async, rerun: 32) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async, rerun: 32) read$rfkill(r0, &(0x7f0000000040), 0x8) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, 0x0, r0, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x9, 0x0, 0x93}, 0x10}, 0x80) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x1800}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x90000) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xfffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x282100, 0x0) r1 = gettid() r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x3, 0x4) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, r2, 0x0, 0x1c0, &(0x7f0000000400)='\x00\x00\x00\x00\x00\x00\xcc1M\xad\xdfu>\xa19\xe5G\xda\xa3>\x9c]\xed\x99\x84\xcb\x00q=\x10~\x1b\x80\x9eXxz\xff\x01\xcf\x7f,\xb0hG\xa6\xb4|_\x0ej\xaay\x88<;]U\xbc\xf3p\xb2\x06\xe7\xef)<\xb9\xfe\xc4\xa6pD\xe7\xfd\xc3L}[\x8aR.\xdd\x9a\xd0w\x8f\x1c\xc1\xd9\xea\x9b\xc7\xc3gq\x82\x8dn\x1b\x9b\x9c\xda\xd8\xe5\xb9}\xfb[2\xd2qyh\x97ou\xf5\a\xbc\x8c\xd7\xbcw\xb7KX\x1f\x8b\xdf\xe9:\x1a\xc5\xc47\x00\x00\x00\x00\x00\x00\x00\xf4\xc0i\x8b\xd6\xe8\xda`\xdc\xe6\xc7\x190\x11\xc92\x7fN-0\xd0\x86|\xe0\xa3r\x8d \xc5\x8b\xc6i$\x03\x15\x82\xae\x1f\x8a\x80P^%N\"\xb27_\x9a\xf1\x8b\x15Qo\vLa(u\xd8\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xac\xb1\xf9\x94V\x84\x7fmW\xc4\x94\x9d\xa2\x17\xc4\xc8u\xaf\x8bw\x914\xecu\xd1b\xc1\xa1}.r&7\xe0=\x00(%\x0f}\xc0\x02\xd7l\x00\xba\xaa\xbc\x12\xb4\xf4?\x9e1\x8bM\xaf8\xf8\x17\xb3\xc9\xd1\xa7\x13+\n\xf8\xac/\xe0\xba\x8a\xf5\xe2\x05-\xfd\xcd\xf9\xda\xe7\x9c\xd7\xca\x0e\x84\xde\xb1\xd8i|\xbb!(Vy\xe3*o\xc1\x18\x88\x8biB\x1f\x89\xc9,\xca\xca\xacq\x8f\xe9r\xb8\\\x1e\xb0|\xf9OjK#\xd0\xd1\xdau\xb90W\xd10\xc4\xb4\xf7\xf1:\xdd^\x18\xcbl\xd8\xa4\xdc\x03\xad\x87\xc8\x85\x10\x9f\xa1ny\xce\xef@\xbcE\x86\r\a\xbeM_pk\x82Ew\x9c\xe4 \x8a\xf5\x037\x10\x1af\xa5\xd76\xba\x89\xab<\x05\xb3\xbb\xe1Q\xbc\xe5SI\x91IJ\x92\xa5o\xabu\v^\xcc\x1f(,\x1f\x17ta\xffX:L\x1bd\xc2vFW*S}\x98'}, 0x30) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x20004011) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x1000, 0x0, &(0x7f00000000c0)=[r2, 0xffffffffffffffff, r3, r0, r4, r5, r6, r0]}, 0x8) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x9, 0x1}, 0x8) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 3: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xfffffdef) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) read$rfkill(r0, &(0x7f0000000040), 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, 0x0, r0, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x9, 0x0, 0x93}, 0x10}, 0x80) (async) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x2000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x2500}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x8) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x9, 0x1}, 0x8) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x90000) (async) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xfffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x282100, 0x0) r1 = gettid() r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x3, 0x4) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, r2, 0x0, 0x1c0, &(0x7f0000000400)='\x00\x00\x00\x00\x00\x00\xcc1M\xad\xdfu>\xa19\xe5G\xda\xa3>\x9c]\xed\x99\x84\xcb\x00q=\x10~\x1b\x80\x9eXxz\xff\x01\xcf\x7f,\xb0hG\xa6\xb4|_\x0ej\xaay\x88<;]U\xbc\xf3p\xb2\x06\xe7\xef)<\xb9\xfe\xc4\xa6pD\xe7\xfd\xc3L}[\x8aR.\xdd\x9a\xd0w\x8f\x1c\xc1\xd9\xea\x9b\xc7\xc3gq\x82\x8dn\x1b\x9b\x9c\xda\xd8\xe5\xb9}\xfb[2\xd2qyh\x97ou\xf5\a\xbc\x8c\xd7\xbcw\xb7KX\x1f\x8b\xdf\xe9:\x1a\xc5\xc47\x00\x00\x00\x00\x00\x00\x00\xf4\xc0i\x8b\xd6\xe8\xda`\xdc\xe6\xc7\x190\x11\xc92\x7fN-0\xd0\x86|\xe0\xa3r\x8d \xc5\x8b\xc6i$\x03\x15\x82\xae\x1f\x8a\x80P^%N\"\xb27_\x9a\xf1\x8b\x15Qo\vLa(u\xd8\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xac\xb1\xf9\x94V\x84\x7fmW\xc4\x94\x9d\xa2\x17\xc4\xc8u\xaf\x8bw\x914\xecu\xd1b\xc1\xa1}.r&7\xe0=\x00(%\x0f}\xc0\x02\xd7l\x00\xba\xaa\xbc\x12\xb4\xf4?\x9e1\x8bM\xaf8\xf8\x17\xb3\xc9\xd1\xa7\x13+\n\xf8\xac/\xe0\xba\x8a\xf5\xe2\x05-\xfd\xcd\xf9\xda\xe7\x9c\xd7\xca\x0e\x84\xde\xb1\xd8i|\xbb!(Vy\xe3*o\xc1\x18\x88\x8biB\x1f\x89\xc9,\xca\xca\xacq\x8f\xe9r\xb8\\\x1e\xb0|\xf9OjK#\xd0\xd1\xdau\xb90W\xd10\xc4\xb4\xf7\xf1:\xdd^\x18\xcbl\xd8\xa4\xdc\x03\xad\x87\xc8\x85\x10\x9f\xa1ny\xce\xef@\xbcE\x86\r\a\xbeM_pk\x82Ew\x9c\xe4 \x8a\xf5\x037\x10\x1af\xa5\xd76\xba\x89\xab<\x05\xb3\xbb\xe1Q\xbc\xe5SI\x91IJ\x92\xa5o\xabu\v^\xcc\x1f(,\x1f\x17ta\xffX:L\x1bd\xc2vFW*S}\x98'}, 0x30) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x20004011) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x8) (async) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x4000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000080002000000000008000100", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r8 = syz_io_uring_setup(0x79e, &(0x7f0000000040)={0x0, 0x606d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x10000000) syz_io_uring_setup(0x728b, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r10, r9, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0xb41) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) epoll_wait(r7, &(0x7f00000003c0)=[{}], 0x1, 0x4) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8084) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000948dfd297bf982e2d5f6bcacb64ed338dabf6972c14e1036ae94ab7571dfc2632226b40550195c2c3f4c01bf90e2869ad231eb78b2a6ffdae8622a0c9f9489c2c3d3f900ec81b6ed808972ee377cf7c031138bab71fa9b", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x9, 0x1}, 0x8) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x90000) (async) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xfffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x282100, 0x0) r1 = gettid() (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x3, 0x4) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, r2, 0x0, 0x1c0, &(0x7f0000000400)='\x00\x00\x00\x00\x00\x00\xcc1M\xad\xdfu>\xa19\xe5G\xda\xa3>\x9c]\xed\x99\x84\xcb\x00q=\x10~\x1b\x80\x9eXxz\xff\x01\xcf\x7f,\xb0hG\xa6\xb4|_\x0ej\xaay\x88<;]U\xbc\xf3p\xb2\x06\xe7\xef)<\xb9\xfe\xc4\xa6pD\xe7\xfd\xc3L}[\x8aR.\xdd\x9a\xd0w\x8f\x1c\xc1\xd9\xea\x9b\xc7\xc3gq\x82\x8dn\x1b\x9b\x9c\xda\xd8\xe5\xb9}\xfb[2\xd2qyh\x97ou\xf5\a\xbc\x8c\xd7\xbcw\xb7KX\x1f\x8b\xdf\xe9:\x1a\xc5\xc47\x00\x00\x00\x00\x00\x00\x00\xf4\xc0i\x8b\xd6\xe8\xda`\xdc\xe6\xc7\x190\x11\xc92\x7fN-0\xd0\x86|\xe0\xa3r\x8d \xc5\x8b\xc6i$\x03\x15\x82\xae\x1f\x8a\x80P^%N\"\xb27_\x9a\xf1\x8b\x15Qo\vLa(u\xd8\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xac\xb1\xf9\x94V\x84\x7fmW\xc4\x94\x9d\xa2\x17\xc4\xc8u\xaf\x8bw\x914\xecu\xd1b\xc1\xa1}.r&7\xe0=\x00(%\x0f}\xc0\x02\xd7l\x00\xba\xaa\xbc\x12\xb4\xf4?\x9e1\x8bM\xaf8\xf8\x17\xb3\xc9\xd1\xa7\x13+\n\xf8\xac/\xe0\xba\x8a\xf5\xe2\x05-\xfd\xcd\xf9\xda\xe7\x9c\xd7\xca\x0e\x84\xde\xb1\xd8i|\xbb!(Vy\xe3*o\xc1\x18\x88\x8biB\x1f\x89\xc9,\xca\xca\xacq\x8f\xe9r\xb8\\\x1e\xb0|\xf9OjK#\xd0\xd1\xdau\xb90W\xd10\xc4\xb4\xf7\xf1:\xdd^\x18\xcbl\xd8\xa4\xdc\x03\xad\x87\xc8\x85\x10\x9f\xa1ny\xce\xef@\xbcE\x86\r\a\xbeM_pk\x82Ew\x9c\xe4 \x8a\xf5\x037\x10\x1af\xa5\xd76\xba\x89\xab<\x05\xb3\xbb\xe1Q\xbc\xe5SI\x91IJ\x92\xa5o\xabu\v^\xcc\x1f(,\x1f\x17ta\xffX:L\x1bd\xc2vFW*S}\x98'}, 0x30) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x20004011) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x8) 09:12:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x8) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000080002000000000008000100", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x0) (async) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r8 = syz_io_uring_setup(0x79e, &(0x7f0000000040)={0x0, 0x606d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x10000000) syz_io_uring_setup(0x728b, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r10, r9, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, r9, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0xb41) (async, rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (rerun: 32) epoll_wait(r7, &(0x7f00000003c0)=[{}], 0x1, 0x4) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8084) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000948dfd297bf982e2d5f6bcacb64ed338dabf6972c14e1036ae94ab7571dfc2632226b40550195c2c3f4c01bf90e2869ad231eb78b2a6ffdae8622a0c9f9489c2c3d3f900ec81b6ed808972ee377cf7c031138bab71fa9b", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x4800}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x3, 0xff}, 0x8) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x7fffffffffffffff, 0x401, 0x1}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x5, 0xfff00000, 0x44, &(0x7f00000000c0)="b0ba0530ffd9dc815c9b5db51309c96acb835070248f16af9c5a99261ba50047af01402d5dd40cd08dd415cdfe941c63f4675d44ceceeab295d458e320aa9f240b92f533"}) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x8) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x8) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000080002000000000008000100", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r8 = syz_io_uring_setup(0x79e, &(0x7f0000000040)={0x0, 0x606d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x10000000) syz_io_uring_setup(0x728b, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r10, r9, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, r9, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0xb41) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) epoll_wait(r7, &(0x7f00000003c0)=[{}], 0x1, 0x4) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8084) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000948dfd297bf982e2d5f6bcacb64ed338dabf6972c14e1036ae94ab7571dfc2632226b40550195c2c3f4c01bf90e2869ad231eb78b2a6ffdae8622a0c9f9489c2c3d3f900ec81b6ed808972ee377cf7c031138bab71fa9b", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x4c00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x3, 0xff}, 0x8) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x7fffffffffffffff, 0x401, 0x1}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x5, 0xfff00000, 0x44, &(0x7f00000000c0)="b0ba0530ffd9dc815c9b5db51309c96acb835070248f16af9c5a99261ba50047af01402d5dd40cd08dd415cdfe941c63f4675d44ceceeab295d458e320aa9f240b92f533"}) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x3, 0xff}, 0x8) (async) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) (async) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x7fffffffffffffff, 0x401, 0x1}) (async) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x5, 0xfff00000, 0x44, &(0x7f00000000c0)="b0ba0530ffd9dc815c9b5db51309c96acb835070248f16af9c5a99261ba50047af01402d5dd40cd08dd415cdfe941c63f4675d44ceceeab295d458e320aa9f240b92f533"}) (async) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) read$rfkill(r1, &(0x7f0000000040), 0x8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x20081, 0x0) write$rfkill(r2, &(0x7f0000000140)={0x1f, 0x7, 0x3, 0x1}, 0x8) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x8) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x3, 0xff}, 0x8) (async) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) (async) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x7fffffffffffffff, 0x401, 0x1}) (async) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x5, 0xfff00000, 0x44, &(0x7f00000000c0)="b0ba0530ffd9dc815c9b5db51309c96acb835070248f16af9c5a99261ba50047af01402d5dd40cd08dd415cdfe941c63f4675d44ceceeab295d458e320aa9f240b92f533"}) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x6800}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 4: accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x606e41) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) ioperm(0xac50, 0xb7f, 0x2) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x8) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000000) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) read$rfkill(r1, &(0x7f0000000040), 0x8) (async, rerun: 32) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x20081, 0x0) (rerun: 32) write$rfkill(r2, &(0x7f0000000140)={0x1f, 0x7, 0x3, 0x1}, 0x8) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x6c00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 4: accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x606e41) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) ioperm(0xac50, 0xb7f, 0x2) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x10) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x606e41) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) ioperm(0xac50, 0xb7f, 0x2) (async) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async, rerun: 64) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async, rerun: 64) read$rfkill(r1, &(0x7f0000000040), 0x8) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x20081, 0x0) write$rfkill(r2, &(0x7f0000000140)={0x1f, 0x7, 0x3, 0x1}, 0x8) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x7400}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000000) 09:12:43 executing program 4: accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x606e41) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) ioperm(0xac50, 0xb7f, 0x2) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) syz_io_uring_setup(0x728b, &(0x7f0000000000)={0x0, 0xbc44}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x194c0000) r2 = syz_io_uring_setup(0x79e, &(0x7f0000000040)={0x0, 0x606d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x10000000) syz_io_uring_setup(0x728b, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x5}, 0x3f) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000000) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000000) (async) 09:12:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x5, 0x3, r3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}]}, 0x54}, 0x1, 0x0, 0x0, 0x480c4}, 0x800) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r4, &(0x7f0000000080), 0xfffffdef) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x7a00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) syz_io_uring_setup(0x728b, &(0x7f0000000000)={0x0, 0xbc44}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x194c0000) r2 = syz_io_uring_setup(0x79e, &(0x7f0000000040)={0x0, 0x606d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x10000000) syz_io_uring_setup(0x728b, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x5}, 0x3f) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) syz_io_uring_setup(0x728b, &(0x7f0000000000)={0x0, 0xbc44}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x194c0000) (async) syz_io_uring_setup(0x79e, &(0x7f0000000040)={0x0, 0x606d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x10000000) (async) syz_io_uring_setup(0x728b, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x5}, 0x3f) (async) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd500}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0xd500}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, 0x0, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x5, 0x3, r3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}]}, 0x54}, 0x1, 0x0, 0x0, 0x480c4}, 0x800) (async, rerun: 64) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (rerun: 64) write$rfkill(r4, &(0x7f0000000080), 0xfffffdef) 09:12:43 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x2000000}, 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004004}, 0x81) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x98c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x56ac}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xee85}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x470}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r3}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0x4010) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r5, &(0x7f0000000080), 0x87fff78) socket(0x2a, 0x3, 0x4) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 09:12:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="286d3bd471c0cfa96f00", @ANYRES16=r2, @ANYBLOB="010100000000000000000e0000000c00060001000000010000000800010000000000"], 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r6, &(0x7f0000000080), 0x7ffff000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r9, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="1000175af6de8eeb58f2a6dec000", @ANYRES32=r5, @ANYBLOB="2400228008000300010000000500010081000000080002000300000008000300040000000c000600020000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c0006000100000001000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x24004001) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0xfe03}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) syz_io_uring_setup(0x728b, &(0x7f0000000000)={0x0, 0xbc44}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x194c0000) (async) r2 = syz_io_uring_setup(0x79e, &(0x7f0000000040)={0x0, 0x606d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x10000000) (async) syz_io_uring_setup(0x728b, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async, rerun: 64) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x5}, 0x3f) (rerun: 64) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf303}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="286d3bd471c0cfa96f00", @ANYRES16=r2, @ANYBLOB="010100000000000000000e0000000c00060001000000010000000800010000000000"], 0x28}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) (async) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r6, &(0x7f0000000080), 0x7ffff000) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r9, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="1000175af6de8eeb58f2a6dec000", @ANYRES32=r5, @ANYBLOB="2400228008000300010000000500010081000000080002000300000008000300040000000c000600020000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c0006000100000001000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x24004001) 09:12:43 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x2000000}, 0x14}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x4) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004004}, 0x81) (async) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x98c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x56ac}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xee85}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x470}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r3}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0x4010) (async) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r5, &(0x7f0000000080), 0x87fff78) (async) socket(0x2a, 0x3, 0x4) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 09:12:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x5, 0x3, r3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}]}, 0x54}, 0x1, 0x0, 0x0, 0x480c4}, 0x800) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r4, &(0x7f0000000080), 0xfffffdef) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, 0x0, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x5, 0x3, r3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}]}, 0x54}, 0x1, 0x0, 0x0, 0x480c4}, 0x800) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r4, &(0x7f0000000080), 0xfffffdef) (async) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x80, 0x2}, 'port0\x00', 0x1, 0x9, 0x1, 0xbece, 0x1, 0xfffff000, 0x0, 0x0, 0x2, 0x7f}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r0) getpeername$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r2, 0xc20, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x4000000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x0, 0x6, 0x101, 0x3ff, 0x7, 0x7}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000200)={{0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000180)={{0x2, 0x1, 0x8, 0x0, 0x6}, 0x4, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xffff, 0x5, 0x4}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) epoll_wait(r6, &(0x7f00000003c0)=[{}], 0x1, 0x4) r7 = accept4$inet(r0, &(0x7f0000000300)={0x2, 0x0, @empty}, &(0x7f0000000340)=0x10, 0x800) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000380)={0x20002001}) 09:12:43 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x2000000}, 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004004}, 0x81) (async) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x98c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x56ac}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xee85}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x470}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r3}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0x4010) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r5, &(0x7f0000000080), 0x87fff78) socket(0x2a, 0x3, 0x4) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) 09:12:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="286d3bd471c0cfa96f00", @ANYRES16=r2, @ANYBLOB="010100000000000000000e0000000c00060001000000010000000800010000000000"], 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r6, &(0x7f0000000080), 0x7ffff000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r9, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="1000175af6de8eeb58f2a6dec000", @ANYRES32=r5, @ANYBLOB="2400228008000300010000000500010081000000080002000300000008000300040000000c000600020000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c0006000100000001000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x24004001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="286d3bd471c0cfa96f00", @ANYRES16=r2, @ANYBLOB="010100000000000000000e0000000c00060001000000010000000800010000000000"], 0x28}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r6, &(0x7f0000000080), 0x7ffff000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r9, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="1000175af6de8eeb58f2a6dec000", @ANYRES32=r5, @ANYBLOB="2400228008000300010000000500010081000000080002000300000008000300040000000c000600020000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c0006000100000001000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x24004001) (async) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x80, 0x2}, 'port0\x00', 0x1, 0x9, 0x1, 0xbece, 0x1, 0xfffff000, 0x0, 0x0, 0x2, 0x7f}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r0) getpeername$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r2, 0xc20, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x4000000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x0, 0x6, 0x101, 0x3ff, 0x7, 0x7}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000200)={{0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000180)={{0x2, 0x1, 0x8, 0x0, 0x6}, 0x4, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xffff, 0x5, 0x4}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) epoll_wait(r6, &(0x7f00000003c0)=[{}], 0x1, 0x4) r7 = accept4$inet(r0, &(0x7f0000000300)={0x2, 0x0, @empty}, &(0x7f0000000340)=0x10, 0x800) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000380)={0x20002001}) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x80, 0x2}, 'port0\x00', 0x1, 0x9, 0x1, 0xbece, 0x1, 0xfffff000, 0x0, 0x0, 0x2, 0x7f}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r0) (async) getpeername$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/net\x00') (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r2, 0xc20, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x4000000) (async) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x0, 0x6, 0x101, 0x3ff, 0x7, 0x7}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000200)={{0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000180)={{0x2, 0x1, 0x8, 0x0, 0x6}, 0x4, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xffff, 0x5, 0x4}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) epoll_wait(r6, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) accept4$inet(r0, &(0x7f0000000300)={0x2, 0x0, @empty}, &(0x7f0000000340)=0x10, 0x800) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000380)={0x20002001}) (async) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0xff00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x168}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40001) 09:12:43 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f00000000c0)={0x9, 0x8000000000000000, 0x7, 0xffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0x87fff78) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x80, 0x2}, 'port0\x00', 0x1, 0x9, 0x1, 0xbece, 0x1, 0xfffff000, 0x0, 0x0, 0x2, 0x7f}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r0) (async) getpeername$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) (async) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r2, 0xc20, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x4000000) (async) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x0, 0x6, 0x101, 0x3ff, 0x7, 0x7}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000200)={{0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000180)={{0x2, 0x1, 0x8, 0x0, 0x6}, 0x4, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xffff, 0x5, 0x4}) (async) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) epoll_wait(r6, &(0x7f00000003c0)=[{}], 0x1, 0x4) r7 = accept4$inet(r0, &(0x7f0000000300)={0x2, 0x0, @empty}, &(0x7f0000000340)=0x10, 0x800) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000380)={0x20002001}) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) socket$inet(0x2, 0x80000, 0x80000000) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x168}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40001) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x168}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40001) (async) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ed688}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f00000000c0)={0x9, 0x8000000000000000, 0x7, 0xffff}) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0x87fff78) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async, rerun: 32) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x168}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40001) (rerun: 32) 09:12:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) socket$inet(0x2, 0x80000, 0x80000000) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000140)=0xfff) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000000c0)={0x0, 0x1, 0xa96, 0x0, 0x7, 0xb940}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r2, 0x8000000) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="73797a00004000fdd148e62adde7e900781d4736e4cb9b8e5560de18b9b2a35d3a81981036175b9968829f93a667fcae3da06d84beba6ee73aea98fe8545886526b80220505459", @ANYRES32=0x0, @ANYBLOB="0080004000000100000000034e9b00380068000080299078ac14141fffffffff441c5f116401010100000000ac1414bb00000971ac1e01010000000799062328022a0000"]}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000004c0)={0x6, 0x0, &(0x7f0000000480)=[r3]}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) 09:12:43 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f00000000c0)={0x9, 0x8000000000000000, 0x7, 0xffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0x87fff78) 09:12:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) socket$inet(0x2, 0x80000, 0x80000000) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) socket$inet(0x2, 0x80000, 0x80000000) (async) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x2}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="73797a00004000fdd148e62adde7e900781d4736e4cb9b8e5560de18b9b2a35d3a81981036175b9968829f93a667fcae3da06d84beba6ee73aea98fe8545886526b80220505459", @ANYRES32=0x0, @ANYBLOB="0080004000000100000000034e9b00380068000080299078ac14141fffffffff441c5f116401010100000000ac1414bb00000971ac1e01010000000799062328022a0000"]}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000004c0)={0x6, 0x0, &(0x7f0000000480)=[r3]}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="73797a00004000fdd148e62adde7e900781d4736e4cb9b8e5560de18b9b2a35d3a81981036175b9968829f93a667fcae3da06d84beba6ee73aea98fe8545886526b80220505459", @ANYRES32=0x0, @ANYBLOB="0080004000000100000000034e9b00380068000080299078ac14141fffffffff441c5f116401010100000000ac1414bb00000971ac1e01010000000799062328022a0000"]}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000004c0)={0x6, 0x0, &(0x7f0000000480)=[r3]}, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000140)=0xfff) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000000c0)={0x0, 0x1, 0xa96, 0x0, 0x7, 0xb940}) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r2, 0x8000000) 09:12:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0xf, 0x0, 0x0, 0x4}, 0x8) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x3}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffc, 0x4000c2) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000140)=0xfff) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000000c0)={0x0, 0x1, 0xa96, 0x0, 0x7, 0xb940}) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r2, 0x8000000) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="73797a00004000fdd148e62adde7e900781d4736e4cb9b8e5560de18b9b2a35d3a81981036175b9968829f93a667fcae3da06d84beba6ee73aea98fe8545886526b80220505459", @ANYRES32=0x0, @ANYBLOB="0080004000000100000000034e9b00380068000080299078ac14141fffffffff441c5f116401010100000000ac1414bb00000971ac1e01010000000799062328022a0000"]}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000004c0)={0x6, 0x0, &(0x7f0000000480)=[r3]}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="73797a00004000fdd148e62adde7e900781d4736e4cb9b8e5560de18b9b2a35d3a81981036175b9968829f93a667fcae3da06d84beba6ee73aea98fe8545886526b80220505459", @ANYRES32=0x0, @ANYBLOB="0080004000000100000000034e9b00380068000080299078ac14141fffffffff441c5f116401010100000000ac1414bb00000971ac1e01010000000799062328022a0000"]}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000004c0)={0x6, 0x0, &(0x7f0000000480)=[r3]}, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0xf, 0x0, 0x0, 0x4}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0xf, 0x0, 0x0, 0x4}, 0x8) (async) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x4}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) write$rfkill(r0, &(0x7f0000000080)={0x7, 0x0, 0x3}, 0x8) write$rfkill(r0, &(0x7f0000000040)={0x3, 0x4, 0x1, 0x1, 0x1}, 0x8) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0xf, 0x0, 0x0, 0x4}, 0x8) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x5}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1b, 0x5d5400) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x58080) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000000)) ioctl$BLKRRPART(r0, 0x125f, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$rfkill(r0, &(0x7f0000000080), 0xf78) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffc, 0x4000c2) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) (async) write$rfkill(r0, &(0x7f0000000080)={0x7, 0x0, 0x3}, 0x8) (async) write$rfkill(r0, &(0x7f0000000040)={0x3, 0x4, 0x1, 0x1, 0x1}, 0x8) 09:12:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000800) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2401) write$rfkill(r2, &(0x7f0000000080), 0x7ffff000) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x6}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1b, 0x5d5400) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x58080) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000000)) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) write$rfkill(r0, &(0x7f0000000080)={0x7, 0x0, 0x3}, 0x8) (async) write$rfkill(r0, &(0x7f0000000040)={0x3, 0x4, 0x1, 0x1, 0x1}, 0x8) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffc, 0x4000c2) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x7}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x1, 0x5}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1b, 0x5d5400) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x58080) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000000)) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$rfkill(r0, &(0x7f0000000080), 0xf78) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x8}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000800) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2401) write$rfkill(r2, &(0x7f0000000080), 0x7ffff000) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x1, 0x5}, 0x8) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x9}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xa}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x1, 0x5}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x1, 0x5}, 0x8) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000800) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2401) write$rfkill(r2, &(0x7f0000000080), 0x7ffff000) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x7e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5615, 0x1e, &(0x7f0000000100)=""/30, 0x41000, 0x2, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x7, 0x11, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, 0xffffffffffffffff, r0]}, 0x80) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r3) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async, rerun: 64) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) (rerun: 64) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xb}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r0) (rerun: 64) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x7e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5615, 0x1e, &(0x7f0000000100)=""/30, 0x41000, 0x2, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x7, 0x11, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, 0xffffffffffffffff, r0]}, 0x80) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r3) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xc}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x3696, &(0x7f00000000c0)={0x0, 0xe6e0, 0x8, 0x0, 0x2cf, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000140)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000180)=[r2, 0xffffffffffffffff, r3, r4, r0]}, 0x5) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x7e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5615, 0x1e, &(0x7f0000000100)=""/30, 0x41000, 0x2, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x7, 0x11, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, 0xffffffffffffffff, r0]}, 0x80) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r3) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r0) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x7e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5615, 0x1e, &(0x7f0000000100)=""/30, 0x41000, 0x2, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x7, 0x11, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, 0xffffffffffffffff, r0]}, 0x80) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r3) (async) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = gettid() r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r2, 0x0, 0xa, &(0x7f0000000040)='/dev/vcs#\x00'}, 0x30) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x72f, 0x0, 0x3, 0x1}, 0x8) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xd}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x34481) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0x2a4a, 0x3, 0x1, 0x0, 0x1}, 0x8) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000900030f"], 0x14}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x16) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='mm_page_pcpu_drain\x00', r4}, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf8, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x600}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8080) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000002100000326bd7000ffdbdf25028014ffff0000070b00000008000a000500000008000b00f8ffffff0800010008000b003f00000000740000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x3696, &(0x7f00000000c0)={0x0, 0xe6e0, 0x8, 0x0, 0x2cf, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000140)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000180)=[r2, 0xffffffffffffffff, r3, r4, r0]}, 0x5) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_io_uring_setup(0x3696, &(0x7f00000000c0)={0x0, 0xe6e0, 0x8, 0x0, 0x2cf, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000180)=[r2, 0xffffffffffffffff, r3, r4, r0]}, 0x5) (async) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) r1 = gettid() (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r2, 0x0, 0xa, &(0x7f0000000040)='/dev/vcs#\x00'}, 0x30) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x72f, 0x0, 0x3, 0x1}, 0x8) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xe}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x3696, &(0x7f00000000c0)={0x0, 0xe6e0, 0x8, 0x0, 0x2cf, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000140)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000180)=[r2, 0xffffffffffffffff, r3, r4, r0]}, 0x5) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_io_uring_setup(0x3696, &(0x7f00000000c0)={0x0, 0xe6e0, 0x8, 0x0, 0x2cf, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000140)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000180)=[r2, 0xffffffffffffffff, r3, r4, r0]}, 0x5) (async) 09:12:43 executing program 3: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x240080c1}, 0x8895) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x34481) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0x2a4a, 0x3, 0x1, 0x0, 0x1}, 0x8) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000900030f"], 0x14}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x16) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='mm_page_pcpu_drain\x00', r4}, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf8, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x600}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8080) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000002100000326bd7000ffdbdf25028014ffff0000070b00000008000a000500000008000b00f8ffffff0800010008000b003f00000000740000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x34481) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0x2a4a, 0x3, 0x1, 0x0, 0x1}, 0x8) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000900030f"], 0x14}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x16) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='mm_page_pcpu_drain\x00', r4}, 0x10) (async) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf8, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x600}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8080) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000002100000326bd7000ffdbdf25028014ffff0000070b00000008000a000500000008000b00f8ffffff0800010008000b003f00000000740000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) (async) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = gettid() (async, rerun: 32) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r2, 0x0, 0xa, &(0x7f0000000040)='/dev/vcs#\x00'}, 0x30) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x10}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x72f, 0x0, 0x3, 0x1}, 0x8) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) 09:12:43 executing program 3: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x240080c1}, 0x8895) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x240080c1}, 0x8895) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) 09:12:43 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x1000000, 0x1}, 0x8) 09:12:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x34481) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0x2a4a, 0x3, 0x1, 0x0, 0x1}, 0x8) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000900030f"], 0x14}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x16) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='mm_page_pcpu_drain\x00', r4}, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf8, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x600}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8080) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000002100000326bd7000ffdbdf25028014ffff0000070b00000008000a000500000008000b00f8ffffff0800010008000b003f00000000740000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x34481) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0x2a4a, 0x3, 0x1, 0x0, 0x1}, 0x8) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000900030f"], 0x14}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x16) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00'}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='mm_page_pcpu_drain\x00', r4}, 0x10) (async) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf8, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x600}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8080) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000002100000326bd7000ffdbdf25028014ffff0000070b00000008000a000500000008000b00f8ffffff0800010008000b003f00000000740000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) (async) 09:12:43 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) (async) 09:12:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x11}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x12}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 3: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x240080c1}, 0x8895) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x240080c1}, 0x8895) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) 09:12:44 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x1000000, 0x1}, 0x8) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x1000000, 0x1}, 0x8) 09:12:44 executing program 1: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0xe5546ad7548e8a84) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0), 0x0) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) 09:12:44 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000000c0)={0x5, 0x1f, 0xfffffff9, 0x2}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000140)) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x10) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x18}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x0, 0x10, 0x70bd27, 0x20, {}, [@GTPA_O_TEI={0xff7d, 0x9, 0x4}, @GTPA_FLOW={0xfffffffffffffd82, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_TID={0x0, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000012}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r2, &(0x7f0000000080), 0x7ffff000) 09:12:44 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000000c0)={0x5, 0x1f, 0xfffffff9, 0x2}) (async) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) (async, rerun: 32) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000140)) (rerun: 32) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x0, 0x10, 0x70bd27, 0x20, {}, [@GTPA_O_TEI={0xff7d, 0x9, 0x4}, @GTPA_FLOW={0xfffffffffffffd82, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_TID={0x0, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000012}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r2, &(0x7f0000000080), 0x7ffff000) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x0, 0x10, 0x70bd27, 0x20, {}, [@GTPA_O_TEI={0xff7d, 0x9, 0x4}, @GTPA_FLOW={0xfffffffffffffd82, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_TID={0x0, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000012}, 0x10) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r2, &(0x7f0000000080), 0x7ffff000) (async) 09:12:44 executing program 1: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0xe5546ad7548e8a84) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0), 0x0) 09:12:44 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000000c0)={0x5, 0x1f, 0xfffffff9, 0x2}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000140)) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x10) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x25}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x48}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x0, 0x10, 0x70bd27, 0x20, {}, [@GTPA_O_TEI={0xff7d, 0x9, 0x4}, @GTPA_FLOW={0xfffffffffffffd82, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_TID={0x0, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000012}, 0x10) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r2, &(0x7f0000000080), 0x7ffff000) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x10) 09:12:44 executing program 1: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0xe5546ad7548e8a84) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0), 0x0) (rerun: 32) 09:12:44 executing program 3: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xfffffdef) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xa41, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x7, 0x5, 0x1, 0x1, 0x1}, 0x8) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 3: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xfffffdef) (async) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xa41, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x7, 0x5, 0x1, 0x1, 0x1}, 0x8) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x0, 0x1}, 0x8) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x163441) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x4c}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:44 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x0, 0x1}, 0x8) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x68}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 3: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xfffffdef) (async) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xa41, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x7, 0x5, 0x1, 0x1, 0x1}, 0x8) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:44 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x0, 0x1}, 0x8) 09:12:44 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x6c}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x163441) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/185, 0xb9}) 09:12:44 executing program 1: socket$inet(0x2, 0x5, 0x2) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) epoll_wait(r1, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0x0) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:44 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x74}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x7a}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/185, 0xb9}) 09:12:44 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20}, 0x8004) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/185, 0xb9}) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/185, 0xb9}) (async) 09:12:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x163441) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 1: socket$inet(0x2, 0x5, 0x2) (async) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) epoll_wait(r1, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0x0) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xd5}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2400) r1 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@alg, &(0x7f00000000c0)=0x80, 0x800) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:44 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20}, 0x8004) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x300}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20}, 0x8004) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:44 executing program 1: socket$inet(0x2, 0x5, 0x2) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) epoll_wait(r1, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0x0) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x3fe}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2400) (async) r1 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@alg, &(0x7f00000000c0)=0x80, 0x800) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2400) (async) r1 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@alg, &(0x7f00000000c0)=0x80, 0x800) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x36464de5, 0x2401) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001500200029bd7000fcdbdf2502202400", @ANYRES32=0x0, @ANYBLOB="08000a0000000000000007000090ac2531a02a1f2c80222fe88d7f00"], 0x34}, 0x1, 0x0, 0x0, 0x200480d0}, 0x20048811) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x1}, 0x8) 09:12:44 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0xfffffff7}, 0x8) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x500}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x81) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r3, &(0x7f0000000080), 0xfffffdef) socketpair(0x6, 0x80000, 0x100, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x10000) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x600}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0xfffffff7}, 0x8) 09:12:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x81) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r3, &(0x7f0000000080), 0xfffffdef) socketpair(0x6, 0x80000, 0x100, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x81) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r3, &(0x7f0000000080), 0xfffffdef) (async) socketpair(0x6, 0x80000, 0x100, &(0x7f0000000100)) (async) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x10000) write$rfkill(r0, &(0x7f0000000080), 0xf78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x10000) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) 09:12:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x36464de5, 0x2401) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001500200029bd7000fcdbdf2502202400", @ANYRES32=0x0, @ANYBLOB="08000a0000000000000007000090ac2531a02a1f2c80222fe88d7f00"], 0x34}, 0x1, 0x0, 0x0, 0x200480d0}, 0x20048811) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x1}, 0x8) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x700}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0xfffffff7}, 0x8) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88d61e00}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x81) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r3, &(0x7f0000000080), 0xfffffdef) socketpair(0x6, 0x80000, 0x100, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x10000) write$rfkill(r0, &(0x7f0000000080), 0xf78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x10000) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x900}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x1c}}, 0x4080) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) r2 = gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000040)={r0, r4, 0x80000001}) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x36464de5, 0x2401) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001500200029bd7000fcdbdf2502202400", @ANYRES32=0x0, @ANYBLOB="08000a0000000000000007000090ac2531a02a1f2c80222fe88d7f00"], 0x34}, 0x1, 0x0, 0x0, 0x200480d0}, 0x20048811) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x1}, 0x8) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90ffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x200, 0x94a00) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0x7) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0xfffffdef) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xa00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x1c}}, 0x4080) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) r2 = gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000040)={r0, r4, 0x80000001}) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x1c}}, 0x4080) (async) gettid() (async) syz_open_procfs$namespace(r1, 0x0) (async) gettid() (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000040)={r0, r4, 0x80000001}) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) 09:12:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f0000000080)={r0, r0, 0x8}) write$rfkill(r0, &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x8) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x200, 0x94a00) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0x7) (async) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0xfffffdef) 09:12:44 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x1c}}, 0x4080) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) r2 = gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000040)={r0, r4, 0x80000001}) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x1c}}, 0x4080) (async) gettid() (async) syz_open_procfs$namespace(r1, 0x0) (async) gettid() (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000040)={r0, r4, 0x80000001}) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xb00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3030000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x200, 0x94a00) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0x7) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0xfffffdef) syz_open_dev$loop(&(0x7f0000000000), 0x200, 0x94a00) (async) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0x7) (async) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r1, &(0x7f0000000080), 0xfffffdef) (async) 09:12:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f0000000080)={r0, r0, 0x8}) write$rfkill(r0, &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) gettid() (async) syz_open_procfs$namespace(r1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f0000000080)={r0, r0, 0x8}) (async) write$rfkill(r0, &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x8) (async) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:44 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7fffffff, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x20000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x80, 0x4) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xc00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x100000000, 0x88280) write$rfkill(r0, &(0x7f0000000080), 0xf78) write$rfkill(r0, &(0x7f0000000000)={0x2, 0x8, 0x3}, 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x1010, r1, 0x8000000) 09:12:44 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x212801) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x100000000, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0xfffffdef) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000240)=0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000096089a3f279759c48ebc14fc2dec784da0e8c6d742e557980f5f390034caa21b95d0edb3ac0c9af8922635c74cd19ef598435bb6d74b3f29cb", @ANYRES16=r3, @ANYBLOB="010100000000000000000e0000000c00060001000000010000000800010000000000"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x48000) 09:12:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f0000000080)={r0, r0, 0x8}) write$rfkill(r0, &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x8) 09:12:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x110, r1, 0x10000000) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xd00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async, rerun: 32) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x110, r1, 0x10000000) (rerun: 32) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xe00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff90}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7fffffff, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x20000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x80, 0x4) 09:12:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x110, r1, 0x10000000) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x1100}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x100000000, 0x88280) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) write$rfkill(r0, &(0x7f0000000000)={0x2, 0x8, 0x3}, 0x8) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x1010, r1, 0x8000000) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x2, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x212801) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x100000000, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0xfffffdef) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000240)=0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000096089a3f279759c48ebc14fc2dec784da0e8c6d742e557980f5f390034caa21b95d0edb3ac0c9af8922635c74cd19ef598435bb6d74b3f29cb", @ANYRES16=r3, @ANYBLOB="010100000000000000000e0000000c00060001000000010000000800010000000000"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x48000) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x1200}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) read$rfkill(r0, &(0x7f0000000040), 0x8) 09:12:44 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x1800}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x3, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) read$rfkill(r0, &(0x7f0000000040), 0x8) 09:12:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x4, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7fffffff, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x20000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x80, 0x4) syz_open_dev$vcsn(&(0x7f0000000000), 0x7fffffff, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x20000) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x80, 0x4) (async) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x2000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x5, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x100000000, 0x88280) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) write$rfkill(r0, &(0x7f0000000000)={0x2, 0x8, 0x3}, 0x8) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x1010, r1, 0x8000000) 09:12:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) read$rfkill(r0, &(0x7f0000000040), 0x8) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x2500}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x6, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x212801) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x100000000, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0xfffffdef) (async) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000240)=0xffffffffffffffff) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000096089a3f279759c48ebc14fc2dec784da0e8c6d742e557980f5f390034caa21b95d0edb3ac0c9af8922635c74cd19ef598435bb6d74b3f29cb", @ANYRES16=r3, @ANYBLOB="010100000000000000000e0000000c00060001000000010000000800010000000000"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x48000) 09:12:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x3}, 0x14}}, 0x0) r3 = socket(0x15, 0x1, 0xfd33) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r3, r0], 0x3) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) socket$nl_generic(0x10, 0x3, 0x10) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x7, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x4000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) syz_io_uring_setup(0x2ad2, &(0x7f00000000c0)={0x0, 0xed01, 0x20, 0x3, 0xdf, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@nfc={0x27, 0x1, 0x2, 0x3}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="6a9b56165931dd9443c1620253b0f1273c", 0x11}, {&(0x7f0000000240)="b02be295c97f1995afc7408a9fe7231634493bace8928d1bdee81fad0189bc9fef9271638573c904755abfff254e931149265e7c11d77f732d95bd911e3da714c75a659aa6c92b014ff24afcffa5469f2d4bf24206e19cdad0ff5b67247e07e0fc5c233c12e0b4557a18d7c89588036c85ef761ff3de17fd8290304f27f26ff3776f52a5f8e7b9c2732c96dcf69cd6dece", 0x91}], 0x2}, 0x0, 0x4000040}, 0xcb6) 09:12:45 executing program 1: r0 = gettid() r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x1}) write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x87fff78) 09:12:45 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x110, 0xffffffffffffffff, 0x10000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000007e6f41be2115d6e09fd6e87ceb60cfe0269595475ec2277bd1987b71e092ea37bc0a0c84ab94cfa108106dd4f6b7a3433b2b41fecd10b68a779fbf66eb63b4bb4fa4a83a7999ef87b0bc0c69a02e275f6998fc9c8c5b014fcbe7c4dfcba6ae54", @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250900000008001400120000000500150001000000"], 0x24}}, 0x20008000) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r2, 0xd2, 0x0, 0xd1c9, 0x6, 0x1}, 0x6) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x4800}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x8, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x3}, 0x14}}, 0x0) r3 = socket(0x15, 0x1, 0xfd33) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r3, r0], 0x3) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x3}, 0x14}}, 0x0) (async) socket(0x15, 0x1, 0xfd33) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r3, r0], 0x3) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) (async) syz_io_uring_setup(0x2ad2, &(0x7f00000000c0)={0x0, 0xed01, 0x20, 0x3, 0xdf, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@nfc={0x27, 0x1, 0x2, 0x3}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="6a9b56165931dd9443c1620253b0f1273c", 0x11}, {&(0x7f0000000240)="b02be295c97f1995afc7408a9fe7231634493bace8928d1bdee81fad0189bc9fef9271638573c904755abfff254e931149265e7c11d77f732d95bd911e3da714c75a659aa6c92b014ff24afcffa5469f2d4bf24206e19cdad0ff5b67247e07e0fc5c233c12e0b4557a18d7c89588036c85ef761ff3de17fd8290304f27f26ff3776f52a5f8e7b9c2732c96dcf69cd6dece", 0x91}], 0x2}, 0x0, 0x4000040}, 0xcb6) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x9, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 1: r0 = gettid() (async, rerun: 64) r1 = gettid() (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x1}) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x87fff78) 09:12:45 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000) (async) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x110, 0xffffffffffffffff, 0x10000000) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000007e6f41be2115d6e09fd6e87ceb60cfe0269595475ec2277bd1987b71e092ea37bc0a0c84ab94cfa108106dd4f6b7a3433b2b41fecd10b68a779fbf66eb63b4bb4fa4a83a7999ef87b0bc0c69a02e275f6998fc9c8c5b014fcbe7c4dfcba6ae54", @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250900000008001400120000000500150001000000"], 0x24}}, 0x20008000) (async) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r2, 0xd2, 0x0, 0xd1c9, 0x6, 0x1}, 0x6) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x4c00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x3}, 0x14}}, 0x0) (async) r3 = socket(0x15, 0x1, 0xfd33) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r3, r0], 0x3) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) socket$nl_generic(0x10, 0x3, 0x10) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0xa, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) syz_io_uring_setup(0x2ad2, &(0x7f00000000c0)={0x0, 0xed01, 0x20, 0x3, 0xdf, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@nfc={0x27, 0x1, 0x2, 0x3}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="6a9b56165931dd9443c1620253b0f1273c", 0x11}, {&(0x7f0000000240)="b02be295c97f1995afc7408a9fe7231634493bace8928d1bdee81fad0189bc9fef9271638573c904755abfff254e931149265e7c11d77f732d95bd911e3da714c75a659aa6c92b014ff24afcffa5469f2d4bf24206e19cdad0ff5b67247e07e0fc5c233c12e0b4557a18d7c89588036c85ef761ff3de17fd8290304f27f26ff3776f52a5f8e7b9c2732c96dcf69cd6dece", 0x91}], 0x2}, 0x0, 0x4000040}, 0xcb6) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x6800}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 1: r0 = gettid() r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x1}) write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x87fff78) gettid() (async) gettid() (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x1}) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x87fff78) (async) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0xb, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000200)={0x80000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x401, 0x0, &(0x7f00000000c0)="e99b1a41633fe81dad2cedc23cbd422eb32a47b73b571d225f47de147340feccb26ada1a87b2a092729c69c7b60bf054ec5edcf9dc7d8c68eb029d27f78265343b62f4c328030b7fbf81c993fb4943171ea70d5119a8afc093b1c0742d061c4a7c34503922da6c815653206578289671351f35b740aba5a1ab3cde8cf6e4ef1c72d48b8924867eb93205ae57461fed6424205b6bc4103b6ccf299f1a0b3bf515f7d1a180ea7bbb5724cc11fc7f5ea6245b2caa2dcb92f82f1c5d2df6e87607ecd747287f528781e1", 0xa6, 0x0, 0x1, {0x0, r4}}, 0x1000) 09:12:45 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x110, 0xffffffffffffffff, 0x10000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000007e6f41be2115d6e09fd6e87ceb60cfe0269595475ec2277bd1987b71e092ea37bc0a0c84ab94cfa108106dd4f6b7a3433b2b41fecd10b68a779fbf66eb63b4bb4fa4a83a7999ef87b0bc0c69a02e275f6998fc9c8c5b014fcbe7c4dfcba6ae54", @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250900000008001400120000000500150001000000"], 0x24}}, 0x20008000) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r2, 0xd2, 0x0, 0xd1c9, 0x6, 0x1}, 0x6) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x110, 0xffffffffffffffff, 0x10000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000007e6f41be2115d6e09fd6e87ceb60cfe0269595475ec2277bd1987b71e092ea37bc0a0c84ab94cfa108106dd4f6b7a3433b2b41fecd10b68a779fbf66eb63b4bb4fa4a83a7999ef87b0bc0c69a02e275f6998fc9c8c5b014fcbe7c4dfcba6ae54", @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250900000008001400120000000500150001000000"], 0x24}}, 0x20008000) (async) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r2, 0xd2, 0x0, 0xd1c9, 0x6, 0x1}, 0x6) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) 09:12:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40201, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0xc, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x6c00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00'], 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x80002004}) 09:12:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) syz_open_dev$vcsn(&(0x7f0000000100), 0xfff, 0x9c180) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000200)={0x80000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x401, 0x0, &(0x7f00000000c0)="e99b1a41633fe81dad2cedc23cbd422eb32a47b73b571d225f47de147340feccb26ada1a87b2a092729c69c7b60bf054ec5edcf9dc7d8c68eb029d27f78265343b62f4c328030b7fbf81c993fb4943171ea70d5119a8afc093b1c0742d061c4a7c34503922da6c815653206578289671351f35b740aba5a1ab3cde8cf6e4ef1c72d48b8924867eb93205ae57461fed6424205b6bc4103b6ccf299f1a0b3bf515f7d1a180ea7bbb5724cc11fc7f5ea6245b2caa2dcb92f82f1c5d2df6e87607ecd747287f528781e1", 0xa6, 0x0, 0x1, {0x0, r4}}, 0x1000) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000200)={0x80000017}) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x401, 0x0, &(0x7f00000000c0)="e99b1a41633fe81dad2cedc23cbd422eb32a47b73b571d225f47de147340feccb26ada1a87b2a092729c69c7b60bf054ec5edcf9dc7d8c68eb029d27f78265343b62f4c328030b7fbf81c993fb4943171ea70d5119a8afc093b1c0742d061c4a7c34503922da6c815653206578289671351f35b740aba5a1ab3cde8cf6e4ef1c72d48b8924867eb93205ae57461fed6424205b6bc4103b6ccf299f1a0b3bf515f7d1a180ea7bbb5724cc11fc7f5ea6245b2caa2dcb92f82f1c5d2df6e87607ecd747287f528781e1", 0xa6, 0x0, 0x1, {0x0, r4}}, 0x1000) (async) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x7400}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0xd, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40201, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40201, 0x0) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000000c0)) (async) socket$packet(0x11, 0x2, 0x300) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) 09:12:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) syz_open_dev$vcsn(&(0x7f0000000100), 0xfff, 0x9c180) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) read$rfkill(r1, &(0x7f00000000c0), 0x8) (async) syz_open_dev$vcsn(&(0x7f0000000100), 0xfff, 0x9c180) (async) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0xe, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000200)={0x80000017}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x401, 0x0, &(0x7f00000000c0)="e99b1a41633fe81dad2cedc23cbd422eb32a47b73b571d225f47de147340feccb26ada1a87b2a092729c69c7b60bf054ec5edcf9dc7d8c68eb029d27f78265343b62f4c328030b7fbf81c993fb4943171ea70d5119a8afc093b1c0742d061c4a7c34503922da6c815653206578289671351f35b740aba5a1ab3cde8cf6e4ef1c72d48b8924867eb93205ae57461fed6424205b6bc4103b6ccf299f1a0b3bf515f7d1a180ea7bbb5724cc11fc7f5ea6245b2caa2dcb92f82f1c5d2df6e87607ecd747287f528781e1", 0xa6, 0x0, 0x1, {0x0, r4}}, 0x1000) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00'], 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x80002004}) 09:12:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40201, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000000c0)) (async) socket$packet(0x11, 0x2, 0x300) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) (async) syz_open_dev$vcsn(&(0x7f0000000100), 0xfff, 0x9c180) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x7a00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000240), 0x0, 0x5c1502) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb2, 0xb2, 0x4, [@datasec={0xc, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x56521926, 0x3ff}, {0x4, 0x9, 0x7}], "93fb"}, @ptr={0x2, 0x0, 0x0, 0x2, 0x3}, @volatile={0x1, 0x0, 0x0, 0x9, 0x1}, @struct={0x6, 0x2, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x4, 0x5}, {0x8, 0x2, 0xfffff8ad}]}, @fwd={0xc}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @func={0x4, 0x0, 0x0, 0xc, 0x4}, @enum={0x6, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x4}, {0x8, 0x386c}, {0xf, 0xfffff801}, {0x4, 0x1ff}]}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000000380)=""/82, 0xd0, 0x52, 0x1}, 0x20) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x9, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000480)=""/155, 0x2b, 0x9b, 0x1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[r6, r2, r7, r4, r4], 0x5) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r5, 0x9, 0x0, 0x200, 0x1, 0x1, {0x0, r3}}, 0x3) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0xe, 0x200000) ioctl$MON_IOCQ_URB_LEN(r8, 0x9201) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1}, 0x8) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0xf, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00'], 0x14}}, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x80002004}) 09:12:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000040), 0x4) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000000c0)={{0xb8, 0x8}, 0x0, 0x101, 0x1, {0x2, 0xff}, 0x1, 0x2}) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$loop(&(0x7f0000000040), 0x8e1a, 0xc0001) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x3, 0x28a82) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000100)) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xd500}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x7) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x10, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000240), 0x0, 0x5c1502) (async, rerun: 32) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (rerun: 32) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb2, 0xb2, 0x4, [@datasec={0xc, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x56521926, 0x3ff}, {0x4, 0x9, 0x7}], "93fb"}, @ptr={0x2, 0x0, 0x0, 0x2, 0x3}, @volatile={0x1, 0x0, 0x0, 0x9, 0x1}, @struct={0x6, 0x2, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x4, 0x5}, {0x8, 0x2, 0xfffff8ad}]}, @fwd={0xc}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @func={0x4, 0x0, 0x0, 0xc, 0x4}, @enum={0x6, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x4}, {0x8, 0x386c}, {0xf, 0xfffff801}, {0x4, 0x1ff}]}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000000380)=""/82, 0xd0, 0x52, 0x1}, 0x20) (async) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x9, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000480)=""/155, 0x2b, 0x9b, 0x1}, 0x20) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[r6, r2, r7, r4, r4], 0x5) (async) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r5, 0x9, 0x0, 0x200, 0x1, 0x1, {0x0, r3}}, 0x3) (async) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0xe, 0x200000) ioctl$MON_IOCQ_URB_LEN(r8, 0x9201) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1}, 0x8) 09:12:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000040), 0x4) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000000c0)={{0xb8, 0x8}, 0x0, 0x101, 0x1, {0x2, 0xff}, 0x1, 0x2}) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x7) 09:12:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$loop(&(0x7f0000000040), 0x8e1a, 0xc0001) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x3, 0x28a82) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000100)) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) syz_open_dev$loop(&(0x7f0000000040), 0x8e1a, 0xc0001) (async) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) (async) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) (async) syz_open_dev$vcsn(&(0x7f00000000c0), 0x3, 0x28a82) (async) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000100)) (async) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xfe03}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x11, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000040), 0x4) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000000c0)={{0xb8, 0x8}, 0x0, 0x101, 0x1, {0x2, 0xff}, 0x1, 0x2}) (async, rerun: 64) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) syz_open_dev$loop(&(0x7f0000000040), 0x8e1a, 0xc0001) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) (async) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) (async) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x3, 0x28a82) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000100)) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xff00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x7) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x7) (async) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000240), 0x0, 0x5c1502) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb2, 0xb2, 0x4, [@datasec={0xc, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x56521926, 0x3ff}, {0x4, 0x9, 0x7}], "93fb"}, @ptr={0x2, 0x0, 0x0, 0x2, 0x3}, @volatile={0x1, 0x0, 0x0, 0x9, 0x1}, @struct={0x6, 0x2, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x4, 0x5}, {0x8, 0x2, 0xfffff8ad}]}, @fwd={0xc}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @func={0x4, 0x0, 0x0, 0xc, 0x4}, @enum={0x6, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x4}, {0x8, 0x386c}, {0xf, 0xfffff801}, {0x4, 0x1ff}]}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000000380)=""/82, 0xd0, 0x52, 0x1}, 0x20) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x9, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000480)=""/155, 0x2b, 0x9b, 0x1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[r6, r2, r7, r4, r4], 0x5) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r5, 0x9, 0x0, 0x200, 0x1, 0x1, {0x0, r3}}, 0x3) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0xe, 0x200000) ioctl$MON_IOCQ_URB_LEN(r8, 0x9201) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1}, 0x8) syz_open_dev$vcsn(&(0x7f0000000240), 0x0, 0x5c1502) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb2, 0xb2, 0x4, [@datasec={0xc, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x56521926, 0x3ff}, {0x4, 0x9, 0x7}], "93fb"}, @ptr={0x2, 0x0, 0x0, 0x2, 0x3}, @volatile={0x1, 0x0, 0x0, 0x9, 0x1}, @struct={0x6, 0x2, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x4, 0x5}, {0x8, 0x2, 0xfffff8ad}]}, @fwd={0xc}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @func={0x4, 0x0, 0x0, 0xc, 0x4}, @enum={0x6, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x4}, {0x8, 0x386c}, {0xf, 0xfffff801}, {0x4, 0x1ff}]}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000000380)=""/82, 0xd0, 0x52, 0x1}, 0x20) (async) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x9, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000480)=""/155, 0x2b, 0x9b, 0x1}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[r6, r2, r7, r4, r4], 0x5) (async) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r5, 0x9, 0x0, 0x200, 0x1, 0x1, {0x0, r3}}, 0x3) (async) syz_open_dev$usbmon(&(0x7f00000005c0), 0xe, 0x200000) (async) ioctl$MON_IOCQ_URB_LEN(r8, 0x9201) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1}, 0x8) (async) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x12, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x1ed688}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x13, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:45 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00\t\x00\x00\x00'], 0x14}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@gettaction={0x14, 0x32, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10800) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) write$rfkill(r0, &(0x7f0000000080)={0x9, 0xfe, 0x5, 0x0, 0x4}, 0xffffffffffffff9e) 09:12:45 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r0}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) sendmsg$nl_route(r1, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001140)={&(0x7f00000000c0)=@ipmr_delroute={0x1054, 0x19, 0x2, 0x70bd2c, 0x25dfdbfc, {0x80, 0x0, 0x10, 0x6, 0x7e, 0x4, 0xff, 0x5, 0x1a00}, [@RTA_TABLE={0x8, 0xf, 0x80000001}, @RTA_TABLE={0x8, 0xf, 0x9}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "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"}, @RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x9, 0x1, r6}}, @RTA_UID={0x8}, @RTA_MARK={0x8, 0x10, 0x9}]}, 0x1054}, 0x1, 0x0, 0x0, 0x50}, 0x24000051) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x8) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x200000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x4000, 0xfc}, 0x8) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x14, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x4000, 0xfc}, 0x8) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080), 0xf78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) 09:12:45 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00\t\x00\x00\x00'], 0x14}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@gettaction={0x14, 0x32, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10800) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) write$rfkill(r0, &(0x7f0000000080)={0x9, 0xfe, 0x5, 0x0, 0x4}, 0xffffffffffffff9e) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x15, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x1000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x16, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x17, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2952.726483][T14538] selinux_netlink_send: 77 callbacks suppressed [ 2952.726496][T14538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=14538 comm=syz-executor.4 09:12:45 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r0}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) sendmsg$nl_route(r1, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001140)={&(0x7f00000000c0)=@ipmr_delroute={0x1054, 0x19, 0x2, 0x70bd2c, 0x25dfdbfc, {0x80, 0x0, 0x10, 0x6, 0x7e, 0x4, 0xff, 0x5, 0x1a00}, [@RTA_TABLE={0x8, 0xf, 0x80000001}, @RTA_TABLE={0x8, 0xf, 0x9}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "d45218a3f368923215167dfc7d7674ffd21bbee2cc85ab77a3b73f7c3d081f972412bf603eccc620a346508f5b233f8443d12e938eec49245fd3970736534a0ca023d44dbe3486feda921dc5ffe0aee89a3e9d16677cfc335d96f40320c0e425f0ebb02f0add4f62879292d9870e8e250de59002a9c5c4185c2407b3764f480473ffef4ab89b607bc8b499f6482060a7a0de6f9cc6f1e7a10477f0e399ca68119ede9048433a22d3d96f96bfe326e6b3d32f733cf05262abe16fc8d624b4aab2ef300b5afc08fe9d9d7a265a7b6c1bf20ad1b068fcc15bdfcb1b7072472543983428b9a5017ebe79d4b61ed2fa5b812ec1fce6e7e8f4dae8964c874d033b096ffb8aa996427af5b16d93f6551ca1cb807e114ba1161075f035370985e7257580cd95f6a33452c614fb39bcd359ac579ce267c99dbc8c0ea01e5b3e8328d6aec61a6d57c3cad619a25f381c8e5bb224985f767d4136b80b5ca5cb50065b2a6afbcb450182ed32b4f20c35d0cef19d8b44b3221240d30579fc29d3fe51adb9482a3a0668de540a5c2b32824a6d2957523a186ee0ae33075e92eccd6d332a43255f93c02d5a8666dbf1876ecaf683ec16fada43583834d548ba2f8a986b0e4e245e0034bd0382698e17973a842f4f3590bae9697414922ccb22d938b99277e80f4581cdd81f0bd140e92e1fa40aab89e1c8b9778c68799d8af8097248b151e24472e9335a67b936288a557bd364755bdb5dca2c9944a2a85e578387a0f90b03ab451709cf37d35124feb8d72b60488e1130cb260c1ccea6fc25b6856ddefb71581b456314faa523168715d9a6a973a0a5010345edac9d7b31667915ac5bea167df8ea781971a9c9eb207322c7cd7dd02a3d168a28ce0798a957a94cb10dd61134b0577282500d99261d437a625a75ec3d8cfc6899f6cb9e2fbcffc98a80c07464f35decbb9fe2ba06382509926d14d82cbf9d31d795d7839938887b72ebb7681206e58b7263168438d04cc26420799d733244903666c84781ea3b9feefb7e983a04b9d8b42db0f3a893d6722f02b2d890af24f0699f11f37245611f023dd5149a7fa649bfd0a39c7063679f312cd8389618a25c6f4bb91be209fa1e52f719200ecb8dd686954da146fcd2a9e21c6626f5b617c871cbf92e31ef19284973868b27455885cb0e9b8d1fd1dbd558673a7c9f1a172b4bfcef7f0cadd39d27aae47c10a18baddb2f26932d9ff96f6ac9fdb597fb09351930811eb920587da8aff3f251f7d30d2d5c21ceada49166200bb92ead161721103edd1b3a447882fe8b3023b357fa542c63cde4408ff41c58e532e40cc469db2ef157ed17ab03750fee977fd3f7059fb3c5c78b75a66d584a648843acc528f8cc46688f8162a34b1311d9c2c8ae38ad6f8b712572b46d860c1753d1d253729986e8350e86946044a55946d7372470524bef05ece4f9b42c15862aeb0f75c2fe82f3a6ec56a0ee000a407afd97964c5f60f2b4483279447f4ea12da9daf83402eb19c218c31f358b3c5904756c7683efe77d9c3917600fbd33f4fc6753e0bce5ed45ab258529432487a94a7fef894d72930433170a6229a6019c05c0dadbcd25f17dd885ebb026996976cca8fbae05d86dec82a51d71f783ddf03e05231d1ddf29fc031df3642afe441b7c114af37a2c1bb562f4a2501e1f2b712cd624b69de700c9dfff4bb9a4a07742fbb0ddf73c834cd7ba420e8bcecb438cbfc1bcea822d6dbb5d71e31ff31f652076bcf30438ab48d9df8eacc5dd06a588fe174fc416d2a43a29a0e1717ef706cd8cb7c42f402d3869a23b46ab9ef3b1ba327297d55547e722729f246c752617cdee3cf2f50035629877debca362522083ddee2fdb2783c6293a36326e19327acd3967ad93d0e9309b0c6aac9a91648eee3194259167ed8ef8700e7f797f11fb090996e6fa2a7cb690e11c88edc875505fe1e09791e6bdbe4d1f152104807b9e1bbc148b68b253bb3f1e1e81bd5a08b5cf9cc15f127776a4671ab395379a40f7647c664b7ba2e9edc48923eece3982657e981c2b621fc5290b356ea176ed45c910ee3d77b0637816275d0c9e44290f6a75f892abe62d55b3cef673636608777b377f11b890f7af8a8e890b167485132a1f4f23d20b2548e925f41ad32547db91d6abb16e49194235711f6930d58dd6dc39b2997c2d0b6e1e9057b9e74a21aee24939056a9d74080cafade84592c5bf8b9f109b021bedcc7bca28f94160ef7663fa46a69c6889960e374eacea9ff4264acd9e0bbb202d57d265aa92ff0cdf37bed4c669b995e3b2dd94e4540833a5959826f4180ca9f9ac6f5c7d38bd76edd2b6ca5c7877e4f146b07295528f6583cf1ccbc4960cc06b9d6c7d57e23eb7499661ba450938e3015ef340a13214a4f5ce35f3ccd0460761902e99e90f4c32f2c02baffe87a579d5b2c95c233fd1ca1cefe1cfd0c91944d555f6eead48bdc4de9285361ef341b0bf9b41367413e55aeae567b93ca22ed57020ab8dac7c6f4072c92fa73099174c3841fd4c19976af144724dbeacd0680b301a0c14716b23d4760518d8e98f90b8b05846d9d36545b516653ba10af5f0eccbe2c36a20900738b22ae0015b049f3ac636a55b59d5be1e6694fe6211956ab33a2dd137d82f1e6997fbf3d685623bfb4d65c174a1f13e9d0091f1f0475e3e0eddcad44f3309c17d5abc628663e70d0cdf5b45e73b39dc1fc90e5694b98c549e67b76feaa8c7c0a898fe9c5633722adda99b3978e7037ccf1cd785934f6a9aa0d09057644f20ac93b6f0d73f8ab3ca7184172110b672fc14a742200d9095198c3793ffe97144445145bb0a9ee35b31cb989094150c2f0617cc946222f87d05b92764025cea094b809be24ae41f871ed0bf5ee535b09b4ba8c3d848c7c35cfb3612614c32bbbb0d58360e823cfb2480cb8446416a210faf4ce3e07b116b9576be0d64273c4d36cc4d2c919cbbb2c286e89c55704d7537058c4cdc4a2f252e10c482b05c9a752cfb05f9f86baa1380de83f66f9ff1a10805ac3f7334a66f018f476a6cf6182e883b5f4ce2da2af6b1fbb316e97a8238799c863ce55b73226502fad95b266de07c9acb962d089c3a55f4dd3576eebd979367b5cee2cc3a62ee9257357b01e30be7105b07dbac4bfd08ff7e52ad253cb9575351284e17cc57965cc41ef3739e4973e9e9e75d0d7c85077a0ad2e805943b01aac8206286cf34f01c9c68040eecf74ae64fae2e4ea72b306007171ba5a38ffead404ed1d516b4668f8061edf7ce44fdcd3d69ee88464f69d6d0e8dbbd6f718c862a4717dd5305146956217a35efb3ded38dde68169904ad4636594f9a9b503391b733944bd85ee198f60948e31dc9e47878557b847bc83c7b480680fc7632e01d3f7847b6177a7b8c0f9d0384105cc4dc7bb2584c1d3500ba409fb045c97d733d52c58884e420e79ec695da549b123fb24eb11de7b777c1a0c8307fb67f439f9b0060948f1a32a4092e0b07adc7edb5fdfeb0c2b9519c9eeadfbcf7f0a2d4498510ecf8cbf3a93c16dd4927fd58467bd5ae0d8bd57bb364a33c1f63dbaed72593b2f73df1c708d9a5e2c142d2ae5cfca942c6bcb9ba415ecec638a17df6ef731a032733c29d12c6d031976f7ff4c43b916431261060c97fd8139782fead404011758089fb18dc68f50d63e8c52fb4b5ddcce552b6c1af36df01e7b58f421eb9f6a021418b0f1709666d9a5cac84a49bb42d997d786b607db15754ee7d94b8158d3b509e4248d7c4738da952b2b7313f38534efb83b23bfb471155df6da51f0c10c05c2d69b8b3acbfc8a4c6ed93004ac06ae3614437a6a6cf3a1c0627c9d218cbfe2bfb4c0de5878622788d192cab3ea495f9cc3fa29b1028ff9eaaf84fcff2623c72e56828532ce5554bb30f1f2a0fa9d1f3c623c2a5a4ef2dc6c3a935d2e201129469fef7e0b55f7c9746d1bc2b71f129df00da2c1cfdb7db58b0006a42c3b1782592f71ba8d3b50442398489dd00ce22ded47fbfa6124423debdab394c188dbab248f268f62644f6070b2047212a2af8d38e05811f5673c8f6697c00305f7dfe2e6c21eab2cbd24706f5a1878d0409a4ce70e8b73f77107e893f003c8352dc03ff6e932dd2effd13454bbdc2918553f629d8e491b2ae945c6966c22443b86a806b2b4e88c6a552688c8bce2084f399ef2973c76d65f9e218173f623ec79101f4ff2f3aa2183e9cd882ff23f1ae4b902179af76154a60cf8ca375034b0dc97e1cdcb0e3b91e271fc60322bb5513ac6e1495be029e290e6c8505917d8d9268616f5a77aa43a9436b85081b5ebc748431b32f7b2075b9817e90fc4ec5155bc67252be6e1b0cd0262bc3e20677ed203fc1623adee494b993b372fb32db58d36211bb1aaac729fcbdef8d4adc15f2b422c69a4687c3a5cc9a62635ae2baf86db4dc2236c5550e5bc539340bc918d9fdd9a144bbe726624980910ae983eb91faa70830d8910dfa7d10a9a8ed0934c47814b60d2910cf5dadaa03959543f9fe02a3fad37f25f1c1faa8bcf8442e9676da21844fd321edfebea5a6391e1bcdedda7a93bb31b482de77cb677d75c4c407da7bbf9a71779a9a1fca96f1c7ff94dc063b86e0bfbcf74edabdee79df552d348b461dcc185f621fb5663875a670c8db61246cca42ff76b64ae8d6114cf3257ed753d345d09eae51ea797d878c30e531d440825caf7c8906fd3fa3f71d167b7153005b6c1efd11b61df925ca6edb5546e0827c3447a30738c09fe8ff260b5206687c3304813e6c6dceebebb651f311e7d4b6345a04447fa45b2b17f9a92c9fe56a5fdebb2310f1720b13a091e50b335b9caf52c7d7b303cf36ff85d3446e0cc892c9cae6045750b40dc2348765994281dc05cf69561b78c583f1a10aa0b58b1a282c9bce6285a710186d70b262c12fc6d55820b2bcf40c9fc991edac2ec0a35af2e31f622b196bc256884af0bd7500475ab67ebe0905a56c8a1ddddb3c84c126615932b0b9a44daafd6f1957dfa17a70ecf5c688f866e828c407cfc40175914ccefb14953e096ddcaf2d01ee50af31ec0fd847d2740b40c6908752ff87b022937c6462fb0b2692d367cdcc476c2061883bd21d371c02b730de3dbf28ec293068f34e9711f24a4130462c25ee91a498e46fcaec8d7c2c8116b03971f3d1afb0866b056963d525ba3825d9bb13486f41faabddb19c2a3e1cc29837d683975df9539a5e118ca5bb47bc62e972810620c6df2aa384e490cc814c71fc507e637b8bf6a3a29f15f11ac14460e654fbed5aaef9cf044ed193b79402d651a27b7b7a9a2ca0779ddc9ae25756205a9cd7301a529d02fa14f7f33914e9d2ff3037faf13a785c10c3a7ced86252168db2721f3682c4c95c2db2d5aa654852b9675e867518549271459aaae565a6ce6b40ede0ce626bc762b6454ac0e7e4a716ab76b214b60b67cf73b94a0fa66091267819ff1b8c29cf024521b703756c905546ab9c9955edce589e35977e216c9617b36699b504928d5f19d91169008c191c3e71e2b6226f384210bc2b2a7e6c8f2dc1fd24b6e084c6ee6219e05e2bb878c9d0d829c3e194fb0749cf993bf53abbbe01445eeca4d9d61792592facf4075c4be8988c58262f5c5ea80622fc394f385db2a172756360add7fca45a70bf1c7077dffe278c3f1858adbf71e2842aa01577e28787aed537dbf23e748f9db18e55a52ee1453de2e566cce0194f44ed21ab068796d13c72167d2b7a1ac3469ee643b8975228aa51aaf1652b90377cbb7db5c36bc9"}, @RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x9, 0x1, r6}}, @RTA_UID={0x8}, @RTA_MARK={0x8, 0x10, 0x9}]}, 0x1054}, 0x1, 0x0, 0x0, 0x50}, 0x24000051) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x8) 09:12:45 executing program 0: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0xa2a441) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:45 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00\t\x00\x00\x00'], 0x14}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@gettaction={0x14, 0x32, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10800) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) write$rfkill(r0, &(0x7f0000000080)={0x9, 0xfe, 0x5, 0x0, 0x4}, 0xffffffffffffff9e) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00\t\x00\x00\x00'], 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@gettaction={0x14, 0x32, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10800) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) write$rfkill(r0, &(0x7f0000000080)={0x9, 0xfe, 0x5, 0x0, 0x4}, 0xffffffffffffff9e) (async) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x2000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x4000, 0xfc}, 0x8) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x19, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xfffff001, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r2}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x154, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6bd1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffff7f4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0xe}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc90a}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x154}, 0x1, 0x0, 0x0, 0x40004080}, 0x8080) 09:12:45 executing program 0: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) (async, rerun: 32) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0xa2a441) (async, rerun: 32) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x3000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 1: r0 = socket(0x28, 0x5, 0x0) connect$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0x87fff78) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x1a, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xfffff001, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r2}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x154, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6bd1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffff7f4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0xe}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc90a}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x154}, 0x1, 0x0, 0x0, 0x40004080}, 0x8080) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xfffff001, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r2}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x154, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6bd1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffff7f4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0xe}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc90a}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x154}, 0x1, 0x0, 0x0, 0x40004080}, 0x8080) (async) [ 2952.795774][T14538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14538 comm=syz-executor.4 [ 2952.828842][T14585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=14585 comm=syz-executor.4 09:12:45 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r0}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) sendmsg$nl_route(r1, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001140)={&(0x7f00000000c0)=@ipmr_delroute={0x1054, 0x19, 0x2, 0x70bd2c, 0x25dfdbfc, {0x80, 0x0, 0x10, 0x6, 0x7e, 0x4, 0xff, 0x5, 0x1a00}, [@RTA_TABLE={0x8, 0xf, 0x80000001}, @RTA_TABLE={0x8, 0xf, 0x9}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "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"}, @RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x9, 0x1, r6}}, @RTA_UID={0x8}, @RTA_MARK={0x8, 0x10, 0x9}]}, 0x1054}, 0x1, 0x0, 0x0, 0x50}, 0x24000051) (async) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x8) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0xfffff001, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r2}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x154, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6bd1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffff7f4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0xe}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc90a}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x154}, 0x1, 0x0, 0x0, 0x40004080}, 0x8080) 09:12:45 executing program 0: io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0xa2a441) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x1b, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x4000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 1: r0 = socket(0x28, 0x5, 0x0) connect$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0x87fff78) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x5000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x6000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x7000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8000000000, 0x55f6268f3bcf7d03) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x4, 0x2, 0x0, 0xff}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40810}, 0x40) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x1c, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2952.919980][T14616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=14616 comm=syz-executor.4 09:12:45 executing program 1: r0 = socket(0x28, 0x5, 0x0) connect$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0x87fff78) socket(0x28, 0x5, 0x0) (async) connect$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r1, &(0x7f0000000080), 0x87fff78) (async) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x8000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x1d, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8000000000, 0x55f6268f3bcf7d03) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x4, 0x2, 0x0, 0xff}, 0x8) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, 0x0, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40810}, 0x40) 09:12:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0), 0x0, 0x4) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x6203) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000280)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x57f8, &(0x7f0000000140)={0x0, 0xccea, 0x2, 0x1, 0x128, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) epoll_pwait(r1, &(0x7f00000001c0)=[{}, {}], 0x2, 0x5, &(0x7f0000000200), 0x8) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) write$rfkill(r3, &(0x7f0000000080)={0x45, 0x0, 0x3, 0x1}, 0x8) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x1e, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x9000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x29, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0), 0x0, 0x4) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x6203) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000280)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x57f8, &(0x7f0000000140)={0x0, 0xccea, 0x2, 0x1, 0x128, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) epoll_pwait(r1, &(0x7f00000001c0)=[{}, {}], 0x2, 0x5, &(0x7f0000000200), 0x8) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) write$rfkill(r3, &(0x7f0000000080)={0x45, 0x0, 0x3, 0x1}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0), 0x0, 0x4) (async) syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x6203) (async) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000280)) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) syz_io_uring_setup(0x57f8, &(0x7f0000000140)={0x0, 0xccea, 0x2, 0x1, 0x128, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) epoll_pwait(r1, &(0x7f00000001c0)=[{}, {}], 0x2, 0x5, &(0x7f0000000200), 0x8) (async) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) write$rfkill(r3, &(0x7f0000000080)={0x45, 0x0, 0x3, 0x1}, 0x8) (async) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xa000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8000000000, 0x55f6268f3bcf7d03) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x4, 0x2, 0x0, 0xff}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40810}, 0x40) syz_open_dev$vcsn(&(0x7f0000000080), 0x8000000000, 0x55f6268f3bcf7d03) (async) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x4, 0x2, 0x0, 0xff}, 0x8) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40810}, 0x40) (async) 09:12:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x125e0000000000) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0xfffffdef) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x125e0000000000) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0xfffffdef) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) 09:12:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x14, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfb}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x50, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "065cf8c4679c5d2733430d0921fec9985330978e9f633d052218f584fdb48ec1"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6372cc2b6568aae59ca28dae8a4f2609"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "234a5cecb26e0d17a1560c606e923692"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4020}, 0x30040091) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r7, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r7, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40001) r11 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) sendmsg$IPVS_CMD_SET_SERVICE(r11, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, 0x0, 0x204, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x44880) write$rfkill(r11, &(0x7f0000000080), 0x7ffff000) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x2, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0), 0x0, 0x4) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x6203) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000280)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x57f8, &(0x7f0000000140)={0x0, 0xccea, 0x2, 0x1, 0x128, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) epoll_pwait(r1, &(0x7f00000001c0)=[{}, {}], 0x2, 0x5, &(0x7f0000000200), 0x8) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) write$rfkill(r3, &(0x7f0000000080)={0x45, 0x0, 0x3, 0x1}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0), 0x0, 0x4) (async) syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x6203) (async) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000280)) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) syz_io_uring_setup(0x57f8, &(0x7f0000000140)={0x0, 0xccea, 0x2, 0x1, 0x128, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) epoll_pwait(r1, &(0x7f00000001c0)=[{}, {}], 0x2, 0x5, &(0x7f0000000200), 0x8) (async) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) write$rfkill(r3, &(0x7f0000000080)={0x45, 0x0, 0x3, 0x1}, 0x8) (async) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xb000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0xff, 0x0, 0x0, 0x1}, 0x8) 09:12:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x14, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfb}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x50, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "065cf8c4679c5d2733430d0921fec9985330978e9f633d052218f584fdb48ec1"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6372cc2b6568aae59ca28dae8a4f2609"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "234a5cecb26e0d17a1560c606e923692"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4020}, 0x30040091) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r7, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r7, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40001) (async) r11 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) sendmsg$IPVS_CMD_SET_SERVICE(r11, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, 0x0, 0x204, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x44880) (async) write$rfkill(r11, &(0x7f0000000080), 0x7ffff000) 09:12:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x125e0000000000) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0xfffffdef) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0xff, 0x0, 0x0, 0x1}, 0x8) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x3, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xc000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x14, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfb}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x50, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "065cf8c4679c5d2733430d0921fec9985330978e9f633d052218f584fdb48ec1"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6372cc2b6568aae59ca28dae8a4f2609"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "234a5cecb26e0d17a1560c606e923692"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4020}, 0x30040091) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r7, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r7, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40001) r11 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) sendmsg$IPVS_CMD_SET_SERVICE(r11, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, 0x0, 0x204, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x44880) (async, rerun: 32) write$rfkill(r11, &(0x7f0000000080), 0x7ffff000) (rerun: 32) 09:12:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x18001, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000100)) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:45 executing program 3: accept4(0xffffffffffffffff, &(0x7f0000000140)=@x25, &(0x7f00000001c0)=0x80, 0x80000) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f00000000c0)) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0xff, 0x0, 0x0, 0x1}, 0x8) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x4, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x18001, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000100)) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:45 executing program 3: accept4(0xffffffffffffffff, &(0x7f0000000140)=@x25, &(0x7f00000001c0)=0x80, 0x80000) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f00000000c0)) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) accept4(0xffffffffffffffff, &(0x7f0000000140)=@x25, &(0x7f00000001c0)=0x80, 0x80000) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f00000000c0)) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xd000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x120, 0x68, 0x400, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x8}, [@NHA_RES_GROUP={0x44, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffbff}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x100}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9ac}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7ff}, @NHA_RES_GROUP_BUCKETS={0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1ff}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r2}, @NHA_GROUP={0x1c, 0x2, [{0x0, 0x4}, {0x1, 0x5}, {0x2, 0x2}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x26}}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x401}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xcf0a}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x200}]}, @NHA_ENCAP={0x34, 0x8, 0x0, 0x1, @LWT_BPF_OUT={0x30, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x29, 0x2, '@!.:\xb6\\@//@{-%(\\/{)&%}\xdf{[\xd5*{+\'}\xbe)/(-]\x00'}}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}, @NHA_ENCAP_TYPE={0x6}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x5, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x8) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xe000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x18001, 0x0) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000100)) (async, rerun: 32) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (rerun: 32) 09:12:45 executing program 3: accept4(0xffffffffffffffff, &(0x7f0000000140)=@x25, &(0x7f00000001c0)=0x80, 0x80000) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f00000000c0)) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) accept4(0xffffffffffffffff, &(0x7f0000000140)=@x25, &(0x7f00000001c0)=0x80, 0x80000) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f00000000c0)) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x6, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x10000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x8) 09:12:45 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x120, 0x68, 0x400, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x8}, [@NHA_RES_GROUP={0x44, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffbff}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x100}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9ac}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7ff}, @NHA_RES_GROUP_BUCKETS={0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1ff}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r2}, @NHA_GROUP={0x1c, 0x2, [{0x0, 0x4}, {0x1, 0x5}, {0x2, 0x2}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x26}}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x401}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xcf0a}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x200}]}, @NHA_ENCAP={0x34, 0x8, 0x0, 0x1, @LWT_BPF_OUT={0x30, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x29, 0x2, '@!.:\xb6\\@//@{-%(\\/{)&%}\xdf{[\xd5*{+\'}\xbe)/(-]\x00'}}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}, @NHA_ENCAP_TYPE={0x6}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 09:12:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x7, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r1, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x10050) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x8) (async) 09:12:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = gettid() r2 = gettid() r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80c00, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000000c0)={r3, r0, 0x5}) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x120, 0x68, 0x400, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x8}, [@NHA_RES_GROUP={0x44, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffbff}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x100}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9ac}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7ff}, @NHA_RES_GROUP_BUCKETS={0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1ff}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r2}, @NHA_GROUP={0x1c, 0x2, [{0x0, 0x4}, {0x1, 0x5}, {0x2, 0x2}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x26}}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x401}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xcf0a}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x200}]}, @NHA_ENCAP={0x34, 0x8, 0x0, 0x1, @LWT_BPF_OUT={0x30, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x29, 0x2, '@!.:\xb6\\@//@{-%(\\/{)&%}\xdf{[\xd5*{+\'}\xbe)/(-]\x00'}}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}, @NHA_ENCAP_TYPE={0x6}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r1, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x10050) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = gettid() (async) r2 = gettid() (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80c00, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000000c0)={r3, r0, 0x5}) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x11000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 0: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xf78) epoll_pwait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}, {}], 0x3, 0x4e6, &(0x7f0000000200)={[0x8]}, 0x8) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x10) r2 = accept4(r1, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000180)=0x80, 0x80000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x50, r0, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0xd0c7) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x10}, r1, 0x3, 0x0, 0x1}, 0x4) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x8, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}]}, {0x0, [0x5f, 0x0, 0x0, 0x5f]}}, &(0x7f0000000180)=""/169, 0x36, 0xa9}, 0x20) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xc600, 0x111200) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x1a, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000002c0)) 09:12:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = gettid() r2 = gettid() (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80c00, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000000c0)={r3, r0, 0x5}) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:46 executing program 0: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xf78) (async) epoll_pwait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}, {}], 0x3, 0x4e6, &(0x7f0000000200)={[0x8]}, 0x8) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x10) r2 = accept4(r1, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000180)=0x80, 0x80000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x50, r0, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0xd0c7) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x10}, r1, 0x3, 0x0, 0x1}, 0x4) (async, rerun: 64) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (rerun: 64) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}]}, {0x0, [0x5f, 0x0, 0x0, 0x5f]}}, &(0x7f0000000180)=""/169, 0x36, 0xa9}, 0x20) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xc600, 0x111200) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x1a, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000002c0)) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}]}, {0x0, [0x5f, 0x0, 0x0, 0x5f]}}, &(0x7f0000000180)=""/169, 0x36, 0xa9}, 0x20) (async) syz_open_dev$vcsn(&(0x7f0000000040), 0xc600, 0x111200) (async) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) (async) ioctl$BLKRRPART(r2, 0x125f, 0x0) (async) connect$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x1a, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) (async) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000002c0)) (async) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x12000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r1, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x10050) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x9, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 0: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xf78) (async) epoll_pwait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}, {}], 0x3, 0x4e6, &(0x7f0000000200)={[0x8]}, 0x8) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) r1 = accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x10) r2 = accept4(r1, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000180)=0x80, 0x80000) (async) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x50, r0, 0x8000000) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0xd0c7) (async) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x10}, r1, 0x3, 0x0, 0x1}, 0x4) (async) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}]}, {0x0, [0x5f, 0x0, 0x0, 0x5f]}}, &(0x7f0000000180)=""/169, 0x36, 0xa9}, 0x20) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xc600, 0x111200) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) (async, rerun: 64) connect$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x1a, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) (async, rerun: 64) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000002c0)) [ 2953.291724][T14784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14784 comm=syz-executor.1 09:12:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r1, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xa9f}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8000}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r7, &(0x7f0000000080), 0x8) write$rfkill(r7, &(0x7f0000000040)={0xdca, 0x8, 0x2, 0x1}, 0x8) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x18000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x3ff, 0x5}, 0xfffffff7) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:46 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14007d72a5f3acc02a1813378eb38ce45dae20276fe59c450000", @ANYRES16=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00'], 0x14}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@deltclass={0x2c, 0x29, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0xe}, {0x8, 0x10}, {0x1, 0xb}}, [@tclass_kind_options=@c_sfq={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x2401) write$rfkill(r2, &(0x7f00000000c0), 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r5, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x304, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4004010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r8, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r8, 0x110, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000000)=0x5) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0xa, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x2000) ioctl$BLKRRPART(r3, 0x125f, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x8) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x20000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14007d72a5f3acc02a1813378eb38ce45dae20276fe59c450000", @ANYRES16=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00'], 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@deltclass={0x2c, 0x29, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0xe}, {0x8, 0x10}, {0x1, 0xb}}, [@tclass_kind_options=@c_sfq={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x2401) write$rfkill(r2, &(0x7f00000000c0), 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r5, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x304, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4004010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r8, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r8, 0x110, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000000)=0x5) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x3ff, 0x5}, 0xfffffff7) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0x10000000) (async) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x3ff, 0x5}, 0xfffffff7) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0xb, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x2000) ioctl$BLKRRPART(r3, 0x125f, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x2000) (async) ioctl$BLKRRPART(r3, 0x125f, 0x0) (async) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x8) (async) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x3ff, 0x5}, 0xfffffff7) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) [ 2953.378375][T14818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=14818 comm=syz-executor.3 09:12:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r1, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xa9f}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8000}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) (async) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r7, &(0x7f0000000080), 0x8) (async) write$rfkill(r7, &(0x7f0000000040)={0xdca, 0x8, 0x2, 0x1}, 0x8) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x25000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14007d72a5f3acc02a1813378eb38ce45dae20276fe59c450000", @ANYRES16=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00'], 0x14}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@deltclass={0x2c, 0x29, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0xe}, {0x8, 0x10}, {0x1, 0xb}}, [@tclass_kind_options=@c_sfq={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x2401) write$rfkill(r2, &(0x7f00000000c0), 0x8) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r5, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x304, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4004010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r8, 0x101, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r8, 0x110, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async, rerun: 64) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000000)=0x5) (rerun: 64) 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x2000) ioctl$BLKRRPART(r3, 0x125f, 0x0) (async) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x8) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0xc, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) [ 2953.452449][T14818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14818 comm=syz-executor.3 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0xd, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) read$rfkill(r0, &(0x7f0000000040), 0x8) 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_wait(r2, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xf3) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) syz_io_uring_setup(0x4b4b, &(0x7f00000002c0)={0x0, 0x19e3, 0x20, 0x3, 0x124}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000340)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r6}}, 0x10000) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x40000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) [ 2953.491470][T14878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=14878 comm=syz-executor.3 09:12:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (rerun: 32) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r1, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xa9f}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8000}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r7, &(0x7f0000000080), 0x8) (async) write$rfkill(r7, &(0x7f0000000040)={0xdca, 0x8, 0x2, 0x1}, 0x8) 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_wait(r2, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xf3) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) (async) syz_io_uring_setup(0x4b4b, &(0x7f00000002c0)={0x0, 0x19e3, 0x20, 0x3, 0x124}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000340)=0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r6}}, 0x10000) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x7e30fb245ebebe0c, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) read$rfkill(r0, &(0x7f0000000040), 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) read$rfkill(r0, &(0x7f0000000040), 0x8) (async) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0xe, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x48000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) read$rfkill(r0, &(0x7f0000000040), 0x8) 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) epoll_wait(r2, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xf3) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) (async) syz_io_uring_setup(0x4b4b, &(0x7f00000002c0)={0x0, 0x19e3, 0x20, 0x3, 0x124}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000340)=0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000380)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r6}}, 0x10000) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x7e30fb245ebebe0c, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x7e30fb245ebebe0c, 0x0) (async) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x3, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2953.540688][T14878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14878 comm=syz-executor.3 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x4c000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000040)={0x5, 0x8, 0x2}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5}, 0x8) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x7, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000040)={0x5, 0x8, 0x2}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5}, 0x8) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x7e30fb245ebebe0c, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x2000000, 0xac4001) write$rfkill(r0, &(0x7f0000000080), 0xf78) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x400, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) 09:12:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x30000000}) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x68000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2953.587488][T14906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=14906 comm=syz-executor.3 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x2000000, 0xac4001) write$rfkill(r0, &(0x7f0000000080), 0xf78) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x400, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$packet(r0, &(0x7f0000000240)=""/140, 0x8c, 0x2022, &(0x7f00000000c0)={0x11, 0x9, 0x0, 0x1, 0x1, 0x6, @local}, 0x14) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x20000002}) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000040)={0x5, 0x8, 0x2}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000040)={0x5, 0x8, 0x2}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5}, 0x8) (async) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x6c000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x2000000, 0xac4001) write$rfkill(r0, &(0x7f0000000080), 0xf78) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x400, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4c502) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x30000000}) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$packet(r0, &(0x7f0000000240)=""/140, 0x8c, 0x2022, &(0x7f00000000c0)={0x11, 0x9, 0x0, 0x1, 0x1, 0x6, @local}, 0x14) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x20000002}) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) recvfrom$packet(r0, &(0x7f0000000240)=""/140, 0x8c, 0x2022, &(0x7f00000000c0)={0x11, 0x9, 0x0, 0x1, 0x1, 0x6, @local}, 0x14) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x20000002}) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x2, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x30000000}) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x30000000}) (async) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x74000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x3, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4c502) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x88000005}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) epoll_wait(r0, &(0x7f0000000140), 0x0, 0x2d2) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000040)={0x8}) 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000000000004, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x4, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$packet(r0, &(0x7f0000000240)=""/140, 0x8c, 0x2022, &(0x7f00000000c0)={0x11, 0x9, 0x0, 0x1, 0x1, 0x6, @local}, 0x14) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x20000002}) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x7a000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4c502) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x85ffffff}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000000000004, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) syz_open_dev$vcsn(&(0x7f0000000000), 0x8000000000004, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0xf78) (async) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x5, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffe, 0x90d83) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x6, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x2401) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x88000005}) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) epoll_wait(r0, &(0x7f0000000140), 0x0, 0x2d2) (async) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000040)={0x8}) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0x88d61e00}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000000000004, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffe, 0x90d83) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x7, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffe, 0x90d83) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:46 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x7, 0x4}, 0x58) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x8, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xd5000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 09:12:46 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x7, 0x4}, 0x58) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) write$rfkill(r0, &(0x7f0000000080)={0x7, 0x4}, 0x58) (async) 09:12:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x88000005}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) epoll_wait(r0, &(0x7f0000000140), 0x0, 0x2d2) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000040)={0x8}) syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x2401) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x88000005}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) epoll_wait(r0, &(0x7f0000000140), 0x0, 0x2d2) (async) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000040)={0x8}) (async) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x4481) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xfe030000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x9, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffe, 0x2401) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:46 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x7, 0x4}, 0x58) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x4481) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0xa, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xff000000}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x4481) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x4481) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffe, 0x2401) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffe, 0x2401) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa401) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x2, 0x1}, 0x8) 09:12:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0xed, 0x4f0f01) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x2}, 0x8) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0xb, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit={0x95, 0x0, 0x0, 0xffffff85}, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffe, 0x2401) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffe, 0x2401) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x80000001) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa401) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x2, 0x1}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa401) (async) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x2, 0x1}, 0x8) (async) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x80000001) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x80000001) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0xc, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x1174c1) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xa401) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x2, 0x1}, 0x8) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x2}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0xed, 0x4f0f01) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x2}, 0x8) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x80000001) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0xd, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x1174c1) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x100000000, 0x88280) write$rfkill(r0, &(0x7f0000000080), 0xf78) write$rfkill(r0, &(0x7f0000000000)={0x2, 0x8, 0x3}, 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x1010, r1, 0x8000000) 09:12:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0xed, 0x4f0f01) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x2}, 0x8) syz_open_dev$vcsn(&(0x7f0000000080), 0xed, 0x4f0f01) (async) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x2}, 0x8) (async) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x1174c1) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x3}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x482701) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0xe, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x10) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffffdff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000140)=""/21, 0x15, 0x0, &(0x7f0000000180)=""/225, 0xe1}}, 0x10) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0xffffffff, 0x8, 0x5, 0x9000000, 0x5, 0xa5}) 09:12:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x212801) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x100000000, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0xfffffdef) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000240)=0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000096089a3f279759c48ebc14fc2dec784da0e8c6d742e557980f5f390034caa21b95d0edb3ac0c9af8922635c74cd19ef598435bb6d74b3f29cb", @ANYRES16=r3, @ANYBLOB="010100000000000000000e0000000c00060001000000010000000800010000000000"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x48000) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x482701) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x482701) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x4}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x10, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x482701) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x10) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffffdff) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000140)=""/21, 0x15, 0x0, &(0x7f0000000180)=""/225, 0xe1}}, 0x10) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2}) (async) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0xffffffff, 0x8, 0x5, 0x9000000, 0x5, 0xa5}) 09:12:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x5}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x11, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x10) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffffdff) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000140)=""/21, 0x15, 0x0, &(0x7f0000000180)=""/225, 0xe1}}, 0x10) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) (async, rerun: 32) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0xffffffff, 0x8, 0x5, 0x9000000, 0x5, 0xa5}) 09:12:46 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x20000) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0x4) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) epoll_wait(r6, &(0x7f00000003c0)=[{}], 0x1, 0x4) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) epoll_wait(r7, &(0x7f00000003c0)=[{}], 0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_getneigh={0xb8, 0x1e, 0x200, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x2, 0x20300}, [@IFLA_PHYS_SWITCH_ID={0x1f, 0x24, "8b401913fa6f1f48b123b18b443fc627384f69d80d802ef1b49ace"}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x6}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x1}, @IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r7}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FD={0x8, 0x1, r0}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20040000}, 0x40004) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) write$rfkill(r1, &(0x7f0000000040)={0x6, 0xff, 0x4}, 0x8) ioctl$BLKRRPART(r0, 0x125f, 0x0) 09:12:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x12, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x212801) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x100000000, 0x2401) write$rfkill(r1, &(0x7f0000000080), 0xfffffdef) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000240)=0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000096089a3f279759c48ebc14fc2dec784da0e8c6d742e557980f5f390034caa21b95d0edb3ac0c9af8922635c74cd19ef598435bb6d74b3f29cb", @ANYRES16=r3, @ANYBLOB="010100000000000000000e0000000c00060001000000010000000800010000000000"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x48000) 09:12:47 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) r4 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x20000) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0x4) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async, rerun: 32) epoll_wait(r6, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async, rerun: 32) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) epoll_wait(r7, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_getneigh={0xb8, 0x1e, 0x200, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x2, 0x20300}, [@IFLA_PHYS_SWITCH_ID={0x1f, 0x24, "8b401913fa6f1f48b123b18b443fc627384f69d80d802ef1b49ace"}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x6}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x1}, @IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r7}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FD={0x8, 0x1, r0}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20040000}, 0x40004) (rerun: 64) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x6}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x80, 0x6, @broadcast}, 0x14) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4210800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="92ce42126d9eaa9f219841047493a0352a009daa0d4b1d09429c7a1ed2e836f1fb367e469b210a8ddcde153cffd4eb5bdc89527268a4823b70530be37cc60ff700f9916cb8201b339e815dbbf33bd0fbcb58d398a50d2d310ec315632c222ac5e3e4794fd1f3809cea3bb272987446d33fc9169510e3e8ac530d5d1380fb18aea95720ed573743c43016f92646ab17285c9101ea7cd7fc5d9f592588d5f4383ca25950b3b3024d01a6a9796afda026b5f700"/187, @ANYRES16=0x0, @ANYBLOB="040028bd7000fddbdf250900000005001d00140000000800140019000000050015000000000000001500fc000000000000bf696b2449"], 0x44}, 0x1, 0x0, 0x0, 0x4c1c0}, 0xd5) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x7}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) r4 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x20000) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) epoll_wait(r6, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async, rerun: 64) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) epoll_wait(r7, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_getneigh={0xb8, 0x1e, 0x200, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x2, 0x20300}, [@IFLA_PHYS_SWITCH_ID={0x1f, 0x24, "8b401913fa6f1f48b123b18b443fc627384f69d80d802ef1b49ace"}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x6}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x1}, @IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r7}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FD={0x8, 0x1, r0}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20040000}, 0x40004) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x80, 0x6, @broadcast}, 0x14) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4210800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="92ce42126d9eaa9f219841047493a0352a009daa0d4b1d09429c7a1ed2e836f1fb367e469b210a8ddcde153cffd4eb5bdc89527268a4823b70530be37cc60ff700f9916cb8201b339e815dbbf33bd0fbcb58d398a50d2d310ec315632c222ac5e3e4794fd1f3809cea3bb272987446d33fc9169510e3e8ac530d5d1380fb18aea95720ed573743c43016f92646ab17285c9101ea7cd7fc5d9f592588d5f4383ca25950b3b3024d01a6a9796afda026b5f700"/187, @ANYRES16=0x0, @ANYBLOB="040028bd7000fddbdf250900000005001d00140000000800140019000000050015000000000000001500fc000000000000bf696b2449"], 0x44}, 0x1, 0x0, 0x0, 0x4c1c0}, 0xd5) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x25, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) write$rfkill(r1, &(0x7f0000000040)={0x6, 0xff, 0x4}, 0x8) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 09:12:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x48, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x80, 0x6, @broadcast}, 0x14) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) (async) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) (async) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4210800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="92ce42126d9eaa9f219841047493a0352a009daa0d4b1d09429c7a1ed2e836f1fb367e469b210a8ddcde153cffd4eb5bdc89527268a4823b70530be37cc60ff700f9916cb8201b339e815dbbf33bd0fbcb58d398a50d2d310ec315632c222ac5e3e4794fd1f3809cea3bb272987446d33fc9169510e3e8ac530d5d1380fb18aea95720ed573743c43016f92646ab17285c9101ea7cd7fc5d9f592588d5f4383ca25950b3b3024d01a6a9796afda026b5f700"/187, @ANYRES16=0x0, @ANYBLOB="040028bd7000fddbdf250900000005001d00140000000800140019000000050015000000000000001500fc000000000000bf696b2449"], 0x44}, 0x1, 0x0, 0x0, 0x4c1c0}, 0xd5) (async) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) 09:12:47 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7fffffff, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x20000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x80, 0x4) 09:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x8}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = socket(0x6, 0x0, 0x2) socket(0x10, 0xa, 0x8) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x8001, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r2, 0x0, &(0x7f0000000200), 0x0) 09:12:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) write$rfkill(r1, &(0x7f0000000040)={0x6, 0xff, 0x4}, 0x8) ioctl$BLKRRPART(r0, 0x125f, 0x0) 09:12:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x4c, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x73, 0x4040) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0xda, 0x5, 0xef, 0x1400, 0x1, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xf6, &(0x7f0000000180)=""/246, 0x41100, 0x9, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x8, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r3, 0xffffffffffffffff, 0x1, r4, r5]}, 0x80) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000100)) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x8) 09:12:47 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) r1 = socket(0x6, 0x0, 0x2) socket(0x10, 0xa, 0x8) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x8001, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r2, 0x0, &(0x7f0000000200), 0x0) 09:12:47 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x73, 0x4040) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0xda, 0x5, 0xef, 0x1400, 0x1, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xf6, &(0x7f0000000180)=""/246, 0x41100, 0x9, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x8, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r3, 0xffffffffffffffff, 0x1, r4, r5]}, 0x80) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000100)) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async) syz_open_dev$vcsn(&(0x7f0000000300), 0x73, 0x4040) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0xda, 0x5, 0xef, 0x1400, 0x1, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xf6, &(0x7f0000000180)=""/246, 0x41100, 0x9, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x8, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r3, 0xffffffffffffffff, 0x1, r4, r5]}, 0x80) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000100)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) (async) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x8) (async) 09:12:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x880) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x8, 0x4}, 0x8) 09:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x9}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async, rerun: 64) r1 = socket(0x6, 0x0, 0x2) (rerun: 64) socket(0x10, 0xa, 0x8) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x8001, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r2, 0x0, &(0x7f0000000200), 0x0) 09:12:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x68, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x880) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x8, 0x4}, 0x8) 09:12:47 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7fffffff, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x20000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x80, 0x4) 09:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0xa}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x73, 0x4040) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0xda, 0x5, 0xef, 0x1400, 0x1, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xf6, &(0x7f0000000180)=""/246, 0x41100, 0x9, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x8, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r3, 0xffffffffffffffff, 0x1, r4, r5]}, 0x80) (async) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000100)) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x8) 09:12:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x6c, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfffffffffffffffc, 0x82641) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0xb}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x74, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x880) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x8, 0x4}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x880) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x8, 0x4}, 0x8) (async) 09:12:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x8) 09:12:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x7a, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000008c0000008c000000020000000a0000000000000b04000002000000000000000d000000000b000000040000000e000000030000000100000001000000010000000300000007000000020000009400000001000000080000000400000004000000010000000b000000010000001000000004000000010000000000000905000000010000000000000700000000060000000000000c030000000000"], &(0x7f0000000180)=""/237, 0xa6, 0xed, 0x1}, 0x20) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0xa0000017}) 09:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0xc}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2954.673439][T15263] ================================================================== [ 2954.681553][T15263] BUG: KCSAN: data-race in __percpu_counter_compare / percpu_counter_add_batch [ 2954.690503][T15263] [ 2954.692828][T15263] read-write to 0xffff88810004b490 of 8 bytes by task 15247 on cpu 0: [ 2954.700972][T15263] percpu_counter_add_batch+0x9a/0x110 [ 2954.706443][T15263] shmem_getpage_gfp+0x4b3/0x1750 [ 2954.711446][T15263] shmem_write_begin+0x84/0x110 [ 2954.716280][T15263] generic_perform_write+0x1d4/0x3f0 [ 2954.721549][T15263] __generic_file_write_iter+0xe3/0x280 [ 2954.727079][T15263] generic_file_write_iter+0x75/0x130 [ 2954.732431][T15263] vfs_write+0x71c/0x890 [ 2954.736659][T15263] ksys_write+0xe8/0x1a0 [ 2954.740895][T15263] __x64_sys_write+0x3e/0x50 [ 2954.745466][T15263] do_syscall_64+0x2b/0x70 [ 2954.749864][T15263] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2954.755817][T15263] [ 2954.758122][T15263] read to 0xffff88810004b490 of 8 bytes by task 15263 on cpu 1: [ 2954.765739][T15263] __percpu_counter_compare+0x27/0x1a0 [ 2954.771180][T15263] shmem_getpage_gfp+0x47c/0x1750 [ 2954.776187][T15263] shmem_write_begin+0x84/0x110 [ 2954.781123][T15263] generic_perform_write+0x1d4/0x3f0 [ 2954.786389][T15263] __generic_file_write_iter+0xe3/0x280 [ 2954.791915][T15263] generic_file_write_iter+0x75/0x130 [ 2954.797354][T15263] vfs_write+0x71c/0x890 [ 2954.801575][T15263] ksys_write+0xe8/0x1a0 [ 2954.805797][T15263] __x64_sys_write+0x3e/0x50 [ 2954.810366][T15263] do_syscall_64+0x2b/0x70 [ 2954.814770][T15263] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2954.821174][T15263] [ 2954.823660][T15263] value changed: 0x000000000001bfb6 -> 0x000000000001bfd6 [ 2954.830746][T15263] [ 2954.833061][T15263] Reported by Kernel Concurrency Sanitizer on: [ 2954.839208][T15263] CPU: 1 PID: 15263 Comm: syz-executor.0 Not tainted 5.19.0-rc8-syzkaller-00168-g334c0ef6429f-dirty #0 [ 2954.850244][T15263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2954.860291][T15263] ================================================================== 09:12:47 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7fffffff, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x20000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x80, 0x4) 09:12:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x8) 09:12:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0xd5, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0xd}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000008c0000008c000000020000000a0000000000000b04000002000000000000000d000000000b000000040000000e000000030000000100000001000000010000000300000007000000020000009400000001000000080000000400000004000000010000000b000000010000001000000004000000010000000000000905000000010000000000000700000000060000000000000c030000000000"], &(0x7f0000000180)=""/237, 0xa6, 0xed, 0x1}, 0x20) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0xa0000017}) 09:12:47 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfffffffffffffffc, 0x82641) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000008c0000008c000000020000000a0000000000000b04000002000000000000000d000000000b000000040000000e000000030000000100000001000000010000000300000007000000020000009400000001000000080000000400000004000000010000000b000000010000001000000004000000010000000000000905000000010000000000000700000000060000000000000c030000000000"], &(0x7f0000000180)=""/237, 0xa6, 0xed, 0x1}, 0x20) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async, rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0xa0000017}) (rerun: 64) 09:12:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x8) (async) 09:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0xe}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x300, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x3f3, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x10}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x1, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=@ipv6_delroute={0x110, 0x19, 0x4, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xff, 0xfc, 0x0, 0xff, 0xc, 0x200}, [@RTA_METRICS={0x5d, 0x8, 0x0, 0x1, "bad3141e618e31954a3857b6fa646622f60546c8f13d8f7c280a97214236e8ab92e7b42002fc8a85069b6a5d29511ccbd73bcc13b0cae4cb420c25d87354d04e6b893a2c58e86f16461c0c6c19d2bcf7c5fc3bdc24acef948f"}, @RTA_GATEWAY={0x14, 0x5, @private1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_METRICS={0x75, 0x8, 0x0, 0x1, "bbcd433361cc67b98eec7e4375bd5622acaeacbd7d7f7c9a78962dce1da4fa0b4851b67f751105cc2c463366abc659bc0cfb3891c849e60dcc695b91dfa1d049faba95aa147e64c7f838858c7a379db6ae1ec5d2a16b1b3141991b85a765e820d3f09abb8e126ea31e30400f8ab18158af"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20008010}, 0xc010001) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r5, &(0x7f0000000080), 0xfffffdef) write$rfkill(r5, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x0, 0x1}, 0x8) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r7}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000840)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000940)={0x108, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x946e}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xa}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x44}, 0x20040850) r9 = accept4(r5, &(0x7f0000000100)=@tipc, &(0x7f0000000180)=0x80, 0x800) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x1d}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0xc0) 09:12:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfd, 0xfc}, 0x8) 09:12:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x163441) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x11}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x500, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfffffffffffffffc, 0x82641) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfd, 0xfc}, 0x8) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfd, 0xfc}, 0x8) (async) 09:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x12}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x600, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x1, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=@ipv6_delroute={0x110, 0x19, 0x4, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xff, 0xfc, 0x0, 0xff, 0xc, 0x200}, [@RTA_METRICS={0x5d, 0x8, 0x0, 0x1, "bad3141e618e31954a3857b6fa646622f60546c8f13d8f7c280a97214236e8ab92e7b42002fc8a85069b6a5d29511ccbd73bcc13b0cae4cb420c25d87354d04e6b893a2c58e86f16461c0c6c19d2bcf7c5fc3bdc24acef948f"}, @RTA_GATEWAY={0x14, 0x5, @private1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_METRICS={0x75, 0x8, 0x0, 0x1, "bbcd433361cc67b98eec7e4375bd5622acaeacbd7d7f7c9a78962dce1da4fa0b4851b67f751105cc2c463366abc659bc0cfb3891c849e60dcc695b91dfa1d049faba95aa147e64c7f838858c7a379db6ae1ec5d2a16b1b3141991b85a765e820d3f09abb8e126ea31e30400f8ab18158af"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20008010}, 0xc010001) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r5, &(0x7f0000000080), 0xfffffdef) write$rfkill(r5, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x0, 0x1}, 0x8) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r7}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000840)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000940)={0x108, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x946e}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xa}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x44}, 0x20040850) r9 = accept4(r5, &(0x7f0000000100)=@tipc, &(0x7f0000000180)=0x80, 0x800) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x1d}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0xc0) 09:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x18}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x700, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfd, 0xfc}, 0x8) 09:12:47 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x1, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=@ipv6_delroute={0x110, 0x19, 0x4, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xff, 0xfc, 0x0, 0xff, 0xc, 0x200}, [@RTA_METRICS={0x5d, 0x8, 0x0, 0x1, "bad3141e618e31954a3857b6fa646622f60546c8f13d8f7c280a97214236e8ab92e7b42002fc8a85069b6a5d29511ccbd73bcc13b0cae4cb420c25d87354d04e6b893a2c58e86f16461c0c6c19d2bcf7c5fc3bdc24acef948f"}, @RTA_GATEWAY={0x14, 0x5, @private1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_METRICS={0x75, 0x8, 0x0, 0x1, "bbcd433361cc67b98eec7e4375bd5622acaeacbd7d7f7c9a78962dce1da4fa0b4851b67f751105cc2c463366abc659bc0cfb3891c849e60dcc695b91dfa1d049faba95aa147e64c7f838858c7a379db6ae1ec5d2a16b1b3141991b85a765e820d3f09abb8e126ea31e30400f8ab18158af"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20008010}, 0xc010001) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r5, &(0x7f0000000080), 0xfffffdef) write$rfkill(r5, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x0, 0x1}, 0x8) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r7}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000840)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000940)={0x108, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x946e}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xa}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x44}, 0x20040850) r9 = accept4(r5, &(0x7f0000000100)=@tipc, &(0x7f0000000180)=0x80, 0x800) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x1d}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0xc0) 09:12:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x163441) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x900, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x25}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032bbd7000ffdbdf2d0100000008007fd4fcc898c5d9cf94e40d08000200000008000800000000000600060003000000080002000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000500ac14141608000500ffffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) 09:12:47 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4000000000000000, 0x2401) io_uring_enter(r0, 0x999, 0x1a06, 0x0, &(0x7f0000000040)={[0xfffffffffffff8ca]}, 0x8) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = io_uring_setup(0x17f2, &(0x7f0000000240)={0x0, 0x90d9, 0x8, 0x1, 0x29a, 0x0, r0}) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_delroute={0x90, 0x19, 0x4, 0x70bd29, 0x25dfdbfe, {0xa, 0x80, 0x20, 0xff, 0xfd, 0x0, 0xc8, 0x9, 0x2100}, [@RTA_OIF={0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x68}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1f}}, @RTA_METRICS={0x51, 0x8, 0x0, 0x1, "678e83e4e78661e0a11700203ca9ecb8f4ed7b66a1413875a4cd8c3bcf2d13c81a9f10693faf551d4677b754501f655d28a1a2f1c622c54d1ff10fe70a2d9f723ded81a8a9ecdb879c8a15a05c"}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x20040800) 09:12:47 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032bbd7000ffdbdf2d0100000008007fd4fcc898c5d9cf94e40d08000200000008000800000000000600060003000000080002000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000500ac14141608000500ffffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) 09:12:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x48}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4000000000000000, 0x2401) io_uring_enter(r0, 0x999, 0x1a06, 0x0, &(0x7f0000000040)={[0xfffffffffffff8ca]}, 0x8) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = io_uring_setup(0x17f2, &(0x7f0000000240)={0x0, 0x90d9, 0x8, 0x1, 0x29a, 0x0, r0}) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_delroute={0x90, 0x19, 0x4, 0x70bd29, 0x25dfdbfe, {0xa, 0x80, 0x20, 0xff, 0xfd, 0x0, 0xc8, 0x9, 0x2100}, [@RTA_OIF={0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x68}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1f}}, @RTA_METRICS={0x51, 0x8, 0x0, 0x1, "678e83e4e78661e0a11700203ca9ecb8f4ed7b66a1413875a4cd8c3bcf2d13c81a9f10693faf551d4677b754501f655d28a1a2f1c622c54d1ff10fe70a2d9f723ded81a8a9ecdb879c8a15a05c"}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x20040800) 09:12:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0xa00, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:47 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4000000000000000, 0x2401) io_uring_enter(r0, 0x999, 0x1a06, 0x0, &(0x7f0000000040)={[0xfffffffffffff8ca]}, 0x8) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = io_uring_setup(0x17f2, &(0x7f0000000240)={0x0, 0x90d9, 0x8, 0x1, 0x29a, 0x0, r0}) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_delroute={0x90, 0x19, 0x4, 0x70bd29, 0x25dfdbfe, {0xa, 0x80, 0x20, 0xff, 0xfd, 0x0, 0xc8, 0x9, 0x2100}, [@RTA_OIF={0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x68}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1f}}, @RTA_METRICS={0x51, 0x8, 0x0, 0x1, "678e83e4e78661e0a11700203ca9ecb8f4ed7b66a1413875a4cd8c3bcf2d13c81a9f10693faf551d4677b754501f655d28a1a2f1c622c54d1ff10fe70a2d9f723ded81a8a9ecdb879c8a15a05c"}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x20040800) 09:12:47 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) 09:12:48 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x163441) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x4c}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0xfffffdef) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032bbd7000ffdbdf2d0100000008007fd4fcc898c5d9cf94e40d08000200000008000800000000000600060003000000080002000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000500ac14141608000500ffffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) 09:12:48 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x10c041) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1ac, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xe7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x81}, 0x20000005) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) 09:12:48 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) 09:12:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0xb00, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x40000, 0x2) write$rfkill(r0, &(0x7f0000000080), 0xf78) 09:12:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0xc00, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x68}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000}) 09:12:48 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x8, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 4: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x7ffff000) 09:12:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0xd00, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000}) 09:12:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x6c}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 1) 09:12:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0xe00, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x1100, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x74}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2955.452947][T15383] FAULT_INJECTION: forcing a failure. [ 2955.452947][T15383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2955.466016][T15383] CPU: 0 PID: 15383 Comm: syz-executor.0 Not tainted 5.19.0-rc8-syzkaller-00168-g334c0ef6429f-dirty #0 [ 2955.477114][T15383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2955.487175][T15383] Call Trace: [ 2955.490454][T15383] [ 2955.493454][T15383] dump_stack_lvl+0xd6/0x122 [ 2955.498117][T15383] dump_stack+0x11/0x12 09:12:48 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:48 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000}) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2401) (async) write$rfkill(r0, &(0x7f0000000080), 0x87fff78) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000}) (async) 09:12:48 executing program 4: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x7ffff000) [ 2955.502275][T15383] should_fail+0x242/0x250 [ 2955.506698][T15383] should_fail_usercopy+0x16/0x20 [ 2955.511792][T15383] _copy_from_user+0x1a/0xc0 [ 2955.516392][T15383] __sys_bpf+0x1f2/0x630 [ 2955.520660][T15383] __x64_sys_bpf+0x3f/0x50 [ 2955.525092][T15383] do_syscall_64+0x2b/0x70 [ 2955.529519][T15383] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2955.535466][T15383] RIP: 0033:0x7f22073bb209 [ 2955.539885][T15383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2955.559578][T15383] RSP: 002b:00007f2206b31168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2955.568087][T15383] RAX: ffffffffffffffda RBX: 00007f22074cdf60 RCX: 00007f22073bb209 [ 2955.576121][T15383] RDX: 0000000000000080 RSI: 00000000200007c0 RDI: 0000000000000005 [ 2955.584101][T15383] RBP: 00007f2206b311d0 R08: 0000000000000000 R09: 0000000000000000 [ 2955.592075][T15383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 09:12:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x7a}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x1200, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x10000000) (fail_nth: 1) 09:12:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x2000, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 2) 09:12:48 executing program 4: write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x7ffff000) [ 2955.600092][T15383] R13: 00007ffe09fd022f R14: 00007f2206b31300 R15: 0000000000022000 [ 2955.608073][T15383] 09:12:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0xd5}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2955.644687][T15407] FAULT_INJECTION: forcing a failure. [ 2955.644687][T15407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2955.657811][T15407] CPU: 0 PID: 15407 Comm: syz-executor.0 Not tainted 5.19.0-rc8-syzkaller-00168-g334c0ef6429f-dirty #0 [ 2955.668835][T15407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2955.678956][T15407] Call Trace: [ 2955.682236][T15407] [ 2955.685167][T15407] dump_stack_lvl+0xd6/0x122 [ 2955.689808][T15407] dump_stack+0x11/0x12 09:12:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x2}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2955.694011][T15407] should_fail+0x242/0x250 [ 2955.698494][T15407] should_fail_usercopy+0x16/0x20 [ 2955.703522][T15407] strncpy_from_user+0x22/0x230 [ 2955.708447][T15407] ? memchr_inv+0x38/0x310 [ 2955.712903][T15407] bpf_prog_load+0x100/0xeb0 [ 2955.717576][T15407] __sys_bpf+0x35d/0x630 [ 2955.721861][T15407] __x64_sys_bpf+0x3f/0x50 [ 2955.726289][T15407] do_syscall_64+0x2b/0x70 [ 2955.730747][T15407] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2955.736681][T15407] RIP: 0033:0x7f22073bb209 09:12:48 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) (fail_nth: 1) 09:12:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x3}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x2500, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2955.741103][T15407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2955.760806][T15407] RSP: 002b:00007f2206b31168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2955.769248][T15407] RAX: ffffffffffffffda RBX: 00007f22074cdf60 RCX: 00007f22073bb209 [ 2955.774569][T15422] FAULT_INJECTION: forcing a failure. [ 2955.774569][T15422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2955.777273][T15407] RDX: 0000000000000080 RSI: 00000000200007c0 RDI: 0000000000000005 [ 2955.777289][T15407] RBP: 00007f2206b311d0 R08: 0000000000000000 R09: 0000000000000000 [ 2955.777301][T15407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2955.814279][T15407] R13: 00007ffe09fd022f R14: 00007f2206b31300 R15: 0000000000022000 [ 2955.822251][T15407] [ 2955.825286][T15422] CPU: 1 PID: 15422 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-00168-g334c0ef6429f-dirty #0 09:12:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x4000, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 3) 09:12:48 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x10000000) (fail_nth: 2) 09:12:48 executing program 4: r0 = syz_open_dev$vcsn(0x0, 0xfffffffffffffff9, 0x163441) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x4}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x5}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x6}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2955.836390][T15422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2955.846538][T15422] Call Trace: [ 2955.849820][T15422] [ 2955.852748][T15422] dump_stack_lvl+0xd6/0x122 [ 2955.857354][T15422] dump_stack+0x11/0x12 [ 2955.861560][T15422] should_fail+0x242/0x250 [ 2955.865981][T15422] should_fail_usercopy+0x16/0x20 [ 2955.871010][T15422] _copy_from_user+0x1a/0xc0 [ 2955.875623][T15422] move_addr_to_kernel+0x7e/0x110 [ 2955.880770][T15422] __sys_connect+0x70/0x1b0 [ 2955.885418][T15422] __x64_sys_connect+0x3d/0x50 [ 2955.890193][T15422] do_syscall_64+0x2b/0x70 09:12:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x7}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x8}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2955.894658][T15422] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2955.900583][T15422] RIP: 0033:0x7ff08a144209 [ 2955.904998][T15422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2955.924620][T15422] RSP: 002b:00007ff0898ba168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2955.933257][T15422] RAX: ffffffffffffffda RBX: 00007ff08a256f60 RCX: 00007ff08a144209 [ 2955.941230][T15422] RDX: 0000000000000014 RSI: 0000000020000100 RDI: 0000000000000004 [ 2955.946716][T15437] warn_alloc: 4 callbacks suppressed [ 2955.946727][T15437] syz-executor.0: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 2955.949190][T15422] RBP: 00007ff0898ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2955.949206][T15422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2955.954490][T15437] ,cpuset= [ 2955.968599][T15422] R13: 00007ffe1bb1ebbf R14: 00007ff0898ba300 R15: 0000000000022000 [ 2955.968671][T15422] [ 2955.994921][T15443] FAULT_INJECTION: forcing a failure. [ 2955.994921][T15443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2955.995799][T15437] syz0 [ 2955.998775][T15443] CPU: 1 PID: 15443 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-00168-g334c0ef6429f-dirty #0 [ 2956.011771][T15437] ,mems_allowed=0 [ 2956.014404][T15443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2956.014417][T15443] Call Trace: [ 2956.014423][T15443] [ 2956.025416][T15437] [ 2956.029009][T15443] dump_stack_lvl+0xd6/0x122 [ 2956.052238][T15443] dump_stack+0x11/0x12 [ 2956.056402][T15443] should_fail+0x242/0x250 [ 2956.060810][T15443] should_fail_usercopy+0x16/0x20 [ 2956.065886][T15443] _copy_to_user+0x1a/0x90 [ 2956.070288][T15443] simple_read_from_buffer+0xab/0x120 [ 2956.075663][T15443] proc_fail_nth_read+0x10d/0x150 [ 2956.080749][T15443] ? proc_fault_inject_write+0x230/0x230 [ 2956.086422][T15443] vfs_read+0x1a1/0x6a0 [ 2956.090583][T15443] ? __fget_files+0x1a7/0x1e0 [ 2956.095259][T15443] ksys_read+0xe8/0x1a0 [ 2956.099405][T15443] __x64_sys_read+0x3e/0x50 [ 2956.103915][T15443] do_syscall_64+0x2b/0x70 [ 2956.108323][T15443] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2956.114242][T15443] RIP: 0033:0x7ff08a0f6dbc [ 2956.118688][T15443] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2956.138348][T15443] RSP: 002b:00007ff0898ba160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 09:12:48 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) (fail_nth: 2) 09:12:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x9}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:48 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x10000000) (fail_nth: 3) 09:12:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x4800, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2956.146754][T15443] RAX: ffffffffffffffda RBX: 00007ff08a256f60 RCX: 00007ff08a0f6dbc [ 2956.154788][T15443] RDX: 000000000000000f RSI: 00007ff0898ba1e0 RDI: 0000000000000005 [ 2956.162750][T15443] RBP: 00007ff0898ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2956.170723][T15443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2956.178753][T15443] R13: 00007ffe1bb1ebbf R14: 00007ff0898ba300 R15: 0000000000022000 [ 2956.186730][T15443] [ 2956.189737][T15437] CPU: 0 PID: 15437 Comm: syz-executor.0 Not tainted 5.19.0-rc8-syzkaller-00168-g334c0ef6429f-dirty #0 [ 2956.200799][T15437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2956.210893][T15437] Call Trace: [ 2956.214247][T15437] [ 2956.217214][T15437] dump_stack_lvl+0xd6/0x122 [ 2956.221812][T15437] dump_stack+0x11/0x12 [ 2956.225984][T15437] warn_alloc+0x161/0x1c0 [ 2956.230326][T15437] ? __get_vm_area_node+0x243/0x250 [ 2956.235768][T15437] __vmalloc_node_range+0x2e0/0xef0 [ 2956.241038][T15437] ? cred_has_capability+0x1dc/0x240 [ 2956.246362][T15437] ? bpf_prog_alloc_no_stats+0x33/0x1d0 [ 2956.251908][T15437] __vmalloc+0x5a/0x70 [ 2956.255960][T15437] ? bpf_prog_alloc_no_stats+0x33/0x1d0 [ 2956.261519][T15437] bpf_prog_alloc_no_stats+0x33/0x1d0 [ 2956.266908][T15437] bpf_prog_alloc+0x14/0xa0 [ 2956.271392][T15437] bpf_prog_load+0x5ef/0xeb0 [ 2956.275983][T15437] __sys_bpf+0x35d/0x630 [ 2956.280228][T15437] __x64_sys_bpf+0x3f/0x50 [ 2956.284734][T15437] do_syscall_64+0x2b/0x70 [ 2956.289134][T15437] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2956.295099][T15437] RIP: 0033:0x7f22073bb209 [ 2956.299498][T15437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2956.319150][T15437] RSP: 002b:00007f2206b31168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2956.327549][T15437] RAX: ffffffffffffffda RBX: 00007f22074cdf60 RCX: 00007f22073bb209 [ 2956.335580][T15437] RDX: 0000000000000080 RSI: 00000000200007c0 RDI: 0000000000000005 [ 2956.343552][T15437] RBP: 00007f2206b311d0 R08: 0000000000000000 R09: 0000000000000000 [ 2956.352300][T15437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2956.360333][T15437] R13: 00007ffe09fd022f R14: 00007f2206b31300 R15: 0000000000022000 [ 2956.368308][T15437] [ 2956.371334][T15437] Mem-Info: [ 2956.374444][T15437] active_anon:1579 inactive_anon:156329 isolated_anon:0 [ 2956.374444][T15437] active_file:5894 inactive_file:6988 isolated_file:0 [ 2956.374444][T15437] unevictable:0 dirty:12 writeback:0 [ 2956.374444][T15437] slab_reclaimable:17075 slab_unreclaimable:15107 [ 2956.374444][T15437] mapped:19608 shmem:145329 pagetables:450 bounce:0 [ 2956.374444][T15437] kernel_misc_reclaimable:0 [ 2956.374444][T15437] free:1755661 free_pcp:1820 free_cma:0 [ 2956.416216][T15437] Node 0 active_anon:6316kB inactive_anon:625316kB active_file:23576kB inactive_file:27952kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78432kB dirty:48kB writeback:0kB shmem:581316kB writeback_tmp:0kB kernel_stack:4000kB pagetables:1800kB all_unreclaimable? no [ 2956.442669][T15437] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2956.469434][T15437] lowmem_reserve[]: 0 2896 7874 7874 [ 2956.474895][T15437] Node 0 DMA32 free:2967228kB boost:0kB min:4172kB low:7136kB high:10100kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2970400kB mlocked:0kB bounce:0kB free_pcp:3172kB local_pcp:92kB free_cma:0kB [ 2956.503421][T15437] lowmem_reserve[]: 0 0 4978 4978 [ 2956.508434][T15437] Node 0 Normal free:4040056kB boost:0kB min:7172kB low:12268kB high:17364kB reserved_highatomic:0KB active_anon:6316kB inactive_anon:625316kB active_file:23576kB inactive_file:27952kB unevictable:0kB writepending:48kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:4108kB local_pcp:2900kB free_cma:0kB [ 2956.538695][T15437] lowmem_reserve[]: 0 0 0 0 [ 2956.543283][T15437] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2956.555961][T15437] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 722*4096kB (M) = 2967228kB [ 2956.571968][T15437] Node 0 Normal: 126*4kB (UME) 186*8kB (UE) 203*16kB (UM) 176*32kB (U) 136*64kB (UE) 76*128kB (UM) 53*256kB (UE) 33*512kB (UE) 31*1024kB (UM) 4*2048kB (U) 962*4096kB (UM) = 4040056kB 09:12:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 4) 09:12:49 executing program 4: r0 = syz_open_dev$vcsn(0x0, 0xfffffffffffffff9, 0x163441) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:49 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 09:12:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x4c00, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x10000000) (fail_nth: 4) 09:12:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0xa}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x6800, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0xb}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2956.590110][T15437] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2956.599400][T15437] 158211 total pagecache pages [ 2956.604163][T15437] 0 pages in swap cache [ 2956.608353][T15437] Swap cache stats: add 0, delete 0, find 0/0 [ 2956.614415][T15437] Free swap = 0kB [ 2956.618130][T15437] Total swap = 0kB [ 2956.621942][T15437] 2097051 pages RAM [ 2956.625749][T15437] 0 pages HighMem/MovableOnly [ 2956.630541][T15437] 76051 pages reserved 09:12:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0xc}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r0, &(0x7f0000000100)={0x6c, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 09:12:49 executing program 4: r0 = syz_open_dev$vcsn(0x0, 0xfffffffffffffff9, 0x163441) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x6c00, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2956.665196][T15457] FAULT_INJECTION: forcing a failure. [ 2956.665196][T15457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2956.678292][T15457] CPU: 0 PID: 15457 Comm: syz-executor.1 Not tainted 5.19.0-rc8-syzkaller-00168-g334c0ef6429f-dirty #0 [ 2956.689485][T15457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2956.699547][T15457] Call Trace: [ 2956.702954][T15457] [ 2956.705887][T15457] dump_stack_lvl+0xd6/0x122 [ 2956.710594][T15457] dump_stack+0x11/0x12 09:12:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 5) 09:12:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0xd}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x7400, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x7a00, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2956.714761][T15457] should_fail+0x242/0x250 [ 2956.719180][T15457] should_fail_usercopy+0x16/0x20 [ 2956.724337][T15457] _copy_to_user+0x1a/0x90 [ 2956.728891][T15457] simple_read_from_buffer+0xab/0x120 [ 2956.734274][T15457] proc_fail_nth_read+0x10d/0x150 [ 2956.739315][T15457] ? proc_fault_inject_write+0x230/0x230 [ 2956.744969][T15457] vfs_read+0x1a1/0x6a0 [ 2956.749139][T15457] ? __fget_files+0x1a7/0x1e0 [ 2956.753826][T15457] ksys_read+0xe8/0x1a0 [ 2956.757992][T15457] __x64_sys_read+0x3e/0x50 [ 2956.762707][T15457] do_syscall_64+0x2b/0x70 [ 2956.767130][T15457] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2956.773039][T15457] RIP: 0033:0x7ff1f9241dbc [ 2956.777460][T15457] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2956.797166][T15457] RSP: 002b:00007ff1f8a05160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2956.805705][T15457] RAX: ffffffffffffffda RBX: 00007ff1f93a1f60 RCX: 00007ff1f9241dbc 09:12:49 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x10000000) 09:12:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0xd500, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x2) 09:12:49 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x163441) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 6) 09:12:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0xe}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x163441) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0xf303, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x7ffffffff000) 09:12:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 7) 09:12:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x10}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2956.813657][T15457] RDX: 000000000000000f RSI: 00007ff1f8a051e0 RDI: 0000000000000004 [ 2956.821617][T15457] RBP: 00007ff1f8a051d0 R08: 0000000000000000 R09: 0000000010000000 [ 2956.829575][T15457] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 2956.837530][T15457] R13: 00007fffa1de7d4f R14: 00007ff1f8a05300 R15: 0000000000022000 [ 2956.845573][T15457] 09:12:49 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2004, 0xa, 0x12, r0, 0x10000000) 09:12:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0xff00, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 3: socketpair(0x3, 0xa, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 09:12:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 8) 09:12:49 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x163441) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x11}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 9) 09:12:49 executing program 3: socketpair(0x3, 0xa, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 09:12:49 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x20000, 0xa, 0x12, r0, 0x10000000) 09:12:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x2}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x0) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x12}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x1ffff000, 0xa, 0x12, r0, 0x10000000) 09:12:49 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x0) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x18}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x25}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2956.965723][T15526] FAULT_INJECTION: forcing a failure. [ 2956.965723][T15526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2956.978837][T15526] CPU: 0 PID: 15526 Comm: syz-executor.0 Not tainted 5.19.0-rc8-syzkaller-00168-g334c0ef6429f-dirty #0 [ 2956.990092][T15526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2957.000234][T15526] Call Trace: [ 2957.003516][T15526] [ 2957.006466][T15526] dump_stack_lvl+0xd6/0x122 [ 2957.011148][T15526] dump_stack+0x11/0x12 09:12:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x48}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x3}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2957.015399][T15526] should_fail+0x242/0x250 [ 2957.019823][T15526] should_fail_usercopy+0x16/0x20 [ 2957.024857][T15526] _copy_from_user+0x1a/0xc0 [ 2957.029537][T15526] copy_from_bpfptr+0x62/0xa0 [ 2957.034232][T15526] bpf_prog_load+0x875/0xeb0 [ 2957.038959][T15526] __sys_bpf+0x35d/0x630 [ 2957.043218][T15526] __x64_sys_bpf+0x3f/0x50 [ 2957.047730][T15526] do_syscall_64+0x2b/0x70 [ 2957.052151][T15526] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2957.058122][T15526] RIP: 0033:0x7f22073bb209 [ 2957.062590][T15526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2957.082200][T15526] RSP: 002b:00007f2206b31168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2957.090648][T15526] RAX: ffffffffffffffda RBX: 00007f22074cdf60 RCX: 00007f22073bb209 [ 2957.098993][T15526] RDX: 0000000000000080 RSI: 00000000200007c0 RDI: 0000000000000005 [ 2957.106948][T15526] RBP: 00007f2206b311d0 R08: 0000000000000000 R09: 0000000000000000 09:12:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 10) 09:12:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x4c}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x7fffdf004000, 0xa, 0x12, r0, 0x10000000) 09:12:49 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x0) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) 09:12:49 executing program 3: socketpair(0x3, 0xa, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 09:12:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x4}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x163441) write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x7ffff000) 09:12:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x68}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x7ffffffff000, 0xa, 0x12, r0, 0x10000000) 09:12:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x5}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 11) 09:12:49 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x163441) write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x7ffff000) [ 2957.114978][T15526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2957.122938][T15526] R13: 00007ffe09fd022f R14: 00007f2206b31300 R15: 0000000000022000 [ 2957.130905][T15526] 09:12:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000780)={0xc1a5, 0x1, 0x1}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x10041, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="e4040000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fbdbdf250100048608000100", @ANYRES32=0x0, @ANYBLOB="58040880180300801400040002004e227f000001000000000000000008000a00010000000800030007000000200004000a004e200000856dff010000000000000000000000000001f309000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922ac020980c40000800600010002000000080002007f0000010500030003000000060001000200000008000200ac1414bb0500030003000000060001000a00000014000200200100000000000000000000000000000500030003000000060001000200000008000200ac1e01010500030002000000060001000200000008000200ac1414aa05000300000000000600010002000000080002007f0000010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000004c000080060001000a00000014000200000000000000000000000000000000010500030003000000060001000a00000014000200ff0100000000000000000000000000010500030003000000ac000080060001000200000008000200e00000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200ff020000000000000000000000000001050003000100000040000080060001000a00000014000200fe80000000000000000000000000000e0500030003000000060001000200000008000200e00000020500030003000000ac000080060001000200000008000200ac1414200500030003000000060001000a00000014000200fe8000000000000000000000000000200500030002000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414aa05000300000000000600010002000000080002006401010205000300010000002800008024000200540bd9a71c8a36467580a889f5528fc8b63524d2929f6caabdf1249719459459e80000802400020079b8a0edbca37c2dc325448b59b57ded55a3190474c5e679965ecaccf893842b200004000a004e230001000000000000000000000000ffffac1414bb2100000008000a000100000024000200c036f7e56479b32e231008597bc02909a6639f3e28d1f0a1d311c5fb72aa980c08000a000100000024000200c8c2002991e54dbab694b7736320ce6f929f98e27b8ea2e1bf11fa42e7d66c5c24000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392228000080240002007af75351eb8e529835e1a3af1f39d13fc3e48ecc087e896e6b9f8c42ee9c60a904000080140002007767310000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776731000000000000000000000000001400020077673000000000000000000000000000060006004e21000014000200776730000000000000000000000000000800070003000000060006004e220000"], 0x4e4}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) 09:12:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x6}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 12) 09:12:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x6c}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x163441) write$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0x7ffff000) 09:12:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x7}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x10000000) 09:12:49 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x163441) write$rfkill(r0, 0x0, 0x0) 09:12:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) (async) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000780)={0xc1a5, 0x1, 0x1}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x10041, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="e4040000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fbdbdf250100048608000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="14000200776731000000000000000000000000001400020077673000000000000000000000000000060006004e21000014000200776730000000000000000000000000000800070003000000060006004e220000"], 0x4e4}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) 09:12:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x8}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x74}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 13) 09:12:49 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x163441) write$rfkill(r0, 0x0, 0x0) 09:12:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 14) 09:12:49 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x8000000) 09:12:50 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000780)={0xc1a5, 0x1, 0x1}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x10041, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="e4040000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fbdbdf250100048608000100", @ANYRES32=0x0, @ANYBLOB="58040880180300801400040002004e227f000001000000000000000008000a00010000000800030007000000200004000a004e200000856dff010000000000000000000000000001f309000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922ac020980c40000800600010002000000080002007f0000010500030003000000060001000200000008000200ac1414bb0500030003000000060001000a00000014000200200100000000000000000000000000000500030003000000060001000200000008000200ac1e01010500030002000000060001000200000008000200ac1414aa05000300000000000600010002000000080002007f0000010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000004c000080060001000a00000014000200000000000000000000000000000000010500030003000000060001000a00000014000200ff0100000000000000000000000000010500030003000000ac000080060001000200000008000200e00000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200ff020000000000000000000000000001050003000100000040000080060001000a00000014000200fe80000000000000000000000000000e0500030003000000060001000200000008000200e00000020500030003000000ac000080060001000200000008000200ac1414200500030003000000060001000a00000014000200fe8000000000000000000000000000200500030002000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414aa05000300000000000600010002000000080002006401010205000300010000002800008024000200540bd9a71c8a36467580a889f5528fc8b63524d2929f6caabdf1249719459459e80000802400020079b8a0edbca37c2dc325448b59b57ded55a3190474c5e679965ecaccf893842b200004000a004e230001000000000000000000000000ffffac1414bb2100000008000a000100000024000200c036f7e56479b32e231008597bc02909a6639f3e28d1f0a1d311c5fb72aa980c08000a000100000024000200c8c2002991e54dbab694b7736320ce6f929f98e27b8ea2e1bf11fa42e7d66c5c24000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392228000080240002007af75351eb8e529835e1a3af1f39d13fc3e48ecc087e896e6b9f8c42ee9c60a904000080140002007767310000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776731000000000000000000000000001400020077673000000000000000000000000000060006004e21000014000200776730000000000000000000000000000800070003000000060006004e220000"], 0x4e4}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) (async) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000780)={0xc1a5, 0x1, 0x1}) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) (async) connect$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x10041, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="e4040000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fbdbdf250100048608000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="14000200776731000000000000000000000000001400020077673000000000000000000000000000060006004e21000014000200776730000000000000000000000000000800070003000000060006004e220000"], 0x4e4}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) (async) 09:12:50 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x163441) write$rfkill(r0, 0x0, 0x0) 09:12:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x9}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x7a}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x10000002) 09:12:50 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x163441) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (fail_nth: 1) 09:12:50 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 15) 09:12:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0xd5}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2957.306522][T15619] FAULT_INJECTION: forcing a failure. [ 2957.306522][T15619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2957.319638][T15619] CPU: 0 PID: 15619 Comm: syz-executor.4 Not tainted 5.19.0-rc8-syzkaller-00168-g334c0ef6429f-dirty #0 [ 2957.330683][T15619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2957.340745][T15619] Call Trace: [ 2957.344041][T15619] [ 2957.346982][T15619] dump_stack_lvl+0xd6/0x122 [ 2957.351591][T15619] dump_stack+0x11/0x12 09:12:50 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r1 = syz_io_uring_setup(0x79e, &(0x7f0000000040)={0x0, 0x606d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000) syz_io_uring_setup(0x728b, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2007, @fd_index=0x1, 0x2, 0x0, 0x9, 0x4, 0x0, {0x3}}, 0x6434) 09:12:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0xa}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r1 = syz_io_uring_setup(0x79e, &(0x7f0000000040)={0x0, 0x606d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000) syz_io_uring_setup(0x728b, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2007, @fd_index=0x1, 0x2, 0x0, 0x9, 0x4, 0x0, {0x3}}, 0x6434) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) (async) connect$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) (async) syz_io_uring_setup(0x79e, &(0x7f0000000040)={0x0, 0x606d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000) (async) syz_io_uring_setup(0x728b, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2007, @fd_index=0x1, 0x2, 0x0, 0x9, 0x4, 0x0, {0x3}}, 0x6434) (async) 09:12:50 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x10000004) 09:12:50 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) (async) r1 = syz_io_uring_setup(0x79e, &(0x7f0000000040)={0x0, 0x606d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000) (async) syz_io_uring_setup(0x728b, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2007, @fd_index=0x1, 0x2, 0x0, 0x9, 0x4, 0x0, {0x3}}, 0x6434) [ 2957.355840][T15619] should_fail+0x242/0x250 [ 2957.360346][T15619] should_fail_usercopy+0x16/0x20 [ 2957.365375][T15619] copy_page_from_iter_atomic+0x3de/0xb80 [ 2957.371183][T15619] ? fault_in_readable+0x14b/0x1a0 [ 2957.376372][T15619] generic_perform_write+0x214/0x3f0 [ 2957.381711][T15619] __generic_file_write_iter+0xe3/0x280 [ 2957.387270][T15619] ? generic_write_checks+0x249/0x290 [ 2957.392649][T15619] generic_file_write_iter+0x75/0x130 [ 2957.398168][T15619] vfs_write+0x71c/0x890 [ 2957.402415][T15619] ksys_write+0xe8/0x1a0 09:12:50 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x10000008) 09:12:50 executing program 3: socketpair(0x0, 0x80807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_FLOW={0x6}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xf1fa7b8a90eb5cd5) connect$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 09:12:50 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x10000060) 09:12:50 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x10002000) [ 2957.406738][T15619] __x64_sys_write+0x3e/0x50 [ 2957.411403][T15619] do_syscall_64+0x2b/0x70 [ 2957.415936][T15619] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2957.421877][T15619] RIP: 0033:0x7fb8b9128209 [ 2957.426361][T15619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2957.445974][T15619] RSP: 002b:00007fb8b889e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2957.454432][T15619] RAX: ffffffffffffffda RBX: 00007fb8b923af60 RCX: 00007fb8b9128209 [ 2957.462410][T15619] RDX: 000000007ffff000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2957.470391][T15619] RBP: 00007fb8b889e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2957.478456][T15619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2957.486433][T15619] R13: 00007ffcee069c9f R14: 00007fb8b889e300 R15: 0000000000022000 [ 2957.494416][T15619] 09:12:50 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x163441) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (fail_nth: 2) 09:12:50 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x10006000) 09:12:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x300}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 16) 09:12:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0xb}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 3: socketpair(0x0, 0x80807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_FLOW={0x6}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xf1fa7b8a90eb5cd5) (async) connect$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 09:12:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0xc}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x3fe}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 17) 09:12:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0xd}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x10000000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90002008}) 09:12:50 executing program 3: socketpair(0x0, 0x80807, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0x4) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_FLOW={0x6}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xf1fa7b8a90eb5cd5) connect$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) [ 2957.621141][T15673] FAULT_INJECTION: forcing a failure. [ 2957.621141][T15673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2957.634282][T15673] CPU: 1 PID: 15673 Comm: syz-executor.0 Not tainted 5.19.0-rc8-syzkaller-00168-g334c0ef6429f-dirty #0 [ 2957.645388][T15673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2957.655485][T15673] Call Trace: [ 2957.658768][T15673] [ 2957.661702][T15673] dump_stack_lvl+0xd6/0x122 [ 2957.666306][T15673] dump_stack+0x11/0x12 09:12:50 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x163441) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (fail_nth: 3) 09:12:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x500}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0xe}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x600}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x10}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x700}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x11}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2957.670469][T15673] should_fail+0x242/0x250 [ 2957.674945][T15673] should_fail_usercopy+0x16/0x20 [ 2957.679976][T15673] _copy_to_user+0x1a/0x90 [ 2957.684468][T15673] bpf_verifier_vlog+0x137/0x230 [ 2957.689416][T15673] verbose+0x140/0x170 [ 2957.693487][T15673] ? kmem_cache_alloc_node_trace+0x1fc/0x300 [ 2957.699570][T15673] ? find_subprog+0xa0/0xa0 [ 2957.704075][T15673] bpf_check+0x1666/0x8da0 [ 2957.708516][T15673] ? pcpu_alloc_area+0x440/0x500 [ 2957.713491][T15673] ? should_fail+0xd5/0x250 09:12:50 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x10000000) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90002008}) [ 2957.718044][T15673] ? preempt_count_add+0x5e/0xa0 [ 2957.723047][T15673] ? _raw_spin_unlock+0x2d/0x50 [ 2957.727991][T15673] ? find_vmap_area+0xd2/0xe0 [ 2957.732675][T15673] ? check_heap_object+0x65/0x3b0 [ 2957.737726][T15673] ? should_fail+0xd5/0x250 [ 2957.742234][T15673] ? ktime_get_with_offset+0x1bb/0x1f0 [ 2957.747744][T15673] ? bpf_obj_name_cpy+0xe5/0x130 [ 2957.752772][T15673] bpf_prog_load+0xd0f/0xeb0 [ 2957.757431][T15673] __sys_bpf+0x35d/0x630 [ 2957.761737][T15673] __x64_sys_bpf+0x3f/0x50 [ 2957.766173][T15673] do_syscall_64+0x2b/0x70 [ 2957.770614][T15673] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2957.776537][T15673] RIP: 0033:0x7f22073bb209 [ 2957.780958][T15673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2957.800579][T15673] RSP: 002b:00007f2206b31168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2957.809098][T15673] RAX: ffffffffffffffda RBX: 00007f22074cdf60 RCX: 00007f22073bb209 09:12:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x900}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x10000000) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90002008}) 09:12:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x12}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x163441) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (fail_nth: 4) 09:12:50 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x17, r0, 0x1, 0x8, 0x6, @random="e8b4b676be92"}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000100c30000000000000900000016859a4b3c20bd7bfeb7fb33f2efa8be9447141589833f8e886abf12ef0990d7a206eb31fd3f"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000dbdf2580141080ff04fe110010005186a530d2a84349000000000000", @ANYRES32=0xee01, @ANYBLOB="080005000000000008000300", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) connect$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0xffffffd3) 09:12:50 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 18) 09:12:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x25}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2957.817072][T15673] RDX: 0000000000000080 RSI: 00000000200007c0 RDI: 0000000000000005 [ 2957.825157][T15673] RBP: 00007f2206b311d0 R08: 0000000000000000 R09: 0000000000000000 [ 2957.833183][T15673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2957.841159][T15673] R13: 00007ffe09fd022f R14: 00007f2206b31300 R15: 0000000000022000 [ 2957.849134][T15673] 09:12:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0xa00}, @alu, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x10000000) io_uring_setup(0x5431, &(0x7f0000000140)={0x0, 0x5265, 0x1, 0x0, 0x21d, 0x0, r0}) 09:12:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x48}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x10000000) io_uring_setup(0x5431, &(0x7f0000000140)={0x0, 0x5265, 0x1, 0x0, 0x21d, 0x0, r0}) [ 2957.875083][T15708] FAULT_INJECTION: forcing a failure. [ 2957.875083][T15708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2957.888314][T15708] CPU: 1 PID: 15708 Comm: syz-executor.0 Not tainted 5.19.0-rc8-syzkaller-00168-g334c0ef6429f-dirty #0 [ 2957.899417][T15708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2957.909472][T15708] Call Trace: [ 2957.912775][T15708] [ 2957.915705][T15708] dump_stack_lvl+0xd6/0x122 [ 2957.920300][T15708] dump_stack+0x11/0x12 09:12:50 executing program 1: r0 = syz_io_uring_setup(0x79e, &(0x7f0000000040), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x10000000) io_uring_setup(0x5431, &(0x7f0000000140)={0x0, 0x5265, 0x1, 0x0, 0x21d, 0x0, r0}) [ 2957.924488][T15708] should_fail+0x242/0x250 [ 2957.929014][T15708] should_fail_usercopy+0x16/0x20 [ 2957.934122][T15708] _copy_to_user+0x1a/0x90 [ 2957.938554][T15708] bpf_verifier_vlog+0x137/0x230 [ 2957.943497][T15708] verbose+0x140/0x170 [ 2957.947638][T15708] ? kmem_cache_alloc_node_trace+0x1fc/0x300 [ 2957.953630][T15708] ? bpf_check+0x3985/0x8da0 [ 2957.958229][T15708] bpf_check+0x39bd/0x8da0 [ 2957.962657][T15708] ? pcpu_alloc_area+0x440/0x500 [ 2957.967639][T15708] ? should_fail+0xd5/0x250 [ 2957.972143][T15708] ? preempt_count_add+0x5e/0xa0 [ 2957.977154][T15708] ? _raw_spin_unlock+0x2d/0x50 [ 2957.982008][T15708] ? find_vmap_area+0xd2/0xe0 [ 2957.986792][T15708] ? check_heap_object+0x65/0x3b0 [ 2957.991831][T15708] ? should_fail+0xd5/0x250 [ 2957.996314][T15724] selinux_netlink_send: 15 callbacks suppressed [ 2957.996345][T15724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=15724 comm=syz-executor.3 [ 2958.002587][T15708] ? ktime_get_with_offset+0x1bb/0x1f0 [ 2958.021175][T15708] ? bpf_obj_name_cpy+0xe5/0x130 [ 2958.026126][T15708] bpf_prog_load+0xd0f/0xeb0 [ 2958.030811][T15708] __sys_bpf+0x35d/0x630 [ 2958.035078][T15708] __x64_sys_bpf+0x3f/0x50 [ 2958.039548][T15708] do_syscall_64+0x2b/0x70 [ 2958.043999][T15708] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2958.049903][T15708] RIP: 0033:0x7f22073bb209 [ 2958.054363][T15708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 09:12:50 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x6}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (fail_nth: 19) 09:12:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x2, &(0x7f0000000240)=@raw=[@jmp, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x4c}, @exit, @call, @alu, @cb_func], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000400)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:12:50 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x8200) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000040)=0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000004, 0x4010, 0xffffffffffffffff, 0x10000000) 09:12:50 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff9, 0x163441) write$rfkill(r0, &(0x7f0000000080), 0x7ffff000) (fail_nth: 5) 09:12:50 executing program 5: bpf$BPF_PROG