Warning: Permanently added '[localhost]:18804' (ECDSA) to the list of known hosts. 2025/01/23 02:19:52 fuzzer started 2025/01/23 02:19:52 dialing manager at localhost:38529 syzkaller login: [ 67.085956] cgroup: Unknown subsys name 'net' [ 67.185610] cgroup: Unknown subsys name 'cpuset' [ 67.224149] cgroup: Unknown subsys name 'rlimit' [ 71.961535] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 82.201056] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 02:20:08 syscalls: 222 2025/01/23 02:20:08 code coverage: enabled 2025/01/23 02:20:08 comparison tracing: enabled 2025/01/23 02:20:08 extra coverage: enabled 2025/01/23 02:20:08 setuid sandbox: enabled 2025/01/23 02:20:08 namespace sandbox: enabled 2025/01/23 02:20:08 Android sandbox: enabled 2025/01/23 02:20:08 fault injection: enabled 2025/01/23 02:20:08 leak checking: enabled 2025/01/23 02:20:08 net packet injection: enabled 2025/01/23 02:20:08 net device setup: enabled 2025/01/23 02:20:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 02:20:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 02:20:08 USB emulation: enabled 2025/01/23 02:20:08 hci packet injection: enabled 2025/01/23 02:20:08 wifi device emulation: enabled 2025/01/23 02:20:08 802.15.4 emulation: enabled 2025/01/23 02:20:08 fetching corpus: 0, signal 0/0 (executing program) 2025/01/23 02:20:09 starting 8 fuzzer processes 02:20:09 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x1, 0x3, 0x0, 0xfffffff8}, 0x0, 0x4, 0x200}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000000c0)={{0xfffffffffffffff8, 0x1, 0xfffffffb, 0x3, 0x5}, 0x1, 0xfffffffeffffffff, 0x7}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x8000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000180)) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x3c, @broadcast, 0x4e22, 0x2, 'lblcr\x00', 0x20, 0x1651, 0x2a}, {@multicast1, 0x4e21, 0x4, 0x4, 0x4, 0x1}}, 0x44) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000280)={{0xffffffffffffffff, 0x1, 0x1, 0x1, 0xfff}, 0x80000001, 0x885, 'id1\x00', 'timer1\x00', 0x0, 0xcfb, 0x1, 0x7, 0x800}) r3 = pidfd_getfd(r2, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000380)={0x1, 0x800, 0x3, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x3, 0x2, 0x7, 0x0, 0x100}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x40000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000480)=0x1) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000500)={@broadcast, @broadcast, 0x0}, &(0x7f0000000540)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x29, 0x40, 0x7f, 0x9, 0x19, @empty, @mcast1, 0x10, 0x10, 0x0, 0xd5ab}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x964}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20001015}, 0x20044000) r7 = syz_open_dev$vcsa(&(0x7f0000000740), 0x326, 0x40000) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000007c0)={0x2, 0x0, 0xffff, 0x1, 0x7}) 02:20:09 executing program 1: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x108}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4c}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044080}, 0x4000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r0 = accept$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @private}, &(0x7f0000000300)=0x10) r1 = accept4$inet(r0, 0x0, &(0x7f0000000340), 0x80000) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x116}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000004c0)={0x67, @local, 0x4e21, 0x0, 'ovf\x00', 0x21, 0x80, 0x67}, 0x2c) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000500)={'icmp6\x00'}, &(0x7f0000000540)=0x1e) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x2008030}, 0x8f56c3b0cafbe99f) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x44}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x168, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x100, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xb8, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fc2d136b05427d46cd8a173a2d86dc9afc73c8604b6248476dcc549888e79b03"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0ed35b9390ba99a6bcf6c19402d84d4b07482e2b84702c0b67dfb6aa914010db"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x168}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x60030040}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, 0x0, 0xa14, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, 0x0, 0x413, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0xc0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x50) r7 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r2) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x4c, r8, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 02:20:09 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x24400) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040)={0x4, @rand_addr=0x64010102, 0x4e21, 0x0, 'none\x00', 0x2, 0x5, 0x19}, 0x2c) r1 = accept4$inet(r0, 0x0, &(0x7f0000000080), 0x0) sendto$inet(r1, &(0x7f00000000c0)="faad09ed53887c1b50c123d83a65ea4810b64438de072da5e8be4d9156c083261bb1ec5fd227f1515ed5e0b779090e7afc11b7cc6d4b98521d299951542a84c24180896ae06d0433b0bbaf134685e4448307dddad8845c95efb43520fda3caf23ec9be8a", 0x64, 0x80, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x408d0}, 0x20000080) r2 = socket(0x1a, 0x3, 0x200) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@private0, @in6=@local, 0x4e24, 0x0, 0x4e21, 0xe3cf, 0x2, 0xa0, 0x0, 0xff, 0x0, 0xee01}, {0x5, 0xf2, 0x9, 0x4, 0xb5, 0x9, 0x10000, 0x4}, {0x3, 0x30, 0x7fffffff}, 0x36, 0x6e6bbd, 0x0, 0x1, 0x3, 0x1}, {{@in=@multicast1, 0x4d4, 0x33}, 0xa, @in6=@remote, 0x3506, 0x5, 0x2, 0x6, 0x8, 0x8, 0x2}}, 0xe8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000003c0)={{0x3, 0x1, 0x7, 0x1, 0x5}, 0xfffffffffffffeff, 0x1, 0x7f}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000440)={0x72cc748acf7b3127, 'team0\x00', 0x2}, 0x18) r3 = socket(0x0, 0x2, 0x3) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x412, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000580)={{0x2c, @multicast1, 0x4e24, 0x1, 'fo\x00', 0x14, 0x1, 0x72}, {@multicast2, 0x4e24, 0x4, 0xa7c, 0x1, 0xfdd5}}, 0x44) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x0, [0x2, 0x1055, 0x6340]}, &(0x7f0000000680)=0x44) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r4 = socket$inet(0x2, 0x4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000700)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000000800)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000840)={{{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x0, 0x4e24, 0x81, 0xa, 0x0, 0x0, 0x4, 0x0, r5}, {0x3f00000000, 0x9, 0x101, 0x9, 0xc5, 0x1, 0xffffffffffffff80, 0x2}, {0xf2, 0x1000, 0x3, 0x7}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x1}, {{@in6=@private2, 0x4d3, 0x2b}, 0x2, @in=@empty, 0x3502, 0x4, 0x3, 0x5, 0x1ff}}, 0xe8) 02:20:09 executing program 3: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x5, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x8, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc041}, 0x81) r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000300)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={0x0, @empty, @multicast1}, &(0x7f0000000380)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x4, 0x6, 0x7, 0xffffffff, 0x25, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x730, 0xe0, 0xa, 0x20}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000500)={0x440, r3, 0x10, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2b}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x6, 0x0, 0x80000000}, {0x7, 0x9, 0x40, 0x2}, {0x8000, 0x4, 0x9, 0x9}, {0x1, 0x4, 0x1, 0xbe}, {0x20, 0x2, 0x2, 0x3}, {0x9, 0x0, 0xcd, 0x401}, {0x3, 0x9, 0x80, 0x2}, {0x7, 0x80, 0x9, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000009c0), 0x400, 0x0) socket(0x25, 0x800, 0x4) socket(0x2b, 0x5, 0x9) socket(0x1e, 0x1, 0x6) r9 = accept4$inet(r0, &(0x7f0000000a00), &(0x7f0000000a40)=0x10, 0x40800) setsockopt$IP_VS_SO_SET_EDITDEST(r9, 0x0, 0x489, &(0x7f0000000a80)={{0x2f, @empty, 0x4e22, 0x4, 'sed\x00', 0x12, 0x0, 0x27}, {@broadcast, 0x4e23, 0x10001, 0x0, 0x6, 0x2}}, 0x44) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000b00), 0x149580, 0x0) [ 83.951575] audit: type=1400 audit(1737598809.826:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:20:09 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000140)={'gre0\x00', r0, 0x7, 0x8, 0x7, 0xd53, {{0x1e, 0x4, 0x3, 0x1, 0x78, 0x64, 0x0, 0xe1, 0x29, 0x0, @remote, @rand_addr=0x64010102, {[@ssrr={0x89, 0x1b, 0x7c, [@private=0xa010100, @multicast1, @broadcast, @local, @multicast1, @loopback]}, @ssrr={0x89, 0x27, 0xce, [@dev={0xac, 0x14, 0x14, 0x11}, @remote, @local, @local, @remote, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @lsrr={0x83, 0xb, 0x76, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0xba, 0x0, 0xd, [0x1f]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000240)={@dev, @multicast2, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r2, 0x4, 0x0, 0x0, 0x9, 0x28, @mcast2, @loopback, 0x80, 0x545a906f12493538, 0x1000, 0x1ff}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$inet(r3, &(0x7f0000000380), &(0x7f00000003c0)=0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) msgget(0x2, 0x12a) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4398c6009ab1b825}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000600)={'NETMAP\x00'}, &(0x7f0000000640)=0x1e) r4 = socket$inet(0x2, 0xa, 0xca1e) setsockopt$inet_buf(r4, 0x0, 0x28, &(0x7f0000000680)="570df398bf28c5a63d777bfda607c296ca2cbc8d830c406d6a26e523e5c1b744d0dbed01d27603e145419c4a6029e22924ea85acb5e8d15fd3e519b3667795e301041bf1d71547c63edb0adfa5acf88f65418f6c616d8601a2a846f8501b4d8efdb32f6ba57a7588a7d0da1330caefdedb0b3749487afaad54b7bd69faf514e50bd44766e591fb4f32621bcc22be42f6e70ec729a5a9723265d7cb77a30e0cb1868f16ebea4d99ea95f3c98f0badc7b303723566fed8d09431812410d4794e284d0bc0dbcdff038c45e80f6e782faaded0af05b5764f6c0fd57dd4ee0b43dd", 0xdf) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000780)={{0x2, 0x4e22, @private=0xa010102}, {0x7, @random="a6bfe6aa97f5"}, 0x20, {0x2, 0x4e21, @local}, 'tunl0\x00'}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000800)=0x1ff, 0x4) getsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000840), &(0x7f0000000880)=0x4) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000008c0)={0x67, @dev={0xac, 0x14, 0x14, 0x3e}, 0x4e20, 0x4, 'rr\x00', 0x1c, 0x0, 0x56}, 0x2c) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f00000009c0)={'IDLETIMER\x00'}, &(0x7f0000000a00)=0x1e) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000a40)={'TPROXY\x00'}, &(0x7f0000000a80)=0x1e) 02:20:09 executing program 5: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x61080}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x40) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040844}, 0x2000000) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '-#+\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x44) r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r0, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0xc0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x10, 0x20, 0x3, 0xb5ea0000, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0xfca, 0x0, 0xf6, 0x29, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x17, 0xffffffffffffffff, [{0x0, 0x11, "f1ca44af0ba8b5ae8e8559d19a3349"}]}, @ssrr={0x89, 0xf, 0x4c, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2]}]}}}}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r1, 0xb00, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000006c0)={@empty, @private}, &(0x7f0000000700)=0x8) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000740)={'filter\x00', 0xe2, "ed5a3bb89e1affe795f58956b7e8b33e989b724e8ba01f2896d71cfe0974a670aa2a61c85770b5e70ac0635ca40cbbfb0c881be020b4be6a7e200629bea4cd2f3512bc2b317890f6bc6118f8019efbde057ab2ce49a9d69f8a11ef0ff4f2b57ab4f0f8750d7756e909f6386a6283ccbe9cf3c974ba83a8f9e077d9951c32359943e7195882ca7a50d8274429c983f7bd397476820164f2738da0f17a42ffdce45c52f492ba8783c3e3d218a884ac50716b523b6b3034eb6d924afe92e63a22b6f19ad6c4e22f13389676679dadb346829c0e433a19253817e854ab9c46c4d24b067f"}, &(0x7f0000000880)=0x106) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) r3 = syz_open_dev$vcsa(&(0x7f00000009c0), 0x8, 0x400000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffe}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000b40), r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000b80)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@local}}, &(0x7f0000000c80)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000cc0)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f0000000dc0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000e80)={'ip6tnl0\x00', &(0x7f0000000e00)={'syztnl0\x00', r2, 0x29, 0x1, 0x1f, 0x60f5, 0x16, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x8, 0x4, 0x1}}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000ec0)={0x0, @broadcast, @dev}, &(0x7f0000000f00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000f40)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000001040)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x9400040}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001180)={0xa28, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r2}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5b7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5e, 0x80, 0x0, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2aaf}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x1bc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7f, 0x1f, 0x6, 0x9}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x1, 0x6, 0x7c}, {0x1ff, 0x20, 0xcf, 0x101}, {0x7, 0x80, 0x2}, {0x1f, 0x0, 0x0, 0x1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r8}, {0x140, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x5, 0x2, 0x8, 0x5a00e11}, {0x2, 0x4, 0x2, 0x800}, {0x1, 0x40, 0x4, 0x1}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x36}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x84}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8839}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0xa28}, 0x1, 0x0, 0x0, 0xc800}, 0x4804) 02:20:09 executing program 7: clock_getres(0x3, &(0x7f0000000000)) clock_gettime(0x5, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x1, 0x100000001, 0x7f, 0x1, 0x0, 0x8, 0xffffffffffffffdf, 0x8}, &(0x7f00000000c0)={0xff, 0x8, 0x7, 0x5960000000000000, 0x7, 0x9, 0x5a6}, &(0x7f0000000100)={0x3, 0xff, 0x1, 0x3, 0x9, 0x5, 0x5, 0x2}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x8]}, 0x8}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000200)={0xf3c9, 0xb6d, 0x100000001, 0x482, 0x80, 0x5, 0x7, 0x9}, &(0x7f0000000240)={0x3, 0x52c, 0x6, 0x8, 0xaa, 0x3, 0x516, 0x1}, &(0x7f0000000280)={0x5, 0x6, 0x4, 0x7, 0x401, 0x0, 0x100000000, 0x594}, &(0x7f0000000300)={r0, r1+10000000}, &(0x7f0000000380)={&(0x7f0000000340)={[0xa742]}, 0x8}) pselect6(0x40, &(0x7f00000003c0)={0x5, 0x2, 0x0, 0x6, 0x101, 0x5, 0xd43, 0xffffffffffff0001}, &(0x7f0000000400)={0x2, 0x0, 0x2, 0x2, 0x7, 0x8, 0x3, 0x597a}, &(0x7f0000000440)={0x2, 0x6, 0x12000000000, 0x221, 0x225a, 0x1, 0x80000000, 0x3}, &(0x7f0000000480)={0x77359400}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x800]}, 0x8}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000540)={0x97a, 0x3, 0x6, 0x1, 0x8, 0x5, 0x7, 0x752}, &(0x7f0000000580)={0x3, 0xfffffffffffffffe, 0x3, 0x1, 0x4, 0x800, 0xc8, 0x56f0}, &(0x7f00000005c0)={0x0, 0x9, 0x8, 0x3f, 0x8, 0xfffffffffffffffa, 0x3, 0x3}, &(0x7f0000000640)={r2, r3+60000000}, &(0x7f00000006c0)={&(0x7f0000000680)={[0x3]}, 0x8}) clock_gettime(0x7, &(0x7f0000000700)) socket$inet6_udplite(0xa, 0x2, 0x88) clock_getres(0x2, &(0x7f0000000740)) clock_getres(0x7, &(0x7f0000000780)) clock_gettime(0x7, &(0x7f00000007c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000b80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000840)={0x2cc, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x107f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5ae}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb3e}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbeb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xae}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdf}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x380}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa, 0x3, "04789657abd1"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "aff847b5a64bf89b5ec6549ef21270df23f4addde2385ab62e6b30"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "944cd3b11d9d592afa3c2010f2d200ffc00c313defd29148"}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb465}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5a4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8db9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40800}, 0x20000040) socket$inet_udp(0x2, 0x2, 0x0) clock_getres(0x3, &(0x7f0000000bc0)) pselect6(0x40, &(0x7f0000000c00)={0x6, 0x9, 0xcd3, 0x5, 0x8, 0x80, 0x1, 0x3b}, &(0x7f0000000c40)={0xd165, 0xb05e, 0x2, 0x800, 0x3, 0xff, 0x19, 0x8}, &(0x7f0000000c80)={0x3, 0x6, 0x2, 0x3, 0x2, 0x8, 0x77, 0x8001}, &(0x7f0000000cc0), &(0x7f0000000d40)={&(0x7f0000000d00)={[0x2]}, 0x8}) clock_gettime(0x1, &(0x7f0000000d80)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x358}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffff4a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) 02:20:09 executing program 6: r0 = socket(0x1a, 0x2, 0x8) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x800) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={0x2d4, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7624}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb2}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc9c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd37e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa17f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff18}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x471f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x90d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff801}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6f3}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe3ec}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff801}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x88800}, 0x4000014) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000004c0)={{0xffffffffffffffff, 0x2, 0x6, 0x2, 0x4}, 0x9f60000000000000, 0x7fffffff, 0x9}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000540)=""/4096) r2 = socket(0xa, 0x3, 0x4) r3 = socket(0x3, 0x3, 0x4) r4 = socket(0x26, 0x80000, 0x401) r5 = socket(0x6, 0x0, 0x8001) r6 = syz_open_dev$vcsa(&(0x7f0000001580), 0x9, 0x40) r7 = socket(0x1a, 0xa, 0x7fff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001540), 0xc, &(0x7f0000001700)={&(0x7f00000015c0)={0x110, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r4}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r5}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000040) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000001940)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001900)={&(0x7f00000017c0)={0x110, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "0c93d783a22c79a534c481b70a1d7d6934ec4d2e2b0c08b9518d0dadad6c"}}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xa4, @local, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @private2, 0x99ff}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000800}, 0x8080) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0), r5) sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000001c00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a00)={0x1b4, r9, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1d}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6c}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb66}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd63}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2a36}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x144}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x44000}, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001c40)) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4044014) [ 85.349588] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.356887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.358805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.364839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.372691] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.375058] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.473559] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.479698] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.486617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.500626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.506649] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.510685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.570388] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.572525] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.572959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.575834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.575894] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.579858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.582200] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.585063] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.592468] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.604345] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.609667] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.611631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.613659] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.618845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.624031] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.625966] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.626654] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.628160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.649170] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.663895] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.665756] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.667094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.679672] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.680274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.682009] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.689832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.691663] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.692184] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.696524] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.697292] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.740571] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.750936] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.757137] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.771959] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.788110] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.793580] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.443867] Bluetooth: hci0: command tx timeout [ 87.570369] Bluetooth: hci1: command tx timeout [ 87.699974] Bluetooth: hci2: command tx timeout [ 87.762423] Bluetooth: hci7: command tx timeout [ 87.762911] Bluetooth: hci5: command tx timeout [ 87.763045] Bluetooth: hci3: command tx timeout [ 87.763174] Bluetooth: hci4: command tx timeout [ 87.891314] Bluetooth: hci6: command tx timeout [ 89.491332] Bluetooth: hci0: command tx timeout [ 89.619483] Bluetooth: hci1: command tx timeout [ 89.748299] Bluetooth: hci2: command tx timeout [ 89.810455] Bluetooth: hci4: command tx timeout [ 89.810538] Bluetooth: hci3: command tx timeout [ 89.810618] Bluetooth: hci5: command tx timeout [ 89.810668] Bluetooth: hci7: command tx timeout [ 89.938374] Bluetooth: hci6: command tx timeout [ 91.539285] Bluetooth: hci0: command tx timeout [ 91.666503] Bluetooth: hci1: command tx timeout [ 91.795371] Bluetooth: hci2: command tx timeout [ 91.859364] Bluetooth: hci7: command tx timeout [ 91.859497] Bluetooth: hci5: command tx timeout [ 91.859558] Bluetooth: hci3: command tx timeout [ 91.859612] Bluetooth: hci4: command tx timeout [ 91.987301] Bluetooth: hci6: command tx timeout [ 93.586347] Bluetooth: hci0: command tx timeout [ 93.714486] Bluetooth: hci1: command tx timeout [ 93.843266] Bluetooth: hci2: command tx timeout [ 93.907526] Bluetooth: hci7: command tx timeout [ 93.907836] Bluetooth: hci4: command tx timeout [ 93.908130] Bluetooth: hci3: command tx timeout [ 93.908948] Bluetooth: hci5: command tx timeout [ 94.034387] Bluetooth: hci6: command tx timeout [ 147.622129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.624962] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.626066] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.632538] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.648726] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.651957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.739366] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.744508] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.746660] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.750928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.753585] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.755382] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.820496] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.825506] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.827759] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.838289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.840620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.843562] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.844508] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.847177] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.848102] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.861616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.877531] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.886793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.952590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.962771] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.966805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.974118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.983299] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.994633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.024644] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 148.032426] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.034307] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.056030] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.071612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.071849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.072193] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.078614] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.102877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.114070] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.125785] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.130767] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.143424] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.146979] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.157003] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 148.159641] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.169425] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.172830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.715342] Bluetooth: hci0: command tx timeout [ 149.842328] Bluetooth: hci1: command tx timeout [ 149.907352] Bluetooth: hci2: command tx timeout [ 149.971367] Bluetooth: hci3: command tx timeout [ 150.098595] Bluetooth: hci5: command tx timeout [ 150.227303] Bluetooth: hci4: command tx timeout [ 150.290330] Bluetooth: hci6: command tx timeout [ 150.290602] Bluetooth: hci7: command tx timeout [ 151.763529] Bluetooth: hci0: command tx timeout [ 151.890933] Bluetooth: hci1: command tx timeout [ 151.954319] Bluetooth: hci2: command tx timeout [ 152.019328] Bluetooth: hci3: command tx timeout [ 152.146303] Bluetooth: hci5: command tx timeout [ 152.275257] Bluetooth: hci4: command tx timeout [ 152.338367] Bluetooth: hci7: command tx timeout [ 152.338387] Bluetooth: hci6: command tx timeout [ 153.811295] Bluetooth: hci0: command tx timeout [ 153.938709] Bluetooth: hci1: command tx timeout [ 154.002455] Bluetooth: hci2: command tx timeout [ 154.066299] Bluetooth: hci3: command tx timeout [ 154.194447] Bluetooth: hci5: command tx timeout [ 154.322303] Bluetooth: hci4: command tx timeout [ 154.386353] Bluetooth: hci7: command tx timeout [ 154.386936] Bluetooth: hci6: command tx timeout [ 155.858319] Bluetooth: hci0: command tx timeout [ 155.988309] Bluetooth: hci1: command tx timeout [ 156.050286] Bluetooth: hci2: command tx timeout [ 156.114282] Bluetooth: hci3: command tx timeout [ 156.243275] Bluetooth: hci5: command tx timeout [ 156.370450] Bluetooth: hci4: command tx timeout [ 156.434395] Bluetooth: hci6: command tx timeout [ 156.434480] Bluetooth: hci7: command tx timeout [ 207.795793] [ 207.796063] ====================================================== [ 207.796689] WARNING: possible circular locking dependency detected [ 207.797297] 6.13.0-next-20250122 #1 Not tainted [ 207.797777] ------------------------------------------------------ [ 207.798712] kworker/u8:1/65 is trying to acquire lock: [ 207.799866] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.801249] [ 207.801249] but task is already holding lock: [ 207.802103] ffff88802a618768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 207.803657] [ 207.803657] which lock already depends on the new lock. [ 207.803657] [ 207.805724] [ 207.805724] the existing dependency chain (in reverse order) is: [ 207.806445] [ 207.806445] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 207.807094] __mutex_lock+0x13d/0xb50 [ 207.807523] wiphy_register+0x1b2e/0x25d0 [ 207.807982] ieee80211_register_hw+0x23a4/0x3d60 [ 207.809195] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 207.810576] init_mac80211_hwsim+0x389/0x870 [ 207.812194] do_one_initcall+0xf9/0x640 [ 207.812704] kernel_init_freeable+0x53d/0x7a0 [ 207.813223] kernel_init+0x1e/0x2d0 [ 207.813678] ret_from_fork+0x48/0x80 [ 207.814148] ret_from_fork_asm+0x1a/0x30 [ 207.814640] [ 207.814640] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 207.815233] __lock_acquire+0x29fd/0x4580 [ 207.815706] lock_acquire+0x19b/0x520 [ 207.816151] __mutex_lock+0x13d/0xb50 [ 207.816605] unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.817211] unregister_netdevice_queue+0x224/0x2e0 [ 207.817759] _cfg80211_unregister_wdev+0x57b/0x700 [ 207.818309] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 207.818865] ieee80211_unregister_hw+0x55/0x3a0 [ 207.819390] hwsim_exit_net+0x3a0/0x730 [ 207.819862] ops_exit_list+0xb3/0x180 [ 207.820312] cleanup_net+0x546/0xad0 [ 207.820756] process_one_work+0x8ee/0x1a10 [ 207.821290] worker_thread+0x674/0xe70 [ 207.821764] kthread+0x3ab/0x720 [ 207.822207] ret_from_fork+0x48/0x80 [ 207.822645] ret_from_fork_asm+0x1a/0x30 [ 207.823181] [ 207.823181] other info that might help us debug this: [ 207.823181] [ 207.823929] Possible unsafe locking scenario: [ 207.823929] [ 207.824482] CPU0 CPU1 [ 207.824921] ---- ---- [ 207.825363] lock(&rdev->wiphy.mtx); [ 207.825761] lock(rtnl_mutex); [ 207.826322] lock(&rdev->wiphy.mtx); [ 207.826952] lock(rtnl_mutex); [ 207.827346] [ 207.827346] *** DEADLOCK *** [ 207.827346] [ 207.827936] 4 locks held by kworker/u8:1/65: [ 207.828361] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 207.829349] #1: ffff88800f4ffd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 207.830305] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 207.831303] #3: ffff88802a618768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 207.832419] [ 207.832419] stack backtrace: [ 207.832876] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250122 #1 [ 207.833710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 207.834503] Workqueue: netns cleanup_net [ 207.834925] Call Trace: [ 207.835173] [ 207.835397] dump_stack_lvl+0xca/0x120 [ 207.835803] print_circular_bug+0x47b/0x750 [ 207.836222] check_noncircular+0x2e9/0x3c0 [ 207.836631] ? __pfx_check_noncircular+0x10/0x10 [ 207.837105] ? hlock_class+0x4e/0x130 [ 207.837537] ? mark_lock+0xac/0xed0 [ 207.838154] ? srso_return_thunk+0x5/0x5f [ 207.838741] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 207.839255] ? lockdep_lock+0xba/0x1b0 [ 207.839717] ? __pfx_lockdep_lock+0x10/0x10 [ 207.840227] __lock_acquire+0x29fd/0x4580 [ 207.840648] ? __pfx___lock_acquire+0x10/0x10 [ 207.841074] ? lock_release+0x20f/0x6f0 [ 207.841457] ? __pfx_lock_release+0x10/0x10 [ 207.841879] lock_acquire+0x19b/0x520 [ 207.842254] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.842878] ? __pfx_lock_acquire+0x10/0x10 [ 207.843369] ? srso_return_thunk+0x5/0x5f [ 207.843860] ? lock_release+0x20f/0x6f0 [ 207.844326] ? srso_return_thunk+0x5/0x5f [ 207.844776] ? lock_is_held_type+0x9e/0x120 [ 207.845257] ? srso_return_thunk+0x5/0x5f [ 207.845724] __mutex_lock+0x13d/0xb50 [ 207.846144] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.846749] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.847364] ? srso_return_thunk+0x5/0x5f [ 207.847857] ? synchronize_rcu_expedited+0x38a/0x420 [ 207.848369] ? __pfx___mutex_lock+0x10/0x10 [ 207.848803] ? __pfx_autoremove_wake_function+0x10/0x10 [ 207.849340] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 207.849805] unregister_netdevice_many_notify+0x1612/0x1c80 [ 207.850358] ? __virt_addr_valid+0x2e8/0x5d0 [ 207.850819] ? __pfx_lock_release+0x10/0x10 [ 207.851263] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 207.851833] ? find_held_lock+0x2c/0x110 [ 207.852235] ? srso_return_thunk+0x5/0x5f [ 207.852671] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 207.853172] ? srso_return_thunk+0x5/0x5f [ 207.853605] ? lock_release+0x20f/0x6f0 [ 207.854006] ? __pfx_lock_release+0x10/0x10 [ 207.854419] ? srso_return_thunk+0x5/0x5f [ 207.854828] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 207.855322] ? srso_return_thunk+0x5/0x5f [ 207.855761] unregister_netdevice_queue+0x224/0x2e0 [ 207.856264] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 207.856830] ? up_write+0x195/0x520 [ 207.857246] _cfg80211_unregister_wdev+0x57b/0x700 [ 207.857788] ? srso_return_thunk+0x5/0x5f [ 207.858303] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 207.858876] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 207.859432] ? srso_return_thunk+0x5/0x5f [ 207.859901] ? srso_return_thunk+0x5/0x5f [ 207.860390] ? synchronize_rcu+0x1ff/0x260 [ 207.860888] ieee80211_unregister_hw+0x55/0x3a0 [ 207.861429] hwsim_exit_net+0x3a0/0x730 [ 207.861909] ? __pfx_hwsim_exit_net+0x10/0x10 [ 207.862429] ? srso_return_thunk+0x5/0x5f [ 207.862917] ? netdev_run_todo+0x788/0x1040 [ 207.863439] ? srso_return_thunk+0x5/0x5f [ 207.863951] ? __pfx_hwsim_exit_net+0x10/0x10 [ 207.864483] ops_exit_list+0xb3/0x180 [ 207.864951] cleanup_net+0x546/0xad0 [ 207.865416] ? __pfx_cleanup_net+0x10/0x10 [ 207.865929] process_one_work+0x8ee/0x1a10 [ 207.866461] ? __pfx_lock_acquire+0x10/0x10 [ 207.866983] ? __pfx_process_one_work+0x10/0x10 [ 207.867535] ? srso_return_thunk+0x5/0x5f [ 207.868048] ? move_linked_works+0x172/0x270 [ 207.868568] ? srso_return_thunk+0x5/0x5f [ 207.869081] ? assign_work+0x196/0x240 [ 207.869566] worker_thread+0x674/0xe70 [ 207.870052] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 207.870681] ? srso_return_thunk+0x5/0x5f [ 207.871183] ? __pfx_worker_thread+0x10/0x10 [ 207.871719] kthread+0x3ab/0x720 [ 207.872145] ? __pfx_kthread+0x10/0x10 [ 207.872627] ? _raw_spin_unlock_irq+0x23/0x40 [ 207.873158] ? __pfx_kthread+0x10/0x10 [ 207.873637] ret_from_fork+0x48/0x80 [ 207.874072] ? __pfx_kthread+0x10/0x10 [ 207.874560] ret_from_fork_asm+0x1a/0x30 [ 207.875074] [ 209.434631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.436969] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.440805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.446750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.451785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.454577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.562452] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.564721] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.566512] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.571430] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.573726] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.575446] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.698687] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.702471] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.706470] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.711022] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.713656] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.715897] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.728456] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.730992] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.733949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.737759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.741493] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.745398] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.829557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.836570] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.843563] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.851032] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.858540] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.860564] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.947753] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.957432] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.962418] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.967983] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.976467] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.986537] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.987595] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.997396] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.999548] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.001465] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.009276] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.020245] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.020481] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.054010] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.058040] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.058929] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.061565] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.094509] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.474291] Bluetooth: hci0: command tx timeout [ 211.603593] Bluetooth: hci1: command tx timeout [ 211.794284] Bluetooth: hci3: command tx timeout [ 211.794327] Bluetooth: hci2: command tx timeout [ 211.922463] Bluetooth: hci4: command tx timeout [ 212.051483] Bluetooth: hci6: command tx timeout [ 212.114352] Bluetooth: hci5: command tx timeout [ 212.242749] Bluetooth: hci7: command tx timeout [ 213.522315] Bluetooth: hci0: command tx timeout [ 213.652254] Bluetooth: hci1: command tx timeout [ 213.843282] Bluetooth: hci2: command tx timeout [ 213.843320] Bluetooth: hci3: command tx timeout [ 213.973236] Bluetooth: hci4: command tx timeout [ 214.099281] Bluetooth: hci6: command tx timeout [ 214.163267] Bluetooth: hci5: command tx timeout [ 214.291262] Bluetooth: hci7: command tx timeout [ 215.570241] Bluetooth: hci0: command tx timeout [ 215.698278] Bluetooth: hci1: command tx timeout [ 215.890267] Bluetooth: hci3: command tx timeout [ 215.890352] Bluetooth: hci2: command tx timeout [ 216.018306] Bluetooth: hci4: command tx timeout [ 216.146335] Bluetooth: hci6: command tx timeout [ 216.210378] Bluetooth: hci5: command tx timeout [ 216.338308] Bluetooth: hci7: command tx timeout [ 217.618530] Bluetooth: hci0: command tx timeout [ 217.747426] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 02:22:13 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88800f5fa400 RCX=ffffffff81429a4a RDX=1ffff11001e97b35 RSI=0000000000000008 RDI=ffff88800f5fa400 RBP=0000000000200000 RSP=ffff88800ba97db0 R8 =0000000000000000 R9 =ffffed1001ebf480 R10=0000000000200000 R11=0000000000000001 R12=ffff88806c0caff9 R13=ffffffff8861e798 R14=ffff88800f4bd340 R15=0000000000000086 RIP=ffffffff81abd108 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdb627099d0 CR3=00000000188a0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000415fe8c400000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283e865 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff88800f4feb38 R8 =0000000000000001 R9 =ffffed1001e9fd57 R10=0000000000000031 R11=0000000020202020 R12=0000000000000031 R13=0000000000000001 R14=ffff888008fea023 R15=ffff88800f4fee38 RIP=ffffffff8283e8bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdb627c49c8 CR3=000000000c77a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369 XMM04=000055cb7bf631b0000055cb7c00eac0 XMM05=0000000800000003000055cb7c005740 XMM06=00000053544e006563697665642e3769 XMM07=00000000000000000000000000000000 XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000