Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:32297' (ECDSA) to the list of known hosts. 2025/01/28 01:32:26 fuzzer started 2025/01/28 01:32:27 dialing manager at localhost:40883 syzkaller login: [ 70.309127] cgroup: Unknown subsys name 'net' [ 70.410474] cgroup: Unknown subsys name 'cpuset' [ 70.448534] cgroup: Unknown subsys name 'rlimit' [ 76.476621] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 01:32:45 syscalls: 205 2025/01/28 01:32:45 code coverage: enabled 2025/01/28 01:32:45 comparison tracing: enabled 2025/01/28 01:32:45 extra coverage: enabled 2025/01/28 01:32:45 setuid sandbox: enabled 2025/01/28 01:32:45 namespace sandbox: enabled 2025/01/28 01:32:45 Android sandbox: enabled 2025/01/28 01:32:45 fault injection: enabled 2025/01/28 01:32:45 leak checking: enabled 2025/01/28 01:32:45 net packet injection: enabled 2025/01/28 01:32:45 net device setup: enabled 2025/01/28 01:32:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 01:32:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 01:32:45 USB emulation: enabled 2025/01/28 01:32:45 hci packet injection: enabled 2025/01/28 01:32:45 wifi device emulation: enabled 2025/01/28 01:32:45 802.15.4 emulation: enabled 2025/01/28 01:32:45 fetching corpus: 0, signal 0/0 (executing program) 2025/01/28 01:32:47 starting 8 fuzzer processes 01:32:47 executing program 0: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x39}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x4c825) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400601a13fd01c37}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x90}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7f}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x83}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x6}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x81}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x94) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2800448}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000015}, 0x30004041) r3 = accept4(0xffffffffffffffff, &(0x7f0000000540)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, &(0x7f00000005c0)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041040}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040801) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r2) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r6, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48}, 0x845) r7 = accept4(r3, &(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000a40)=0x80, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x140}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4090) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x80) 01:32:47 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)="70449d692fa6ecb8ffe2e650ae1494a3e5d059758d2f32f56d64fca6cdb325f7a3b87491fed6e4b936790522d640ea2e0745a9caa40bd35f377e4e3f41a44025ea26efd7eccf55b6c94c2413f451bb8c1505ae0c8062d8b5a54a7e5946ff02c023ffbc5e0e66b4f0062d22ab3f75279de9db7723bc42e740d9aad9a4fc45a073b2d015f32129897e") getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)="eaaa62297ecb914a3067f180ebab6eaafd22284f98aa19d1a480b5") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x3, &(0x7f0000000280)="fcaaf8765034634a62692b123c8dbfcab7cf707da651db2fbc400ba288e776bb11173fdfc2e9d10e334d2cc7d0f23bf00df680cd8de1ac836070cc94bc88", 0xbf, 0x0, 0x0, {0x1, r2}}, 0x9c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index, 0xeaa1, 0x0, 0x1, 0x0, 0x1, {0x0, r3}}, 0x3) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r4) r5 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80, 0x80000) bind(r5, &(0x7f0000000440)=@ethernet={0x1}, 0x80) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f00000004c0)={0x7, 0x7, 0x2}, &(0x7f0000000500)=0x28) r6 = accept$inet(r5, &(0x7f0000000540)={0x2, 0x0, @remote}, &(0x7f0000000580)=0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r0, 0x40, 0x0, 0x3, 0x81, {{0x3d, 0x4, 0x1, 0x2, 0xf4, 0x64, 0x0, 0x7f, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@lsrr={0x83, 0x7, 0xc, [@local]}, @rr={0x7, 0xb, 0x3a, [@multicast2, @rand_addr=0x64010102]}, @cipso={0x86, 0x42, 0x3, [{0x2, 0x12, "bcba5f37852509cce4aa0e7290536971"}, {0x7, 0x11, "7e0b5d201609911818e7f21ed99143"}, {0x0, 0x5, "c17467"}, {0x0, 0x5, "ad8f06"}, {0x5, 0xf, "228f4ac0179fef108b83c3b9f5"}]}, @rr={0x7, 0xb, 0xb2, [@broadcast, @empty]}, @rr={0x7, 0xb, 0x51, [@remote, @multicast2]}, @lsrr={0x83, 0x2b, 0x8b, [@remote, @multicast1, @broadcast, @local, @loopback, @broadcast, @remote, @private=0xa010101, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0xc8, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@multicast1}, {@multicast2, 0x1}, {@private=0xa010100, 0x8}, {@local, 0x4}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x2000}]}, @generic={0x89, 0xa, "629074719095f3de"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000740)={'syztnl0\x00', r7, 0x8000, 0x0, 0x0, 0x2, {{0x1c, 0x4, 0x0, 0x27, 0x70, 0x67, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010100, @local, {[@cipso={0x86, 0x4f, 0x0, [{0x6, 0x8, "f385af646ba5"}, {0x4143a34128b8d879, 0x7, "82acdc75b0"}, {0x7, 0xc, "a1d6f0e495ef1691ed05"}, {0x6, 0x9, "f097266805ebc2"}, {0x2, 0x10, "7cdfed7406d3c026df111aa98280"}, {0x6, 0x7, "9e8364a628"}, {0x5, 0xe, "82606f6a64f21dc145511ac9"}]}, @generic={0x89, 0x3, "f7"}, @generic={0x89, 0x8, "5009e36829dc"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'syztnl2\x00', r1, 0x20, 0x10, 0x3, 0xffff0000, {{0x15, 0x4, 0x3, 0x39, 0x54, 0x67, 0x0, 0xb9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0xbe, 0x1, 0x5, [{@rand_addr=0x64010101, 0x1}, {@empty, 0xfffffff8}]}, @end, @ssrr={0x89, 0x27, 0xdd, [@dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1]}, @noop]}}}}}) 01:32:47 executing program 1: getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001100)={'broute\x00', 0x0, 0x4, 0x1000, [0x8, 0xb73000000000000, 0x4, 0x5, 0xadf, 0xe466], 0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/4096}, &(0x7f0000001180)=0x78) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x60, 0x0, 0x404, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x40040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x80000000}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0xa523ca54091b7558}, 0x4044004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x5c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x401}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001700), 0x10000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000001840)={'nat\x00', 0x0, 0x4, 0x1c, [0x1f, 0x2, 0x1, 0x8, 0x5, 0xfffffffffffffffd], 0xa, &(0x7f0000001740)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001800)=""/28}, &(0x7f00000018c0)=0x78) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x480) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x81) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001b00)) r6 = socket(0x3, 0x80807, 0x101) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000001c00)={&(0x7f0000001b40), 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001c40)={'icmp\x00'}, &(0x7f0000001c80)=0x1e) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000001dc0)={&(0x7f0000001cc0), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004800}, 0x48041) 01:32:47 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/12, 0xc}], 0x1, &(0x7f0000000100)=""/190, 0xbe}, 0x101) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000cc0)=@nat={'nat\x00', 0x19, 0x1, 0xa7e, [0x20000240, 0x0, 0x0, 0x20000270, 0x200002a0], 0x0, &(0x7f0000000200), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0x1}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x5, 0x0, 0x6019, 'geneve1\x00', 'veth0_vlan\x00', 'erspan0\x00', 'veth1_to_bond\x00', @broadcast, [0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x936, 0x9a6, 0x9ee, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00'}}}, @among={{'among\x00', 0x0, 0x850}, {{@offset, @offset, 0x1, {[0x40, 0x5ff994f9, 0x0, 0x2, 0x400, 0x7, 0x1, 0x3, 0x9, 0x7, 0x1000, 0x5, 0xef, 0x8, 0x1, 0x80000000, 0xfff, 0x3, 0xffffffff, 0x2, 0x0, 0x1, 0x8, 0x3, 0xcb39, 0x101, 0x1, 0x8000, 0x5, 0x3, 0x16, 0x1ff, 0xffffffff, 0x4, 0x9b1c, 0x1b6, 0x5, 0x2, 0xdf99, 0x3, 0x44, 0x1000, 0x7c93, 0x5, 0x8001, 0x8001, 0x7, 0x63, 0x8, 0x1, 0x7fffffff, 0x0, 0x2, 0x7, 0x400, 0x8, 0xc193, 0x0, 0x2, 0xff, 0x200, 0x80000000, 0x3, 0x4c3e, 0x7fffffff, 0x40, 0x8000, 0xfffffffa, 0x7ff, 0x101, 0x6, 0x1, 0x6, 0x9, 0xfcbe, 0x6e, 0x9, 0x7, 0x5, 0x7, 0x7f, 0x8, 0x1, 0x36, 0x9, 0x1000, 0x7dbc, 0x7, 0x0, 0x78fa8235, 0x0, 0x3, 0x6, 0x20, 0x1000, 0x1, 0x2, 0x4, 0x8, 0x3ff, 0x85c5, 0x0, 0xfffffffb, 0x0, 0x20, 0xe27, 0xfff, 0x3f, 0x7f, 0x2, 0x9, 0xffffd403, 0x81, 0x3, 0x6, 0xba, 0x1, 0x2f, 0x8, 0x6, 0x7, 0x6, 0x40, 0x40, 0x7, 0x0, 0x100, 0x6, 0x1, 0x7, 0x0, 0x4, 0x9, 0x2a6, 0x2, 0x9, 0x3, 0x9, 0x4, 0x10001, 0x1, 0x2, 0x10000, 0x800000, 0x8000, 0xda36, 0xc000000, 0x4, 0x6, 0x7, 0x1b359d6, 0x6, 0x8000, 0x9a, 0x40, 0x1, 0x0, 0x4175, 0x82ce, 0x7fffffff, 0x4, 0x9, 0x79, 0x331, 0x4, 0x2, 0x1, 0x7e6, 0x6, 0x6, 0x400, 0x0, 0x6, 0x0, 0x101, 0xe7c, 0x2, 0x316, 0x5, 0x4, 0x80000001, 0x1f, 0x9, 0x3, 0x7, 0x5, 0x400, 0x5, 0x2, 0x1, 0x7ff, 0x100, 0x401, 0x6, 0x3, 0x5, 0x3, 0x80, 0xeb, 0x6, 0x0, 0xffffffc5, 0x3, 0x6, 0x1f, 0x0, 0x80000000, 0x8000, 0x2, 0x6, 0x2, 0xad8, 0x10001, 0xfff, 0x0, 0x7afd, 0x10000, 0xffff94ad, 0x0, 0x9, 0x5e89d6ce, 0x8000000, 0x0, 0x57ae7b9c, 0x0, 0x1, 0x4, 0x80000001, 0x4, 0x8000, 0x7, 0x100, 0x4efc, 0x7, 0x1, 0x0, 0x80, 0x20, 0x7ff, 0x1f, 0x2, 0xb96c, 0x692b, 0xfffffe00, 0xc3c, 0x7, 0x8, 0x9, 0x6, 0xfffffffe, 0xfffffff7, 0x8, 0x8, 0x4, 0x8e55, 0x1c000000, 0x46], 0x3, [{[0x200, 0x200], @local}, {[0x8, 0x7632], @rand_addr=0x5}, {[0x0, 0x5], @multicast2}]}, {[0x3f, 0x5, 0xb4, 0x40, 0x9, 0x1, 0xffffffff, 0x3, 0x8, 0x1, 0xd4, 0x0, 0xda8, 0x5, 0xffff, 0x9, 0x6e, 0x6, 0x9, 0x8a, 0x8, 0x3, 0x9, 0x8, 0x1000, 0x20, 0x6, 0x40, 0x9f1a, 0x8001, 0x3, 0x1f, 0x7fffffff, 0x80000000, 0x1000, 0x6, 0x6b, 0x9, 0xffffffff, 0x5, 0x8, 0xfb1e, 0x3, 0x1ff, 0x5, 0x0, 0x9, 0x9, 0x5, 0x6, 0x4, 0x3ff, 0x20, 0x2f53, 0x2, 0x7, 0x80000000, 0x3, 0x800, 0x6, 0x10001, 0x1ff, 0xff, 0x0, 0xfffc, 0xffff, 0x6, 0x81, 0x4, 0x5, 0x7, 0x5, 0x4, 0x80000000, 0x6b0, 0x8, 0x7f, 0xffffff80, 0xfa5, 0x3a, 0x3e, 0x7, 0x400, 0xfffff45a, 0xf84, 0xb77, 0x7ff, 0x6bd6, 0x0, 0x7fffffff, 0x4, 0xf91c, 0x3, 0x307b, 0x2, 0x80000000, 0x0, 0x10d6000, 0x7, 0xffffffc1, 0x8, 0x3, 0x58, 0x5, 0x7, 0x7, 0x3, 0x0, 0x10000, 0x4, 0xfffffffd, 0xb625, 0x0, 0x7a20ee60, 0x6, 0x0, 0x6, 0x8, 0x10000, 0x21d1605, 0x66d7126f, 0x6, 0x80000001, 0x7fffffff, 0xaf, 0x6, 0x0, 0x1f, 0x75, 0x1, 0x80000000, 0x10001, 0x401, 0x6, 0xcd, 0xb3, 0x8, 0x1, 0x6a, 0x81, 0x3b5, 0x7c0a, 0x8, 0xd0, 0x81, 0x7c7, 0x1c4, 0x4, 0x4, 0x8, 0x7fffffff, 0x6, 0x7, 0x8, 0x3, 0x3, 0x3f, 0x20, 0x20, 0x6, 0xaa, 0x51d6, 0x20, 0x80000000, 0x1, 0x0, 0x6, 0x10000, 0x84, 0x8, 0x4, 0x7, 0x1f, 0x4, 0x4152a656, 0x800, 0x10000, 0x7, 0x4, 0xe3a, 0x80000000, 0x1, 0x81, 0x101, 0x8, 0x1ff, 0x5, 0x1, 0x5, 0x10001, 0x7, 0x27, 0xcf3, 0x0, 0x81, 0x4, 0x3, 0x1f, 0x4, 0x0, 0x4, 0xffffffff, 0x0, 0x7, 0x401, 0x10001, 0x9c, 0xca, 0xfff, 0x0, 0x3, 0x6, 0xffff, 0x80000001, 0x101, 0x3f, 0x9, 0x8, 0x8, 0x0, 0xdf, 0x5e, 0x5, 0x1, 0x1ff, 0x7fff, 0x2, 0x7, 0x0, 0x8001, 0x2, 0x3ff, 0xa8b, 0x2, 0xebff, 0x5, 0x81, 0x7ff, 0x40, 0x8, 0x400, 0x8, 0x3df, 0x9, 0x8, 0x5, 0x2f1ee1d0, 0x7, 0x7, 0x3, 0x5f0d, 0xc7, 0x10000, 0x6, 0x80000001, 0x3, 0x3], 0x1, [{[0x401, 0x81], @rand_addr=0x64010101}]}}}}], [@snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@random="d641f322d38c", 0xfffffffffffffffd}}}], @common=@ERROR={'ERROR\x00', 0x20, {"c092ed0a6bf31ab59e61be03c54fba189e082b1f495a71ceb393aae2120b"}}}]}]}, 0xaf6) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000d40)={0x21, 0x2c, 0x17, 0x3, 0x0, 0xfffffffd, 0x1, 0x143}) r1 = syz_open_dev$rtc(&(0x7f0000000d80), 0x5, 0x501402) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000dc0)={0x17, 0x2c, 0xf, 0x3, 0x4, 0x9db, 0x5, 0x142, 0x1}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000e00), 0x141400, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000e40)={0xe3e, 0x9, 0x6, 0x9, 0x8001, 0x5, 0x8000}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000f00)={'nat\x00', 0x0, 0x4, 0x25, [0xff, 0x1000, 0x20, 0x9, 0x6, 0x6], 0x4, &(0x7f0000000e80)=[{}, {}, {}, {}], &(0x7f0000000ec0)=""/37}, &(0x7f0000000f80)=0x78) r2 = socket(0x2, 0xa, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002880)={'erspan0\x00', &(0x7f0000002800)={'tunl0\x00', 0x0, 0x8000, 0x40, 0x4, 0xdf90, {{0x17, 0x4, 0x2, 0x1f, 0x5c, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x23, 0x3, [{0x7, 0x2}, {0x5, 0x7, "5d6ff4da01"}, {0x1, 0xf, "542cb67ad5f669565837f5efb4"}, {0x1, 0x5, '0jY'}]}, @noop, @timestamp_addr={0x44, 0x14, 0x96, 0x1, 0x4, [{@rand_addr=0x64010102, 0x48000000}, {@empty, 0x80000000}]}, @ssrr={0x89, 0xf, 0xa, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2f}, @remote]}]}}}}}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000002980)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x42001}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000029c0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002a00)) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000002a40)={0x2e, 0x22, 0x16, 0xf, 0x1, 0x8001, 0x3, 0x64, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x800, 0x401) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000002a80), &(0x7f0000002ac0)=0xc) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000002b00)={0x5, 0x5}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002bc0)={'syztnl1\x00', &(0x7f0000002b40)={'syztnl1\x00', r3, 0x8000, 0x7, 0x2, 0x10000, {{0x9, 0x4, 0x3, 0x12, 0x24, 0x65, 0x0, 0xff, 0x29, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x86, 0x10, "dac0927bf979c4e80645d6315daa"}]}}}}}) gettid() 01:32:47 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000080)=0x80, 0x80000) sendmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@nfc={0x27, 0x0, 0x2, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="5e516316233b09c98a13ccc24120a9bf8d5b286fc43716aa61d6efbbbccab24f8fc0073a52ef6a82fc589c2f18ac0c2b3918a9079c63fac4fb25cb15094ad97184e226b6e68f640b22c42f9dd59171944ee7679a2b80ad77133836738eafb07a", 0x60}], 0x1, &(0x7f0000000200)=[{0x10, 0x93, 0xfffffff5}, {0xb8, 0x10e, 0x7, "9195ea3929ef9688b54470300b46fd4305d64edd5031981b4e144e00c0f58a80658a00ef809a81643c52663e0c182295f2b4543b83f177bb373051f02461e272d1c58fd6459a8b5640bf3cf32927762a0ba5b35a746cb5f5c5f1eaeed54e3b32b070bc763792f0488975d9dcf9d4214f29a097b4abb34475efc8ff8f3fc5cdfce7da472883d84678ab10764c73034e01a0da538f81ffd41159c86089392a65971b2441454720"}, {0xc8, 0x104, 0x1ff, "57bb1ca36e52540bd305df72bf212886d5fd7ba673d4f733542d4bdbe9235d3317bdde06b2b1808b8eca79f99525becd89f685f57abda6aafe6545004ac004fb67d11e505b651a1d0838cf2dfb5fd7854e56442e8b62efeb38a80272da784bee1a6093e35ed2dd1ef85cfdb91bde97f90a1a15ee0d4da3d181f6128b6e2edc9a6d2d94002eb2ba84cf9da5de3fc0d8f9fdbc9823e0d44b7e8a2aa739bc14efb5ae66053c9c6c6ea059d5cce3ca102844cfc5771daf76c38d"}], 0x190}, 0x20000004) r2 = accept4(r1, 0x0, &(0x7f0000000400), 0x80800) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_TID={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x40) r3 = accept$inet(r0, &(0x7f0000000540), &(0x7f0000000580)=0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[r0, r2, r3], 0x3, 0x0, 0x1}, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000640)={'tunl0\x00', 0x0, 0x1, 0x80, 0x2734, 0x0, {{0x14, 0x4, 0x1, 0x22, 0x50, 0x64, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @private=0xa010100, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x93, 0x3, 0x6, [{@multicast1, 0x81}]}, @timestamp_prespec={0x44, 0x14, 0x5e, 0x3, 0x2, [{@private=0xa010101, 0xfff}, {@rand_addr=0x64010100, 0x3}]}, @cipso={0x86, 0x18, 0x1, [{0x2, 0xe, "2f1168f57eeef587912efe1e"}, {0x1, 0x4, "a0b3"}]}]}}}}}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r1, &(0x7f0000000700), 0x0, 0x0, 0x80000, 0x1, {0x0, r5}}, 0x9) socket$inet(0x2, 0x800, 0x8000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000780), 0x2000, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f00000007c0)={0x3, 'geneve1\x00', {0x20}, 0x8}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r8, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket(0x5, 0x80007, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000a80)={'tunl0\x00', &(0x7f0000000940)={'gre0\x00', r4, 0x7, 0x10, 0x7, 0x7, {{0x39, 0x4, 0x1, 0xf, 0xe4, 0x65, 0x0, 0x72, 0x4, 0x0, @empty, @rand_addr=0x64010100, {[@ssrr={0x89, 0x1f, 0xfa, [@broadcast, @dev={0xac, 0x14, 0x14, 0x12}, @empty, @remote, @multicast2, @private=0xa010100, @rand_addr=0x64010102]}, @ra={0x94, 0x4}, @cipso={0x86, 0x19, 0x3, [{0x7, 0x7, "d8fcabcf70"}, {0x5, 0xc, "e9581a5fbc7e54d2eab8"}]}, @cipso={0x86, 0xc, 0x515f875dad590b2b, [{0x6, 0x6, "35e81c0f"}]}, @cipso={0x86, 0x35, 0x3, [{0x2, 0x9, "21fcb25867c42a"}, {0x1, 0x6, "958f2db2"}, {0x0, 0x8, "c20d5ca5c381"}, {0x2, 0x6, "43ad5341"}, {0x1, 0x12, "e6a8c489adf380b5512e586449b981e8"}]}, @rr={0x7, 0x27, 0xfe, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast2, @multicast1, @remote, @empty, @loopback, @broadcast, @multicast2]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x28, 0xd9, 0x0, 0x1, [0x5, 0x200, 0x8958, 0x0, 0xe83, 0x2, 0x9b6f, 0x2, 0xa6]}]}}}}}) r10 = accept4(r6, &(0x7f0000000ac0)=@nl, &(0x7f0000000b40)=0x80, 0x1cc3906f3aaf466b) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r10, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 01:32:47 executing program 5: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8811}, 0x810) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x20000884) write$nbd(0xffffffffffffffff, &(0x7f0000000280)={0x67446698, 0x1, 0x4, 0x3, 0x2, "32c841a4bc0d061a48ce1537ececa038f2c345bbbdd6e9adfad34c1bbc2c4b43d5417cff213664457e057e10b224b730298c89920d6d1ec0fa98a951129062532a92469d979471d6d1dd3899f563c47260e0073a1c678d60156cf336814ec0d24f7963c98ba2f7b638a6a222f79ea05397dd4c0b7db726ff25"}, 0x89) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x0, @sco={0x1f, @none}, @hci={0x1f, 0xffffffffffffffff}, @generic={0x25, "21357d61a88c7262278c784ff317"}, 0x6, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)='lo\x00', 0x6, 0x7, 0xfffd}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x230042, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x43e}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6e9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c041}, 0x804) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, 0x0, 0x204, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfe6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xdff4e52345377fed}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x20008890) syz_genetlink_get_family_id$gtp(&(0x7f0000000ac0), r5) r6 = socket(0x2f, 0x2, 0x1) sendto$inet(r6, &(0x7f0000000b00)="861ddec658", 0x5, 0x0, &(0x7f0000000b40)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000b80), &(0x7f0000000bc0)=0x30) 01:32:47 executing program 6: r0 = gettid() ptrace$getregset(0x4204, r0, 0x6, &(0x7f0000000040)={&(0x7f0000000000)=""/3, 0x3}) r1 = syz_io_uring_setup(0x39e, &(0x7f0000000080)={0x0, 0x703, 0x10, 0x0, 0x1db}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x4, 0xf670, {}, 0x7f, 0x6, 0x1}, 0x200) r3 = accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) ptrace$getregset(0x4204, r0, 0x6, &(0x7f0000000280)={&(0x7f0000000240)=""/32, 0x20}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x110, r1, 0x8000000) ptrace$getregset(0x4204, r0, 0x4, &(0x7f00000003c0)={&(0x7f00000002c0)=""/246, 0xf6}) r4 = accept4(r3, &(0x7f0000000440)=@can={0x1d, 0x0}, &(0x7f00000004c0)=0x80, 0x800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000540)={'erspan0\x00', r5, 0x7800, 0x10, 0x7a4, 0xffffe0de, {{0x22, 0x4, 0x1, 0x6, 0x88, 0x65, 0x0, 0x6, 0x29, 0x0, @remote, @empty, {[@cipso={0x86, 0x18, 0x2, [{0x2, 0x6, "7144768f"}, {0x7, 0xc, "8094fe97be8222a27054"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x3f, 0x3, 0x5, [{@rand_addr=0x64010100, 0x8}, {@private=0xa010100}, {@rand_addr=0x64010102, 0x3f}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0x96, 0x0, 0x6, [0x2, 0x9923, 0x41, 0x7, 0x5, 0x1f, 0x0]}, @end]}}}}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r4) r6 = socket$inet(0x2, 0x6, 0x1000) recvmsg(r6, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000680)=""/91, 0x5b}, {&(0x7f0000000700)=""/47, 0x2f}, {&(0x7f0000000740)=""/14, 0xe}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000880)=""/49, 0x31}, {&(0x7f00000008c0)=""/57, 0x39}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x7, &(0x7f0000001980)}, 0x2) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r1, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7, 0x40010, r1, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f0000001a00)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x6000, @fd=r1, 0x5, 0x5, 0x14d0f39f, 0x3, 0x1, {0x3}}, 0x69) sched_getaffinity(r0, 0x8, &(0x7f0000001a40)) recvmsg(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001a80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001b00)=""/112, 0x70}], 0x1}, 0x40) [ 89.889859] audit: type=1400 audit(1738027967.390:7): avc: denied { execmem } for pid=270 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:32:47 executing program 7: socketpair(0x27, 0x4, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044044}, 0x10) sendto$inet(r0, &(0x7f0000000180)="d66c1f8a3c85a1b81ba4cb118e67b4ba1beafed2ad64f1a75e623a34b29c3f2d4d4a40985e1968915a4462bdc5c8d7da85ed35b23f0894d9170773e1f66795f6168339616db214c95db2ed2c394ab9c360f22e5f85e659b6a5f51b1acef9255e0a3b0eaf7954f08aff85502e38b5df6d67c79f4b524471887a44e1628f27671446a658b2a6374664bd56827f352ca62fd25c9d8fe2f048fa2041ec115ad727fb4ca5ba1620c33985ecb6ebba6799856beb42cdc791242dd46773ff22684a122596c87ab003454c6805d263ee9b7d", 0xce, 0x8000, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2181}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000400)) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000440)={0x3, 'veth1_macvtap\x00', {0xe1}, 0xc39}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x8000, 0x700, 0x3, 0x100, {{0x19, 0x4, 0x0, 0x15, 0x64, 0x66, 0x0, 0xff, 0x4, 0x0, @empty, @loopback, {[@ssrr={0x89, 0xf, 0x10, [@loopback, @loopback, @private=0xa010102]}, @ssrr={0x89, 0x17, 0x5f, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010102, @remote]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x86, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x4a, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x94}]}]}}}}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r1) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000600), r1) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000680)={0x0, @in={0x2, 0x4e24, @multicast2}, @tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, @can={0x1d, r4}, 0x7, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)='bond_slave_1\x00', 0xfffffffffffff801, 0x7f, 0x5e0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000700)={'syztnl1\x00', r4, 0x8000, 0x700, 0x1, 0x10000, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast2, @rand_addr=0x64010102}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'erspan0\x00', r4, 0x700, 0x80, 0x579, 0x6, {{0x10, 0x4, 0x3, 0x7, 0x40, 0x67, 0x0, 0x20, 0x29, 0x0, @broadcast, @multicast2, {[@timestamp_prespec={0x44, 0x2c, 0xa0, 0x3, 0x0, [{@empty, 0x8000}, {@multicast1, 0xfffffffd}, {@local, 0x4c7a}, {@private=0xa010102, 0x159}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000900)={'gre0\x00', &(0x7f0000000840)={'gre0\x00', r4, 0xf809, 0x7f19, 0x36, 0x3ff, {{0x20, 0x4, 0x0, 0x4, 0x80, 0x67, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0x1b, 0x0, 0xf, [0x1ff, 0x4, 0xc0]}, @rr={0x7, 0x2b, 0xa5, [@remote, @private=0xa010100, @remote, @broadcast, @empty, @broadcast, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @local]}, @ssrr={0x89, 0x1b, 0x9c, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp={0x44, 0xc, 0xa0, 0x0, 0x9, [0x5, 0x0]}, @generic={0x44, 0x4, '\vY'}, @end, @ra={0x94, 0x4}]}}}}}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000009c0)={0x0, @xdp={0x2c, 0x5, r4, 0xfffffffe}, @in={0x2, 0x7, @dev={0xac, 0x14, 0x14, 0x21}}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, 0xffd4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x1}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000f00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000a40)={0x460, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r4}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4c}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x4}}, {{0x8, 0x1, r10}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3186}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xd4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x460}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000f40)='vcan0\x00') r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x20, r11, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x40800) [ 91.305248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.311491] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.318766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.328741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.335220] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.337733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.366410] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.368579] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.370817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.376612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.379551] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.381802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.456255] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.459235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.461117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.480464] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.484673] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.488207] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.493282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.495361] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.504360] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.506184] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.507454] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.514554] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.519445] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.521192] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.522837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.526074] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.527198] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.534867] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.541569] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.545244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.552430] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.557640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.559773] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.561828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.562121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.566629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.571700] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.577199] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.580169] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.584434] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.589882] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.593527] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.598624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.656171] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.676322] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.701573] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.399767] Bluetooth: hci0: command tx timeout [ 93.463264] Bluetooth: hci1: command tx timeout [ 93.591540] Bluetooth: hci4: command tx timeout [ 93.655068] Bluetooth: hci5: command tx timeout [ 93.655127] Bluetooth: hci6: command tx timeout [ 93.656087] Bluetooth: hci3: command tx timeout [ 93.720128] Bluetooth: hci2: command tx timeout [ 93.783008] Bluetooth: hci7: command tx timeout [ 95.448091] Bluetooth: hci0: command tx timeout [ 95.512432] Bluetooth: hci1: command tx timeout [ 95.639068] Bluetooth: hci4: command tx timeout [ 95.703702] Bluetooth: hci3: command tx timeout [ 95.704590] Bluetooth: hci6: command tx timeout [ 95.704849] Bluetooth: hci5: command tx timeout [ 95.768216] Bluetooth: hci2: command tx timeout [ 95.831048] Bluetooth: hci7: command tx timeout [ 97.496035] Bluetooth: hci0: command tx timeout [ 97.559035] Bluetooth: hci1: command tx timeout [ 97.687171] Bluetooth: hci4: command tx timeout [ 97.751113] Bluetooth: hci5: command tx timeout [ 97.751182] Bluetooth: hci6: command tx timeout [ 97.751576] Bluetooth: hci3: command tx timeout [ 97.815142] Bluetooth: hci2: command tx timeout [ 97.879436] Bluetooth: hci7: command tx timeout [ 99.544233] Bluetooth: hci0: command tx timeout [ 99.607063] Bluetooth: hci1: command tx timeout [ 99.735082] Bluetooth: hci4: command tx timeout [ 99.799293] Bluetooth: hci3: command tx timeout [ 99.800593] Bluetooth: hci6: command tx timeout [ 99.800627] Bluetooth: hci5: command tx timeout [ 99.863333] Bluetooth: hci2: command tx timeout [ 99.927018] Bluetooth: hci7: command tx timeout [ 151.318565] syz-executor.1 (278) used greatest stack depth: 23296 bytes left [ 153.891610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.900290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.903059] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.909149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.912824] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.914602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.954682] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.962485] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.965019] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.968165] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.968304] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.974594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.978037] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.987265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.990425] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.992405] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.997648] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.000715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.085583] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.092286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.095247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.108863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.114480] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.122569] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.168974] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.173567] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.182315] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.205275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.209702] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.212292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.238890] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.243049] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.244404] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.250789] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.257024] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.259036] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.344717] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.356781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.358640] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.367606] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.372676] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.379849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.380633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.393340] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.414096] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.465257] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.483682] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.497262] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.991046] Bluetooth: hci0: command tx timeout [ 156.055088] Bluetooth: hci1: command tx timeout [ 156.055989] Bluetooth: hci2: command tx timeout [ 156.184990] Bluetooth: hci3: command tx timeout [ 156.312057] Bluetooth: hci5: command tx timeout [ 156.312865] Bluetooth: hci4: command tx timeout [ 156.440016] Bluetooth: hci7: command tx timeout [ 156.630990] Bluetooth: hci6: command tx timeout [ 158.039960] Bluetooth: hci0: command tx timeout [ 158.105068] Bluetooth: hci2: command tx timeout [ 158.105526] Bluetooth: hci1: command tx timeout [ 158.231063] Bluetooth: hci3: command tx timeout [ 158.359053] Bluetooth: hci4: command tx timeout [ 158.359503] Bluetooth: hci5: command tx timeout [ 158.487946] Bluetooth: hci7: command tx timeout [ 158.678965] Bluetooth: hci6: command tx timeout [ 160.088069] Bluetooth: hci0: command tx timeout [ 160.151054] Bluetooth: hci2: command tx timeout [ 160.151530] Bluetooth: hci1: command tx timeout [ 160.280973] Bluetooth: hci3: command tx timeout [ 160.406982] Bluetooth: hci5: command tx timeout [ 160.407438] Bluetooth: hci4: command tx timeout [ 160.535238] Bluetooth: hci7: command tx timeout [ 160.728046] Bluetooth: hci6: command tx timeout [ 162.135073] Bluetooth: hci0: command tx timeout [ 162.199064] Bluetooth: hci1: command tx timeout [ 162.199855] Bluetooth: hci2: command tx timeout [ 162.327837] Bluetooth: hci3: command tx timeout [ 162.455292] Bluetooth: hci4: command tx timeout [ 162.456387] Bluetooth: hci5: command tx timeout [ 162.583043] Bluetooth: hci7: command tx timeout [ 162.775225] Bluetooth: hci6: command tx timeout [ 215.908211] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.912645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.915326] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.920126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.924547] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.925802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.964716] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.966949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.971603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.994848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.998856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.001687] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.003568] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.005040] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.010372] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.017731] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.023254] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.027096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.112348] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.123277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.128761] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.139161] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.153592] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.165375] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.167607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.188985] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.194197] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.205296] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.236258] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.253286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.277319] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.285315] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.293086] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.306805] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.326481] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.328210] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.332442] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.336810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.339678] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.341705] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.363610] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.364871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.368473] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.376809] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.382371] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.390786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.412155] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.416093] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.006976] Bluetooth: hci0: command tx timeout [ 218.071054] Bluetooth: hci1: command tx timeout [ 218.136007] Bluetooth: hci2: command tx timeout [ 218.199089] Bluetooth: hci3: command tx timeout [ 218.327988] Bluetooth: hci4: command tx timeout [ 218.392063] Bluetooth: hci7: command tx timeout [ 218.521110] Bluetooth: hci5: command tx timeout [ 218.585050] Bluetooth: hci6: command tx timeout [ 220.054969] Bluetooth: hci0: command tx timeout [ 220.119096] Bluetooth: hci1: command tx timeout [ 220.183940] Bluetooth: hci2: command tx timeout [ 220.248064] Bluetooth: hci3: command tx timeout [ 220.376021] Bluetooth: hci4: command tx timeout [ 220.439981] Bluetooth: hci7: command tx timeout [ 220.567966] Bluetooth: hci5: command tx timeout [ 220.631044] Bluetooth: hci6: command tx timeout [ 222.103172] Bluetooth: hci0: command tx timeout [ 222.166964] Bluetooth: hci1: command tx timeout [ 222.232043] Bluetooth: hci2: command tx timeout [ 222.295005] Bluetooth: hci3: command tx timeout [ 222.423003] Bluetooth: hci4: command tx timeout [ 222.487925] Bluetooth: hci7: command tx timeout [ 222.616017] Bluetooth: hci5: command tx timeout [ 222.680064] Bluetooth: hci6: command tx timeout [ 224.151957] Bluetooth: hci0: command tx timeout [ 224.215973] Bluetooth: hci1: command tx timeout [ 224.280029] Bluetooth: hci2: command tx timeout [ 224.343914] Bluetooth: hci3: command tx timeout [ 224.471932] Bluetooth: hci4: command tx timeout [ 224.535023] Bluetooth: hci7: command tx timeout [ 224.662946] Bluetooth: hci5: command tx timeout [ 224.728319] Bluetooth: hci6: command tx timeout [ 271.980095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.980824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.217670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.218368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.580030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.580685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.025511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.026207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:35:51 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)="70449d692fa6ecb8ffe2e650ae1494a3e5d059758d2f32f56d64fca6cdb325f7a3b87491fed6e4b936790522d640ea2e0745a9caa40bd35f377e4e3f41a44025ea26efd7eccf55b6c94c2413f451bb8c1505ae0c8062d8b5a54a7e5946ff02c023ffbc5e0e66b4f0062d22ab3f75279de9db7723bc42e740d9aad9a4fc45a073b2d015f32129897e") getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)="eaaa62297ecb914a3067f180ebab6eaafd22284f98aa19d1a480b5") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x3, &(0x7f0000000280)="fcaaf8765034634a62692b123c8dbfcab7cf707da651db2fbc400ba288e776bb11173fdfc2e9d10e334d2cc7d0f23bf00df680cd8de1ac836070cc94bc88", 0xbf, 0x0, 0x0, {0x1, r2}}, 0x9c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index, 0xeaa1, 0x0, 0x1, 0x0, 0x1, {0x0, r3}}, 0x3) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r4) r5 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80, 0x80000) bind(r5, &(0x7f0000000440)=@ethernet={0x1}, 0x80) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f00000004c0)={0x7, 0x7, 0x2}, &(0x7f0000000500)=0x28) r6 = accept$inet(r5, &(0x7f0000000540)={0x2, 0x0, @remote}, &(0x7f0000000580)=0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r0, 0x40, 0x0, 0x3, 0x81, {{0x3d, 0x4, 0x1, 0x2, 0xf4, 0x64, 0x0, 0x7f, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@lsrr={0x83, 0x7, 0xc, [@local]}, @rr={0x7, 0xb, 0x3a, [@multicast2, @rand_addr=0x64010102]}, @cipso={0x86, 0x42, 0x3, [{0x2, 0x12, "bcba5f37852509cce4aa0e7290536971"}, {0x7, 0x11, "7e0b5d201609911818e7f21ed99143"}, {0x0, 0x5, "c17467"}, {0x0, 0x5, "ad8f06"}, {0x5, 0xf, "228f4ac0179fef108b83c3b9f5"}]}, @rr={0x7, 0xb, 0xb2, [@broadcast, @empty]}, @rr={0x7, 0xb, 0x51, [@remote, @multicast2]}, @lsrr={0x83, 0x2b, 0x8b, [@remote, @multicast1, @broadcast, @local, @loopback, @broadcast, @remote, @private=0xa010101, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0xc8, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@multicast1}, {@multicast2, 0x1}, {@private=0xa010100, 0x8}, {@local, 0x4}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x2000}]}, @generic={0x89, 0xa, "629074719095f3de"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000740)={'syztnl0\x00', r7, 0x8000, 0x0, 0x0, 0x2, {{0x1c, 0x4, 0x0, 0x27, 0x70, 0x67, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010100, @local, {[@cipso={0x86, 0x4f, 0x0, [{0x6, 0x8, "f385af646ba5"}, {0x4143a34128b8d879, 0x7, "82acdc75b0"}, {0x7, 0xc, "a1d6f0e495ef1691ed05"}, {0x6, 0x9, "f097266805ebc2"}, {0x2, 0x10, "7cdfed7406d3c026df111aa98280"}, {0x6, 0x7, "9e8364a628"}, {0x5, 0xe, "82606f6a64f21dc145511ac9"}]}, @generic={0x89, 0x3, "f7"}, @generic={0x89, 0x8, "5009e36829dc"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'syztnl2\x00', r1, 0x20, 0x10, 0x3, 0xffff0000, {{0x15, 0x4, 0x3, 0x39, 0x54, 0x67, 0x0, 0xb9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0xbe, 0x1, 0x5, [{@rand_addr=0x64010101, 0x1}, {@empty, 0xfffffff8}]}, @end, @ssrr={0x89, 0x27, 0xdd, [@dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1]}, @noop]}}}}}) [ 273.677166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.677797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:35:51 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)="70449d692fa6ecb8ffe2e650ae1494a3e5d059758d2f32f56d64fca6cdb325f7a3b87491fed6e4b936790522d640ea2e0745a9caa40bd35f377e4e3f41a44025ea26efd7eccf55b6c94c2413f451bb8c1505ae0c8062d8b5a54a7e5946ff02c023ffbc5e0e66b4f0062d22ab3f75279de9db7723bc42e740d9aad9a4fc45a073b2d015f32129897e") getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)="eaaa62297ecb914a3067f180ebab6eaafd22284f98aa19d1a480b5") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x3, &(0x7f0000000280)="fcaaf8765034634a62692b123c8dbfcab7cf707da651db2fbc400ba288e776bb11173fdfc2e9d10e334d2cc7d0f23bf00df680cd8de1ac836070cc94bc88", 0xbf, 0x0, 0x0, {0x1, r2}}, 0x9c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index, 0xeaa1, 0x0, 0x1, 0x0, 0x1, {0x0, r3}}, 0x3) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r4) r5 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80, 0x80000) bind(r5, &(0x7f0000000440)=@ethernet={0x1}, 0x80) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f00000004c0)={0x7, 0x7, 0x2}, &(0x7f0000000500)=0x28) r6 = accept$inet(r5, &(0x7f0000000540)={0x2, 0x0, @remote}, &(0x7f0000000580)=0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r0, 0x40, 0x0, 0x3, 0x81, {{0x3d, 0x4, 0x1, 0x2, 0xf4, 0x64, 0x0, 0x7f, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@lsrr={0x83, 0x7, 0xc, [@local]}, @rr={0x7, 0xb, 0x3a, [@multicast2, @rand_addr=0x64010102]}, @cipso={0x86, 0x42, 0x3, [{0x2, 0x12, "bcba5f37852509cce4aa0e7290536971"}, {0x7, 0x11, "7e0b5d201609911818e7f21ed99143"}, {0x0, 0x5, "c17467"}, {0x0, 0x5, "ad8f06"}, {0x5, 0xf, "228f4ac0179fef108b83c3b9f5"}]}, @rr={0x7, 0xb, 0xb2, [@broadcast, @empty]}, @rr={0x7, 0xb, 0x51, [@remote, @multicast2]}, @lsrr={0x83, 0x2b, 0x8b, [@remote, @multicast1, @broadcast, @local, @loopback, @broadcast, @remote, @private=0xa010101, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0xc8, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@multicast1}, {@multicast2, 0x1}, {@private=0xa010100, 0x8}, {@local, 0x4}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x2000}]}, @generic={0x89, 0xa, "629074719095f3de"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000740)={'syztnl0\x00', r7, 0x8000, 0x0, 0x0, 0x2, {{0x1c, 0x4, 0x0, 0x27, 0x70, 0x67, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010100, @local, {[@cipso={0x86, 0x4f, 0x0, [{0x6, 0x8, "f385af646ba5"}, {0x4143a34128b8d879, 0x7, "82acdc75b0"}, {0x7, 0xc, "a1d6f0e495ef1691ed05"}, {0x6, 0x9, "f097266805ebc2"}, {0x2, 0x10, "7cdfed7406d3c026df111aa98280"}, {0x6, 0x7, "9e8364a628"}, {0x5, 0xe, "82606f6a64f21dc145511ac9"}]}, @generic={0x89, 0x3, "f7"}, @generic={0x89, 0x8, "5009e36829dc"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'syztnl2\x00', r1, 0x20, 0x10, 0x3, 0xffff0000, {{0x15, 0x4, 0x3, 0x39, 0x54, 0x67, 0x0, 0xb9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0xbe, 0x1, 0x5, [{@rand_addr=0x64010101, 0x1}, {@empty, 0xfffffff8}]}, @end, @ssrr={0x89, 0x27, 0xdd, [@dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1]}, @noop]}}}}}) [ 273.844159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.844827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:35:51 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)="70449d692fa6ecb8ffe2e650ae1494a3e5d059758d2f32f56d64fca6cdb325f7a3b87491fed6e4b936790522d640ea2e0745a9caa40bd35f377e4e3f41a44025ea26efd7eccf55b6c94c2413f451bb8c1505ae0c8062d8b5a54a7e5946ff02c023ffbc5e0e66b4f0062d22ab3f75279de9db7723bc42e740d9aad9a4fc45a073b2d015f32129897e") getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)="eaaa62297ecb914a3067f180ebab6eaafd22284f98aa19d1a480b5") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x3, &(0x7f0000000280)="fcaaf8765034634a62692b123c8dbfcab7cf707da651db2fbc400ba288e776bb11173fdfc2e9d10e334d2cc7d0f23bf00df680cd8de1ac836070cc94bc88", 0xbf, 0x0, 0x0, {0x1, r2}}, 0x9c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index, 0xeaa1, 0x0, 0x1, 0x0, 0x1, {0x0, r3}}, 0x3) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r4) r5 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80, 0x80000) bind(r5, &(0x7f0000000440)=@ethernet={0x1}, 0x80) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f00000004c0)={0x7, 0x7, 0x2}, &(0x7f0000000500)=0x28) r6 = accept$inet(r5, &(0x7f0000000540)={0x2, 0x0, @remote}, &(0x7f0000000580)=0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r0, 0x40, 0x0, 0x3, 0x81, {{0x3d, 0x4, 0x1, 0x2, 0xf4, 0x64, 0x0, 0x7f, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@lsrr={0x83, 0x7, 0xc, [@local]}, @rr={0x7, 0xb, 0x3a, [@multicast2, @rand_addr=0x64010102]}, @cipso={0x86, 0x42, 0x3, [{0x2, 0x12, "bcba5f37852509cce4aa0e7290536971"}, {0x7, 0x11, "7e0b5d201609911818e7f21ed99143"}, {0x0, 0x5, "c17467"}, {0x0, 0x5, "ad8f06"}, {0x5, 0xf, "228f4ac0179fef108b83c3b9f5"}]}, @rr={0x7, 0xb, 0xb2, [@broadcast, @empty]}, @rr={0x7, 0xb, 0x51, [@remote, @multicast2]}, @lsrr={0x83, 0x2b, 0x8b, [@remote, @multicast1, @broadcast, @local, @loopback, @broadcast, @remote, @private=0xa010101, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0xc8, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@multicast1}, {@multicast2, 0x1}, {@private=0xa010100, 0x8}, {@local, 0x4}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x2000}]}, @generic={0x89, 0xa, "629074719095f3de"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000740)={'syztnl0\x00', r7, 0x8000, 0x0, 0x0, 0x2, {{0x1c, 0x4, 0x0, 0x27, 0x70, 0x67, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010100, @local, {[@cipso={0x86, 0x4f, 0x0, [{0x6, 0x8, "f385af646ba5"}, {0x4143a34128b8d879, 0x7, "82acdc75b0"}, {0x7, 0xc, "a1d6f0e495ef1691ed05"}, {0x6, 0x9, "f097266805ebc2"}, {0x2, 0x10, "7cdfed7406d3c026df111aa98280"}, {0x6, 0x7, "9e8364a628"}, {0x5, 0xe, "82606f6a64f21dc145511ac9"}]}, @generic={0x89, 0x3, "f7"}, @generic={0x89, 0x8, "5009e36829dc"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'syztnl2\x00', r1, 0x20, 0x10, 0x3, 0xffff0000, {{0x15, 0x4, 0x3, 0x39, 0x54, 0x67, 0x0, 0xb9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0xbe, 0x1, 0x5, [{@rand_addr=0x64010101, 0x1}, {@empty, 0xfffffff8}]}, @end, @ssrr={0x89, 0x27, 0xdd, [@dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1]}, @noop]}}}}}) [ 274.050554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.051264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:35:51 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)="70449d692fa6ecb8ffe2e650ae1494a3e5d059758d2f32f56d64fca6cdb325f7a3b87491fed6e4b936790522d640ea2e0745a9caa40bd35f377e4e3f41a44025ea26efd7eccf55b6c94c2413f451bb8c1505ae0c8062d8b5a54a7e5946ff02c023ffbc5e0e66b4f0062d22ab3f75279de9db7723bc42e740d9aad9a4fc45a073b2d015f32129897e") getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)="eaaa62297ecb914a3067f180ebab6eaafd22284f98aa19d1a480b5") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x3, &(0x7f0000000280)="fcaaf8765034634a62692b123c8dbfcab7cf707da651db2fbc400ba288e776bb11173fdfc2e9d10e334d2cc7d0f23bf00df680cd8de1ac836070cc94bc88", 0xbf, 0x0, 0x0, {0x1, r1}}, 0x9c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index, 0xeaa1, 0x0, 0x1, 0x0, 0x1, {0x0, r2}}, 0x3) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r3) r4 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80, 0x80000) bind(r4, &(0x7f0000000440)=@ethernet={0x1}, 0x80) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f00000004c0)={0x7, 0x7, 0x2}, &(0x7f0000000500)=0x28) r5 = accept$inet(r4, &(0x7f0000000540)={0x2, 0x0, @remote}, &(0x7f0000000580)=0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r0, 0x40, 0x0, 0x3, 0x81, {{0x3d, 0x4, 0x1, 0x2, 0xf4, 0x64, 0x0, 0x7f, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@lsrr={0x83, 0x7, 0xc, [@local]}, @rr={0x7, 0xb, 0x3a, [@multicast2, @rand_addr=0x64010102]}, @cipso={0x86, 0x42, 0x3, [{0x2, 0x12, "bcba5f37852509cce4aa0e7290536971"}, {0x7, 0x11, "7e0b5d201609911818e7f21ed99143"}, {0x0, 0x5, "c17467"}, {0x0, 0x5, "ad8f06"}, {0x5, 0xf, "228f4ac0179fef108b83c3b9f5"}]}, @rr={0x7, 0xb, 0xb2, [@broadcast, @empty]}, @rr={0x7, 0xb, 0x51, [@remote, @multicast2]}, @lsrr={0x83, 0x2b, 0x8b, [@remote, @multicast1, @broadcast, @local, @loopback, @broadcast, @remote, @private=0xa010101, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0xc8, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@multicast1}, {@multicast2, 0x1}, {@private=0xa010100, 0x8}, {@local, 0x4}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x2000}]}, @generic={0x89, 0xa, "629074719095f3de"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000740)={'syztnl0\x00', r6, 0x8000, 0x0, 0x0, 0x2, {{0x1c, 0x4, 0x0, 0x27, 0x70, 0x67, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010100, @local, {[@cipso={0x86, 0x4f, 0x0, [{0x6, 0x8, "f385af646ba5"}, {0x4143a34128b8d879, 0x7, "82acdc75b0"}, {0x7, 0xc, "a1d6f0e495ef1691ed05"}, {0x6, 0x9, "f097266805ebc2"}, {0x2, 0x10, "7cdfed7406d3c026df111aa98280"}, {0x6, 0x7, "9e8364a628"}, {0x5, 0xe, "82606f6a64f21dc145511ac9"}]}, @generic={0x89, 0x3, "f7"}, @generic={0x89, 0x8, "5009e36829dc"}]}}}}}) [ 274.214644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.215635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:35:51 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)="70449d692fa6ecb8ffe2e650ae1494a3e5d059758d2f32f56d64fca6cdb325f7a3b87491fed6e4b936790522d640ea2e0745a9caa40bd35f377e4e3f41a44025ea26efd7eccf55b6c94c2413f451bb8c1505ae0c8062d8b5a54a7e5946ff02c023ffbc5e0e66b4f0062d22ab3f75279de9db7723bc42e740d9aad9a4fc45a073b2d015f32129897e") getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)="eaaa62297ecb914a3067f180ebab6eaafd22284f98aa19d1a480b5") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x3, &(0x7f0000000280)="fcaaf8765034634a62692b123c8dbfcab7cf707da651db2fbc400ba288e776bb11173fdfc2e9d10e334d2cc7d0f23bf00df680cd8de1ac836070cc94bc88", 0xbf, 0x0, 0x0, {0x1, r1}}, 0x9c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index, 0xeaa1, 0x0, 0x1, 0x0, 0x1, {0x0, r2}}, 0x3) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r3) r4 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80, 0x80000) bind(r4, &(0x7f0000000440)=@ethernet={0x1}, 0x80) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f00000004c0)={0x7, 0x7, 0x2}, &(0x7f0000000500)=0x28) accept$inet(r4, &(0x7f0000000540)={0x2, 0x0, @remote}, &(0x7f0000000580)=0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r0, 0x40, 0x0, 0x3, 0x81, {{0x3d, 0x4, 0x1, 0x2, 0xf4, 0x64, 0x0, 0x7f, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@lsrr={0x83, 0x7, 0xc, [@local]}, @rr={0x7, 0xb, 0x3a, [@multicast2, @rand_addr=0x64010102]}, @cipso={0x86, 0x42, 0x3, [{0x2, 0x12, "bcba5f37852509cce4aa0e7290536971"}, {0x7, 0x11, "7e0b5d201609911818e7f21ed99143"}, {0x0, 0x5, "c17467"}, {0x0, 0x5, "ad8f06"}, {0x5, 0xf, "228f4ac0179fef108b83c3b9f5"}]}, @rr={0x7, 0xb, 0xb2, [@broadcast, @empty]}, @rr={0x7, 0xb, 0x51, [@remote, @multicast2]}, @lsrr={0x83, 0x2b, 0x8b, [@remote, @multicast1, @broadcast, @local, @loopback, @broadcast, @remote, @private=0xa010101, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0xc8, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@multicast1}, {@multicast2, 0x1}, {@private=0xa010100, 0x8}, {@local, 0x4}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x2000}]}, @generic={0x89, 0xa, "629074719095f3de"}]}}}}}) [ 274.381304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.382286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:35:51 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)="70449d692fa6ecb8ffe2e650ae1494a3e5d059758d2f32f56d64fca6cdb325f7a3b87491fed6e4b936790522d640ea2e0745a9caa40bd35f377e4e3f41a44025ea26efd7eccf55b6c94c2413f451bb8c1505ae0c8062d8b5a54a7e5946ff02c023ffbc5e0e66b4f0062d22ab3f75279de9db7723bc42e740d9aad9a4fc45a073b2d015f32129897e") getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)="eaaa62297ecb914a3067f180ebab6eaafd22284f98aa19d1a480b5") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x3, &(0x7f0000000280)="fcaaf8765034634a62692b123c8dbfcab7cf707da651db2fbc400ba288e776bb11173fdfc2e9d10e334d2cc7d0f23bf00df680cd8de1ac836070cc94bc88", 0xbf, 0x0, 0x0, {0x1, r0}}, 0x9c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index, 0xeaa1, 0x0, 0x1, 0x0, 0x1, {0x0, r1}}, 0x3) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80, 0x80000) bind(r3, &(0x7f0000000440)=@ethernet={0x1}, 0x80) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f00000004c0)={0x7, 0x7, 0x2}, &(0x7f0000000500)=0x28) accept$inet(r3, &(0x7f0000000540)={0x2, 0x0, @remote}, &(0x7f0000000580)=0x10) [ 274.564159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.564912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:35:52 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)="70449d692fa6ecb8ffe2e650ae1494a3e5d059758d2f32f56d64fca6cdb325f7a3b87491fed6e4b936790522d640ea2e0745a9caa40bd35f377e4e3f41a44025ea26efd7eccf55b6c94c2413f451bb8c1505ae0c8062d8b5a54a7e5946ff02c023ffbc5e0e66b4f0062d22ab3f75279de9db7723bc42e740d9aad9a4fc45a073b2d015f32129897e") getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)="eaaa62297ecb914a3067f180ebab6eaafd22284f98aa19d1a480b5") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x3, &(0x7f0000000280)="fcaaf8765034634a62692b123c8dbfcab7cf707da651db2fbc400ba288e776bb11173fdfc2e9d10e334d2cc7d0f23bf00df680cd8de1ac836070cc94bc88", 0xbf, 0x0, 0x0, {0x1, r0}}, 0x9c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index, 0xeaa1, 0x0, 0x1, 0x0, 0x1, {0x0, r1}}, 0x3) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80, 0x80000) bind(r3, &(0x7f0000000440)=@ethernet={0x1}, 0x80) accept$inet(r3, &(0x7f0000000540)={0x2, 0x0, @remote}, &(0x7f0000000580)=0x10) [ 274.719646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.720346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:35:52 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)="70449d692fa6ecb8ffe2e650ae1494a3e5d059758d2f32f56d64fca6cdb325f7a3b87491fed6e4b936790522d640ea2e0745a9caa40bd35f377e4e3f41a44025ea26efd7eccf55b6c94c2413f451bb8c1505ae0c8062d8b5a54a7e5946ff02c023ffbc5e0e66b4f0062d22ab3f75279de9db7723bc42e740d9aad9a4fc45a073b2d015f32129897e") getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)="eaaa62297ecb914a3067f180ebab6eaafd22284f98aa19d1a480b5") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x3, &(0x7f0000000280)="fcaaf8765034634a62692b123c8dbfcab7cf707da651db2fbc400ba288e776bb11173fdfc2e9d10e334d2cc7d0f23bf00df680cd8de1ac836070cc94bc88", 0xbf, 0x0, 0x0, {0x1, r0}}, 0x9c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index, 0xeaa1, 0x0, 0x1, 0x0, 0x1, {0x0, r1}}, 0x3) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80, 0x80000) accept$inet(r3, &(0x7f0000000540)={0x2, 0x0, @remote}, &(0x7f0000000580)=0x10) [ 274.871728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.872414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.970258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.970973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.172783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.173657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.234315] [ 275.234557] ====================================================== [ 275.235100] WARNING: possible circular locking dependency detected [ 275.235624] 6.13.0-next-20250124 #1 Not tainted [ 275.236023] ------------------------------------------------------ [ 275.237296] kworker/u8:1/67 is trying to acquire lock: [ 275.238485] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.240666] [ 275.240666] but task is already holding lock: [ 275.242164] ffff888024270768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 275.244424] [ 275.244424] which lock already depends on the new lock. [ 275.244424] [ 275.245096] [ 275.245096] the existing dependency chain (in reverse order) is: [ 275.245711] [ 275.245711] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 275.246280] __mutex_lock+0x13d/0xb50 [ 275.246693] wiphy_register+0x1b2e/0x25d0 [ 275.247124] ieee80211_register_hw+0x23a4/0x3d60 [ 275.247590] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 275.248085] init_mac80211_hwsim+0x389/0x870 [ 275.248545] do_one_initcall+0xf9/0x640 [ 275.248964] kernel_init_freeable+0x53d/0x7a0 [ 275.249423] kernel_init+0x1e/0x2d0 [ 275.249793] ret_from_fork+0x48/0x80 [ 275.250172] ret_from_fork_asm+0x1a/0x30 [ 275.250599] [ 275.250599] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 275.251134] __lock_acquire+0x29fd/0x4580 [ 275.251553] lock_acquire+0x19b/0x520 [ 275.251940] __mutex_lock+0x13d/0xb50 [ 275.252334] unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.252870] unregister_netdevice_queue+0x224/0x2e0 [ 275.253351] _cfg80211_unregister_wdev+0x57b/0x700 [ 275.253829] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 275.254305] ieee80211_unregister_hw+0x55/0x3a0 [ 275.254768] hwsim_exit_net+0x3a0/0x730 [ 275.255169] ops_exit_list+0xb3/0x180 [ 275.255556] cleanup_net+0x546/0xad0 [ 275.255940] process_one_work+0x8ee/0x1a10 [ 275.256379] worker_thread+0x674/0xe70 [ 275.256793] kthread+0x3ab/0x720 [ 275.257159] ret_from_fork+0x48/0x80 [ 275.257529] ret_from_fork_asm+0x1a/0x30 [ 275.257950] [ 275.257950] other info that might help us debug this: [ 275.257950] [ 275.258612] Possible unsafe locking scenario: [ 275.258612] [ 275.259113] CPU0 CPU1 [ 275.259502] ---- ---- [ 275.259888] lock(&rdev->wiphy.mtx); [ 275.260232] lock(rtnl_mutex); [ 275.260729] lock(&rdev->wiphy.mtx); [ 275.261263] lock(rtnl_mutex); [ 275.261573] [ 275.261573] *** DEADLOCK *** [ 275.261573] [ 275.262067] 4 locks held by kworker/u8:1/67: [ 275.262448] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 275.263322] #1: ffff88800d22fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 275.264163] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 275.264937] #3: ffff888024270768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 275.265810] [ 275.265810] stack backtrace: [ 275.266192] CPU: 1 UID: 0 PID: 67 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250124 #1 [ 275.266228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 275.266249] Workqueue: netns cleanup_net [ 275.266289] Call Trace: [ 275.266298] [ 275.266309] dump_stack_lvl+0xca/0x120 [ 275.266366] print_circular_bug+0x47b/0x750 [ 275.266411] check_noncircular+0x2e9/0x3c0 [ 275.266450] ? srso_return_thunk+0x5/0x5f [ 275.266505] ? __pfx_check_noncircular+0x10/0x10 [ 275.266544] ? hlock_class+0x4e/0x130 [ 275.266574] ? mark_lock+0xac/0xed0 [ 275.266612] ? srso_return_thunk+0x5/0x5f [ 275.266665] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 275.266718] ? lockdep_lock+0xba/0x1b0 [ 275.266774] ? __pfx_lockdep_lock+0x10/0x10 [ 275.266834] __lock_acquire+0x29fd/0x4580 [ 275.266886] ? __pfx___lock_acquire+0x10/0x10 [ 275.266928] ? lock_release+0x20f/0x6f0 [ 275.266971] ? __pfx_lock_release+0x10/0x10 [ 275.267017] lock_acquire+0x19b/0x520 [ 275.267058] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.267106] ? __pfx_lock_acquire+0x10/0x10 [ 275.267149] ? srso_return_thunk+0x5/0x5f [ 275.267202] ? lock_release+0x20f/0x6f0 [ 275.267244] ? srso_return_thunk+0x5/0x5f [ 275.267297] ? lock_is_held_type+0x9e/0x120 [ 275.267350] ? srso_return_thunk+0x5/0x5f [ 275.267407] __mutex_lock+0x13d/0xb50 [ 275.267462] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.267506] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.267550] ? srso_return_thunk+0x5/0x5f [ 275.267604] ? synchronize_rcu_expedited+0x38a/0x420 [ 275.267646] ? __pfx___mutex_lock+0x10/0x10 [ 275.267698] ? __pfx_autoremove_wake_function+0x10/0x10 [ 275.267751] ? srso_return_thunk+0x5/0x5f [ 275.267804] ? kasan_quarantine_put+0x84/0x1e0 [ 275.267864] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 275.267897] ? srso_return_thunk+0x5/0x5f [ 275.267955] unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.267999] ? __virt_addr_valid+0x2e8/0x5d0 [ 275.268050] ? __pfx_lock_release+0x10/0x10 [ 275.268093] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 275.268137] ? find_held_lock+0x2c/0x110 [ 275.268193] ? srso_return_thunk+0x5/0x5f [ 275.268249] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 275.268308] ? srso_return_thunk+0x5/0x5f [ 275.268361] ? lock_release+0x20f/0x6f0 [ 275.268403] ? __pfx_lock_release+0x10/0x10 [ 275.268445] ? srso_return_thunk+0x5/0x5f [ 275.268498] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 275.268544] ? srso_return_thunk+0x5/0x5f [ 275.268602] unregister_netdevice_queue+0x224/0x2e0 [ 275.268644] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 275.268686] ? up_write+0x195/0x520 [ 275.268739] _cfg80211_unregister_wdev+0x57b/0x700 [ 275.268790] ? srso_return_thunk+0x5/0x5f [ 275.268846] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 275.268884] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 275.268921] ? srso_return_thunk+0x5/0x5f [ 275.268974] ? srso_return_thunk+0x5/0x5f [ 275.269027] ? synchronize_rcu+0x1ff/0x260 [ 275.269068] ieee80211_unregister_hw+0x55/0x3a0 [ 275.269111] hwsim_exit_net+0x3a0/0x730 [ 275.269152] ? __pfx_hwsim_exit_net+0x10/0x10 [ 275.269191] ? srso_return_thunk+0x5/0x5f [ 275.269244] ? netdev_run_todo+0x788/0x1040 [ 275.269292] ? __pfx_hwsim_exit_net+0x10/0x10 [ 275.269333] ops_exit_list+0xb3/0x180 [ 275.269374] cleanup_net+0x546/0xad0 [ 275.269417] ? __pfx_cleanup_net+0x10/0x10 [ 275.269469] process_one_work+0x8ee/0x1a10 [ 275.269533] ? __pfx_process_one_work+0x10/0x10 [ 275.269589] ? srso_return_thunk+0x5/0x5f [ 275.269642] ? srso_return_thunk+0x5/0x5f [ 275.269696] ? move_linked_works+0x172/0x270 [ 275.269739] ? srso_return_thunk+0x5/0x5f [ 275.269792] ? assign_work+0x196/0x240 [ 275.269847] worker_thread+0x674/0xe70 [ 275.269904] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 275.269954] ? __pfx_worker_thread+0x10/0x10 [ 275.270012] kthread+0x3ab/0x720 [ 275.270062] ? __pfx_kthread+0x10/0x10 [ 275.270112] ? finish_task_switch.isra.0+0x206/0x840 [ 275.270162] ? __pfx_kthread+0x10/0x10 [ 275.270214] ret_from_fork+0x48/0x80 [ 275.270243] ? __pfx_kthread+0x10/0x10 [ 275.270294] ret_from_fork_asm+0x1a/0x30 [ 275.270359] [ 275.337768] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 277.411077] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.420268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.422801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.428819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.434593] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.441025] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.541052] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.546098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.553628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.565568] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.570398] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.575109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.877059] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.881132] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.891181] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.900112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.906272] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.908142] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.923831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.928777] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.934062] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.943119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.949827] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.951707] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.978724] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.983196] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.985462] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.997810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.007049] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.009477] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.510966] Bluetooth: hci0: command tx timeout [ 279.639017] Bluetooth: hci1: command tx timeout [ 279.958947] Bluetooth: hci4: command tx timeout [ 280.025908] Bluetooth: hci6: command tx timeout [ 280.087925] Bluetooth: hci7: command tx timeout [ 281.558930] Bluetooth: hci0: command tx timeout [ 281.686951] Bluetooth: hci1: command tx timeout [ 282.006942] Bluetooth: hci4: command tx timeout [ 282.070987] Bluetooth: hci6: command tx timeout [ 282.134941] Bluetooth: hci7: command tx timeout [ 283.606917] Bluetooth: hci0: command tx timeout [ 283.735334] Bluetooth: hci1: command tx timeout [ 284.055178] Bluetooth: hci4: command tx timeout [ 284.119183] Bluetooth: hci6: command tx timeout [ 284.184947] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 01:35:53 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff819a5456 RDX=ffff8880249db780 RSI=ffffffff819a5146 RDI=0000000000000006 RBP=0000000000000025 RSP=ffff8880335d7b20 R8 =00007f8c962af000 R9 =fffff9400003b938 R10=0000000000000025 R11=0000000000000000 R12=ffff8880335d7d98 R13=ffff88800bb5e0e0 R14=0000000000000000 R15=ffffea00001dc9c0 RIP=ffffffff819a5146 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8c961c0540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8c962a3a20 CR3=000000000c292000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000000000000000006d69747465 XMM04=006d6f72667663657200796164666f65 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000078 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800d22ec90 R8 =0000000000000000 R9 =ffffed10018a1046 R10=0000000000000078 R11=3038383866666666 R12=0000000000000078 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005623e77b0428 CR3=000000000d7c8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=6c6175747269762f736563697665642f XMM02=ffffffffffffffff00000000000000ff XMM03=ffffffffffffffffffffff0000000000 XMM04=ffffffff0000000100005623e7730a00 XMM05=00005623e77b06e000005623e77b06c0 XMM06=00000040000056230030316d69737768 XMM07=00000000000000000000000000000000 XMM08=00000000000000410000000000000040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000