Warning: Permanently added '[localhost]:55824' (ECDSA) to the list of known hosts. 2025/01/23 15:53:55 fuzzer started 2025/01/23 15:53:55 dialing manager at localhost:38529 syzkaller login: [ 67.466289] cgroup: Unknown subsys name 'net' [ 67.580659] cgroup: Unknown subsys name 'cpuset' [ 67.615360] cgroup: Unknown subsys name 'rlimit' [ 73.888991] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 85.667378] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 15:54:14 syscalls: 201 2025/01/23 15:54:14 code coverage: enabled 2025/01/23 15:54:14 comparison tracing: enabled 2025/01/23 15:54:14 extra coverage: enabled 2025/01/23 15:54:14 setuid sandbox: enabled 2025/01/23 15:54:14 namespace sandbox: enabled 2025/01/23 15:54:14 Android sandbox: enabled 2025/01/23 15:54:14 fault injection: enabled 2025/01/23 15:54:14 leak checking: enabled 2025/01/23 15:54:14 net packet injection: enabled 2025/01/23 15:54:14 net device setup: enabled 2025/01/23 15:54:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 15:54:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 15:54:14 USB emulation: enabled 2025/01/23 15:54:14 hci packet injection: enabled 2025/01/23 15:54:14 wifi device emulation: enabled 2025/01/23 15:54:14 802.15.4 emulation: enabled 2025/01/23 15:54:14 fetching corpus: 0, signal 0/0 (executing program) 2025/01/23 15:54:17 starting 8 fuzzer processes 15:54:17 executing program 0: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40008) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040051}, 0x800) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc080}, 0x4010) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4541}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf98}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48840}, 0x4004) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x46c6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r2, 0x118, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8}]}, 0x34}}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000007c0)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x3f, 0x2, 0x8001, 0x20, @private1, @local, 0x7800, 0x10, 0xe9, 0x4}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, r4, 0x2490cbe3244fb4e9, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1010}, 0x8002) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x20005) socketpair(0x3, 0x2, 0x100, &(0x7f0000000cc0)={0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x64, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x200}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r4, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x20014040) 15:54:17 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffffffff6265, 0x4800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040), 0x1) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2a8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x34}}, 0x48804) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x4, 0x580) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x14) r3 = syz_open_dev$vcsn(&(0x7f0000000380), 0x7, 0x82) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r1, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) socketpair(0xb, 0x3, 0x2, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000090) eventfd2(0x1, 0x100800) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000b00)=r8) getrusage(0x1, &(0x7f0000000b40)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@multicast1, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f0000000d40)=0xe8) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000f80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x44, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r9}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 15:54:17 executing program 2: getpgrp(0xffffffffffffffff) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r1 = getpid() write$cgroup_pid(r0, &(0x7f0000000040)=r1, 0x12) write$cgroup_pid(r0, &(0x7f0000000080)=r1, 0x12) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xe6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc041}, 0x40000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) ptrace$peek(0x1, r4, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000002c0)={r3, 0x4, 0x21e}) r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x38000000, 0x1d1181) mount_setattr(r5, &(0x7f0000000340)='./file0\x00', 0x100, &(0x7f0000000380)={0x100000, 0x7c, 0x40000}, 0x20) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x800) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000540)={0x7, &(0x7f0000000500)=[{0x4, 0x4, 0x4, 0x5}, {0xfd7, 0x7}, {0x12, 0x20, 0x0, 0x6}, {0x0, 0x81, 0xab, 0x4}, {0x1, 0x5, 0x0, 0x8}, {0x401, 0x3, 0x81, 0x81}, {0x5, 0x3, 0x27}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000600)={r8, 0x5, 0x5}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb96}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000780)={r3, 0x0, r9, 0xfffffc01}) 15:54:17 executing program 3: socketpair(0x28, 0x80000, 0xc625, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x3f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x80, 0x81, 0x100, 0x8462, 0x804c02c1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8a}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10048080}, 0x4000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x88000}, 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, r6, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x69}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x80000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r7) socketpair(0x2b, 0x3, 0x7f, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r6, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0x20008815) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r7) sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r11, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffcd50}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c8010}, 0xc080) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r11, 0x108, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) [ 88.940064] audit: type=1400 audit(1737647657.398:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:54:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x840) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4008001) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x44004) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000700)={'wg2\x00'}) socketpair(0x8, 0x2, 0x3ff, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x94, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd66}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x88810}, 0x80) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000900), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000a80)=0xe8) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c00)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c40)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in=@multicast1}}, &(0x7f0000000d40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000d80)={'batadv0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000dc0)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000ec0)=0xe8) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000001080)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x134, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x84}, 0x4000) r9 = syz_open_dev$vcsn(&(0x7f00000010c0), 0xffff, 0x323940) sendmsg$BATADV_CMD_SET_VLAN(r9, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004010}, 0x20044000) 15:54:17 executing program 5: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80000) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000000c0)={{0x0, 0xd9, 0x8, 0x1, 0x2, 0x9, 0x10000, 0x2, 0x0, 0x81, 0x0, 0x4, 0xd56, 0x94, 0x100}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000010c0)={{r1, 0x663000, 0x0, 0x0, 0x4484, 0x579c, 0x2, 0x5, 0x81, 0x7, 0x5b, 0x9, 0x3, 0xfffffffffffffff8, 0x8}}) r2 = accept4$unix(r0, &(0x7f00000020c0)=@abs, &(0x7f0000002140)=0x6e, 0x0) accept$unix(r2, 0x0, &(0x7f0000002180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000021c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000023c0)={{r3, 0x34b9, 0x40, 0x17, 0x5, 0x0, 0x3, 0x6, 0xd84, 0x9, 0x4, 0x217, 0x400, 0x7ff, 0x3}, 0x8, [0x0]}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000002440)=""/170) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002500), 0x6b0c02, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000002540)={{0x0, 0x3, 0x401, 0x100000001, 0x0, 0x1000, 0x8006, 0x5, 0xffffff01, 0x7ff, 0xff, 0x5, 0x3, 0x2, 0x100000000}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) clock_gettime(0x0, &(0x7f0000002600)) prctl$PR_SET_TSC(0x1a, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002640)) r6 = getpgrp(0x0) sched_rr_get_interval(r6, &(0x7f0000002680)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002700), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002740)={0x154, r7, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5d10}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x79}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r8, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x70, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c040) 15:54:17 executing program 7: set_robust_list(&(0x7f0000000080)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x80000001}, 0x18) r0 = fork() sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0x8) set_robust_list(&(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x9}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffff7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa9}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffb}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) ptrace$peek(0x2, r0, &(0x7f0000000380)) r4 = inotify_init() ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000003c0)={"e0f6210d12db0e2b0f0774d0394f6085", 0x0, 0x0, {0x4d8e88c, 0x4}, {0x4, 0x9}, 0x9, [0x81, 0x6, 0x6, 0xbde3, 0x24ab, 0x1000, 0x0, 0x7f, 0x9, 0x1, 0x6, 0x4, 0x8, 0x200, 0x6, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000004c0)={"253d19cc9dca5603b48c4edd045fe232", r5, 0x0, {0xb9d800000000000, 0x1}, {0x9, 0x1}, 0xdbdc, [0x3ff, 0x5, 0x3f, 0x3, 0xb53ef6a, 0x3, 0xffffffffffffff7f, 0x80000001, 0x2, 0x2, 0x8, 0x8001, 0xfffffffffffffa95, 0x7, 0x800, 0x40000]}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000005c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x230, r7, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xac, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45e1a8b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x647eb4cb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3564251}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a6876b1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dc9cc8d}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5738da96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x342aaa93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27b279f3}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x325a13ff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3edca593}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x170, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d8c742f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f7981d0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ead}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed91}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46b3054f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37601377}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf50}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bb3c6b3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x567b6ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6aa6}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a0042bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x241e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ac988ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5de8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd71}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb97}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36e59a9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2846}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2602}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3409}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b3e382e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f84}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x693a17f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5009e682}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2fa9}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb21}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20a6a51}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23876818}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51070b0f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x248b0be2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x791f3cb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16a9d35d}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ee980f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x176312d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xadd9}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6}]}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x20044880}, 0x20000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r6) sendmsg$NL802154_CMD_SET_CCA_MODE(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r9, 0xf01, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x8004) syz_usb_ep_write(0xffffffffffffffff, 0x7a, 0xc4, &(0x7f0000000a40)="a3953aff23658721e62758c140f5a247fb8cfae024df05cd19b6e338e0f9aec2963b6b9b095267923bdd40afeca3055db967082297b8ce9b942b6012254162883562d561165b30754dd131424f9ca17d4a2218de60d0c3acdebfc9ad5fa37a4d7db2a2c7f924b07a8110f7978aed2740ff6d9930bc06cf185d4dbef9ba08f5c1087ad42a25999aa8526c94c6c3d04749df4cc263260f0a07bb1ed1bec167da079ff72c2faace70be12fe8de4eebd7a85f33f5857797eeb7ebf6317fd7f74c8885e225625") ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000bc0)={0x0, 0x1, r1, 0x2}) 15:54:17 executing program 6: socketpair(0x1a, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x2, 0x80000) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x9c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9cb7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x101}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x44000}, 0x4010) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x96f239bef32dea3b) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000041}, 0x48005) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000006c0)={'wg1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000780)={0x29c, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x12c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x8c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffff149}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x104, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa14}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4040081}, 0x11) r8 = syz_open_dev$vcsn(&(0x7f0000000ac0), 0x9, 0x301000) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x78, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040091}, 0x48000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r9, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x800) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x54, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_VERSION={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40051) [ 90.571475] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.575386] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.577848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.585624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.590408] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.594416] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.637701] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.644705] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.650508] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.679180] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.684394] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.685406] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.696306] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.699443] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.703201] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.708818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.715404] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.717564] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.743920] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.759842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.760938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.772764] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.772891] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.775809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.778634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.780234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.790047] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.790186] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.791926] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.794167] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.799346] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.807183] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.814282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.815273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.817214] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.822444] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.823191] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.826665] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.826693] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.829652] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.831721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.833508] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.834539] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.840796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.856644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.862760] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.869418] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.875902] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.639562] Bluetooth: hci0: command tx timeout [ 92.766420] Bluetooth: hci1: command tx timeout [ 92.830319] Bluetooth: hci2: command tx timeout [ 92.894329] Bluetooth: hci4: command tx timeout [ 92.894659] Bluetooth: hci6: command tx timeout [ 92.958057] Bluetooth: hci3: command tx timeout [ 92.958452] Bluetooth: hci5: command tx timeout [ 92.958581] Bluetooth: hci7: command tx timeout [ 94.686038] Bluetooth: hci0: command tx timeout [ 94.815367] Bluetooth: hci1: command tx timeout [ 94.878504] Bluetooth: hci2: command tx timeout [ 94.942792] Bluetooth: hci4: command tx timeout [ 94.942820] Bluetooth: hci6: command tx timeout [ 95.007225] Bluetooth: hci7: command tx timeout [ 95.007745] Bluetooth: hci5: command tx timeout [ 95.007832] Bluetooth: hci3: command tx timeout [ 96.734147] Bluetooth: hci0: command tx timeout [ 96.862046] Bluetooth: hci1: command tx timeout [ 96.927115] Bluetooth: hci2: command tx timeout [ 96.990087] Bluetooth: hci6: command tx timeout [ 96.990164] Bluetooth: hci4: command tx timeout [ 97.054087] Bluetooth: hci3: command tx timeout [ 97.054112] Bluetooth: hci5: command tx timeout [ 97.054195] Bluetooth: hci7: command tx timeout [ 98.782073] Bluetooth: hci0: command tx timeout [ 98.912014] Bluetooth: hci1: command tx timeout [ 98.974235] Bluetooth: hci2: command tx timeout [ 99.038041] Bluetooth: hci6: command tx timeout [ 99.040156] Bluetooth: hci4: command tx timeout [ 99.103044] Bluetooth: hci7: command tx timeout [ 99.103647] Bluetooth: hci5: command tx timeout [ 99.103670] Bluetooth: hci3: command tx timeout [ 153.463566] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.465614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.467507] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.475566] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.479579] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.481048] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.526776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.531495] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.541663] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.548434] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.551645] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.553052] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.596548] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.610713] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.616543] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.635825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.643586] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.646492] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.753093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.762530] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.763576] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.765716] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.767847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.769343] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.769813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.774843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.782732] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.803858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.830434] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.835273] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.836999] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.837527] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.841400] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.843361] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.844068] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.869080] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.947594] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.962729] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.989570] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.999359] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.006439] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.048675] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.050357] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.070045] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.080605] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.116202] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.147630] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.150756] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.550102] Bluetooth: hci0: command tx timeout [ 155.678062] Bluetooth: hci1: command tx timeout [ 155.678253] Bluetooth: hci2: command tx timeout [ 155.870084] Bluetooth: hci6: command tx timeout [ 155.870367] Bluetooth: hci3: command tx timeout [ 156.063423] Bluetooth: hci4: command tx timeout [ 156.190433] Bluetooth: hci7: command tx timeout [ 156.255719] Bluetooth: hci5: command tx timeout [ 157.598192] Bluetooth: hci0: command tx timeout [ 157.726280] Bluetooth: hci2: command tx timeout [ 157.726446] Bluetooth: hci1: command tx timeout [ 157.919054] Bluetooth: hci3: command tx timeout [ 157.919230] Bluetooth: hci6: command tx timeout [ 158.110217] Bluetooth: hci4: command tx timeout [ 158.238369] Bluetooth: hci7: command tx timeout [ 158.302121] Bluetooth: hci5: command tx timeout [ 159.646107] Bluetooth: hci0: command tx timeout [ 159.774139] Bluetooth: hci1: command tx timeout [ 159.774303] Bluetooth: hci2: command tx timeout [ 159.967240] Bluetooth: hci6: command tx timeout [ 159.967409] Bluetooth: hci3: command tx timeout [ 160.158110] Bluetooth: hci4: command tx timeout [ 160.286142] Bluetooth: hci7: command tx timeout [ 160.350127] Bluetooth: hci5: command tx timeout [ 161.694136] Bluetooth: hci0: command tx timeout [ 161.822137] Bluetooth: hci2: command tx timeout [ 161.822334] Bluetooth: hci1: command tx timeout [ 162.014477] Bluetooth: hci3: command tx timeout [ 162.014917] Bluetooth: hci6: command tx timeout [ 162.206205] Bluetooth: hci4: command tx timeout [ 162.334363] Bluetooth: hci7: command tx timeout [ 162.399057] Bluetooth: hci5: command tx timeout [ 214.115293] [ 214.115757] ====================================================== [ 214.116966] WARNING: possible circular locking dependency detected [ 214.118174] 6.13.0-next-20250122 #1 Not tainted [ 214.119110] ------------------------------------------------------ [ 214.124659] kworker/u8:0/11 is trying to acquire lock: [ 214.125745] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 214.127914] [ 214.127914] but task is already holding lock: [ 214.129167] ffff88800d060768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 214.131290] [ 214.131290] which lock already depends on the new lock. [ 214.131290] [ 214.132960] [ 214.132960] the existing dependency chain (in reverse order) is: [ 214.134465] [ 214.134465] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 214.135891] __mutex_lock+0x13d/0xb50 [ 214.136896] wiphy_register+0x1b2e/0x25d0 [ 214.137949] ieee80211_register_hw+0x23a4/0x3d60 [ 214.139099] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 214.140334] init_mac80211_hwsim+0x389/0x870 [ 214.141471] do_one_initcall+0xf9/0x640 [ 214.142520] kernel_init_freeable+0x53d/0x7a0 [ 214.143657] kernel_init+0x1e/0x2d0 [ 214.144601] ret_from_fork+0x48/0x80 [ 214.145541] ret_from_fork_asm+0x1a/0x30 [ 214.146589] [ 214.146589] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 214.147966] __lock_acquire+0x29fd/0x4580 [ 214.149031] lock_acquire+0x19b/0x520 [ 214.150027] __mutex_lock+0x13d/0xb50 [ 214.151026] unregister_netdevice_many_notify+0x1612/0x1c80 [ 214.152438] unregister_netdevice_queue+0x224/0x2e0 [ 214.153706] _cfg80211_unregister_wdev+0x57b/0x700 [ 214.154937] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 214.156205] ieee80211_unregister_hw+0x55/0x3a0 [ 214.157897] hwsim_exit_net+0x3a0/0x730 [ 214.158895] ops_exit_list+0xb3/0x180 [ 214.159887] cleanup_net+0x546/0xad0 [ 214.160852] process_one_work+0x8ee/0x1a10 [ 214.161979] worker_thread+0x674/0xe70 [ 214.163040] kthread+0x3ab/0x720 [ 214.163993] ret_from_fork+0x48/0x80 [ 214.164869] ret_from_fork_asm+0x1a/0x30 [ 214.166594] [ 214.166594] other info that might help us debug this: [ 214.166594] [ 214.167774] Possible unsafe locking scenario: [ 214.167774] [ 214.168672] CPU0 CPU1 [ 214.169365] ---- ---- [ 214.170043] lock(&rdev->wiphy.mtx); [ 214.170656] lock(rtnl_mutex); [ 214.171535] lock(&rdev->wiphy.mtx); [ 214.180617] lock(rtnl_mutex); [ 214.181254] [ 214.181254] *** DEADLOCK *** [ 214.181254] [ 214.182174] 4 locks held by kworker/u8:0/11: [ 214.182845] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 214.184450] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 214.186151] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 214.187700] #3: ffff88800d060768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 214.189478] [ 214.189478] stack backtrace: [ 214.190193] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250122 #1 [ 214.191292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 214.192440] Workqueue: netns cleanup_net [ 214.193008] Call Trace: [ 214.193351] [ 214.193687] dump_stack_lvl+0xca/0x120 [ 214.194276] print_circular_bug+0x47b/0x750 [ 214.194892] check_noncircular+0x2e9/0x3c0 [ 214.195499] ? lock_repin_lock+0x207/0x320 [ 214.196134] ? __pfx_check_noncircular+0x10/0x10 [ 214.196800] ? hlock_class+0x4e/0x130 [ 214.197328] ? mark_lock+0xac/0xed0 [ 214.197852] ? __pfx_lock_repin_lock+0x10/0x10 [ 214.198528] ? lockdep_lock+0xba/0x1b0 [ 214.199130] ? __pfx_lockdep_lock+0x10/0x10 [ 214.199877] __lock_acquire+0x29fd/0x4580 [ 214.200602] ? __pfx___lock_acquire+0x10/0x10 [ 214.201351] ? lock_release+0x20f/0x6f0 [ 214.201999] ? __pfx_lock_release+0x10/0x10 [ 214.202728] lock_acquire+0x19b/0x520 [ 214.203313] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 214.204308] ? __pfx_lock_acquire+0x10/0x10 [ 214.204983] ? srso_return_thunk+0x5/0x5f [ 214.205600] ? lock_release+0x20f/0x6f0 [ 214.206167] ? srso_return_thunk+0x5/0x5f [ 214.206786] ? lock_is_held_type+0x9e/0x120 [ 214.207415] ? srso_return_thunk+0x5/0x5f [ 214.208043] __mutex_lock+0x13d/0xb50 [ 214.208615] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 214.209425] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 214.210296] ? srso_return_thunk+0x5/0x5f [ 214.210994] ? synchronize_rcu_expedited+0x38a/0x420 [ 214.211786] ? __pfx___mutex_lock+0x10/0x10 [ 214.212428] ? __pfx_autoremove_wake_function+0x10/0x10 [ 214.213178] ? srso_return_thunk+0x5/0x5f [ 214.213785] ? kasan_quarantine_put+0x84/0x1e0 [ 214.214483] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 214.215124] ? srso_return_thunk+0x5/0x5f [ 214.215745] unregister_netdevice_many_notify+0x1612/0x1c80 [ 214.216553] ? __virt_addr_valid+0x2e8/0x5d0 [ 214.217193] ? __pfx_lock_release+0x10/0x10 [ 214.217803] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 214.218633] ? find_held_lock+0x2c/0x110 [ 214.219233] ? srso_return_thunk+0x5/0x5f [ 214.219844] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 214.220561] ? srso_return_thunk+0x5/0x5f [ 214.221173] ? lock_release+0x20f/0x6f0 [ 214.221738] ? __pfx_lock_release+0x10/0x10 [ 214.222344] ? srso_return_thunk+0x5/0x5f [ 214.222950] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 214.223684] ? srso_return_thunk+0x5/0x5f [ 214.224321] unregister_netdevice_queue+0x224/0x2e0 [ 214.225020] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 214.225782] ? up_write+0x195/0x520 [ 214.226332] _cfg80211_unregister_wdev+0x57b/0x700 [ 214.227033] ? srso_return_thunk+0x5/0x5f [ 214.227651] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 214.228355] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 214.229126] ? srso_return_thunk+0x5/0x5f [ 214.229732] ? srso_return_thunk+0x5/0x5f [ 214.230349] ? synchronize_rcu+0x1ff/0x260 [ 214.230950] ieee80211_unregister_hw+0x55/0x3a0 [ 214.231611] hwsim_exit_net+0x3a0/0x730 [ 214.232188] ? __pfx_hwsim_exit_net+0x10/0x10 [ 214.232824] ? srso_return_thunk+0x5/0x5f [ 214.233434] ? netdev_run_todo+0x788/0x1040 [ 214.234050] ? srso_return_thunk+0x5/0x5f [ 214.234659] ? __pfx_hwsim_exit_net+0x10/0x10 [ 214.235296] ops_exit_list+0xb3/0x180 [ 214.235845] cleanup_net+0x546/0xad0 [ 214.236399] ? __pfx_cleanup_net+0x10/0x10 [ 214.237017] process_one_work+0x8ee/0x1a10 [ 214.237648] ? __pfx_lock_acquire+0x10/0x10 [ 214.238260] ? __pfx_process_one_work+0x10/0x10 [ 214.238935] ? srso_return_thunk+0x5/0x5f [ 214.239541] ? move_linked_works+0x172/0x270 [ 214.240180] ? srso_return_thunk+0x5/0x5f [ 214.240794] ? assign_work+0x196/0x240 [ 214.241378] worker_thread+0x674/0xe70 [ 214.241963] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 214.242696] ? __pfx_worker_thread+0x10/0x10 [ 214.243341] kthread+0x3ab/0x720 [ 214.243856] ? __pfx_kthread+0x10/0x10 [ 214.244431] ? srso_return_thunk+0x5/0x5f [ 214.245040] ? finish_task_switch.isra.0+0x206/0x840 [ 214.245752] ? __pfx_kthread+0x10/0x10 [ 214.246322] ret_from_fork+0x48/0x80 [ 214.246843] ? __pfx_kthread+0x10/0x10 [ 214.247417] ret_from_fork_asm+0x1a/0x30 [ 214.248046] [ 215.592602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.593558] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.594361] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.599909] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.602398] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.603243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.728023] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.733592] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.736009] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.736764] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.739096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.742229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.743628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.746452] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.747240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.749783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.750551] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.755187] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.886411] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.887142] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.889285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.891181] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.892348] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.893005] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.058277] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.068100] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.068231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.078405] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.083292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.084429] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.086894] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.087330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.106791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.125600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.126590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.132562] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.133374] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.134336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.134901] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.135496] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.146624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.156266] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.165750] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.170360] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.171916] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.182560] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.245316] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.248695] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.631106] Bluetooth: hci0: command tx timeout [ 217.823363] Bluetooth: hci2: command tx timeout [ 217.823380] Bluetooth: hci1: command tx timeout [ 217.950044] Bluetooth: hci3: command tx timeout [ 218.206704] Bluetooth: hci5: command tx timeout [ 218.206781] Bluetooth: hci4: command tx timeout [ 218.270056] Bluetooth: hci6: command tx timeout [ 218.398032] Bluetooth: hci7: command tx timeout [ 219.678645] Bluetooth: hci0: command tx timeout [ 219.870208] Bluetooth: hci2: command tx timeout [ 219.872979] Bluetooth: hci1: command tx timeout [ 219.998081] Bluetooth: hci3: command tx timeout [ 220.254076] Bluetooth: hci4: command tx timeout [ 220.254113] Bluetooth: hci5: command tx timeout [ 220.317996] Bluetooth: hci6: command tx timeout [ 220.446042] Bluetooth: hci7: command tx timeout [ 221.725998] Bluetooth: hci0: command tx timeout [ 221.919097] Bluetooth: hci1: command tx timeout [ 221.919222] Bluetooth: hci2: command tx timeout [ 222.046017] Bluetooth: hci3: command tx timeout [ 222.303050] Bluetooth: hci4: command tx timeout [ 222.303069] Bluetooth: hci5: command tx timeout [ 222.367958] Bluetooth: hci6: command tx timeout [ 222.493993] Bluetooth: hci7: command tx timeout [ 223.774168] Bluetooth: hci0: command tx timeout [ 223.966090] Bluetooth: hci1: command tx timeout [ 223.967418] Bluetooth: hci2: command tx timeout [ 224.094144] Bluetooth: hci3: command tx timeout VM DIAGNOSIS: 15:56:22 Registers: info registers vcpu 0 RAX=ffff88800c146c30 RBX=ffffffff8861e798 RCX=ffffffff81429a4a RDX=ffff88800c146560 RSI=0000000000000001 RDI=ffff88800c159590 RBP=ffff88800c159590 RSP=ffff88800efafda0 R8 =0000000000000000 R9 =ffffed1001d45f00 R10=ffff88800ea2f807 R11=ffff88800efa04b8 R12=ffff88800c2fe068 R13=ffffffff8861e798 R14=ffff88800efa0000 R15=0000000000000086 RIP=ffffffff81aee810 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055633db0c560 CR3=00000000132c8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6f7580a5f2b940bed44f680fe36183fe XMM02=a3797342f9eb3dd900000000000fd818 XMM03=68a8aee3740b9fad00000000000fd988 XMM04=f988139c2a11937800000000000ae988 XMM05=2d65282f3a0487b5000000000013f270 XMM06=6098c19552daab4900000000001156b0 XMM07=ea899072da79512f00000000000fdae0 XMM08=d12871896912de2d00000000000fd868 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283e865 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=000000000000002d R11=2d2d2d2d2d2d2d2d R12=000000000000002d R13=0000000000000001 R14=ffff888008fea01b R15=ffff8880095deeb8 RIP=ffffffff8283e8bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7443fdf040 CR3=000000000dfd8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=36353a3531203332206e614a3e30333c XMM01=7661532f64616f4c2064657472617453 XMM02=6c694b20465220657661532f64616f4c XMM03=747379732032323a36353a3531203332 XMM04=6456774875434142334f726f59427469 XMM05=485320415352203a3268737320383437 XMM06=206d6f726620746f6f7220726f662079 XMM07=00000000000000000000000000000000 XMM08=3a677562656420676f6c737973720000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000