Warning: Permanently added '[localhost]:28384' (ECDSA) to the list of known hosts. 2025/01/28 23:47:18 fuzzer started 2025/01/28 23:47:18 dialing manager at localhost:40187 syzkaller login: [ 61.599332] cgroup: Unknown subsys name 'net' [ 61.697746] cgroup: Unknown subsys name 'cpuset' [ 61.725752] cgroup: Unknown subsys name 'rlimit' [ 67.555612] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 78.570094] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 23:47:36 syscalls: 201 2025/01/28 23:47:36 code coverage: enabled 2025/01/28 23:47:36 comparison tracing: enabled 2025/01/28 23:47:36 extra coverage: enabled 2025/01/28 23:47:36 setuid sandbox: enabled 2025/01/28 23:47:36 namespace sandbox: enabled 2025/01/28 23:47:36 Android sandbox: enabled 2025/01/28 23:47:36 fault injection: enabled 2025/01/28 23:47:36 leak checking: enabled 2025/01/28 23:47:36 net packet injection: enabled 2025/01/28 23:47:36 net device setup: enabled 2025/01/28 23:47:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 23:47:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 23:47:36 USB emulation: enabled 2025/01/28 23:47:36 hci packet injection: enabled 2025/01/28 23:47:36 wifi device emulation: enabled 2025/01/28 23:47:36 802.15.4 emulation: enabled 2025/01/28 23:47:36 fetching corpus: 0, signal 0/0 (executing program) 2025/01/28 23:47:38 starting 8 fuzzer processes 23:47:38 executing program 0: epoll_create(0x3ff) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x9000) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xd1, 0x8) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000804}, 0x4040080) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffff80000001) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000180)='[--%v-)#\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff) r1 = syz_io_uring_setup(0x42e6, &(0x7f0000000200)={0x0, 0x541b, 0x0, 0x3, 0x2da, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000001300)=@IORING_OP_WRITE={0x17, 0x2, 0x4000, @fd, 0x9, &(0x7f0000000300)="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", 0x1000, 0x18}, 0x66) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xce}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x82dfa266}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x102a2777a4deb532) r3 = fsmount(r0, 0x1, 0x87) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r4 = syz_io_uring_setup(0x539c, &(0x7f0000001580)={0x0, 0x8955, 0x4, 0x0, 0x377}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001600), &(0x7f0000001640)) syz_io_uring_setup(0x62cb, &(0x7f0000001680)={0x0, 0x365e, 0x4, 0x3, 0x35b, 0x0, r4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001700), &(0x7f0000001740)) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0xe6c0feab2cec2779}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x4c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x12, r0, 0x9) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x72e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x4008001) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000001a00)=r3, 0x1) 23:47:38 executing program 1: sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x260, 0x1, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFQA_PAYLOAD={0x61, 0xa, "02ee39d262ae28467776c26098cc416941040d6d33aae460f5eabebf70c02297bc67824851e38cf15e632b68b583c794898d9057eecbe1a03718d81d9edc292a2e325ddce4fb11aba26c9c4b04a36745c7fe175b47a200f2d1789b02d4"}, @NFQA_MARK={0x8}, @NFQA_EXP={0xe8, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}}}}]}, @CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}]}]}, @NFQA_EXP={0x38, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1000}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x10001}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x4}}, @NFQA_PAYLOAD={0xb3, 0xa, "b8f42395cfa70b6bd6c31f25d9cc640be211a90eedeb7b1c29e5d642efc079715fad1e5cb1f36cc5b0c370a7fd509dd3a5b39ff0118488446bb67988ea043ea6df1ff04d3b3b8b448759b970372857757f6d9a99510ab6b619cc54ee8e7d5a61c4223e1d48d8b7d2724d666d02d749b046013d5eb08f0f92b6671555b0b5b75b63dd3e7f5c2a565ea26659e5ae4fa4553d99c95fdac10f7c2112879884c5e1aff0086bd0f9fb7e2bfaf92d7be6124a"}]}, 0x260}, 0x1, 0x0, 0x0, 0x44}, 0x40000) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0xb, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000094) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb0, 0xb, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, '!\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x91}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x400}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24000045) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x4000010) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000008c0), 0x40481, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x1, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000ac0)={'ip6gre0\x00', 0x0, 0x2f, 0x1f, 0x5, 0x4, 0x8, @local, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x700, 0x8706, 0x81, 0x7f}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbe5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000d00)={'syztnl0\x00', &(0x7f0000000c80)={'syztnl0\x00', r4, 0x29, 0x2, 0x20, 0x1, 0x62, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, 0x40, 0x7ff, 0x3f}}) r5 = syz_open_dev$vcsu(&(0x7f0000000d40), 0x3ff, 0x420041) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb4}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000fc0)='syz1\x00', &(0x7f0000001000)="e4b7ca41c4a88ab363ea4bc1d9bcf89a86c0d3f38065f11cae5d1ce84e566652a597582398065f535f9e7b7e78e43483fcbcf5f81631a67e6e2b6b84cec0e4825e68f4478fe9eef4e9f270468a8a8379a7b013528066990e15b38e26fb24a1af75be87a05dd9bb89bf039d16c180cbf9c1fd92ebb7490925bf912fd89c31bd6fe7ffd2e92df0307e579b2a3ec61ddcefe70be49bb517429fa7a7a90d1c2a", 0x9e) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, 0x2, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xf9f}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x40}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffff80000001}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3ff}]}, 0xac}, 0x1, 0x0, 0x0, 0x4001}, 0x20010004) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000001300)={&(0x7f0000001240), 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfc}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x48084) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x5c, 0x6, 0x6, 0x0, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 23:47:38 executing program 2: sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x5, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r0 = socket(0x21, 0x802, 0x3) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, 0x1, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_NAT_SRC={0x40, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x80000001}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x5}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x1f, 0x3f}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xff}, @CTA_PROTOINFO_TCP_STATE={0x5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x4004914) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80c02, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) r4 = fsmount(r2, 0x1, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffb}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10044008}, 0x4000) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x103, 0x0) mmap$perf(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x2, 0x12, r5, 0xd7) r6 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xdd31}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'ip6gre0\x00', r3, 0x29, 0xf5, 0x7f, 0x5, 0x8, @private0, @local, 0x80, 0x8, 0xe9, 0x10001}}) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r4, 0x9, 0x0, 0x5}, 0x7a77) write$cgroup_type(r4, &(0x7f0000000800), 0x9) perf_event_open(&(0x7f0000000880)={0x3, 0x80, 0x2, 0x9, 0x9, 0x2, 0x0, 0x800, 0x10120, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7f9b, 0x1, @perf_bp={&(0x7f0000000840), 0x1}, 0x10004, 0x1, 0x2ba76661, 0x5, 0xfff, 0x8000, 0x2, 0x0, 0xfffffffb, 0x0, 0x81}, 0x0, 0xf, 0xffffffffffffffff, 0xb) mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x2000008, 0x4010, r2, 0x10000000) [ 81.075249] audit: type=1400 audit(1738108058.720:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:47:38 executing program 3: read$snapshot(0xffffffffffffffff, 0xfffffffffffffffc, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x8679}}], [{@smackfsroot}]}}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000100)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x76ec}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x544}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c881}, 0x814) get_mempolicy(&(0x7f0000000340), &(0x7f0000000380), 0x2, &(0x7f0000ffc000/0x4000)=nil, 0x2) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0xc040, 0x0) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r3, &(0x7f0000000440)=""/48, 0x30) pipe(&(0x7f0000000480)) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x180, 0x0) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) epoll_create1(0x80000) r5 = memfd_secret(0x80000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0xbb) 23:47:38 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff8, 0x40300) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x1, 0x8, 0x3, 0x3, {{0xf, 0x4, 0x3, 0x3, 0x3c, 0x65, 0x0, 0x4, 0x29, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x27, 0xc4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010100, @multicast2, @empty, @empty]}]}}}}}) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x3602, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000180), 0x3f38cfc5, 0x22) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4010) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x285020}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x1, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004091) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pidfd_getfd(r4, r2, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000500)) pipe(&(0x7f0000000540)={0xffffffffffffffff}) ioctl$CDROMSTART(r5, 0x5308) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000001600)={&(0x7f00000005c0), &(0x7f0000000600)=""/4096, 0x1000}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r7, 0x11, 0x65, &(0x7f0000001640), &(0x7f0000001680)=0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 23:47:38 executing program 5: r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='sync\x00', 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r1 = fsopen(&(0x7f0000000080)='fuse\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='exfat\x00', &(0x7f0000000100)='sync\x00', 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x2, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x23}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6b}}]}, 0x44}}, 0x40000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x50080, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x2) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x8a1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x25c0a000) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x4080, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x2000) r5 = syz_open_dev$vcsu(&(0x7f0000000640), 0x58, 0x2002) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000680)=0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000006c0)='batadv\x00', &(0x7f0000000700)='./file0\x00', r4) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x1, 0x1, 0x62, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x20, 0x14b, 0x5}}) r6 = fsmount(r5, 0x0, 0x2) write$snapshot(r6, &(0x7f0000000800)="1bb022dd75f3d5", 0x7) 23:47:38 executing program 7: eventfd2(0xffffffff, 0x80801) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040081}, 0x4040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)="9e6a920989f3fd3e72c98756bcc7530badbb018ea15131f45ff572905859e4b2f60fe8f21bbc475966592adc0a0e94f37ca1245c316e23ec1afd16cc71fd65e929a12f98978e7e05843b3fa68579da18048ad0fcc657134273bd4bd616b5e32613d5c220cb7d2ff53398032083a8807d823b4193fd65aae910a52c", 0x7b, r1}, 0x68) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x4, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) pipe2$9p(&(0x7f00000003c0), 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000400)='cpu.pressure\x00', 0x2, 0x0) r2 = fsmount(r0, 0x1, 0x72) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000e, 0xabe13629594182f2, r2, 0x44c65000) r3 = fsmount(r2, 0x0, 0x72) r4 = io_uring_setup(0x607b, &(0x7f00000004c0)={0x0, 0xcc79, 0x2, 0x3, 0x181, 0x0, r0}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x88c00, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}], [{@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '8\\\'++'}}]}}) r5 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x6000, @fd=r5, 0x9, 0x6, 0x6, 0x4, 0x1}, 0x5e5cac40) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000600)='sync\x00', 0x0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x40010, r4, 0x8000000) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) syz_io_uring_submit(r6, 0x0, &(0x7f00000006c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000680)={r7, r8+60000000}, 0x1, 0x0, 0x1}, 0x4) 23:47:38 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x24004044) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f0000000140)={0x12a4, 0x0, 0x682, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x59c, 0x8, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e54a7ddb7e92a079a41d11960a0c76f78362328494f4ad28ff1dd82758f07378"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x98, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e2343f050b9d548bab703411fa8444618c90b8ba21fbe316a9dea65e0e8e5894"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @local, 0x6}}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x80, @private2, 0x8}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x258, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x224, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x81}}]}, {0x170, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PEERS={0xcc0, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x100, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xd0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x2cc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7473a2246087ecd8a68ab3b82cf57cd3d8cce6688f477fc61ae43ec56d302cfd"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6c9e64c6f1389fce3a99ef8dbf4df48c6437b9e6755339205d3023603d563e34"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @loopback, 0x48}}, @WGPEER_A_ALLOWEDIPS={0x260, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}]}, {0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fe08ecf09dd33008ad0a1f7eafb353d37d91c3f87002a7e7fb31f37dfa854b5d"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xfffffffb, @private1, 0x8}}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}, {0x3b0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x380, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x148, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8}]}, {0x3f4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xca}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x3d8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5, 0x3, 0x1}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "971129671c488cf7060f4998071b92e531e34ac866d83eff372b2f9199b32db3"}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0x12a4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040804) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001500)={'ip6gre0\x00', &(0x7f0000001480)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0xfc, 0x2, @loopback, @remote, 0x1, 0x8, 0x1, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000015c0)={'sit0\x00', &(0x7f0000001540)={'syztnl2\x00', r1, 0x4, 0x0, 0xb6, 0x5, 0xcd, @remote, @mcast1, 0x8000, 0x20, 0x8001, 0x100}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x24, 0x1, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001800), 0x133900, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'ip6tnl0\x00', r3, 0x29, 0xff, 0x1f, 0xd10, 0x14, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0x3, 0x2}}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044011}, 0x4000000) pipe(&(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_type(r5, &(0x7f0000001a80), 0x2, 0x0) pipe(&(0x7f0000001ac0)={0xffffffffffffffff}) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000001b00)) pipe(&(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000001c40)={&(0x7f0000001b80), 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x2c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) socketpair(0x1f, 0xa, 0xf3, &(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d00), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000001ec0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x5c, r9, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x80000) [ 82.392399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.396378] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.400134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.408120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.411317] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.413461] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.512128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.525739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.529534] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.536343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.539592] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.546396] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.657554] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.676119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.678169] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.688330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.708552] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.717196] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.726998] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.740796] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.751295] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.758278] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.762868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.766416] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.773374] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.775433] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.777694] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.779501] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.782285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.784535] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.788714] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.808322] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.810478] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.817218] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.819719] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.826847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.829475] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.831387] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 82.846151] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 82.851478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.857111] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.858591] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.870794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.875434] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 82.879457] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.880837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 82.882220] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.888503] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.479476] Bluetooth: hci0: command tx timeout [ 84.607153] Bluetooth: hci1: command tx timeout [ 84.799541] Bluetooth: hci2: command tx timeout [ 84.926045] Bluetooth: hci5: command tx timeout [ 84.990142] Bluetooth: hci4: command tx timeout [ 84.991417] Bluetooth: hci7: command tx timeout [ 84.992447] Bluetooth: hci6: command tx timeout [ 84.992495] Bluetooth: hci3: command tx timeout [ 86.526507] Bluetooth: hci0: command tx timeout [ 86.653982] Bluetooth: hci1: command tx timeout [ 86.846029] Bluetooth: hci2: command tx timeout [ 86.974339] Bluetooth: hci5: command tx timeout [ 87.040013] Bluetooth: hci7: command tx timeout [ 87.040500] Bluetooth: hci3: command tx timeout [ 87.041422] Bluetooth: hci6: command tx timeout [ 87.041839] Bluetooth: hci4: command tx timeout [ 88.573953] Bluetooth: hci0: command tx timeout [ 88.703742] Bluetooth: hci1: command tx timeout [ 88.895022] Bluetooth: hci2: command tx timeout [ 89.021970] Bluetooth: hci5: command tx timeout [ 89.085965] Bluetooth: hci6: command tx timeout [ 89.087145] Bluetooth: hci4: command tx timeout [ 89.087565] Bluetooth: hci3: command tx timeout [ 89.087955] Bluetooth: hci7: command tx timeout [ 90.623085] Bluetooth: hci0: command tx timeout [ 90.752983] Bluetooth: hci1: command tx timeout [ 90.943932] Bluetooth: hci2: command tx timeout [ 91.071567] Bluetooth: hci5: command tx timeout [ 91.134078] Bluetooth: hci7: command tx timeout [ 91.134680] Bluetooth: hci4: command tx timeout [ 91.135322] Bluetooth: hci3: command tx timeout [ 91.135395] Bluetooth: hci6: command tx timeout [ 144.879850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.882769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.886349] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.892420] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.896632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.898728] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.900464] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.906011] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.907830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.909845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.912217] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.914196] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.925197] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.928333] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.929366] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.933032] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.935273] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.951295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.978136] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.992583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.996238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.006425] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.010721] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.013129] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.120000] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.123056] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.125058] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.131110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.132305] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.135185] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.148641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.156164] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.163683] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.188234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.201357] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.221575] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.223199] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.228165] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.229593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.232567] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.243414] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.249404] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.251698] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.262228] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.263450] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.273796] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 145.286246] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.294059] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.941963] Bluetooth: hci2: command tx timeout [ 147.005966] Bluetooth: hci0: command tx timeout [ 147.006567] Bluetooth: hci1: command tx timeout [ 147.069938] Bluetooth: hci3: command tx timeout [ 147.262743] Bluetooth: hci4: command tx timeout [ 147.326214] Bluetooth: hci5: command tx timeout [ 147.327014] Bluetooth: hci7: command tx timeout [ 147.390928] Bluetooth: hci6: command tx timeout [ 148.990226] Bluetooth: hci2: command tx timeout [ 149.054129] Bluetooth: hci0: command tx timeout [ 149.054590] Bluetooth: hci1: command tx timeout [ 149.119014] Bluetooth: hci3: command tx timeout [ 149.309992] Bluetooth: hci4: command tx timeout [ 149.374920] Bluetooth: hci5: command tx timeout [ 149.375379] Bluetooth: hci7: command tx timeout [ 149.439930] Bluetooth: hci6: command tx timeout [ 151.037946] Bluetooth: hci2: command tx timeout [ 151.103048] Bluetooth: hci1: command tx timeout [ 151.103531] Bluetooth: hci0: command tx timeout [ 151.165942] Bluetooth: hci3: command tx timeout [ 151.358229] Bluetooth: hci4: command tx timeout [ 151.421992] Bluetooth: hci7: command tx timeout [ 151.422427] Bluetooth: hci5: command tx timeout [ 151.485923] Bluetooth: hci6: command tx timeout [ 153.086951] Bluetooth: hci2: command tx timeout [ 153.149998] Bluetooth: hci0: command tx timeout [ 153.150446] Bluetooth: hci1: command tx timeout [ 153.213954] Bluetooth: hci3: command tx timeout [ 153.405950] Bluetooth: hci4: command tx timeout [ 153.470094] Bluetooth: hci5: command tx timeout [ 153.470534] Bluetooth: hci7: command tx timeout [ 153.534973] Bluetooth: hci6: command tx timeout [ 200.866605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.867419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.145732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.146448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.406357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.407013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.580237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.580909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.858690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.859780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.025037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.025673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.285927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.286564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.401309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.402695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.554464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.555475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.755012] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 202.837608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.839049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:49:40 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff8, 0x40300) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x1, 0x8, 0x3, 0x3, {{0xf, 0x4, 0x3, 0x3, 0x3c, 0x65, 0x0, 0x4, 0x29, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x27, 0xc4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010100, @multicast2, @empty, @empty]}]}}}}}) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x3602, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000180), 0x3f38cfc5, 0x22) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4010) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x285020}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x1, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004091) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pidfd_getfd(r4, r2, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000500)) pipe(&(0x7f0000000540)={0xffffffffffffffff}) ioctl$CDROMSTART(r5, 0x5308) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000001600)={&(0x7f00000005c0), &(0x7f0000000600)=""/4096, 0x1000}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r7, 0x11, 0x65, &(0x7f0000001640), &(0x7f0000001680)=0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) [ 202.928115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.928761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:49:40 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x24004044) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f0000000140)={0x12a4, 0x0, 0x682, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x59c, 0x8, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e54a7ddb7e92a079a41d11960a0c76f78362328494f4ad28ff1dd82758f07378"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x98, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e2343f050b9d548bab703411fa8444618c90b8ba21fbe316a9dea65e0e8e5894"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @local, 0x6}}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x80, @private2, 0x8}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x258, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x224, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x81}}]}, {0x170, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PEERS={0xcc0, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x100, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xd0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x2cc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7473a2246087ecd8a68ab3b82cf57cd3d8cce6688f477fc61ae43ec56d302cfd"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6c9e64c6f1389fce3a99ef8dbf4df48c6437b9e6755339205d3023603d563e34"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @loopback, 0x48}}, @WGPEER_A_ALLOWEDIPS={0x260, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}]}, {0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fe08ecf09dd33008ad0a1f7eafb353d37d91c3f87002a7e7fb31f37dfa854b5d"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xfffffffb, @private1, 0x8}}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}, {0x3b0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x380, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x148, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8}]}, {0x3f4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xca}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x3d8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5, 0x3, 0x1}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "971129671c488cf7060f4998071b92e531e34ac866d83eff372b2f9199b32db3"}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0x12a4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040804) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001500)={'ip6gre0\x00', &(0x7f0000001480)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0xfc, 0x2, @loopback, @remote, 0x1, 0x8, 0x1, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000015c0)={'sit0\x00', &(0x7f0000001540)={'syztnl2\x00', r1, 0x4, 0x0, 0xb6, 0x5, 0xcd, @remote, @mcast1, 0x8000, 0x20, 0x8001, 0x100}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x24, 0x1, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001800), 0x133900, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'ip6tnl0\x00', r3, 0x29, 0xff, 0x1f, 0xd10, 0x14, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0x3, 0x2}}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044011}, 0x4000000) pipe(&(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_type(r5, &(0x7f0000001a80), 0x2, 0x0) pipe(&(0x7f0000001ac0)={0xffffffffffffffff}) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000001b00)) pipe(&(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000001c40)={&(0x7f0000001b80), 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x2c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) socketpair(0x1f, 0xa, 0xf3, &(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d00), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000001ec0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x5c, r9, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x80000) [ 203.127017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.127632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:49:40 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff8, 0x40300) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x1, 0x8, 0x3, 0x3, {{0xf, 0x4, 0x3, 0x3, 0x3c, 0x65, 0x0, 0x4, 0x29, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x27, 0xc4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010100, @multicast2, @empty, @empty]}]}}}}}) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x3602, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000180), 0x3f38cfc5, 0x22) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4010) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x285020}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x1, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004091) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pidfd_getfd(r4, r2, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000500)) pipe(&(0x7f0000000540)={0xffffffffffffffff}) ioctl$CDROMSTART(r5, 0x5308) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000001600)={&(0x7f00000005c0), &(0x7f0000000600)=""/4096, 0x1000}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r7, 0x11, 0x65, &(0x7f0000001640), &(0x7f0000001680)=0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) [ 203.255932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.256585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:49:41 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff8, 0x40300) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x1, 0x8, 0x3, 0x3, {{0xf, 0x4, 0x3, 0x3, 0x3c, 0x65, 0x0, 0x4, 0x29, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x27, 0xc4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010100, @multicast2, @empty, @empty]}]}}}}}) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x3602, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000180), 0x3f38cfc5, 0x22) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4010) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x285020}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x1, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004091) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pidfd_getfd(r4, r2, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000500)) pipe(&(0x7f0000000540)={0xffffffffffffffff}) ioctl$CDROMSTART(r5, 0x5308) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000001600)={&(0x7f00000005c0), &(0x7f0000000600)=""/4096, 0x1000}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r7, 0x11, 0x65, &(0x7f0000001640), &(0x7f0000001680)=0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) [ 203.498051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.498719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:49:41 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x24004044) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f0000000140)={0x12a4, 0x0, 0x682, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x59c, 0x8, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e54a7ddb7e92a079a41d11960a0c76f78362328494f4ad28ff1dd82758f07378"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x98, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e2343f050b9d548bab703411fa8444618c90b8ba21fbe316a9dea65e0e8e5894"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @local, 0x6}}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x80, @private2, 0x8}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x258, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x224, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x81}}]}, {0x170, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PEERS={0xcc0, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x100, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xd0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x2cc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7473a2246087ecd8a68ab3b82cf57cd3d8cce6688f477fc61ae43ec56d302cfd"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6c9e64c6f1389fce3a99ef8dbf4df48c6437b9e6755339205d3023603d563e34"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @loopback, 0x48}}, @WGPEER_A_ALLOWEDIPS={0x260, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}]}, {0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fe08ecf09dd33008ad0a1f7eafb353d37d91c3f87002a7e7fb31f37dfa854b5d"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xfffffffb, @private1, 0x8}}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}, {0x3b0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x380, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x148, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8}]}, {0x3f4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xca}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x3d8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5, 0x3, 0x1}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "971129671c488cf7060f4998071b92e531e34ac866d83eff372b2f9199b32db3"}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0x12a4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040804) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001500)={'ip6gre0\x00', &(0x7f0000001480)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0xfc, 0x2, @loopback, @remote, 0x1, 0x8, 0x1, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000015c0)={'sit0\x00', &(0x7f0000001540)={'syztnl2\x00', r1, 0x4, 0x0, 0xb6, 0x5, 0xcd, @remote, @mcast1, 0x8000, 0x20, 0x8001, 0x100}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x24, 0x1, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001800), 0x133900, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'ip6tnl0\x00', r3, 0x29, 0xff, 0x1f, 0xd10, 0x14, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0x3, 0x2}}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044011}, 0x4000000) pipe(&(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_type(r5, &(0x7f0000001a80), 0x2, 0x0) pipe(&(0x7f0000001ac0)={0xffffffffffffffff}) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000001b00)) pipe(&(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000001c40)={&(0x7f0000001b80), 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x2c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) socketpair(0x1f, 0xa, 0xf3, &(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d00), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000001ec0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x5c, r9, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x80000) 23:49:41 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff8, 0x40300) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x1, 0x8, 0x3, 0x3, {{0xf, 0x4, 0x3, 0x3, 0x3c, 0x65, 0x0, 0x4, 0x29, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x27, 0xc4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010100, @multicast2, @empty, @empty]}]}}}}}) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x3602, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000180), 0x3f38cfc5, 0x22) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4010) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x285020}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x1, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004091) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pidfd_getfd(r4, r2, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000500)) pipe(&(0x7f0000000540)={0xffffffffffffffff}) ioctl$CDROMSTART(r5, 0x5308) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000001600)={&(0x7f00000005c0), &(0x7f0000000600)=""/4096, 0x1000}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r7, 0x11, 0x65, &(0x7f0000001640), &(0x7f0000001680)=0x4) 23:49:41 executing program 7: eventfd2(0xffffffff, 0x80801) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040081}, 0x4040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)="9e6a920989f3fd3e72c98756bcc7530badbb018ea15131f45ff572905859e4b2f60fe8f21bbc475966592adc0a0e94f37ca1245c316e23ec1afd16cc71fd65e929a12f98978e7e05843b3fa68579da18048ad0fcc657134273bd4bd616b5e32613d5c220cb7d2ff53398032083a8807d823b4193fd65aae910a52c", 0x7b, r1}, 0x68) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x4, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) pipe2$9p(&(0x7f00000003c0), 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000400)='cpu.pressure\x00', 0x2, 0x0) r2 = fsmount(r0, 0x1, 0x72) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000e, 0xabe13629594182f2, r2, 0x44c65000) r3 = fsmount(r2, 0x0, 0x72) r4 = io_uring_setup(0x607b, &(0x7f00000004c0)={0x0, 0xcc79, 0x2, 0x3, 0x181, 0x0, r0}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x88c00, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}], [{@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '8\\\'++'}}]}}) r5 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x6000, @fd=r5, 0x9, 0x6, 0x6, 0x4, 0x1}, 0x5e5cac40) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000600)='sync\x00', 0x0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x40010, r4, 0x8000000) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) syz_io_uring_submit(r6, 0x0, &(0x7f00000006c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000680)={r7, r8+60000000}, 0x1, 0x0, 0x1}, 0x4) 23:49:41 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff8, 0x40300) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x1, 0x8, 0x3, 0x3, {{0xf, 0x4, 0x3, 0x3, 0x3c, 0x65, 0x0, 0x4, 0x29, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x27, 0xc4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010100, @multicast2, @empty, @empty]}]}}}}}) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x3602, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000180), 0x3f38cfc5, 0x22) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4010) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x285020}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x1, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004091) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pidfd_getfd(r4, r2, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000500)) pipe(&(0x7f0000000540)={0xffffffffffffffff}) ioctl$CDROMSTART(r5, 0x5308) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000001600)={&(0x7f00000005c0), &(0x7f0000000600)=""/4096, 0x1000}) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000001640), &(0x7f0000001680)=0x4) [ 204.109804] [ 204.110018] ====================================================== [ 204.110527] WARNING: possible circular locking dependency detected [ 204.111040] 6.13.0-next-20250128 #1 Not tainted [ 204.111444] ------------------------------------------------------ [ 204.111961] kworker/u8:0/11 is trying to acquire lock: [ 204.113051] ffffffff8621d9a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 204.115399] [ 204.115399] but task is already holding lock: [ 204.116762] ffff888007178768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 204.119266] [ 204.119266] which lock already depends on the new lock. [ 204.119266] [ 204.121277] [ 204.121277] the existing dependency chain (in reverse order) is: [ 204.121891] [ 204.121891] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 204.122466] __mutex_lock+0x13d/0xb50 [ 204.122876] wiphy_register+0x1b2e/0x25d0 [ 204.123305] ieee80211_register_hw+0x23a4/0x3d60 [ 204.123768] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 204.124261] init_mac80211_hwsim+0x389/0x870 [ 204.124716] do_one_initcall+0xf9/0x640 [ 204.125144] kernel_init_freeable+0x53d/0x7a0 [ 204.125598] kernel_init+0x1e/0x2d0 [ 204.125962] ret_from_fork+0x48/0x80 [ 204.126333] ret_from_fork_asm+0x1a/0x30 [ 204.126756] [ 204.126756] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 204.127279] __lock_acquire+0x29fd/0x4580 [ 204.127705] lock_acquire+0x19b/0x520 [ 204.128101] __mutex_lock+0x13d/0xb50 [ 204.128500] unregister_netdevice_many_notify+0x1612/0x1c80 [ 204.129039] unregister_netdevice_queue+0x224/0x2e0 [ 204.129520] _cfg80211_unregister_wdev+0x57b/0x700 [ 204.130002] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 204.130481] ieee80211_unregister_hw+0x55/0x3a0 [ 204.130938] hwsim_exit_net+0x3a0/0x730 [ 204.131341] ops_exit_list+0xb3/0x180 [ 204.131728] cleanup_net+0x546/0xad0 [ 204.132112] process_one_work+0x8ee/0x1a10 [ 204.132552] worker_thread+0x674/0xe70 [ 204.132978] kthread+0x3ab/0x720 [ 204.133342] ret_from_fork+0x48/0x80 [ 204.133710] ret_from_fork_asm+0x1a/0x30 [ 204.134134] [ 204.134134] other info that might help us debug this: [ 204.134134] [ 204.134781] Possible unsafe locking scenario: [ 204.134781] [ 204.135274] CPU0 CPU1 [ 204.135641] ---- ---- [ 204.136001] lock(&rdev->wiphy.mtx); [ 204.136324] lock(rtnl_mutex); [ 204.136795] lock(&rdev->wiphy.mtx); [ 204.137296] lock(rtnl_mutex); [ 204.137584] [ 204.137584] *** DEADLOCK *** [ 204.137584] [ 204.138064] 4 locks held by kworker/u8:0/11: [ 204.138419] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 204.139240] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 204.140030] #2: ffffffff862119d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 204.140764] #3: ffff888007178768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 204.141596] [ 204.141596] stack backtrace: [ 204.141957] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250128 #1 [ 204.141995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 204.142017] Workqueue: netns cleanup_net [ 204.142058] Call Trace: [ 204.142068] [ 204.142079] dump_stack_lvl+0xca/0x120 [ 204.142138] print_circular_bug+0x47b/0x750 [ 204.142184] check_noncircular+0x2e9/0x3c0 [ 204.142226] ? srso_return_thunk+0x5/0x5f [ 204.142283] ? __pfx_check_noncircular+0x10/0x10 [ 204.142325] ? hlock_class+0x4e/0x130 [ 204.142356] ? mark_lock+0xac/0xed0 [ 204.142396] ? srso_return_thunk+0x5/0x5f [ 204.142452] ? sched_clock+0x37/0x60 [ 204.142509] ? lockdep_lock+0xba/0x1b0 [ 204.142567] ? __pfx_lockdep_lock+0x10/0x10 [ 204.142630] __lock_acquire+0x29fd/0x4580 [ 204.142684] ? __pfx___lock_acquire+0x10/0x10 [ 204.142727] ? lock_release+0x20f/0x6f0 [ 204.142772] ? __pfx_lock_release+0x10/0x10 [ 204.142820] lock_acquire+0x19b/0x520 [ 204.142863] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 204.142913] ? __pfx_lock_acquire+0x10/0x10 [ 204.142958] ? srso_return_thunk+0x5/0x5f [ 204.143014] ? lock_release+0x20f/0x6f0 [ 204.143058] ? srso_return_thunk+0x5/0x5f [ 204.143113] ? lock_is_held_type+0x9e/0x120 [ 204.143169] ? srso_return_thunk+0x5/0x5f [ 204.143229] __mutex_lock+0x13d/0xb50 [ 204.143281] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 204.143327] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 204.143373] ? srso_return_thunk+0x5/0x5f [ 204.143429] ? synchronize_rcu_expedited+0x38a/0x420 [ 204.143474] ? __pfx___mutex_lock+0x10/0x10 [ 204.143528] ? __pfx_autoremove_wake_function+0x10/0x10 [ 204.143583] ? srso_return_thunk+0x5/0x5f [ 204.143639] ? kasan_quarantine_put+0x84/0x1e0 [ 204.143700] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 204.143736] ? srso_return_thunk+0x5/0x5f [ 204.143796] unregister_netdevice_many_notify+0x1612/0x1c80 [ 204.143848] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 204.143896] ? srso_return_thunk+0x5/0x5f [ 204.143955] ? srso_return_thunk+0x5/0x5f [ 204.144011] ? wake_up_q+0x9e/0x140 [ 204.144054] ? srso_return_thunk+0x5/0x5f [ 204.144110] ? rwsem_wake.isra.0+0xc3/0x110 [ 204.144161] ? __pfx_rwsem_wake.isra.0+0x10/0x10 [ 204.144213] ? srso_return_thunk+0x5/0x5f [ 204.144274] unregister_netdevice_queue+0x224/0x2e0 [ 204.144318] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 204.144362] ? up_write+0x208/0x520 [ 204.144417] _cfg80211_unregister_wdev+0x57b/0x700 [ 204.144470] ? srso_return_thunk+0x5/0x5f [ 204.144530] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 204.144569] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 204.144608] ? srso_return_thunk+0x5/0x5f [ 204.144664] ? srso_return_thunk+0x5/0x5f [ 204.144720] ? synchronize_rcu+0x1ff/0x260 [ 204.144763] ieee80211_unregister_hw+0x55/0x3a0 [ 204.144818] hwsim_exit_net+0x3a0/0x730 [ 204.144860] ? __pfx_hwsim_exit_net+0x10/0x10 [ 204.144901] ? srso_return_thunk+0x5/0x5f [ 204.144957] ? netdev_run_todo+0x788/0x1040 [ 204.145006] ? __pfx_hwsim_exit_net+0x10/0x10 [ 204.145049] ops_exit_list+0xb3/0x180 [ 204.145092] cleanup_net+0x546/0xad0 [ 204.145138] ? __pfx_cleanup_net+0x10/0x10 [ 204.145191] process_one_work+0x8ee/0x1a10 [ 204.145257] ? __pfx_lock_acquire+0x10/0x10 [ 204.145302] ? __pfx_process_one_work+0x10/0x10 [ 204.145361] ? srso_return_thunk+0x5/0x5f [ 204.145417] ? move_linked_works+0x172/0x270 [ 204.145462] ? srso_return_thunk+0x5/0x5f [ 204.145518] ? assign_work+0x196/0x240 [ 204.145576] worker_thread+0x674/0xe70 [ 204.145634] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 204.145687] ? __pfx_worker_thread+0x10/0x10 [ 204.145747] kthread+0x3ab/0x720 [ 204.145799] ? __pfx_kthread+0x10/0x10 [ 204.145851] ? srso_return_thunk+0x5/0x5f [ 204.145907] ? finish_task_switch.isra.0+0x206/0x840 [ 204.145958] ? __pfx_kthread+0x10/0x10 [ 204.146013] ret_from_fork+0x48/0x80 [ 204.146044] ? __pfx_kthread+0x10/0x10 [ 204.146097] ret_from_fork_asm+0x1a/0x30 [ 204.146164] [ 206.237157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.238044] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.238800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.240190] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.241344] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 206.242292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.352385] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.356141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.357917] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.361896] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.365319] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 206.369372] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.475362] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.476692] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.477713] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.484351] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.485756] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 206.487342] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.537808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 206.555297] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 206.564218] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 206.577184] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 206.581184] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 206.583427] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 206.594703] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 206.606746] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 206.627119] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 206.652909] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 206.657395] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 206.668788] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 208.319952] Bluetooth: hci1: command tx timeout [ 208.445938] Bluetooth: hci2: command tx timeout [ 208.509927] Bluetooth: hci4: command tx timeout [ 208.637967] Bluetooth: hci5: command tx timeout [ 208.766017] Bluetooth: hci7: command tx timeout [ 210.366162] Bluetooth: hci1: command tx timeout [ 210.493977] Bluetooth: hci2: command tx timeout [ 210.557937] Bluetooth: hci4: command tx timeout [ 210.686955] Bluetooth: hci5: command tx timeout [ 210.814759] Bluetooth: hci7: command tx timeout [ 212.414085] Bluetooth: hci1: command tx timeout [ 212.541958] Bluetooth: hci2: command tx timeout [ 212.606895] Bluetooth: hci4: command tx timeout [ 212.733993] Bluetooth: hci5: command tx timeout [ 212.862220] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:49:41 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283f380 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095dec98 R8 =0000000000000001 R9 =ffffed10012bbd84 R10=0000000000000000 R11=3038383866666666 R12=000000000000006b R13=ffffffff886970b0 R14=ffffffff88697060 R15=ffffffff88697320 RIP=ffffffff8283f3d5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc78033bf8 CR3=000000000e186000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=37706f6f6c2f6b636f6c622f6c617574 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000558bed5ae7c00000558bed5a6ca0 XMM06=0000558bed5d0ba00000000400000003 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88800ec39bc0 RBX=ffffffff85aef338 RCX=ffffffff81429a8a RDX=1ffff11001d75980 RSI=0000000000000008 RDI=ffff88800ebacc00 RBP=0000000000000000 RSP=ffff88800f267dd0 R8 =0000000000000000 R9 =ffffed1001d75980 R10=ffff88800ebacc07 R11=ffff88800ec3a078 R12=ffffffff85aefff9 R13=ffff888008c50378 R14=ffff88800ec39bc0 R15=0000000000000086 RIP=ffffffff81aefbb5 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f360a449428 CR3=000000001ab12000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000416263e400000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000