Warning: Permanently added '[localhost]:9779' (ECDSA) to the list of known hosts.
2025/01/23 01:35:33 fuzzer started
2025/01/23 01:35:34 dialing manager at localhost:38529
syzkaller login: [   68.868830] cgroup: Unknown subsys name 'net'
[   68.963861] cgroup: Unknown subsys name 'cpuset'
[   68.996510] cgroup: Unknown subsys name 'rlimit'
[   75.149898] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/23 01:35:51 syscalls: 205
2025/01/23 01:35:51 code coverage: enabled
2025/01/23 01:35:51 comparison tracing: enabled
2025/01/23 01:35:51 extra coverage: enabled
2025/01/23 01:35:51 setuid sandbox: enabled
2025/01/23 01:35:51 namespace sandbox: enabled
2025/01/23 01:35:51 Android sandbox: enabled
2025/01/23 01:35:51 fault injection: enabled
2025/01/23 01:35:51 leak checking: enabled
2025/01/23 01:35:51 net packet injection: enabled
2025/01/23 01:35:51 net device setup: enabled
2025/01/23 01:35:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/23 01:35:51 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/23 01:35:51 USB emulation: enabled
2025/01/23 01:35:51 hci packet injection: enabled
2025/01/23 01:35:51 wifi device emulation: enabled
2025/01/23 01:35:51 802.15.4 emulation: enabled
2025/01/23 01:35:51 fetching corpus: 0, signal 0/0 (executing program)
2025/01/23 01:35:54 starting 8 fuzzer processes
01:35:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20040880)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}]}, 0x1c}}, 0x4000010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x80)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x344, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf35d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf0f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2c3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x4008805}, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1d8, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc25b963}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcb}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffff800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x93}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6bd8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf09}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5d78}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @local, 0x3}}}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000840}, 0x44080)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000a40), 0xc, &(0x7f0000000d80)={&(0x7f0000000a80)={0x2e0, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x134, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32325f61}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf0e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b87}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c1c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cd93345}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x615f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf7ed928}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x841a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54213d97}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73e789ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7eb9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7920}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5de2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a10f20b}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cb658e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x339d7c86}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc8e67a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d49}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f16f4bc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeaaf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9554}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd2a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7599c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24cb1715}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfce2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6333f1d8}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x758c176d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8586}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2387}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76aa9ca7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x620244e8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d350f1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfea2}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53ea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f579401}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x130, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42e6a325}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cbfa5f0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x621fcd88}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x514cafda}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68002876}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x98d805d}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ee3ab5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d9c9781}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5270ab2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75e29dec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x171d67ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x524b9331}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x448774c1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45f705eb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2983d1dd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b9fed25}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23b86475}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x40804}, 0x40000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r0)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000001040)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e80)={0x168, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x606}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x50f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2a1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbb4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x5}}}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x1}, 0x8802)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), r2)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x38, r5, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socketpair(0x2c, 0xa, 0x1, &(0x7f00000011c0)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001240), r2)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x78d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001380), r2)
sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x3c, r9, 0x200, 0x70bd2b, 0x8, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x42}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040000)

01:35:54 executing program 1:
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000))
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x88801, 0x0)
ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x381080, 0xe8)
write$snapshot(r1, &(0x7f00000000c0)="ec4c4409ca4e457c18005ccdbd16715e8fb332cc9071e80177d9c86b", 0x1c)
ioctl$SNAPSHOT_S2RAM(r1, 0x330b)
r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x20000, 0x1)
unlinkat(r2, &(0x7f0000000140)='./file0\x00', 0x0)
ioctl$SNAPSHOT_S2RAM(r0, 0x330b)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000180))
open$dir(&(0x7f00000001c0)='./file0\x00', 0x101000, 0x40)
r3 = openat$incfs(r2, &(0x7f0000000200)='.log\x00', 0x4040, 0x30)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r4, 0x401, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x5, &(0x7f00000003c0)=[{0x2, 0x1, 0xfb, 0x8}, {0x8, 0x5, 0x9a, 0xe30e}, {0x9f0, 0xc1, 0x80, 0x400}, {0x6, 0x6, 0x81, 0x6}, {0x8, 0x7f, 0x40, 0x11}]})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000440)={0x0, 0x0, r6, 0xff, 0x80000})
sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)={0x2dc, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x578}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x80000000, @mcast1, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @empty, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe5b3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffe1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x849000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @mcast1, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x800}, 0x4048094)
timer_settime(0x0, 0x0, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0)

01:35:54 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000040))
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xa57)
ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000080)={0x6, 0x5})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x141000, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000100))
socketpair(0xed064711d85fa568, 0x800, 0x7, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
r4 = openat$incfs(r0, &(0x7f0000000280)='.log\x00', 0x200, 0x3)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd8, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800100}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x11}, 0x8000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'})
ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000004c0))
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/timers\x00', 0x0, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000580)={0x34c, 0x0, 0x208, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2b}, @TIPC_NLA_NODE_ID={0x6f, 0x3, "bee459b510f578cbc5409d80699e60c8258ce760d08e804b38e39402b110a98715f55f580d6ea20cdca69177bf8a377316a00ee029988bb7a3813044ddd16b432f56f5c23575d059aea6bb0748ba15a4bf24167aa073a4866413104089ff5f68cdab871936a14da6659964"}, @TIPC_NLA_NODE_ID={0x22, 0x3, "6993ad4459e8a98c86d558fff89661ddd28fc79c6d9c4aa0885046427dd0"}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xde1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffeffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5b82}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe76}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}]}]}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "43eb6a15dcfca98eb2a6819a10b5738f7b8411b57251eccab9fdb46c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "c0bcb5f089b8957d18412d0ac9127e81c0fe23fe7369aef23a211061"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd12f}, @TIPC_NLA_NODE_ID={0x92, 0x3, "c7d995a054b31ed90036231e0c77440746141ae309f9f96ee5f4b7f8cebbe2286135aa1941bcab5911039cdb1b5cbe15996060c07e3ef730ff6f01d7a50e8957d7ee80ff0d977268c1b7a8b22255489c7fa5ef073c4dd846ca3d9d39adb5635999de02e4e5b121b6e5a393d4dbf1601c1bff31f8ca75f6363cfb4de7013ba0bdb99a93d582fc8a9449c6f14c4582"}, @TIPC_NLA_NODE_ID={0x34, 0x3, "9bd73e027d23f06bd450614da3aac3229b6781a36fd207775aa19f7ca99c2dcd56f1c3e2e14c333a69e30a5f4026cdd2"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfff, @loopback, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x34c}}, 0x2000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001b00)={0x6c, 0x0, &(0x7f0000001a40)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001980)={@flat=@binder={0x73622a85, 0x1001, 0x3}, @flat=@weak_handle={0x77682a85, 0x1001}, @ptr={0x70742a85, 0x1, &(0x7f0000000980)=""/4096, 0x1000, 0x1, 0x14}}, &(0x7f0000001a00)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x3}, @clear_death={0x400c630f, 0x1}], 0x4, 0x0, &(0x7f0000001ac0)="0da6e764"})
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000001b40))
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r5, 0x80083314, &(0x7f0000001b80))

01:35:54 executing program 3:
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x80000, 0x110)
mq_notify(r0, &(0x7f00000001c0)={0x0, 0x31, 0x4, @thr={&(0x7f0000000040)="54e2afc27f210b28baa169308da9aea892dce78155d9be3f4e07aefe4484585ef6b51b738558a1655a05e9cf5ae91975c50c6be6bbd6ea26d6a4fa8774c9c34c6d343b31875c6628a4b80064a8249d4d06ab974d374b8dc8d65b9503caf3ea45f9b9d0d8f5258d768f1dbd6df6d24d460e6adfb89f0755b9bc7bea17942c8786f247e5a684e52a0a41fd83de8a09792fc3270de6bf65ff7856f8019f831419", &(0x7f0000000100)="ebad422585892d0f0f622d1ca4a9bcea53a047507b3099087440bb2f98c842783c9518a6277474c2f9622a7c59a7f2531b79d17f21212b4cc9e449c92d81dacf83a2edd1c2cea61d7c172c3227fdc6b9ee6850dd06ce639ea079cd5b8230104afad049fd0124a671e71c5584f6e1f48cad3a5a8a11a1fcdec0ecfc2ddb68aa49ba2539f9a95c60b62bb92229364e7db2cdf111bb71d1d3b49aa2d422c24e163c32694a5156949bd7358734c23ca6403d0e"}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket(0x12, 0x1, 0xaf2)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1fc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x13e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x70}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc8d7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18e0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3e07}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x94}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x616a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2d0f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8d4cb19}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa8}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xabb}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x148b44f0}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @private2, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x80}, 0xc88d)
mq_open(&(0x7f0000000500)='+&{^\xd9-]\\-$@%\x00', 0x1, 0x0, &(0x7f0000000540)={0x9d, 0x8, 0xffff, 0x7})
r3 = mq_open(&(0x7f0000000580)='\x00', 0x800, 0x110, &(0x7f00000005c0)={0xfff, 0x5, 0x2d})
mq_getsetattr(r3, &(0x7f0000000600)={0xf2b, 0x20, 0x10000, 0x7}, &(0x7f0000000640))
mq_notify(r0, &(0x7f0000000840)={0x0, 0x1e, 0x2, @thr={&(0x7f0000000680)="988c274b5fdcc11e8923712f58ce4de6b92ef32281a4a0c4bac8cf64c653e630cb9c2cac7decb37b1ced9a57e8a8a31e1c8724c37be78554ba3a0a18d65cdbf0e404e1ea8b3cc028b962677e50173fa80d4614835b03476b6ed6341d690e22dd32c908ccba1d33018906b6e540fde1a97a26b3a451e67cf864aaf7b218243c86b7f1fab3fe52d54f6049bcdc65a71f6f08c0654583208986785fbf9ae4d7cb14fe79989ad7a25ad12b1dd6c2a997e93f9765aa7f4cc17e08212705601c08f70e0931a2c595a8e1becccd22e99347f30f02f8", &(0x7f0000000780)="b34387748ffb19ae04b732290dda203101f0cc4371c3243d2a65c6ce146bb6630f4e091b39c630f28e6fb79a019297c8aa22496c111eb41f3a0d9969df141c833e7e0e5faec1c3b67d2c17c1f9c91997c5988d578a57cf41c60d0e9acee54387105d8e35a71f094ff4d6ae1c80d1a90115e22e5dbe6cda4495c3fa5fef36060cabc7cbd090a4e76489ae771f786f18d8d63efa6c8fa6431ceb070db9452dc13b945417a15da62be08c3177f1f25cbafb6e1da6527d0eb6"}})
prctl$PR_GET_SECCOMP(0x15)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/asound/seq/clients\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f00000008c0))
r5 = socket(0x29, 0x80000, 0x200)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'ip_vti0\x00', <r6=>0x0, 0x8, 0x700, 0x7, 0x6, {{0x16, 0x4, 0x1, 0x3, 0x58, 0x68, 0x0, 0x0, 0x2b, 0x0, @empty, @multicast2, {[@rr={0x7, 0x7, 0xc, [@multicast2]}, @end, @timestamp_addr={0x44, 0x3c, 0xc5, 0x1, 0xf, [{@empty, 0x7}, {@local, 0x1}, {@broadcast, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x6bf}, {@rand_addr=0x64010102, 0x8}, {@multicast2, 0xfffffffb}, {@local, 0x1}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'syztnl1\x00', r6, 0x29, 0x5, 0x81, 0x6, 0x40, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x7, 0x3}})
mount_setattr(r0, &(0x7f0000000a80)='\x00', 0x400, &(0x7f0000000ac0)={0xc6, 0xf0, 0x0, {r4}}, 0x20)
mq_open(&(0x7f0000000b00)='@\xed(]#-#\xfb+\x00', 0x2, 0x19, &(0x7f0000000b40)={0x8, 0x0, 0x4, 0x80})
r7 = openat$incfs(r1, &(0x7f0000001040)='.pending_reads\x00', 0xc200, 0x80)
ioctl$sock_inet_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000001080))

[   89.000078] audit: type=1400 audit(1737596154.339:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
01:35:54 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000000)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c044}, 0x8000)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan4\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8005}, 0x4)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x404009c}, 0x20004004)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan3\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040800}, 0x4880)
sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r1, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40811}, 0x84)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x20, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x4088040)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000bc0)={&(0x7f0000000b00), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c40)={'wpan3\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x60, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8880}, 0x44085)
sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)

01:35:54 executing program 5:
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2={0x1f, 0x7, @any, 0x3}, @can={0x1d, <r0=>0x0}, @ethernet={0x1, @local}, 0x361, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='ip_vti0\x00', 0x3ff, 0xffff, 0x5})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x804)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'sit0\x00', r0, 0x4, 0x1f, 0x1, 0x8, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x80, 0x40, 0x100}})
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x108, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040044}, 0x20004000)
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0)
ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000580))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv0\x00', <r2=>0x0})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'syztnl0\x00', <r4=>r2, 0x4, 0x52, 0x1, 0x80, 0x1, @empty, @mcast2, 0x20, 0x7800, 0x7, 0x80000001}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b40)={'syztnl1\x00', r4, 0x8000, 0x8, 0x8, 0x67ed005c, {{0xa, 0x4, 0x1, 0x16, 0x28, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0xc, 0xe0, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x1f}]}, @lsrr={0x83, 0x7, 0x67, [@private=0xa010102]}]}}}}})
ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000c00))
socketpair(0x1a, 0xa, 0x7, &(0x7f0000000c40)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000c80)=0x2, 0x4)
ioctl$SNAPSHOT_S2RAM(r3, 0x330b)
sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x74, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x5)
exit_group(0x6e)
r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000e40), r6)
sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x48, r7, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1014}, 0x20000014)

01:35:54 executing program 6:
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c890}, 0x4010)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe0, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xce}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x20004840)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa8, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x589}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x50)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}}, 0x0)
r4 = socket(0x21, 0x6, 0x5)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4010)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x108, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x68, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4af9}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4bf3eda4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cbb0bc9}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a3f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5eea8057}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x18c2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b3b3ac0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79126703}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d3089cf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56af3cd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x650e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45249fc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ead4e40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fe2fab6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6983fde5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76a4da62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d6917c6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64479295}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000810}, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, r0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xeea}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x995f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x10)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ebd}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x40)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x10000)
socketpair(0x28, 0x800, 0x1, &(0x7f0000000e40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000001100)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x1cc, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe2dc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xec9f, @local, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1ff, @loopback, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1eb}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfd}, @TIPC_NLA_NET_ID={0x8}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x18a0088}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x60, r0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffc00}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x60}}, 0x8000)

01:35:54 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x840)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4014)
timer_delete(0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x60094}, 0x40010)
getpriority(0x1, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xe485502fe257de8b}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4080)
timer_create(0x3, &(0x7f0000000500)={0x0, 0xe, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000540)=<r3=>0x0)
timer_delete(r3)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x805)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000a40)={&(0x7f00000006c0), 0xc, &(0x7f0000000a00)={&(0x7f0000000700)={0x2f8, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x160, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30f7da81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63cf0bdd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c0c837b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bfcf8a2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4376aa85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e9ae82d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ac9176d}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x112e2299}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x165e0798}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a06ea42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc37fe1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x487318b9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20d408be}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x82914b7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc064aaf}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d074315}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77e9c498}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c3945f3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c5da235}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a9a580f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xdc, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b29a513}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b42b5f5}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55af74a8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x165b4010}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fdcab4e}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x752783e4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57e8e249}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b8656b5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e20f258}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x191911ba}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x74, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65f3b248}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33730280}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d6472ed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f3bb3db}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27679368}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2af11a85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d7ef34}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}]}, 0x2f8}}, 0x4)
r5 = socket(0x23, 0x802, 0x1)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c00)={'wpan3\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000004)

[   90.529135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   90.530926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   90.532646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   90.538816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   90.541787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   90.543137] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   90.653043] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   90.661965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   90.664258] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   90.674441] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   90.677432] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   90.681933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   90.729185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.746049] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.766994] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.787315] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.795274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   90.811780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   90.813039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.823453] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   90.837443] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   90.855041] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   90.861098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.862702] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   90.863505] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   90.866622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   90.868067] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   90.869035] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   90.875866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   90.876391] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   90.882010] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   90.888974] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.904368] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   90.932738] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   90.956047] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   90.958206] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   90.995797] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   91.021052] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   91.028225] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   91.045011] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   91.060037] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   91.078134] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   91.078900] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   91.085202] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   91.091011] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   91.128010] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   91.146935] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   91.152079] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   92.613364] Bluetooth: hci0: command tx timeout
[   92.743583] Bluetooth: hci1: command tx timeout
[   92.867661] Bluetooth: hci2: command tx timeout
[   92.934732] Bluetooth: hci4: command tx timeout
[   92.995668] Bluetooth: hci3: command tx timeout
[   93.060622] Bluetooth: hci5: command tx timeout
[   93.187842] Bluetooth: hci6: command tx timeout
[   93.251616] Bluetooth: hci7: command tx timeout
[   94.659805] Bluetooth: hci0: command tx timeout
[   94.788645] Bluetooth: hci1: command tx timeout
[   94.915775] Bluetooth: hci2: command tx timeout
[   94.979629] Bluetooth: hci4: command tx timeout
[   95.044758] Bluetooth: hci3: command tx timeout
[   95.108789] Bluetooth: hci5: command tx timeout
[   95.236612] Bluetooth: hci6: command tx timeout
[   95.301691] Bluetooth: hci7: command tx timeout
[   96.708713] Bluetooth: hci0: command tx timeout
[   96.836620] Bluetooth: hci1: command tx timeout
[   96.964626] Bluetooth: hci2: command tx timeout
[   97.029584] Bluetooth: hci4: command tx timeout
[   97.092121] Bluetooth: hci3: command tx timeout
[   97.156740] Bluetooth: hci5: command tx timeout
[   97.284791] Bluetooth: hci6: command tx timeout
[   97.350609] Bluetooth: hci7: command tx timeout
[   98.755881] Bluetooth: hci0: command tx timeout
[   98.883596] Bluetooth: hci1: command tx timeout
[   99.012608] Bluetooth: hci2: command tx timeout
[   99.076619] Bluetooth: hci4: command tx timeout
[   99.139629] Bluetooth: hci3: command tx timeout
[   99.205637] Bluetooth: hci5: command tx timeout
[   99.331643] Bluetooth: hci6: command tx timeout
[   99.396593] Bluetooth: hci7: command tx timeout
[  152.875413] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  152.877177] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  152.879225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  152.883278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  152.886733] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  152.888929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  152.970221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  152.971831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  152.973082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  152.977803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  152.979498] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  152.980569] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  153.046222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  153.055172] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  153.070913] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  153.083816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  153.103943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  153.107430] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  153.108628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  153.112661] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  153.114830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  153.116016] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  153.129758] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  153.133491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  153.138040] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  153.170790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  153.172012] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  153.178310] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  153.181334] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  153.184782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  153.190758] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  153.193759] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  153.199832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  153.242678] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  153.267139] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  153.269988] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  153.270343] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  153.273674] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  153.275890] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  153.279625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  153.308795] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  153.317677] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  153.406430] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  153.466916] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  153.471008] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  153.493023] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  153.508458] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  153.517927] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  154.947691] Bluetooth: hci0: command tx timeout
[  155.011681] Bluetooth: hci1: command tx timeout
[  155.139713] Bluetooth: hci3: command tx timeout
[  155.203662] Bluetooth: hci2: command tx timeout
[  155.268847] Bluetooth: hci4: command tx timeout
[  155.331690] Bluetooth: hci5: command tx timeout
[  155.395947] Bluetooth: hci6: command tx timeout
[  155.587722] Bluetooth: hci7: command tx timeout
[  156.996814] Bluetooth: hci0: command tx timeout
[  157.060662] Bluetooth: hci1: command tx timeout
[  157.190686] Bluetooth: hci3: command tx timeout
[  157.253584] Bluetooth: hci2: command tx timeout
[  157.316621] Bluetooth: hci4: command tx timeout
[  157.380692] Bluetooth: hci5: command tx timeout
[  157.444608] Bluetooth: hci6: command tx timeout
[  157.636626] Bluetooth: hci7: command tx timeout
[  159.044600] Bluetooth: hci0: command tx timeout
[  159.108589] Bluetooth: hci1: command tx timeout
[  159.237620] Bluetooth: hci3: command tx timeout
[  159.300634] Bluetooth: hci2: command tx timeout
[  159.364757] Bluetooth: hci4: command tx timeout
[  159.429524] Bluetooth: hci5: command tx timeout
[  159.492883] Bluetooth: hci6: command tx timeout
[  159.684705] Bluetooth: hci7: command tx timeout
[  161.092624] Bluetooth: hci0: command tx timeout
[  161.158731] Bluetooth: hci1: command tx timeout
[  161.284623] Bluetooth: hci3: command tx timeout
[  161.348610] Bluetooth: hci2: command tx timeout
[  161.412801] Bluetooth: hci4: command tx timeout
[  161.477620] Bluetooth: hci5: command tx timeout
[  161.540775] Bluetooth: hci6: command tx timeout
[  161.734561] Bluetooth: hci7: command tx timeout
[  214.754986] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  214.755867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  214.756352] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  214.767619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  214.768709] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  214.772763] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  214.796435] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  214.799004] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  214.800997] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  214.806465] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  214.809037] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  214.811035] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  215.003826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  215.011893] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  215.012652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  215.022642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  215.025193] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  215.027935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  215.064220] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  215.084017] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  215.095075] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  215.104707] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  215.105070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  215.114722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  215.133911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  215.147369] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  215.152015] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  215.153621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  215.168893] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  215.171038] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  215.177311] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  215.187215] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  215.187208] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  215.189283] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  215.198003] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  215.206807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  215.207103] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  215.213129] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  215.213453] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  215.213834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  215.248650] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  215.249147] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  215.257456] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  215.258036] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  215.267006] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  215.269758] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  215.270038] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  215.277099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  216.835850] Bluetooth: hci1: command tx timeout
[  216.836344] Bluetooth: hci0: command tx timeout
[  217.091713] Bluetooth: hci2: command tx timeout
[  217.284589] Bluetooth: hci7: command tx timeout
[  217.284902] Bluetooth: hci4: command tx timeout
[  217.285089] Bluetooth: hci3: command tx timeout
[  217.347699] Bluetooth: hci5: command tx timeout
[  217.348152] Bluetooth: hci6: command tx timeout
[  218.883637] Bluetooth: hci0: command tx timeout
[  218.883729] Bluetooth: hci1: command tx timeout
[  219.139698] Bluetooth: hci2: command tx timeout
[  219.331670] Bluetooth: hci3: command tx timeout
[  219.331768] Bluetooth: hci4: command tx timeout
[  219.331856] Bluetooth: hci7: command tx timeout
[  219.396593] Bluetooth: hci6: command tx timeout
[  219.396675] Bluetooth: hci5: command tx timeout
[  220.932594] Bluetooth: hci1: command tx timeout
[  220.932706] Bluetooth: hci0: command tx timeout
[  221.187606] Bluetooth: hci2: command tx timeout
[  221.379887] Bluetooth: hci7: command tx timeout
[  221.381076] Bluetooth: hci4: command tx timeout
[  221.381105] Bluetooth: hci3: command tx timeout
[  221.444626] Bluetooth: hci5: command tx timeout
[  221.444729] Bluetooth: hci6: command tx timeout
[  222.979702] Bluetooth: hci0: command tx timeout
[  222.979810] Bluetooth: hci1: command tx timeout
[  223.235598] Bluetooth: hci2: command tx timeout
[  223.427687] Bluetooth: hci7: command tx timeout
[  223.427779] Bluetooth: hci4: command tx timeout
[  223.428929] Bluetooth: hci3: command tx timeout
[  223.491585] Bluetooth: hci5: command tx timeout
[  223.491663] Bluetooth: hci6: command tx timeout
[  277.659921] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  277.662148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  277.663149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  277.664108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  277.667077] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  277.668625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  277.673589] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  277.677468] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  277.684011] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  277.685342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  277.689258] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  277.691473] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  277.776034] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  277.778466] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  277.779332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  277.784225] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  277.786432] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  277.788268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  277.866924] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  277.870467] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  277.873304] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  277.874926] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  277.882810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  277.883367] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  277.889287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  277.891355] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  277.893414] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  277.895704] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  277.914648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  277.925803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  277.934954] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  277.937862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  277.947831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  277.954325] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  277.962852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  277.977148] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  277.980453] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  277.992809] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  277.993811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  278.006849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  278.011828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  278.013834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  278.031766] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  278.033136] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  278.033698] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  278.048072] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  278.058605] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  278.061808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  279.747789] Bluetooth: hci0: command tx timeout
[  279.748088] Bluetooth: hci1: command tx timeout
[  279.876638] Bluetooth: hci2: command tx timeout
[  279.939591] Bluetooth: hci5: command tx timeout
[  280.003558] Bluetooth: hci4: command tx timeout
[  280.069207] Bluetooth: hci3: command tx timeout
[  280.132855] Bluetooth: hci6: command tx timeout
[  280.133039] Bluetooth: hci7: command tx timeout
[  281.795663] Bluetooth: hci1: command tx timeout
[  281.795859] Bluetooth: hci0: command tx timeout
[  281.925535] Bluetooth: hci2: command tx timeout
[  281.988603] Bluetooth: hci5: command tx timeout
[  282.052594] Bluetooth: hci4: command tx timeout
[  282.117055] Bluetooth: hci3: command tx timeout
[  282.179818] Bluetooth: hci7: command tx timeout
[  282.179912] Bluetooth: hci6: command tx timeout
[  283.843592] Bluetooth: hci0: command tx timeout
[  283.843686] Bluetooth: hci1: command tx timeout
[  283.972577] Bluetooth: hci2: command tx timeout
[  284.036553] Bluetooth: hci5: command tx timeout
[  284.100719] Bluetooth: hci4: command tx timeout
[  284.164662] Bluetooth: hci3: command tx timeout
[  284.228715] Bluetooth: hci6: command tx timeout
[  284.228794] Bluetooth: hci7: command tx timeout
[  285.892629] Bluetooth: hci1: command tx timeout
[  285.892721] Bluetooth: hci0: command tx timeout
[  286.019559] Bluetooth: hci2: command tx timeout
[  286.083658] Bluetooth: hci5: command tx timeout
[  286.149373] Bluetooth: hci4: command tx timeout
[  286.212545] Bluetooth: hci3: command tx timeout
[  286.275611] Bluetooth: hci7: command tx timeout
[  286.275704] Bluetooth: hci6: command tx timeout
[  335.243715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.243842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.511390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.511742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.097867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.097950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.471560] 
[  336.471824] ======================================================
[  336.472419] WARNING: possible circular locking dependency detected
[  336.473030] 6.13.0-next-20250122 #1 Not tainted
[  336.473487] ------------------------------------------------------
[  336.474444] kworker/u8:1/66 is trying to acquire lock:
[  336.475609] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[  336.476622] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht'
[  336.478150] 
[  336.478150] but task is already holding lock:
[  336.479030] ffff888023c80768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  336.480521] 
[  336.480521] which lock already depends on the new lock.
[  336.480521] 
[  336.482027] 
[  336.482027] the existing dependency chain (in reverse order) is:
[  336.483184] 
[  336.483184] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  336.484249]        __mutex_lock+0x13d/0xb50
[  336.484926]        wiphy_register+0x1b2e/0x25d0
[  336.485737]        ieee80211_register_hw+0x23a4/0x3d60
[  336.486862]        mac80211_hwsim_new_radio+0x2759/0x4d60
[  336.487434]        init_mac80211_hwsim+0x389/0x870
[  336.487955]        do_one_initcall+0xf9/0x640
[  336.488433]        kernel_init_freeable+0x53d/0x7a0
[  336.488958]        kernel_init+0x1e/0x2d0
[  336.489382]        ret_from_fork+0x48/0x80
[  336.489820]        ret_from_fork_asm+0x1a/0x30
[  336.490310] 
[  336.490310] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  336.490929]        __lock_acquire+0x29fd/0x4580
[  336.491414]        lock_acquire+0x19b/0x520
[  336.491865]        __mutex_lock+0x13d/0xb50
[  336.492324]        unregister_netdevice_many_notify+0x1612/0x1c80
[  336.492954]        unregister_netdevice_queue+0x224/0x2e0
[  336.493510]        _cfg80211_unregister_wdev+0x57b/0x700
[  336.494076]        ieee80211_remove_interfaces+0x2f2/0x6b0
[  336.494633]        ieee80211_unregister_hw+0x55/0x3a0
[  336.495148]        hwsim_exit_net+0x3a0/0x730
[  336.495620]        ops_exit_list+0xb3/0x180
[  336.496065]        cleanup_net+0x546/0xad0
[  336.496507]        process_one_work+0x8ee/0x1a10
[  336.497020]        worker_thread+0x674/0xe70
[  336.497491]        kthread+0x3ab/0x720
[  336.497922]        ret_from_fork+0x48/0x80
[  336.498351]        ret_from_fork_asm+0x1a/0x30
[  336.498835] 
[  336.498835] other info that might help us debug this:
[  336.498835] 
[  336.499582]  Possible unsafe locking scenario:
[  336.499582] 
[  336.500148]        CPU0                    CPU1
[  336.500607]        ----                    ----
[  336.501061]   lock(&rdev->wiphy.mtx);
[  336.501460]                                lock(rtnl_mutex);
[  336.502054]                                lock(&rdev->wiphy.mtx);
[  336.502679]   lock(rtnl_mutex);
[  336.503040] 
[  336.503040]  *** DEADLOCK ***
[  336.503040] 
[  336.503608] 4 locks held by kworker/u8:1/66:
[  336.504046]  #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[  336.505057]  #1: ffff88800ed17d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[  336.506045]  #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[  336.506962]  #3: ffff888023c80768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  336.507991] 
[  336.507991] stack backtrace:
[  336.508425] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250122 #1
[  336.509201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  336.509991] Workqueue: netns cleanup_net
[  336.510405] Call Trace:
[  336.510659]  <TASK>
[  336.510886]  dump_stack_lvl+0xca/0x120
[  336.511309]  print_circular_bug+0x47b/0x750
[  336.511747]  check_noncircular+0x2e9/0x3c0
[  336.512178]  ? __pfx_check_noncircular+0x10/0x10
[  336.512652]  ? hlock_class+0x4e/0x130
[  336.513033]  ? mark_lock+0xac/0xed0
[  336.513408]  ? srso_return_thunk+0x5/0x5f
[  336.513852]  ? dl_scaled_delta_exec+0xd4/0x2c0
[  336.514316]  ? lockdep_lock+0xba/0x1b0
[  336.514740]  ? __pfx_lockdep_lock+0x10/0x10
[  336.515200]  __lock_acquire+0x29fd/0x4580
[  336.515628]  ? __pfx___lock_acquire+0x10/0x10
[  336.516076]  ? lock_release+0x20f/0x6f0
[  336.516482]  ? __pfx_lock_release+0x10/0x10
[  336.516923]  lock_acquire+0x19b/0x520
[  336.517311]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  336.517892]  ? __pfx_lock_acquire+0x10/0x10
[  336.518331]  ? srso_return_thunk+0x5/0x5f
[  336.518764]  ? lock_release+0x20f/0x6f0
[  336.519168]  ? srso_return_thunk+0x5/0x5f
[  336.519606]  ? lock_is_held_type+0x9e/0x120
[  336.520055]  ? srso_return_thunk+0x5/0x5f
[  336.520492]  __mutex_lock+0x13d/0xb50
[  336.520897]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  336.521477]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  336.522070]  ? srso_return_thunk+0x5/0x5f
[  336.522506]  ? synchronize_rcu_expedited+0x38a/0x420
[  336.523020]  ? __pfx___mutex_lock+0x10/0x10
[  336.523470]  ? __pfx_autoremove_wake_function+0x10/0x10
[  336.524011]  ? srso_return_thunk+0x5/0x5f
[  336.524448]  ? kasan_quarantine_put+0x84/0x1e0
[  336.524925]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  336.525383]  ? srso_return_thunk+0x5/0x5f
[  336.525825]  unregister_netdevice_many_notify+0x1612/0x1c80
[  336.526387]  ? __virt_addr_valid+0x2e8/0x5d0
[  336.526845]  ? __pfx_lock_release+0x10/0x10
[  336.527289]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  336.527880]  ? find_held_lock+0x2c/0x110
[  336.528313]  ? srso_return_thunk+0x5/0x5f
[  336.528750]  ? kernfs_remove_by_name_ns+0xc7/0x130
[  336.529261]  ? srso_return_thunk+0x5/0x5f
[  336.529702]  ? lock_release+0x20f/0x6f0
[  336.530128]  ? __pfx_lock_release+0x10/0x10
[  336.530564]  ? srso_return_thunk+0x5/0x5f
[  336.531006]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  336.531531]  ? srso_return_thunk+0x5/0x5f
[  336.531969]  unregister_netdevice_queue+0x224/0x2e0
[  336.532473]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  336.533014]  ? up_write+0x195/0x520
[  336.533403]  _cfg80211_unregister_wdev+0x57b/0x700
[  336.533920]  ? srso_return_thunk+0x5/0x5f
[  336.534365]  ieee80211_remove_interfaces+0x2f2/0x6b0
[  336.534866]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  336.535406]  ? srso_return_thunk+0x5/0x5f
[  336.535847]  ? srso_return_thunk+0x5/0x5f
[  336.536291]  ? synchronize_rcu+0x1ff/0x260
[  336.536720]  ieee80211_unregister_hw+0x55/0x3a0
[  336.537197]  hwsim_exit_net+0x3a0/0x730
[  336.537605]  ? __pfx_hwsim_exit_net+0x10/0x10
[  336.538070]  ? srso_return_thunk+0x5/0x5f
[  336.538505]  ? netdev_run_todo+0x788/0x1040
[  336.538944]  ? __pfx_hwsim_exit_net+0x10/0x10
[  336.539403]  ops_exit_list+0xb3/0x180
[  336.539800]  cleanup_net+0x546/0xad0
[  336.540192]  ? __pfx_cleanup_net+0x10/0x10
[  336.540637]  process_one_work+0x8ee/0x1a10
[  336.541098]  ? __pfx_lock_acquire+0x10/0x10
[  336.541536]  ? __pfx_process_one_work+0x10/0x10
[  336.542030]  ? srso_return_thunk+0x5/0x5f
[  336.542464]  ? move_linked_works+0x172/0x270
[  336.542912]  ? srso_return_thunk+0x5/0x5f
[  336.543345]  ? assign_work+0x196/0x240
[  336.543764]  worker_thread+0x674/0xe70
[  336.544178]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  336.544705]  ? srso_return_thunk+0x5/0x5f
[  336.545145]  ? __pfx_worker_thread+0x10/0x10
[  336.545607]  kthread+0x3ab/0x720
[  336.545982]  ? __pfx_kthread+0x10/0x10
[  336.546393]  ? srso_return_thunk+0x5/0x5f
[  336.546830]  ? finish_task_switch.isra.0+0x206/0x840
[  336.547341]  ? __pfx_kthread+0x10/0x10
[  336.547753]  ret_from_fork+0x48/0x80
[  336.548130]  ? __pfx_kthread+0x10/0x10
[  336.548537]  ret_from_fork_asm+0x1a/0x30
[  336.548977]  </TASK>
[  338.772099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  338.776460] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  338.776829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  338.780014] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  338.780974] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  338.781279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  340.803631] Bluetooth: hci0: command tx timeout
[  342.851625] Bluetooth: hci0: command tx timeout
[  344.899842] Bluetooth: hci0: command tx timeout

VM DIAGNOSIS:
01:40:02  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000033 RCX=ffffffff845788f9 RDX=ffff88802e2dd340
RSI=ffffffff84578906 RDI=0000000000000004 RBP=0000000000000001 RSP=ffff8880180c7180
R8 =0000000000000000 R9 =fffffbfff0c80afa R10=0000000000000033 R11=0000000000000003
R12=0000000000000031 R13=0000000000000000 R14=ffff88803100b248 R15=dffffc0000000000
RIP=ffffffff8171a348 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555d6bd400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f519fa4e000 CR3=000000002ec76000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8283e865 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff88800ed16b38
R8 =0000000000000001 R9 =ffffed1001da2d57 R10=0000000000000061 R11=6920202020202020
R12=0000000000000061 R13=0000000000000001 R14=ffff888008fea031 R15=ffff88800ed16e38
RIP=ffffffff8283e8bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fea822ca040 CR3=00000000243de000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff0000000000ff0000000000000000
XMM02=00007fea0000000000007ffc21154c70 XMM03=00007fea8178610034336c6c696b6672
XMM04=202020093a62694c6d560a426b203820 XMM05=00000000000000000000000000000000
XMM06=202020092020202020090a426b203820 XMM07=00000000000000000000000000000000
XMM08=722f6c6c696b66722f6372732f2e2e00 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000