Warning: Permanently added '[localhost]:34472' (ECDSA) to the list of known hosts. 2025/09/01 04:43:20 fuzzer started 2025/09/01 04:43:21 dialing manager at localhost:43077 syzkaller login: [ 60.239255] cgroup: Unknown subsys name 'net' [ 60.345846] cgroup: Unknown subsys name 'cpuset' [ 60.372840] cgroup: Unknown subsys name 'rlimit' 2025/09/01 04:43:32 syscalls: 207 2025/09/01 04:43:32 code coverage: enabled 2025/09/01 04:43:32 comparison tracing: enabled 2025/09/01 04:43:32 extra coverage: enabled 2025/09/01 04:43:32 setuid sandbox: enabled 2025/09/01 04:43:32 namespace sandbox: enabled 2025/09/01 04:43:32 Android sandbox: enabled 2025/09/01 04:43:32 fault injection: enabled 2025/09/01 04:43:32 leak checking: enabled 2025/09/01 04:43:32 net packet injection: enabled 2025/09/01 04:43:32 net device setup: enabled 2025/09/01 04:43:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 04:43:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 04:43:32 USB emulation: enabled 2025/09/01 04:43:32 hci packet injection: enabled 2025/09/01 04:43:32 wifi device emulation: enabled 2025/09/01 04:43:32 802.15.4 emulation: enabled 2025/09/01 04:43:32 fetching corpus: 0, signal 0/0 (executing program) 2025/09/01 04:43:33 starting 8 fuzzer processes 04:43:33 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x34382, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x44020) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='/dev/full\x00', &(0x7f00000001c0)=':-\'\x00', 0x0) r2 = msgget$private(0x0, 0x28) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000200)=""/199) msgrcv(r2, &(0x7f0000000300)={0x0, ""/175}, 0xb7, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x17, 0x0, "0fc26a5407a34f9c320ab41c588d29a66db295bf57d85cad0ad4eb233ed171816d0f92c060431f21eadc67d30480432e8d3fba3b694dfb7a52664e742d911afdb507bde679ef6a37c2cc1fffb5a29891"}, 0xd8) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f00000004c0)={0x20, 0x4, 0x31, {0x31, 0x24, "3c08986e775bbcf698bf4e539f1286585dbef2c92e27a319649497edde914d1faabce54f1ca14947ff72d91ced288c"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000580)={0x0, 0x5, 0xb8, "e8ac681a8a10ff4b467ac965783733b0cadf88e2b7fd24a587d6adc73b12b2859f9714ed6057d1836cbbf4ef3130e33754f1c7e59d738933b1c159e128d32a8ac12e4d644b6f81fd28ae476a32b0429404e68998886274724a23b39ef825c805023c0377da1d96ed44d6db76057e7c8b9db5814c592c0daeacd0f4377bf4edefc2e33fea99bb0105ec617007db861370c13a4eda05ddb51249c2bda2266407480a16f797dd7ef3d1b78700caa4b9151742e5edbf31296ae0"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xa8}}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000700)=@buf) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000740)) io_setup(0x5, &(0x7f0000000780)) r3 = socket(0x9, 0xa, 0xffff8000) setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f00000007c0)=0x401, 0x4) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='/dev/full\x00', &(0x7f0000000840)=':-\'\x00', 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x8181, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00000008c0)) io_setup(0x4, &(0x7f0000000900)=0x0) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) io_pgetevents(r5, 0x5, 0x4, &(0x7f0000000940)=[{}, {}, {}, {}], &(0x7f0000000a00)={r6, r7+60000000}, 0x0) 04:43:33 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x71) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='#\x00', 0x0, r1) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x40080) r3 = fsopen(&(0x7f00000001c0)='gfs2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x72) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x44) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e20, 0x34, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x145}}, 0x0, 0x0, 0xb, 0x0, "ca4fcdfbe4293e1537832fe90d519f0f7946a37fbacebea5dcc15a3aceed92e258eeacf4f11bf9eb6b2af292cccb33e4400952073bad7930ad98524eeb176f53792e7cb91996f141f821573536b1fdf8"}, 0xd8) r7 = fsmount(r6, 0x0, 0x5) fspick(r7, &(0x7f0000000480)='./file0\x00', 0xfd9a5a8ab655eadc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) r9 = fsopen(&(0x7f0000000500)='mqueue\x00', 0x1) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x40001, 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000000540)='\x00', 0x0, r10) io_submit(0x0, 0x1, &(0x7f0000000680)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x0, r7, &(0x7f00000005c0)="64634517ed03e4f91fe5820301c6dc8875bafe56d01c8be355ea9423cec3072ce9dd0fc6e554b9c31704d55cbe9a992595fcd9c9b3710693f52a63a02c93f99d9a2c6a9e8287a444f3a75fb49de9567e2f9da4950c375f09354616f3499b3b9afc024f", 0x63, 0xfffffffffffffffa, 0x0, 0x1}]) 04:43:33 executing program 2: io_uring_setup(0x258c, &(0x7f0000000000)={0x0, 0x9887, 0x10, 0x0, 0x8f}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004004) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x20882, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc5df}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) sendto$packet(r0, &(0x7f0000000480)="9af3766bd48bf2e6cbf16435b842028d85ea6e60c3b95080c94512c62528b8fbc385839bf63f8350fd51bb241bdaa5be61713f30f5a393dbe7a104f94f3c42ecd9bd4c275a2669625fbff883ae962a3a2686ba166ffcd345ac54ae05485f8c8afad37c0c8fcc4215e5d908b12ef98714591ff86f58671653968d998f20b168a156765a9f670d32f1ecb397eb8ab8602e83d998d82626b1afb32079710e2a74d93f08aa96bc759fba08701068134ca21631bc3e46570fd5c72fcc2d808f83b78ae33248155bec505f71e7035332ee8d38b75b5748719b89369c7fa3330fd4", 0xde, 0x40080, &(0x7f0000000580)={0x11, 0xf5, r1, 0x1, 0x5, 0x6, @remote}, 0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x40d1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000740), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x400000}, @xdp={0x2c, 0x8, 0x0, 0x6}, 0xf947, 0x0, 0x0, 0x0, 0x80, &(0x7f00000007c0)='team_slave_0\x00', 0x4, 0x1, 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0}, &(0x7f00000009c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001180)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000000a00)={0x73c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf7}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3700}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x40, 0x4f, 0x6}, {0x0, 0x1, 0x5}, {0xff, 0x0, 0x4, 0x4ff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x188}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x9, 0x1f, 0x7}, {0x0, 0x6, 0x2, 0x5}, {0x7fff, 0xc1, 0x1a, 0x3}, {0x4, 0x30, 0x4, 0x8}, {0xfffe, 0xb1, 0x1d, 0x80000000}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x73c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000011c0)=@req3={0x1, 0x800, 0x2, 0x4, 0x0, 0x10001}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x2c}}, 0x2050) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001600)={&(0x7f0000001440)={0x1a0, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x339140a4}}}]}}, {{0x8, 0x1, r7}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x60880) 04:43:33 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x513f) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xcba, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0xe6, 0x0, &(0x7f0000000100)="f54ea5b0851e6f16a6dd30a06437d053e2c8614686214ee896896a0ed4ed75baa1a8b550ef8771519c279faddd550234f57f1d3751797df1ced4cd21cbfb11e0f0c10b929931cff9d83b28b9de14c8157f44a827539288611bb9ffb2b04f1dedcf3a9b5efa5f3ac42b883d6a7fdcfe57c7dcc64d95b05ab14645c582c1057651333897f61bf6804947af54c5b95cf1724a95efa7e0233929aca6a52a14b8c0334eab25fab64f91f76db506a4f55866b5722389934f7117b70b0258d36fe4034e44639087e42787289de0c6f088d5a311c734e2c58c65b726a6b6efae8dd4b4a8ec5659b5d389"}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000280)) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r2 = fsmount(r0, 0x0, 0xf8) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000002c0)=@gcm_256={{0x304}, "ed1e58550b938d0f", "70a01e91d33031a6f8dc561c8a0e78fc9c4b0786938fa83698f9267058363647", "be711047", "f93829af166562c3"}, 0x38) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000300)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x200100, 0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000380)=@gcm_128={{0x303}, "037fbb0b028196e7", "dbdaab1da15c437d9117fad01f695e8b", "aa804f21", "bc62a91910490e16"}, 0x28) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x10280, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer], 0x1a, 0x0, &(0x7f0000000480)="4d2bd8be000859071cb4db82facff9b877adc46bb64559ad3c8a"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000500)='\\K,-.^:-\\w+}\\\xfe\\@]%[/.@@\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='/dev/snapshot\x00') bind$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x15, 0x0, 0x1, 0x40, 0x6, @local}, 0x14) 04:43:33 executing program 7: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}}, 0x4005) r0 = socket(0x9, 0xf96d83cd467c3ccd, 0x100) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x1bf, 0x0, 0x7ff, 0xfffffffa, 0x1}, 0x14) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x35c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x625}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa4}}}]}}]}, 0x35c}, 0x1, 0x0, 0x0, 0x54}, 0xceb05b165da288b2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000780)={0x101, 0x40, 0x1f, 0x436, 0x7}, 0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000900)='FROZEN\x00', 0x7) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008814) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs2/custom0\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x3, 0x9866, r7, &(0x7f0000000a80)="d6e12df8538677670570d1cfcfa942c1548096e8ae3cb9a2c174423bb85f7763fbcaeedbf668f1d2b9ed02cf02e017f87752aab7354638a16856e5d62f5dda8e2560659bfe58ac4c1a8023b2e4f71d16ecc3c6e310f54bcce305f9cd2db428f04e4caa0b8e14e2e7ddc9f5ac3356f74048f32bf96c36d46ae0d0c6d7386351c226d060099b74f8833728b865187434", 0x8f, 0xfff, 0x0, 0x3, r1}, &(0x7f0000000b80)) setsockopt$inet_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000bc0)=@gcm_128={{0x304}, "ce1d4d88c6dac02c", "d9e7078af39d10390335a122f79a3303", "50ef175f", "b12a9a0d28276ce0"}, 0x28) r8 = socket(0x10, 0x5, 0xf8) getsockopt$inet_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000c00)=""/135, &(0x7f0000000cc0)=0x87) 04:43:33 executing program 5: keyctl$link(0x8, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, 0xfffffffffffffffd) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x58, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffc}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20c0}, 0x4000) r1 = request_key(&(0x7f0000000280)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='nl802154\x00', 0xfffffffffffffff9) keyctl$search(0xa, r1, &(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000780)={&(0x7f00000003c0), 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x328, r0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xdb}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x5555555555540004}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x198, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffb}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffff65df}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1b4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x108, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x216}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x25f64c4b}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x524620b6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x328}, 0x1, 0x0, 0x0, 0x4}, 0x4) keyctl$link(0x8, r1, r1) accept$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a40)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0}, &(0x7f0000000c00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'batadv0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001000)=0x14, 0x800) accept$packet(0xffffffffffffffff, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001100)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001700)={&(0x7f0000001140)={0x5ac, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xeb1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6000000}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r4}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffc0}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x233d}}, {0x8, 0x6, r10}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x14}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000001780), 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x1, 0x82) 04:43:33 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r1 = socket(0x10, 0x4, 0x3) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcf}]}, 0x48}, 0x1, 0x0, 0x0, 0x40890}, 0x11) r3 = socket(0x2, 0xa, 0x8) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x0, @l2={0x1f, 0x0, @none, 0x8, 0x1}, @xdp={0x2c, 0x0, r0, 0xd}, @xdp={0x2c, 0xc, r0, 0x3d}, 0x800, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)='veth0_to_team\x00', 0x4, 0x540, 0x1f}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x64}, 0x1, 0x0, 0x0, 0xc054}, 0x4005) socketpair(0x25, 0x4, 0x5, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20448000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r9, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x80) socketpair(0x23, 0xa, 0x7fffffff, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r10) getpeername$packet(r11, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14) bind$packet(r1, &(0x7f0000000880)={0x11, 0x1, r12, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r13, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffff04f}]}, 0x28}}, 0x8041) 04:43:33 executing program 6: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000000)) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)=0x69) r0 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x1) timer_create(0x2, &(0x7f0000000200)={0x0, 0x1a, 0x4, @thr={&(0x7f0000000100)="bdb1d4cad2cede9bda4332ea668b0b2a611258eca979a89166d931784ce2f43cb409848be025647c4a6676feed60664abb0af6454c6cfbc61c8e1c5c54e407a8365b9763464592dbd2ab66c89ca8709e59d4d29add6c98e4130433eb8bd9bd5320b8c14e37a7a15ce400ef6c66fb019e9383dc950e251db7", &(0x7f0000000180)="db180dc3e439c4c603730a9e141ae45c29178c7d6d24ea3a96e4ffc0ac3c732ba21b0648a3c7659c2e51412d48ca75f17b4ba4ab99f6b533946fd47b40016beda8a3c9d2bebf2af38be3d527e4c303082cd79cfb625eadafb8d26b96d04f8ab4ccff7a0c129246bfc555"}}, &(0x7f0000000240)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000280)='autofs\x00', 0x0, r1) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000340)) io_setup(0x4, &(0x7f0000000380)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsmount(r0, 0x0, 0xf4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = fsmount(r0, 0x0, 0x9) r7 = fsmount(r0, 0x0, 0x1) io_submit(r2, 0x4, &(0x7f0000000880)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x80, r3, &(0x7f00000003c0)="2192e3e3004e660e211014371f42ccab17b5f7e897910a4e70aeec89b4032757cf1663ac0b55a74e466b0a6c5d666b733d470f3f2de2a11eade46b812035a7ed2538fce33f6ac671751563c21c5af913c6005d0792444bc3504750498326ffd3bb7b8a135ddd51f8d4f6cf53c06da5330b3e5908ab792deac606943044eda8bfbf31e058f3380d81d766de6a9013a3feae9dfc37c8bb1dbee3917e62563ec7519a54e0588f483fea99e3348e2ce5641d9e8951fbe7833d279696198c32700c0879fdb91c9a63fd2fdbe61bfd2bb81b35fabae14cdd4b647f57f66ede3ac914ea0b09c7a3584bdc13fb9b5b95401890f7a1ebb862fcf3fb87", 0xf8, 0x6, 0x0, 0x2, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="93f1346997aaa339c591e59c800e6324265c498a25d168bb61d0bde277872f2254420f3a7aa65bb38d95dc5ff8aa3a84183384fc3725cb6ed33beca480a967f7c932c6fe99e6ac143d3bd2a1d2a8ae2b98db5a91cc905e6c7404884893f2688ab509faadf4e184e60489006a58acadc46b6dd6fd6c2a2430c8344ed922d74941a458448a4aa2c4c4e85ab97a3a82faf4485ec7335ab2627056f0796bb98623a35eab1f9c0b8e73e3da44051f8c17f338e1639fbaaa89", 0xb6, 0x1, 0x0, 0x0, r6}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000640)="9d52bb88243cca4fff453a3283734809a776139e7b84184c0466d0fff1993fb06147ecead86b37ba5b2f79a2ce5d93d76c4e2e8295a2a0470827abaf9946e27cf280138a8e8e3d260aebd41a88eb55473d419904b6c8c19d3123882b4a7e91d6db30a15718bef07637f715671d47cb17965e717a8ff7e1aa0fd745210242a6c22f915f815b59f2c692484e45714429d530", 0x91, 0x10f7, 0x0, 0x1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f0000000740)="e7041c6a68231fda27663d5bee1ff1463182cd70276cd39071acdea5446df6439aac902e06a4fe6ad2b6ab371bd9602b52182f08da0e1c02dbd976ea4f07e0581e064fe15c8b67cfa1046d9e9f00706fd81ccf722f4592f2589016457f0fa39ee88ea3961d70d1af0159cc86ca64fa795a167d99156ae320b3005352e3a9b744f8678e1399a3e0e0eee40d259405e4326ffd9531b3091637b6fb23d6ab26d601a591786f3f823f8ce9583fe6f1b0a65af01f6e9cbd7584686c61ac12c18190a97cfaf188f31c080758616bf26afe0792ed73d6098a7c4709a182", 0xda, 0x4, 0x0, 0x2, r7}]) r8 = perf_event_open(&(0x7f0000000900)={0x4, 0x80, 0x9a, 0x4, 0x0, 0x5, 0x0, 0x1, 0x20080, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000008c0), 0xe}, 0x0, 0x32, 0x2, 0x0, 0xa99, 0x894, 0x7ff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000980)) [ 71.935768] audit: type=1400 audit(1756701813.901:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 73.201884] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.206303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.208362] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.214637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.219633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.221293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.222534] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.224448] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.225430] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.228289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.230643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.235311] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.236907] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.244403] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.245970] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.340715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.346434] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.351060] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.353066] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.357234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.360789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.363155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.367471] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.370435] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.383239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.406614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.408908] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.410625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.412434] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.414547] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.417711] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.422757] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.423889] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.425444] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.452375] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.454135] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.463435] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.466746] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.470338] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.501174] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.294455] Bluetooth: hci2: command tx timeout [ 75.295017] Bluetooth: hci0: command tx timeout [ 75.295059] Bluetooth: hci1: command tx timeout [ 75.422516] Bluetooth: hci3: command tx timeout [ 75.486235] Bluetooth: hci5: command tx timeout [ 75.486282] Bluetooth: hci4: command tx timeout [ 75.552174] Bluetooth: hci7: command tx timeout [ 75.614172] Bluetooth: hci6: command tx timeout [ 77.342280] Bluetooth: hci1: command tx timeout [ 77.343046] Bluetooth: hci2: command tx timeout [ 77.343799] Bluetooth: hci0: command tx timeout [ 77.472346] Bluetooth: hci3: command tx timeout [ 77.534227] Bluetooth: hci4: command tx timeout [ 77.537420] Bluetooth: hci5: command tx timeout [ 77.598206] Bluetooth: hci7: command tx timeout [ 77.662335] Bluetooth: hci6: command tx timeout [ 79.390552] Bluetooth: hci2: command tx timeout [ 79.391338] Bluetooth: hci1: command tx timeout [ 79.391507] Bluetooth: hci0: command tx timeout [ 79.520178] Bluetooth: hci3: command tx timeout [ 79.582190] Bluetooth: hci5: command tx timeout [ 79.582588] Bluetooth: hci4: command tx timeout [ 79.646178] Bluetooth: hci7: command tx timeout [ 79.710247] Bluetooth: hci6: command tx timeout [ 81.438264] Bluetooth: hci2: command tx timeout [ 81.438709] Bluetooth: hci1: command tx timeout [ 81.439571] Bluetooth: hci0: command tx timeout [ 81.568917] Bluetooth: hci3: command tx timeout [ 81.630205] Bluetooth: hci4: command tx timeout [ 81.630609] Bluetooth: hci5: command tx timeout [ 81.694144] Bluetooth: hci7: command tx timeout [ 81.758356] Bluetooth: hci6: command tx timeout [ 110.944859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.945548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.170864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.171513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.505381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.506027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.562214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.562857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.110923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.111621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.250993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.252260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.462789] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) 04:44:14 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r1 = socket(0x10, 0x4, 0x3) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcf}]}, 0x48}, 0x1, 0x0, 0x0, 0x40890}, 0x11) r3 = socket(0x2, 0xa, 0x8) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x0, @l2={0x1f, 0x0, @none, 0x8, 0x1}, @xdp={0x2c, 0x0, r0, 0xd}, @xdp={0x2c, 0xc, r0, 0x3d}, 0x800, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)='veth0_to_team\x00', 0x4, 0x540, 0x1f}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x64}, 0x1, 0x0, 0x0, 0xc054}, 0x4005) socketpair(0x25, 0x4, 0x5, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20448000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r9, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x80) socketpair(0x23, 0xa, 0x7fffffff, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r10) getpeername$packet(r11, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14) bind$packet(r1, &(0x7f0000000880)={0x11, 0x1, r12, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r13, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffff04f}]}, 0x28}}, 0x8041) [ 112.821205] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.826400] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.847716] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.864936] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.869190] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.879903] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.883816] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.884390] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.887741] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.889696] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.890207] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.891562] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.893201] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 112.893677] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 112.895593] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 112.900842] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 112.903837] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 112.908442] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 112.911366] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 112.911862] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 112.919041] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 112.926141] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 112.927274] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 112.934093] Bluetooth: hci7: Opcode 0x0406 failed: -4 04:44:14 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x71) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='#\x00', 0x0, r1) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x40080) r3 = fsopen(&(0x7f00000001c0)='gfs2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x72) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x44) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e20, 0x34, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x145}}, 0x0, 0x0, 0xb, 0x0, "ca4fcdfbe4293e1537832fe90d519f0f7946a37fbacebea5dcc15a3aceed92e258eeacf4f11bf9eb6b2af292cccb33e4400952073bad7930ad98524eeb176f53792e7cb91996f141f821573536b1fdf8"}, 0xd8) r7 = fsmount(r6, 0x0, 0x5) fspick(r7, &(0x7f0000000480)='./file0\x00', 0xfd9a5a8ab655eadc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) r9 = fsopen(&(0x7f0000000500)='mqueue\x00', 0x1) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x40001, 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000000540)='\x00', 0x0, r10) io_submit(0x0, 0x1, &(0x7f0000000680)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x0, r7, &(0x7f00000005c0)="64634517ed03e4f91fe5820301c6dc8875bafe56d01c8be355ea9423cec3072ce9dd0fc6e554b9c31704d55cbe9a992595fcd9c9b3710693f52a63a02c93f99d9a2c6a9e8287a444f3a75fb49de9567e2f9da4950c375f09354616f3499b3b9afc024f", 0x63, 0xfffffffffffffffa, 0x0, 0x1}]) 04:44:14 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x513f) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xcba, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0xe6, 0x0, &(0x7f0000000100)="f54ea5b0851e6f16a6dd30a06437d053e2c8614686214ee896896a0ed4ed75baa1a8b550ef8771519c279faddd550234f57f1d3751797df1ced4cd21cbfb11e0f0c10b929931cff9d83b28b9de14c8157f44a827539288611bb9ffb2b04f1dedcf3a9b5efa5f3ac42b883d6a7fdcfe57c7dcc64d95b05ab14645c582c1057651333897f61bf6804947af54c5b95cf1724a95efa7e0233929aca6a52a14b8c0334eab25fab64f91f76db506a4f55866b5722389934f7117b70b0258d36fe4034e44639087e42787289de0c6f088d5a311c734e2c58c65b726a6b6efae8dd4b4a8ec5659b5d389"}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000280)) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r2 = fsmount(r0, 0x0, 0xf8) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000002c0)=@gcm_256={{0x304}, "ed1e58550b938d0f", "70a01e91d33031a6f8dc561c8a0e78fc9c4b0786938fa83698f9267058363647", "be711047", "f93829af166562c3"}, 0x38) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000300)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x200100, 0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000380)=@gcm_128={{0x303}, "037fbb0b028196e7", "dbdaab1da15c437d9117fad01f695e8b", "aa804f21", "bc62a91910490e16"}, 0x28) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x10280, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer], 0x1a, 0x0, &(0x7f0000000480)="4d2bd8be000859071cb4db82facff9b877adc46bb64559ad3c8a"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000500)='\\K,-.^:-\\w+}\\\xfe\\@]%[/.@@\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='/dev/snapshot\x00') bind$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x15, 0x0, 0x1, 0x40, 0x6, @local}, 0x14) [ 113.052252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.052864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.124040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.125329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.216000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.216657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.308238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.308855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.491650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.492751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 04:44:15 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r1 = socket(0x10, 0x4, 0x3) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcf}]}, 0x48}, 0x1, 0x0, 0x0, 0x40890}, 0x11) r3 = socket(0x2, 0xa, 0x8) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x0, @l2={0x1f, 0x0, @none, 0x8, 0x1}, @xdp={0x2c, 0x0, r0, 0xd}, @xdp={0x2c, 0xc, r0, 0x3d}, 0x800, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)='veth0_to_team\x00', 0x4, 0x540, 0x1f}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x64}, 0x1, 0x0, 0x0, 0xc054}, 0x4005) socketpair(0x25, 0x4, 0x5, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20448000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r9, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x80) socketpair(0x23, 0xa, 0x7fffffff, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r10) getpeername$packet(r11, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14) bind$packet(r1, &(0x7f0000000880)={0x11, 0x1, r12, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r13, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffff04f}]}, 0x28}}, 0x8041) [ 113.584258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.584831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.600161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.601395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.735711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.736962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 04:44:15 executing program 2: io_uring_setup(0x258c, &(0x7f0000000000)={0x0, 0x9887, 0x10, 0x0, 0x8f}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004004) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x20882, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc5df}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) sendto$packet(r0, &(0x7f0000000480)="9af3766bd48bf2e6cbf16435b842028d85ea6e60c3b95080c94512c62528b8fbc385839bf63f8350fd51bb241bdaa5be61713f30f5a393dbe7a104f94f3c42ecd9bd4c275a2669625fbff883ae962a3a2686ba166ffcd345ac54ae05485f8c8afad37c0c8fcc4215e5d908b12ef98714591ff86f58671653968d998f20b168a156765a9f670d32f1ecb397eb8ab8602e83d998d82626b1afb32079710e2a74d93f08aa96bc759fba08701068134ca21631bc3e46570fd5c72fcc2d808f83b78ae33248155bec505f71e7035332ee8d38b75b5748719b89369c7fa3330fd4", 0xde, 0x40080, &(0x7f0000000580)={0x11, 0xf5, r1, 0x1, 0x5, 0x6, @remote}, 0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x40d1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000740), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x400000}, @xdp={0x2c, 0x8, 0x0, 0x6}, 0xf947, 0x0, 0x0, 0x0, 0x80, &(0x7f00000007c0)='team_slave_0\x00', 0x4, 0x1, 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0}, &(0x7f00000009c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001180)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000000a00)={0x73c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf7}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3700}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x40, 0x4f, 0x6}, {0x0, 0x1, 0x5}, {0xff, 0x0, 0x4, 0x4ff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x188}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x9, 0x1f, 0x7}, {0x0, 0x6, 0x2, 0x5}, {0x7fff, 0xc1, 0x1a, 0x3}, {0x4, 0x30, 0x4, 0x8}, {0xfffe, 0xb1, 0x1d, 0x80000000}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x73c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000011c0)=@req3={0x1, 0x800, 0x2, 0x4, 0x0, 0x10001}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x2c}}, 0x2050) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001600)={&(0x7f0000001440)={0x1a0, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x339140a4}}}]}}, {{0x8, 0x1, r7}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x60880) [ 113.878791] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.879578] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.888282] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.888866] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.889722] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 113.897138] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 113.897703] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 113.908639] Bluetooth: hci7: Opcode 0x0c1a failed: -4 04:44:15 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x71) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='#\x00', 0x0, r1) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x40080) r3 = fsopen(&(0x7f00000001c0)='gfs2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x72) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x44) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e20, 0x34, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x145}}, 0x0, 0x0, 0xb, 0x0, "ca4fcdfbe4293e1537832fe90d519f0f7946a37fbacebea5dcc15a3aceed92e258eeacf4f11bf9eb6b2af292cccb33e4400952073bad7930ad98524eeb176f53792e7cb91996f141f821573536b1fdf8"}, 0xd8) r7 = fsmount(r6, 0x0, 0x5) fspick(r7, &(0x7f0000000480)='./file0\x00', 0xfd9a5a8ab655eadc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) r9 = fsopen(&(0x7f0000000500)='mqueue\x00', 0x1) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x40001, 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000000540)='\x00', 0x0, r10) io_submit(0x0, 0x1, &(0x7f0000000680)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x0, r7, &(0x7f00000005c0)="64634517ed03e4f91fe5820301c6dc8875bafe56d01c8be355ea9423cec3072ce9dd0fc6e554b9c31704d55cbe9a992595fcd9c9b3710693f52a63a02c93f99d9a2c6a9e8287a444f3a75fb49de9567e2f9da4950c375f09354616f3499b3b9afc024f", 0x63, 0xfffffffffffffffa, 0x0, 0x1}]) 04:44:15 executing program 2: io_uring_setup(0x258c, &(0x7f0000000000)={0x0, 0x9887, 0x10, 0x0, 0x8f}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004004) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x20882, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc5df}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) sendto$packet(r0, &(0x7f0000000480)="9af3766bd48bf2e6cbf16435b842028d85ea6e60c3b95080c94512c62528b8fbc385839bf63f8350fd51bb241bdaa5be61713f30f5a393dbe7a104f94f3c42ecd9bd4c275a2669625fbff883ae962a3a2686ba166ffcd345ac54ae05485f8c8afad37c0c8fcc4215e5d908b12ef98714591ff86f58671653968d998f20b168a156765a9f670d32f1ecb397eb8ab8602e83d998d82626b1afb32079710e2a74d93f08aa96bc759fba08701068134ca21631bc3e46570fd5c72fcc2d808f83b78ae33248155bec505f71e7035332ee8d38b75b5748719b89369c7fa3330fd4", 0xde, 0x40080, &(0x7f0000000580)={0x11, 0xf5, r1, 0x1, 0x5, 0x6, @remote}, 0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x40d1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000740), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x400000}, @xdp={0x2c, 0x8, 0x0, 0x6}, 0xf947, 0x0, 0x0, 0x0, 0x80, &(0x7f00000007c0)='team_slave_0\x00', 0x4, 0x1, 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0}, &(0x7f00000009c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001180)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000000a00)={0x73c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf7}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3700}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x40, 0x4f, 0x6}, {0x0, 0x1, 0x5}, {0xff, 0x0, 0x4, 0x4ff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x188}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x9, 0x1f, 0x7}, {0x0, 0x6, 0x2, 0x5}, {0x7fff, 0xc1, 0x1a, 0x3}, {0x4, 0x30, 0x4, 0x8}, {0xfffe, 0xb1, 0x1d, 0x80000000}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x73c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000011c0)=@req3={0x1, 0x800, 0x2, 0x4, 0x0, 0x10001}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x2c}}, 0x2050) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001600)={&(0x7f0000001440)={0x1a0, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x339140a4}}}]}}, {{0x8, 0x1, r7}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x60880) 04:44:15 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x513f) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xcba, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0xe6, 0x0, &(0x7f0000000100)="f54ea5b0851e6f16a6dd30a06437d053e2c8614686214ee896896a0ed4ed75baa1a8b550ef8771519c279faddd550234f57f1d3751797df1ced4cd21cbfb11e0f0c10b929931cff9d83b28b9de14c8157f44a827539288611bb9ffb2b04f1dedcf3a9b5efa5f3ac42b883d6a7fdcfe57c7dcc64d95b05ab14645c582c1057651333897f61bf6804947af54c5b95cf1724a95efa7e0233929aca6a52a14b8c0334eab25fab64f91f76db506a4f55866b5722389934f7117b70b0258d36fe4034e44639087e42787289de0c6f088d5a311c734e2c58c65b726a6b6efae8dd4b4a8ec5659b5d389"}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000280)) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r2 = fsmount(r0, 0x0, 0xf8) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000002c0)=@gcm_256={{0x304}, "ed1e58550b938d0f", "70a01e91d33031a6f8dc561c8a0e78fc9c4b0786938fa83698f9267058363647", "be711047", "f93829af166562c3"}, 0x38) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000300)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x200100, 0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000380)=@gcm_128={{0x303}, "037fbb0b028196e7", "dbdaab1da15c437d9117fad01f695e8b", "aa804f21", "bc62a91910490e16"}, 0x28) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x10280, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer], 0x1a, 0x0, &(0x7f0000000480)="4d2bd8be000859071cb4db82facff9b877adc46bb64559ad3c8a"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000500)='\\K,-.^:-\\w+}\\\xfe\\@]%[/.@@\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='/dev/snapshot\x00') bind$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x15, 0x0, 0x1, 0x40, 0x6, @local}, 0x14) [ 114.080173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.080951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.177888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.178690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.839066] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.839756] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.840493] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.841052] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.841791] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 114.842797] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 114.843467] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 114.844055] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 116.062288] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.894278] Bluetooth: hci7: command 0x0c1a tx timeout [ 116.894334] Bluetooth: hci5: command 0x0c1a tx timeout [ 116.895282] Bluetooth: hci6: command 0x0c1a tx timeout [ 116.896286] Bluetooth: hci4: command 0x0c1a tx timeout [ 116.897116] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.898337] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.898867] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.110248] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.942216] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.942274] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.943239] Bluetooth: hci6: command 0x0c1a tx timeout [ 118.943696] Bluetooth: hci7: command 0x0c1a tx timeout [ 118.944685] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.945036] Bluetooth: hci4: command 0x0c1a tx timeout [ 118.945995] Bluetooth: hci5: command 0x0c1a tx timeout [ 120.158665] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.990253] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.991270] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.992242] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.993197] Bluetooth: hci7: command 0x0c1a tx timeout [ 120.993241] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.994154] Bluetooth: hci5: command 0x0c1a tx timeout [ 120.994639] Bluetooth: hci6: command 0x0c1a tx timeout 04:44:28 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x34382, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x44020) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='/dev/full\x00', &(0x7f00000001c0)=':-\'\x00', 0x0) r2 = msgget$private(0x0, 0x28) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000200)=""/199) msgrcv(r2, &(0x7f0000000300)={0x0, ""/175}, 0xb7, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x17, 0x0, "0fc26a5407a34f9c320ab41c588d29a66db295bf57d85cad0ad4eb233ed171816d0f92c060431f21eadc67d30480432e8d3fba3b694dfb7a52664e742d911afdb507bde679ef6a37c2cc1fffb5a29891"}, 0xd8) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f00000004c0)={0x20, 0x4, 0x31, {0x31, 0x24, "3c08986e775bbcf698bf4e539f1286585dbef2c92e27a319649497edde914d1faabce54f1ca14947ff72d91ced288c"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000580)={0x0, 0x5, 0xb8, "e8ac681a8a10ff4b467ac965783733b0cadf88e2b7fd24a587d6adc73b12b2859f9714ed6057d1836cbbf4ef3130e33754f1c7e59d738933b1c159e128d32a8ac12e4d644b6f81fd28ae476a32b0429404e68998886274724a23b39ef825c805023c0377da1d96ed44d6db76057e7c8b9db5814c592c0daeacd0f4377bf4edefc2e33fea99bb0105ec617007db861370c13a4eda05ddb51249c2bda2266407480a16f797dd7ef3d1b78700caa4b9151742e5edbf31296ae0"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xa8}}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000700)=@buf) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000740)) io_setup(0x5, &(0x7f0000000780)) r3 = socket(0x9, 0xa, 0xffff8000) setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f00000007c0)=0x401, 0x4) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='/dev/full\x00', &(0x7f0000000840)=':-\'\x00', 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x8181, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00000008c0)) io_setup(0x4, &(0x7f0000000900)=0x0) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) io_pgetevents(r5, 0x5, 0x4, &(0x7f0000000940)=[{}, {}, {}, {}], &(0x7f0000000a00)={r6, r7+60000000}, 0x0) 04:44:28 executing program 6: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000000)) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)=0x69) r0 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x1) timer_create(0x2, &(0x7f0000000200)={0x0, 0x1a, 0x4, @thr={&(0x7f0000000100)="bdb1d4cad2cede9bda4332ea668b0b2a611258eca979a89166d931784ce2f43cb409848be025647c4a6676feed60664abb0af6454c6cfbc61c8e1c5c54e407a8365b9763464592dbd2ab66c89ca8709e59d4d29add6c98e4130433eb8bd9bd5320b8c14e37a7a15ce400ef6c66fb019e9383dc950e251db7", &(0x7f0000000180)="db180dc3e439c4c603730a9e141ae45c29178c7d6d24ea3a96e4ffc0ac3c732ba21b0648a3c7659c2e51412d48ca75f17b4ba4ab99f6b533946fd47b40016beda8a3c9d2bebf2af38be3d527e4c303082cd79cfb625eadafb8d26b96d04f8ab4ccff7a0c129246bfc555"}}, &(0x7f0000000240)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000280)='autofs\x00', 0x0, r1) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000340)) io_setup(0x4, &(0x7f0000000380)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsmount(r0, 0x0, 0xf4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = fsmount(r0, 0x0, 0x9) r7 = fsmount(r0, 0x0, 0x1) io_submit(r2, 0x4, &(0x7f0000000880)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x80, r3, &(0x7f00000003c0)="2192e3e3004e660e211014371f42ccab17b5f7e897910a4e70aeec89b4032757cf1663ac0b55a74e466b0a6c5d666b733d470f3f2de2a11eade46b812035a7ed2538fce33f6ac671751563c21c5af913c6005d0792444bc3504750498326ffd3bb7b8a135ddd51f8d4f6cf53c06da5330b3e5908ab792deac606943044eda8bfbf31e058f3380d81d766de6a9013a3feae9dfc37c8bb1dbee3917e62563ec7519a54e0588f483fea99e3348e2ce5641d9e8951fbe7833d279696198c32700c0879fdb91c9a63fd2fdbe61bfd2bb81b35fabae14cdd4b647f57f66ede3ac914ea0b09c7a3584bdc13fb9b5b95401890f7a1ebb862fcf3fb87", 0xf8, 0x6, 0x0, 0x2, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="93f1346997aaa339c591e59c800e6324265c498a25d168bb61d0bde277872f2254420f3a7aa65bb38d95dc5ff8aa3a84183384fc3725cb6ed33beca480a967f7c932c6fe99e6ac143d3bd2a1d2a8ae2b98db5a91cc905e6c7404884893f2688ab509faadf4e184e60489006a58acadc46b6dd6fd6c2a2430c8344ed922d74941a458448a4aa2c4c4e85ab97a3a82faf4485ec7335ab2627056f0796bb98623a35eab1f9c0b8e73e3da44051f8c17f338e1639fbaaa89", 0xb6, 0x1, 0x0, 0x0, r6}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000640)="9d52bb88243cca4fff453a3283734809a776139e7b84184c0466d0fff1993fb06147ecead86b37ba5b2f79a2ce5d93d76c4e2e8295a2a0470827abaf9946e27cf280138a8e8e3d260aebd41a88eb55473d419904b6c8c19d3123882b4a7e91d6db30a15718bef07637f715671d47cb17965e717a8ff7e1aa0fd745210242a6c22f915f815b59f2c692484e45714429d530", 0x91, 0x10f7, 0x0, 0x1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f0000000740)="e7041c6a68231fda27663d5bee1ff1463182cd70276cd39071acdea5446df6439aac902e06a4fe6ad2b6ab371bd9602b52182f08da0e1c02dbd976ea4f07e0581e064fe15c8b67cfa1046d9e9f00706fd81ccf722f4592f2589016457f0fa39ee88ea3961d70d1af0159cc86ca64fa795a167d99156ae320b3005352e3a9b744f8678e1399a3e0e0eee40d259405e4326ffd9531b3091637b6fb23d6ab26d601a591786f3f823f8ce9583fe6f1b0a65af01f6e9cbd7584686c61ac12c18190a97cfaf188f31c080758616bf26afe0792ed73d6098a7c4709a182", 0xda, 0x4, 0x0, 0x2, r7}]) r8 = perf_event_open(&(0x7f0000000900)={0x4, 0x80, 0x9a, 0x4, 0x0, 0x5, 0x0, 0x1, 0x20080, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000008c0), 0xe}, 0x0, 0x32, 0x2, 0x0, 0xa99, 0x894, 0x7ff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000980)) 04:44:28 executing program 2: io_uring_setup(0x258c, &(0x7f0000000000)={0x0, 0x9887, 0x10, 0x0, 0x8f}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004004) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x20882, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc5df}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) sendto$packet(r0, &(0x7f0000000480)="9af3766bd48bf2e6cbf16435b842028d85ea6e60c3b95080c94512c62528b8fbc385839bf63f8350fd51bb241bdaa5be61713f30f5a393dbe7a104f94f3c42ecd9bd4c275a2669625fbff883ae962a3a2686ba166ffcd345ac54ae05485f8c8afad37c0c8fcc4215e5d908b12ef98714591ff86f58671653968d998f20b168a156765a9f670d32f1ecb397eb8ab8602e83d998d82626b1afb32079710e2a74d93f08aa96bc759fba08701068134ca21631bc3e46570fd5c72fcc2d808f83b78ae33248155bec505f71e7035332ee8d38b75b5748719b89369c7fa3330fd4", 0xde, 0x40080, &(0x7f0000000580)={0x11, 0xf5, r1, 0x1, 0x5, 0x6, @remote}, 0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x40d1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000740), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x400000}, @xdp={0x2c, 0x8, 0x0, 0x6}, 0xf947, 0x0, 0x0, 0x0, 0x80, &(0x7f00000007c0)='team_slave_0\x00', 0x4, 0x1, 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0}, &(0x7f00000009c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001180)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000000a00)={0x73c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf7}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3700}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x40, 0x4f, 0x6}, {0x0, 0x1, 0x5}, {0xff, 0x0, 0x4, 0x4ff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x188}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x9, 0x1f, 0x7}, {0x0, 0x6, 0x2, 0x5}, {0x7fff, 0xc1, 0x1a, 0x3}, {0x4, 0x30, 0x4, 0x8}, {0xfffe, 0xb1, 0x1d, 0x80000000}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x73c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000011c0)=@req3={0x1, 0x800, 0x2, 0x4, 0x0, 0x10001}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x2c}}, 0x2050) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001600)={&(0x7f0000001440)={0x1a0, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x339140a4}}}]}}, {{0x8, 0x1, r7}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x60880) 04:44:28 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r1 = socket(0x10, 0x4, 0x3) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcf}]}, 0x48}, 0x1, 0x0, 0x0, 0x40890}, 0x11) r3 = socket(0x2, 0xa, 0x8) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x0, @l2={0x1f, 0x0, @none, 0x8, 0x1}, @xdp={0x2c, 0x0, r0, 0xd}, @xdp={0x2c, 0xc, r0, 0x3d}, 0x800, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)='veth0_to_team\x00', 0x4, 0x540, 0x1f}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x64}, 0x1, 0x0, 0x0, 0xc054}, 0x4005) socketpair(0x25, 0x4, 0x5, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20448000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r9, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x80) socketpair(0x23, 0xa, 0x7fffffff, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r10) getpeername$packet(r11, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14) bind$packet(r1, &(0x7f0000000880)={0x11, 0x1, r12, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r13, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffff04f}]}, 0x28}}, 0x8041) 04:44:28 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x513f) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xcba, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0xe6, 0x0, &(0x7f0000000100)="f54ea5b0851e6f16a6dd30a06437d053e2c8614686214ee896896a0ed4ed75baa1a8b550ef8771519c279faddd550234f57f1d3751797df1ced4cd21cbfb11e0f0c10b929931cff9d83b28b9de14c8157f44a827539288611bb9ffb2b04f1dedcf3a9b5efa5f3ac42b883d6a7fdcfe57c7dcc64d95b05ab14645c582c1057651333897f61bf6804947af54c5b95cf1724a95efa7e0233929aca6a52a14b8c0334eab25fab64f91f76db506a4f55866b5722389934f7117b70b0258d36fe4034e44639087e42787289de0c6f088d5a311c734e2c58c65b726a6b6efae8dd4b4a8ec5659b5d389"}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000280)) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r2 = fsmount(r0, 0x0, 0xf8) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000002c0)=@gcm_256={{0x304}, "ed1e58550b938d0f", "70a01e91d33031a6f8dc561c8a0e78fc9c4b0786938fa83698f9267058363647", "be711047", "f93829af166562c3"}, 0x38) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000300)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x200100, 0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000380)=@gcm_128={{0x303}, "037fbb0b028196e7", "dbdaab1da15c437d9117fad01f695e8b", "aa804f21", "bc62a91910490e16"}, 0x28) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x10280, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer], 0x1a, 0x0, &(0x7f0000000480)="4d2bd8be000859071cb4db82facff9b877adc46bb64559ad3c8a"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000500)='\\K,-.^:-\\w+}\\\xfe\\@]%[/.@@\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='/dev/snapshot\x00') bind$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x15, 0x0, 0x1, 0x40, 0x6, @local}, 0x14) 04:44:28 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x71) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='#\x00', 0x0, r1) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x40080) r3 = fsopen(&(0x7f00000001c0)='gfs2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x72) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x44) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e20, 0x34, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x145}}, 0x0, 0x0, 0xb, 0x0, "ca4fcdfbe4293e1537832fe90d519f0f7946a37fbacebea5dcc15a3aceed92e258eeacf4f11bf9eb6b2af292cccb33e4400952073bad7930ad98524eeb176f53792e7cb91996f141f821573536b1fdf8"}, 0xd8) r7 = fsmount(r6, 0x0, 0x5) fspick(r7, &(0x7f0000000480)='./file0\x00', 0xfd9a5a8ab655eadc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) r9 = fsopen(&(0x7f0000000500)='mqueue\x00', 0x1) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x40001, 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000000540)='\x00', 0x0, r10) io_submit(0x0, 0x1, &(0x7f0000000680)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x0, r7, &(0x7f00000005c0)="64634517ed03e4f91fe5820301c6dc8875bafe56d01c8be355ea9423cec3072ce9dd0fc6e554b9c31704d55cbe9a992595fcd9c9b3710693f52a63a02c93f99d9a2c6a9e8287a444f3a75fb49de9567e2f9da4950c375f09354616f3499b3b9afc024f", 0x63, 0xfffffffffffffffa, 0x0, 0x1}]) 04:44:28 executing program 5: keyctl$link(0x8, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, 0xfffffffffffffffd) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x58, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffc}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20c0}, 0x4000) r1 = request_key(&(0x7f0000000280)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='nl802154\x00', 0xfffffffffffffff9) keyctl$search(0xa, r1, &(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000780)={&(0x7f00000003c0), 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x328, r0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xdb}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x5555555555540004}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x198, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffb}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffff65df}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1b4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x108, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x216}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x25f64c4b}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x524620b6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x328}, 0x1, 0x0, 0x0, 0x4}, 0x4) keyctl$link(0x8, r1, r1) accept$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a40)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0}, &(0x7f0000000c00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'batadv0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001000)=0x14, 0x800) accept$packet(0xffffffffffffffff, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001100)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001700)={&(0x7f0000001140)={0x5ac, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xeb1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6000000}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r4}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffc0}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x233d}}, {0x8, 0x6, r10}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x14}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000001780), 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x1, 0x82) 04:44:28 executing program 7: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}}, 0x4005) r0 = socket(0x9, 0xf96d83cd467c3ccd, 0x100) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x1bf, 0x0, 0x7ff, 0xfffffffa, 0x1}, 0x14) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x35c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x625}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa4}}}]}}]}, 0x35c}, 0x1, 0x0, 0x0, 0x54}, 0xceb05b165da288b2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000780)={0x101, 0x40, 0x1f, 0x436, 0x7}, 0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000900)='FROZEN\x00', 0x7) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008814) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs2/custom0\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x3, 0x9866, r7, &(0x7f0000000a80)="d6e12df8538677670570d1cfcfa942c1548096e8ae3cb9a2c174423bb85f7763fbcaeedbf668f1d2b9ed02cf02e017f87752aab7354638a16856e5d62f5dda8e2560659bfe58ac4c1a8023b2e4f71d16ecc3c6e310f54bcce305f9cd2db428f04e4caa0b8e14e2e7ddc9f5ac3356f74048f32bf96c36d46ae0d0c6d7386351c226d060099b74f8833728b865187434", 0x8f, 0xfff, 0x0, 0x3, r1}, &(0x7f0000000b80)) setsockopt$inet_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000bc0)=@gcm_128={{0x304}, "ce1d4d88c6dac02c", "d9e7078af39d10390335a122f79a3303", "50ef175f", "b12a9a0d28276ce0"}, 0x28) r8 = socket(0x10, 0x5, 0xf8) getsockopt$inet_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000c00)=""/135, &(0x7f0000000cc0)=0x87) 04:44:28 executing program 7: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}}, 0x4005) r0 = socket(0x9, 0xf96d83cd467c3ccd, 0x100) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x1bf, 0x0, 0x7ff, 0xfffffffa, 0x1}, 0x14) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x35c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x625}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa4}}}]}}]}, 0x35c}, 0x1, 0x0, 0x0, 0x54}, 0xceb05b165da288b2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000780)={0x101, 0x40, 0x1f, 0x436, 0x7}, 0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000900)='FROZEN\x00', 0x7) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008814) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs2/custom0\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x3, 0x9866, r7, &(0x7f0000000a80)="d6e12df8538677670570d1cfcfa942c1548096e8ae3cb9a2c174423bb85f7763fbcaeedbf668f1d2b9ed02cf02e017f87752aab7354638a16856e5d62f5dda8e2560659bfe58ac4c1a8023b2e4f71d16ecc3c6e310f54bcce305f9cd2db428f04e4caa0b8e14e2e7ddc9f5ac3356f74048f32bf96c36d46ae0d0c6d7386351c226d060099b74f8833728b865187434", 0x8f, 0xfff, 0x0, 0x3, r1}, &(0x7f0000000b80)) setsockopt$inet_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000bc0)=@gcm_128={{0x304}, "ce1d4d88c6dac02c", "d9e7078af39d10390335a122f79a3303", "50ef175f", "b12a9a0d28276ce0"}, 0x28) r8 = socket(0x10, 0x5, 0xf8) getsockopt$inet_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000c00)=""/135, &(0x7f0000000cc0)=0x87) 04:44:28 executing program 6: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000000)) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)=0x69) r0 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x1) timer_create(0x2, &(0x7f0000000200)={0x0, 0x1a, 0x4, @thr={&(0x7f0000000100)="bdb1d4cad2cede9bda4332ea668b0b2a611258eca979a89166d931784ce2f43cb409848be025647c4a6676feed60664abb0af6454c6cfbc61c8e1c5c54e407a8365b9763464592dbd2ab66c89ca8709e59d4d29add6c98e4130433eb8bd9bd5320b8c14e37a7a15ce400ef6c66fb019e9383dc950e251db7", &(0x7f0000000180)="db180dc3e439c4c603730a9e141ae45c29178c7d6d24ea3a96e4ffc0ac3c732ba21b0648a3c7659c2e51412d48ca75f17b4ba4ab99f6b533946fd47b40016beda8a3c9d2bebf2af38be3d527e4c303082cd79cfb625eadafb8d26b96d04f8ab4ccff7a0c129246bfc555"}}, &(0x7f0000000240)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000280)='autofs\x00', 0x0, r1) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000340)) io_setup(0x4, &(0x7f0000000380)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsmount(r0, 0x0, 0xf4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = fsmount(r0, 0x0, 0x9) r7 = fsmount(r0, 0x0, 0x1) io_submit(r2, 0x4, &(0x7f0000000880)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x80, r3, &(0x7f00000003c0)="2192e3e3004e660e211014371f42ccab17b5f7e897910a4e70aeec89b4032757cf1663ac0b55a74e466b0a6c5d666b733d470f3f2de2a11eade46b812035a7ed2538fce33f6ac671751563c21c5af913c6005d0792444bc3504750498326ffd3bb7b8a135ddd51f8d4f6cf53c06da5330b3e5908ab792deac606943044eda8bfbf31e058f3380d81d766de6a9013a3feae9dfc37c8bb1dbee3917e62563ec7519a54e0588f483fea99e3348e2ce5641d9e8951fbe7833d279696198c32700c0879fdb91c9a63fd2fdbe61bfd2bb81b35fabae14cdd4b647f57f66ede3ac914ea0b09c7a3584bdc13fb9b5b95401890f7a1ebb862fcf3fb87", 0xf8, 0x6, 0x0, 0x2, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="93f1346997aaa339c591e59c800e6324265c498a25d168bb61d0bde277872f2254420f3a7aa65bb38d95dc5ff8aa3a84183384fc3725cb6ed33beca480a967f7c932c6fe99e6ac143d3bd2a1d2a8ae2b98db5a91cc905e6c7404884893f2688ab509faadf4e184e60489006a58acadc46b6dd6fd6c2a2430c8344ed922d74941a458448a4aa2c4c4e85ab97a3a82faf4485ec7335ab2627056f0796bb98623a35eab1f9c0b8e73e3da44051f8c17f338e1639fbaaa89", 0xb6, 0x1, 0x0, 0x0, r6}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000640)="9d52bb88243cca4fff453a3283734809a776139e7b84184c0466d0fff1993fb06147ecead86b37ba5b2f79a2ce5d93d76c4e2e8295a2a0470827abaf9946e27cf280138a8e8e3d260aebd41a88eb55473d419904b6c8c19d3123882b4a7e91d6db30a15718bef07637f715671d47cb17965e717a8ff7e1aa0fd745210242a6c22f915f815b59f2c692484e45714429d530", 0x91, 0x10f7, 0x0, 0x1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f0000000740)="e7041c6a68231fda27663d5bee1ff1463182cd70276cd39071acdea5446df6439aac902e06a4fe6ad2b6ab371bd9602b52182f08da0e1c02dbd976ea4f07e0581e064fe15c8b67cfa1046d9e9f00706fd81ccf722f4592f2589016457f0fa39ee88ea3961d70d1af0159cc86ca64fa795a167d99156ae320b3005352e3a9b744f8678e1399a3e0e0eee40d259405e4326ffd9531b3091637b6fb23d6ab26d601a591786f3f823f8ce9583fe6f1b0a65af01f6e9cbd7584686c61ac12c18190a97cfaf188f31c080758616bf26afe0792ed73d6098a7c4709a182", 0xda, 0x4, 0x0, 0x2, r7}]) r8 = perf_event_open(&(0x7f0000000900)={0x4, 0x80, 0x9a, 0x4, 0x0, 0x5, 0x0, 0x1, 0x20080, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000008c0), 0xe}, 0x0, 0x32, 0x2, 0x0, 0xa99, 0x894, 0x7ff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000980)) 04:44:28 executing program 7: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}}, 0x4005) r0 = socket(0x9, 0xf96d83cd467c3ccd, 0x100) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x1bf, 0x0, 0x7ff, 0xfffffffa, 0x1}, 0x14) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x35c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x625}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa4}}}]}}]}, 0x35c}, 0x1, 0x0, 0x0, 0x54}, 0xceb05b165da288b2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000780)={0x101, 0x40, 0x1f, 0x436, 0x7}, 0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000900)='FROZEN\x00', 0x7) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008814) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs2/custom0\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x3, 0x9866, r7, &(0x7f0000000a80)="d6e12df8538677670570d1cfcfa942c1548096e8ae3cb9a2c174423bb85f7763fbcaeedbf668f1d2b9ed02cf02e017f87752aab7354638a16856e5d62f5dda8e2560659bfe58ac4c1a8023b2e4f71d16ecc3c6e310f54bcce305f9cd2db428f04e4caa0b8e14e2e7ddc9f5ac3356f74048f32bf96c36d46ae0d0c6d7386351c226d060099b74f8833728b865187434", 0x8f, 0xfff, 0x0, 0x3, r1}, &(0x7f0000000b80)) setsockopt$inet_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000bc0)=@gcm_128={{0x304}, "ce1d4d88c6dac02c", "d9e7078af39d10390335a122f79a3303", "50ef175f", "b12a9a0d28276ce0"}, 0x28) r8 = socket(0x10, 0x5, 0xf8) getsockopt$inet_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000c00)=""/135, &(0x7f0000000cc0)=0x87) [ 126.826662] kmemleak: Found object by alias at 0x607f1a6342cc [ 126.826681] CPU: 1 UID: 0 PID: 4020 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 126.826699] Tainted: [W]=WARN [ 126.826703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 126.826710] Call Trace: [ 126.826714] [ 126.826719] dump_stack_lvl+0xca/0x120 [ 126.826746] __lookup_object+0x94/0xb0 [ 126.826763] delete_object_full+0x27/0x70 [ 126.826784] free_percpu+0x30/0x1160 [ 126.826800] ? arch_uprobe_clear_state+0x16/0x140 [ 126.826819] futex_hash_free+0x38/0xc0 [ 126.826834] mmput+0x2d3/0x390 [ 126.826852] do_exit+0x79d/0x2970 [ 126.826870] ? __pfx_do_exit+0x10/0x10 [ 126.826883] ? find_held_lock+0x2b/0x80 [ 126.826901] ? get_signal+0x835/0x2340 [ 126.826921] do_group_exit+0xd3/0x2a0 [ 126.826935] get_signal+0x2315/0x2340 [ 126.826952] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 126.826969] ? __pfx_get_signal+0x10/0x10 [ 126.826984] ? __schedule+0xe91/0x3590 [ 126.827004] arch_do_signal_or_restart+0x80/0x790 [ 126.827021] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 126.827037] ? __x64_sys_futex+0x1c9/0x4d0 [ 126.827049] ? __x64_sys_futex+0x1d2/0x4d0 [ 126.827062] ? __fget_files+0x20d/0x3b0 [ 126.827075] ? __pfx___x64_sys_futex+0x10/0x10 [ 126.827093] exit_to_user_mode_loop+0x8b/0x110 [ 126.827106] do_syscall_64+0x2f7/0x360 [ 126.827118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.827130] RIP: 0033:0x7f5894d3db19 [ 126.827139] Code: Unable to access opcode bytes at 0x7f5894d3daef. [ 126.827144] RSP: 002b:00007f58922b3218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.827155] RAX: 0000000000000001 RBX: 00007f5894e50f68 RCX: 00007f5894d3db19 [ 126.827163] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5894e50f6c [ 126.827170] RBP: 00007f5894e50f60 R08: 0000000000000009 R09: 0000000000000000 [ 126.827177] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f5894e50f6c [ 126.827184] R13: 00007ffe49bca6bf R14: 00007f58922b3300 R15: 0000000000022000 [ 126.827200] [ 126.827204] kmemleak: Object (percpu) 0x607f1a6342c8 (size 8): [ 126.827210] kmemleak: comm "syz-executor.0", pid 4024, jiffies 4294793692 [ 126.827217] kmemleak: min_count = 1 [ 126.827221] kmemleak: count = 0 [ 126.827225] kmemleak: flags = 0x21 [ 126.827229] kmemleak: checksum = 0 [ 126.827233] kmemleak: backtrace: [ 126.827236] pcpu_alloc_noprof+0x87a/0x1170 [ 126.827251] percpu_ref_init+0x37/0x400 [ 126.827269] ioctx_alloc+0x27f/0x1e10 [ 126.827281] __x64_sys_io_setup+0xc8/0x1f0 [ 126.827293] do_syscall_64+0xbf/0x360 [ 126.827301] entry_SYSCALL_64_after_hwframe+0x77/0x7f 04:44:28 executing program 2: io_uring_setup(0x258c, &(0x7f0000000000)={0x0, 0x9887, 0x10, 0x0, 0x8f}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004004) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x20882, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc5df}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) sendto$packet(r0, &(0x7f0000000480)="9af3766bd48bf2e6cbf16435b842028d85ea6e60c3b95080c94512c62528b8fbc385839bf63f8350fd51bb241bdaa5be61713f30f5a393dbe7a104f94f3c42ecd9bd4c275a2669625fbff883ae962a3a2686ba166ffcd345ac54ae05485f8c8afad37c0c8fcc4215e5d908b12ef98714591ff86f58671653968d998f20b168a156765a9f670d32f1ecb397eb8ab8602e83d998d82626b1afb32079710e2a74d93f08aa96bc759fba08701068134ca21631bc3e46570fd5c72fcc2d808f83b78ae33248155bec505f71e7035332ee8d38b75b5748719b89369c7fa3330fd4", 0xde, 0x40080, &(0x7f0000000580)={0x11, 0xf5, r1, 0x1, 0x5, 0x6, @remote}, 0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x40d1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000740), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x400000}, @xdp={0x2c, 0x8, 0x0, 0x6}, 0xf947, 0x0, 0x0, 0x0, 0x80, &(0x7f00000007c0)='team_slave_0\x00', 0x4, 0x1, 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0}, &(0x7f00000009c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001180)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000000a00)={0x73c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf7}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3700}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x40, 0x4f, 0x6}, {0x0, 0x1, 0x5}, {0xff, 0x0, 0x4, 0x4ff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x188}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x9, 0x1f, 0x7}, {0x0, 0x6, 0x2, 0x5}, {0x7fff, 0xc1, 0x1a, 0x3}, {0x4, 0x30, 0x4, 0x8}, {0xfffe, 0xb1, 0x1d, 0x80000000}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x73c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000011c0)=@req3={0x1, 0x800, 0x2, 0x4, 0x0, 0x10001}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x2c}}, 0x2050) 04:44:28 executing program 7: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}}, 0x4005) r0 = socket(0x9, 0xf96d83cd467c3ccd, 0x100) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x1bf, 0x0, 0x7ff, 0xfffffffa, 0x1}, 0x14) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x35c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x625}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa4}}}]}}]}, 0x35c}, 0x1, 0x0, 0x0, 0x54}, 0xceb05b165da288b2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000780)={0x101, 0x40, 0x1f, 0x436, 0x7}, 0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000900)='FROZEN\x00', 0x7) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008814) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs2/custom0\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x3, 0x9866, r7, &(0x7f0000000a80)="d6e12df8538677670570d1cfcfa942c1548096e8ae3cb9a2c174423bb85f7763fbcaeedbf668f1d2b9ed02cf02e017f87752aab7354638a16856e5d62f5dda8e2560659bfe58ac4c1a8023b2e4f71d16ecc3c6e310f54bcce305f9cd2db428f04e4caa0b8e14e2e7ddc9f5ac3356f74048f32bf96c36d46ae0d0c6d7386351c226d060099b74f8833728b865187434", 0x8f, 0xfff, 0x0, 0x3, r1}, &(0x7f0000000b80)) setsockopt$inet_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000bc0)=@gcm_128={{0x304}, "ce1d4d88c6dac02c", "d9e7078af39d10390335a122f79a3303", "50ef175f", "b12a9a0d28276ce0"}, 0x28) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000c00)=""/135, &(0x7f0000000cc0)=0x87) 04:44:28 executing program 6: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000000)) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)=0x69) r0 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x1) timer_create(0x2, &(0x7f0000000200)={0x0, 0x1a, 0x4, @thr={&(0x7f0000000100)="bdb1d4cad2cede9bda4332ea668b0b2a611258eca979a89166d931784ce2f43cb409848be025647c4a6676feed60664abb0af6454c6cfbc61c8e1c5c54e407a8365b9763464592dbd2ab66c89ca8709e59d4d29add6c98e4130433eb8bd9bd5320b8c14e37a7a15ce400ef6c66fb019e9383dc950e251db7", &(0x7f0000000180)="db180dc3e439c4c603730a9e141ae45c29178c7d6d24ea3a96e4ffc0ac3c732ba21b0648a3c7659c2e51412d48ca75f17b4ba4ab99f6b533946fd47b40016beda8a3c9d2bebf2af38be3d527e4c303082cd79cfb625eadafb8d26b96d04f8ab4ccff7a0c129246bfc555"}}, &(0x7f0000000240)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000280)='autofs\x00', 0x0, r1) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000340)) io_setup(0x4, &(0x7f0000000380)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsmount(r0, 0x0, 0xf4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = fsmount(r0, 0x0, 0x9) r7 = fsmount(r0, 0x0, 0x1) io_submit(r2, 0x4, &(0x7f0000000880)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x80, r3, &(0x7f00000003c0)="2192e3e3004e660e211014371f42ccab17b5f7e897910a4e70aeec89b4032757cf1663ac0b55a74e466b0a6c5d666b733d470f3f2de2a11eade46b812035a7ed2538fce33f6ac671751563c21c5af913c6005d0792444bc3504750498326ffd3bb7b8a135ddd51f8d4f6cf53c06da5330b3e5908ab792deac606943044eda8bfbf31e058f3380d81d766de6a9013a3feae9dfc37c8bb1dbee3917e62563ec7519a54e0588f483fea99e3348e2ce5641d9e8951fbe7833d279696198c32700c0879fdb91c9a63fd2fdbe61bfd2bb81b35fabae14cdd4b647f57f66ede3ac914ea0b09c7a3584bdc13fb9b5b95401890f7a1ebb862fcf3fb87", 0xf8, 0x6, 0x0, 0x2, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="93f1346997aaa339c591e59c800e6324265c498a25d168bb61d0bde277872f2254420f3a7aa65bb38d95dc5ff8aa3a84183384fc3725cb6ed33beca480a967f7c932c6fe99e6ac143d3bd2a1d2a8ae2b98db5a91cc905e6c7404884893f2688ab509faadf4e184e60489006a58acadc46b6dd6fd6c2a2430c8344ed922d74941a458448a4aa2c4c4e85ab97a3a82faf4485ec7335ab2627056f0796bb98623a35eab1f9c0b8e73e3da44051f8c17f338e1639fbaaa89", 0xb6, 0x1, 0x0, 0x0, r6}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000640)="9d52bb88243cca4fff453a3283734809a776139e7b84184c0466d0fff1993fb06147ecead86b37ba5b2f79a2ce5d93d76c4e2e8295a2a0470827abaf9946e27cf280138a8e8e3d260aebd41a88eb55473d419904b6c8c19d3123882b4a7e91d6db30a15718bef07637f715671d47cb17965e717a8ff7e1aa0fd745210242a6c22f915f815b59f2c692484e45714429d530", 0x91, 0x10f7, 0x0, 0x1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f0000000740)="e7041c6a68231fda27663d5bee1ff1463182cd70276cd39071acdea5446df6439aac902e06a4fe6ad2b6ab371bd9602b52182f08da0e1c02dbd976ea4f07e0581e064fe15c8b67cfa1046d9e9f00706fd81ccf722f4592f2589016457f0fa39ee88ea3961d70d1af0159cc86ca64fa795a167d99156ae320b3005352e3a9b744f8678e1399a3e0e0eee40d259405e4326ffd9531b3091637b6fb23d6ab26d601a591786f3f823f8ce9583fe6f1b0a65af01f6e9cbd7584686c61ac12c18190a97cfaf188f31c080758616bf26afe0792ed73d6098a7c4709a182", 0xda, 0x4, 0x0, 0x2, r7}]) r8 = perf_event_open(&(0x7f0000000900)={0x4, 0x80, 0x9a, 0x4, 0x0, 0x5, 0x0, 0x1, 0x20080, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000008c0), 0xe}, 0x0, 0x32, 0x2, 0x0, 0xa99, 0x894, 0x7ff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000980)) 04:44:28 executing program 7: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}}, 0x4005) r0 = socket(0x9, 0xf96d83cd467c3ccd, 0x100) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x1bf, 0x0, 0x7ff, 0xfffffffa, 0x1}, 0x14) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x35c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x625}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa4}}}]}}]}, 0x35c}, 0x1, 0x0, 0x0, 0x54}, 0xceb05b165da288b2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000780)={0x101, 0x40, 0x1f, 0x436, 0x7}, 0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000900)='FROZEN\x00', 0x7) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008814) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs2/custom0\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x3, 0x9866, r7, &(0x7f0000000a80)="d6e12df8538677670570d1cfcfa942c1548096e8ae3cb9a2c174423bb85f7763fbcaeedbf668f1d2b9ed02cf02e017f87752aab7354638a16856e5d62f5dda8e2560659bfe58ac4c1a8023b2e4f71d16ecc3c6e310f54bcce305f9cd2db428f04e4caa0b8e14e2e7ddc9f5ac3356f74048f32bf96c36d46ae0d0c6d7386351c226d060099b74f8833728b865187434", 0x8f, 0xfff, 0x0, 0x3, r1}, &(0x7f0000000b80)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000c00)=""/135, &(0x7f0000000cc0)=0x87) 04:44:28 executing program 5: keyctl$link(0x8, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, 0xfffffffffffffffd) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x58, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffc}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20c0}, 0x4000) r1 = request_key(&(0x7f0000000280)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='nl802154\x00', 0xfffffffffffffff9) keyctl$search(0xa, r1, &(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000780)={&(0x7f00000003c0), 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x328, r0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xdb}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x5555555555540004}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x198, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffb}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffff65df}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1b4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x108, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x216}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x25f64c4b}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x524620b6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x328}, 0x1, 0x0, 0x0, 0x4}, 0x4) keyctl$link(0x8, r1, r1) accept$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a40)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0}, &(0x7f0000000c00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'batadv0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001000)=0x14, 0x800) accept$packet(0xffffffffffffffff, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001100)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001700)={&(0x7f0000001140)={0x5ac, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xeb1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6000000}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r4}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffc0}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x233d}}, {0x8, 0x6, r10}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x14}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000001780), 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x1, 0x82) [ 127.518788] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.519943] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 127.521017] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.522319] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.523536] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 127.524902] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 127.526019] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 127.527306] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 128.734167] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.566259] Bluetooth: hci7: command 0x0c1a tx timeout [ 129.567071] Bluetooth: hci5: command 0x0c1a tx timeout [ 129.567167] Bluetooth: hci6: command 0x0c1a tx timeout [ 129.567845] Bluetooth: hci4: command 0x0c1a tx timeout [ 129.568986] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.569655] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.570755] Bluetooth: hci0: command 0x0c1a tx timeout 04:44:38 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x34382, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x44020) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='/dev/full\x00', &(0x7f00000001c0)=':-\'\x00', 0x0) r2 = msgget$private(0x0, 0x28) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000200)=""/199) msgrcv(r2, &(0x7f0000000300)={0x0, ""/175}, 0xb7, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x17, 0x0, "0fc26a5407a34f9c320ab41c588d29a66db295bf57d85cad0ad4eb233ed171816d0f92c060431f21eadc67d30480432e8d3fba3b694dfb7a52664e742d911afdb507bde679ef6a37c2cc1fffb5a29891"}, 0xd8) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f00000004c0)={0x20, 0x4, 0x31, {0x31, 0x24, "3c08986e775bbcf698bf4e539f1286585dbef2c92e27a319649497edde914d1faabce54f1ca14947ff72d91ced288c"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000580)={0x0, 0x5, 0xb8, "e8ac681a8a10ff4b467ac965783733b0cadf88e2b7fd24a587d6adc73b12b2859f9714ed6057d1836cbbf4ef3130e33754f1c7e59d738933b1c159e128d32a8ac12e4d644b6f81fd28ae476a32b0429404e68998886274724a23b39ef825c805023c0377da1d96ed44d6db76057e7c8b9db5814c592c0daeacd0f4377bf4edefc2e33fea99bb0105ec617007db861370c13a4eda05ddb51249c2bda2266407480a16f797dd7ef3d1b78700caa4b9151742e5edbf31296ae0"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xa8}}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000700)=@buf) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000740)) io_setup(0x5, &(0x7f0000000780)) r3 = socket(0x9, 0xa, 0xffff8000) setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f00000007c0)=0x401, 0x4) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='/dev/full\x00', &(0x7f0000000840)=':-\'\x00', 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x8181, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00000008c0)) io_setup(0x4, &(0x7f0000000900)=0x0) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) io_pgetevents(r5, 0x5, 0x4, &(0x7f0000000940)=[{}, {}, {}, {}], &(0x7f0000000a00)={r6, r7+60000000}, 0x0) 04:44:38 executing program 2: io_uring_setup(0x258c, &(0x7f0000000000)={0x0, 0x9887, 0x10, 0x0, 0x8f}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004004) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x20882, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc5df}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) sendto$packet(r0, &(0x7f0000000480)="9af3766bd48bf2e6cbf16435b842028d85ea6e60c3b95080c94512c62528b8fbc385839bf63f8350fd51bb241bdaa5be61713f30f5a393dbe7a104f94f3c42ecd9bd4c275a2669625fbff883ae962a3a2686ba166ffcd345ac54ae05485f8c8afad37c0c8fcc4215e5d908b12ef98714591ff86f58671653968d998f20b168a156765a9f670d32f1ecb397eb8ab8602e83d998d82626b1afb32079710e2a74d93f08aa96bc759fba08701068134ca21631bc3e46570fd5c72fcc2d808f83b78ae33248155bec505f71e7035332ee8d38b75b5748719b89369c7fa3330fd4", 0xde, 0x40080, &(0x7f0000000580)={0x11, 0xf5, r1, 0x1, 0x5, 0x6, @remote}, 0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x40d1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000740), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x400000}, @xdp={0x2c, 0x8, 0x0, 0x6}, 0xf947, 0x0, 0x0, 0x0, 0x80, &(0x7f00000007c0)='team_slave_0\x00', 0x4, 0x1, 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0}, &(0x7f00000009c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001180)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000000a00)={0x73c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf7}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3700}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x40, 0x4f, 0x6}, {0x0, 0x1, 0x5}, {0xff, 0x0, 0x4, 0x4ff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x188}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x9, 0x1f, 0x7}, {0x0, 0x6, 0x2, 0x5}, {0x7fff, 0xc1, 0x1a, 0x3}, {0x4, 0x30, 0x4, 0x8}, {0xfffe, 0xb1, 0x1d, 0x80000000}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x73c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000011c0)=@req3={0x1, 0x800, 0x2, 0x4, 0x0, 0x10001}, 0x1c) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x2c}}, 0x2050) 04:44:38 executing program 6: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000000)) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)=0x69) r0 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x1) timer_create(0x2, &(0x7f0000000200)={0x0, 0x1a, 0x4, @thr={&(0x7f0000000100)="bdb1d4cad2cede9bda4332ea668b0b2a611258eca979a89166d931784ce2f43cb409848be025647c4a6676feed60664abb0af6454c6cfbc61c8e1c5c54e407a8365b9763464592dbd2ab66c89ca8709e59d4d29add6c98e4130433eb8bd9bd5320b8c14e37a7a15ce400ef6c66fb019e9383dc950e251db7", &(0x7f0000000180)="db180dc3e439c4c603730a9e141ae45c29178c7d6d24ea3a96e4ffc0ac3c732ba21b0648a3c7659c2e51412d48ca75f17b4ba4ab99f6b533946fd47b40016beda8a3c9d2bebf2af38be3d527e4c303082cd79cfb625eadafb8d26b96d04f8ab4ccff7a0c129246bfc555"}}, &(0x7f0000000240)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000280)='autofs\x00', 0x0, r1) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000340)) io_setup(0x4, &(0x7f0000000380)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsmount(r0, 0x0, 0xf4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = fsmount(r0, 0x0, 0x9) r7 = fsmount(r0, 0x0, 0x1) io_submit(r2, 0x4, &(0x7f0000000880)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x80, r3, &(0x7f00000003c0)="2192e3e3004e660e211014371f42ccab17b5f7e897910a4e70aeec89b4032757cf1663ac0b55a74e466b0a6c5d666b733d470f3f2de2a11eade46b812035a7ed2538fce33f6ac671751563c21c5af913c6005d0792444bc3504750498326ffd3bb7b8a135ddd51f8d4f6cf53c06da5330b3e5908ab792deac606943044eda8bfbf31e058f3380d81d766de6a9013a3feae9dfc37c8bb1dbee3917e62563ec7519a54e0588f483fea99e3348e2ce5641d9e8951fbe7833d279696198c32700c0879fdb91c9a63fd2fdbe61bfd2bb81b35fabae14cdd4b647f57f66ede3ac914ea0b09c7a3584bdc13fb9b5b95401890f7a1ebb862fcf3fb87", 0xf8, 0x6, 0x0, 0x2, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="93f1346997aaa339c591e59c800e6324265c498a25d168bb61d0bde277872f2254420f3a7aa65bb38d95dc5ff8aa3a84183384fc3725cb6ed33beca480a967f7c932c6fe99e6ac143d3bd2a1d2a8ae2b98db5a91cc905e6c7404884893f2688ab509faadf4e184e60489006a58acadc46b6dd6fd6c2a2430c8344ed922d74941a458448a4aa2c4c4e85ab97a3a82faf4485ec7335ab2627056f0796bb98623a35eab1f9c0b8e73e3da44051f8c17f338e1639fbaaa89", 0xb6, 0x1, 0x0, 0x0, r6}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000640)="9d52bb88243cca4fff453a3283734809a776139e7b84184c0466d0fff1993fb06147ecead86b37ba5b2f79a2ce5d93d76c4e2e8295a2a0470827abaf9946e27cf280138a8e8e3d260aebd41a88eb55473d419904b6c8c19d3123882b4a7e91d6db30a15718bef07637f715671d47cb17965e717a8ff7e1aa0fd745210242a6c22f915f815b59f2c692484e45714429d530", 0x91, 0x10f7, 0x0, 0x1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f0000000740)="e7041c6a68231fda27663d5bee1ff1463182cd70276cd39071acdea5446df6439aac902e06a4fe6ad2b6ab371bd9602b52182f08da0e1c02dbd976ea4f07e0581e064fe15c8b67cfa1046d9e9f00706fd81ccf722f4592f2589016457f0fa39ee88ea3961d70d1af0159cc86ca64fa795a167d99156ae320b3005352e3a9b744f8678e1399a3e0e0eee40d259405e4326ffd9531b3091637b6fb23d6ab26d601a591786f3f823f8ce9583fe6f1b0a65af01f6e9cbd7584686c61ac12c18190a97cfaf188f31c080758616bf26afe0792ed73d6098a7c4709a182", 0xda, 0x4, 0x0, 0x2, r7}]) perf_event_open(&(0x7f0000000900)={0x4, 0x80, 0x9a, 0x4, 0x0, 0x5, 0x0, 0x1, 0x20080, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000008c0), 0xe}, 0x0, 0x32, 0x2, 0x0, 0xa99, 0x894, 0x7ff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x9) 04:44:38 executing program 7: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}}, 0x4005) r0 = socket(0x9, 0xf96d83cd467c3ccd, 0x100) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x1bf, 0x0, 0x7ff, 0xfffffffa, 0x1}, 0x14) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x35c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x625}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa4}}}]}}]}, 0x35c}, 0x1, 0x0, 0x0, 0x54}, 0xceb05b165da288b2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000780)={0x101, 0x40, 0x1f, 0x436, 0x7}, 0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000900)='FROZEN\x00', 0x7) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008814) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs2/custom0\x00', 0x2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000c00)=""/135, &(0x7f0000000cc0)=0x87) 04:44:38 executing program 5: keyctl$link(0x8, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, 0xfffffffffffffffd) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x58, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffc}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20c0}, 0x4000) r1 = request_key(&(0x7f0000000280)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='nl802154\x00', 0xfffffffffffffff9) keyctl$search(0xa, r1, &(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000780)={&(0x7f00000003c0), 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x328, r0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xdb}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x5555555555540004}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x198, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffb}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffff65df}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1b4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x108, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x216}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x25f64c4b}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x524620b6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x328}, 0x1, 0x0, 0x0, 0x4}, 0x4) keyctl$link(0x8, r1, r1) accept$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a40)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0}, &(0x7f0000000c00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'batadv0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001000)=0x14, 0x800) accept$packet(0xffffffffffffffff, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001100)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001700)={&(0x7f0000001140)={0x5ac, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xeb1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6000000}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r4}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffc0}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x233d}}, {0x8, 0x6, r10}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x14}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000001780), 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x1, 0x82) 04:44:38 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x513f) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xcba, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0xe6, 0x0, &(0x7f0000000100)="f54ea5b0851e6f16a6dd30a06437d053e2c8614686214ee896896a0ed4ed75baa1a8b550ef8771519c279faddd550234f57f1d3751797df1ced4cd21cbfb11e0f0c10b929931cff9d83b28b9de14c8157f44a827539288611bb9ffb2b04f1dedcf3a9b5efa5f3ac42b883d6a7fdcfe57c7dcc64d95b05ab14645c582c1057651333897f61bf6804947af54c5b95cf1724a95efa7e0233929aca6a52a14b8c0334eab25fab64f91f76db506a4f55866b5722389934f7117b70b0258d36fe4034e44639087e42787289de0c6f088d5a311c734e2c58c65b726a6b6efae8dd4b4a8ec5659b5d389"}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000280)) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r2 = fsmount(r0, 0x0, 0xf8) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000002c0)=@gcm_256={{0x304}, "ed1e58550b938d0f", "70a01e91d33031a6f8dc561c8a0e78fc9c4b0786938fa83698f9267058363647", "be711047", "f93829af166562c3"}, 0x38) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000300)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x200100, 0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000380)=@gcm_128={{0x303}, "037fbb0b028196e7", "dbdaab1da15c437d9117fad01f695e8b", "aa804f21", "bc62a91910490e16"}, 0x28) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x10280, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer], 0x1a, 0x0, &(0x7f0000000480)="4d2bd8be000859071cb4db82facff9b877adc46bb64559ad3c8a"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000500)='\\K,-.^:-\\w+}\\\xfe\\@]%[/.@@\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='/dev/snapshot\x00') 04:44:38 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x71) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='#\x00', 0x0, r1) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x40080) r3 = fsopen(&(0x7f00000001c0)='gfs2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x72) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x44) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e20, 0x34, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x145}}, 0x0, 0x0, 0xb, 0x0, "ca4fcdfbe4293e1537832fe90d519f0f7946a37fbacebea5dcc15a3aceed92e258eeacf4f11bf9eb6b2af292cccb33e4400952073bad7930ad98524eeb176f53792e7cb91996f141f821573536b1fdf8"}, 0xd8) r7 = fsmount(r6, 0x0, 0x5) fspick(r7, &(0x7f0000000480)='./file0\x00', 0xfd9a5a8ab655eadc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) fsopen(&(0x7f0000000500)='mqueue\x00', 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x40001, 0x0) io_submit(0x0, 0x1, &(0x7f0000000680)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x0, r7, &(0x7f00000005c0)="64634517ed03e4f91fe5820301c6dc8875bafe56d01c8be355ea9423cec3072ce9dd0fc6e554b9c31704d55cbe9a992595fcd9c9b3710693f52a63a02c93f99d9a2c6a9e8287a444f3a75fb49de9567e2f9da4950c375f09354616f3499b3b9afc024f", 0x63, 0xfffffffffffffffa, 0x0, 0x1}]) 04:44:38 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r1 = socket(0x10, 0x4, 0x3) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcf}]}, 0x48}, 0x1, 0x0, 0x0, 0x40890}, 0x11) r3 = socket(0x2, 0xa, 0x8) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x0, @l2={0x1f, 0x0, @none, 0x8, 0x1}, @xdp={0x2c, 0x0, r0, 0xd}, @xdp={0x2c, 0xc, r0, 0x3d}, 0x800, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)='veth0_to_team\x00', 0x4, 0x540, 0x1f}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x64}, 0x1, 0x0, 0x0, 0xc054}, 0x4005) socketpair(0x25, 0x4, 0x5, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20448000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r9, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x80) socketpair(0x23, 0xa, 0x7fffffff, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r10) getpeername$packet(r11, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14) bind$packet(r1, &(0x7f0000000880)={0x11, 0x1, r12, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r7) 04:44:38 executing program 6: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000000)) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)=0x69) r0 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x1) timer_create(0x2, &(0x7f0000000200)={0x0, 0x1a, 0x4, @thr={&(0x7f0000000100)="bdb1d4cad2cede9bda4332ea668b0b2a611258eca979a89166d931784ce2f43cb409848be025647c4a6676feed60664abb0af6454c6cfbc61c8e1c5c54e407a8365b9763464592dbd2ab66c89ca8709e59d4d29add6c98e4130433eb8bd9bd5320b8c14e37a7a15ce400ef6c66fb019e9383dc950e251db7", &(0x7f0000000180)="db180dc3e439c4c603730a9e141ae45c29178c7d6d24ea3a96e4ffc0ac3c732ba21b0648a3c7659c2e51412d48ca75f17b4ba4ab99f6b533946fd47b40016beda8a3c9d2bebf2af38be3d527e4c303082cd79cfb625eadafb8d26b96d04f8ab4ccff7a0c129246bfc555"}}, &(0x7f0000000240)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000280)='autofs\x00', 0x0, r1) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000340)) io_setup(0x4, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) fsmount(r0, 0x0, 0xf4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0) fsmount(r0, 0x0, 0x9) fsmount(r0, 0x0, 0x1) perf_event_open(&(0x7f0000000900)={0x4, 0x80, 0x9a, 0x4, 0x0, 0x5, 0x0, 0x1, 0x20080, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000008c0), 0xe}, 0x0, 0x32, 0x2, 0x0, 0xa99, 0x894, 0x7ff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x9) 04:44:38 executing program 7: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}}, 0x4005) r0 = socket(0x9, 0xf96d83cd467c3ccd, 0x100) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x1bf, 0x0, 0x7ff, 0xfffffffa, 0x1}, 0x14) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x35c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x625}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa4}}}]}}]}, 0x35c}, 0x1, 0x0, 0x0, 0x54}, 0xceb05b165da288b2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000780)={0x101, 0x40, 0x1f, 0x436, 0x7}, 0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000900)='FROZEN\x00', 0x7) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008814) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000c00)=""/135, &(0x7f0000000cc0)=0x87) 04:44:38 executing program 2: io_uring_setup(0x258c, &(0x7f0000000000)={0x0, 0x9887, 0x10, 0x0, 0x8f}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004004) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x20882, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc5df}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) sendto$packet(r0, &(0x7f0000000480)="9af3766bd48bf2e6cbf16435b842028d85ea6e60c3b95080c94512c62528b8fbc385839bf63f8350fd51bb241bdaa5be61713f30f5a393dbe7a104f94f3c42ecd9bd4c275a2669625fbff883ae962a3a2686ba166ffcd345ac54ae05485f8c8afad37c0c8fcc4215e5d908b12ef98714591ff86f58671653968d998f20b168a156765a9f670d32f1ecb397eb8ab8602e83d998d82626b1afb32079710e2a74d93f08aa96bc759fba08701068134ca21631bc3e46570fd5c72fcc2d808f83b78ae33248155bec505f71e7035332ee8d38b75b5748719b89369c7fa3330fd4", 0xde, 0x40080, &(0x7f0000000580)={0x11, 0xf5, r1, 0x1, 0x5, 0x6, @remote}, 0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x40d1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000740), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x400000}, @xdp={0x2c, 0x8, 0x0, 0x6}, 0xf947, 0x0, 0x0, 0x0, 0x80, &(0x7f00000007c0)='team_slave_0\x00', 0x4, 0x1, 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0}, &(0x7f00000009c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001180)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000000a00)={0x73c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf7}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3700}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x40, 0x4f, 0x6}, {0x0, 0x1, 0x5}, {0xff, 0x0, 0x4, 0x4ff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x188}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x9, 0x1f, 0x7}, {0x0, 0x6, 0x2, 0x5}, {0x7fff, 0xc1, 0x1a, 0x3}, {0x4, 0x30, 0x4, 0x8}, {0xfffe, 0xb1, 0x1d, 0x80000000}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x73c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000011c0)=@req3={0x1, 0x800, 0x2, 0x4, 0x0, 0x10001}, 0x1c) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x2c}}, 0x2050) 04:44:38 executing program 5: keyctl$link(0x8, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, 0xfffffffffffffffd) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x58, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffc}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20c0}, 0x4000) r1 = request_key(&(0x7f0000000280)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='nl802154\x00', 0xfffffffffffffff9) keyctl$search(0xa, r1, &(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000780)={&(0x7f00000003c0), 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x328, r0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xdb}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x5555555555540004}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x198, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffb}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffff65df}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1b4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x108, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x216}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x25f64c4b}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x524620b6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x328}, 0x1, 0x0, 0x0, 0x4}, 0x4) keyctl$link(0x8, r1, r1) accept$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a40)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0}, &(0x7f0000000c00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'batadv0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001000)=0x14, 0x800) accept$packet(0xffffffffffffffff, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001100)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001700)={&(0x7f0000001140)={0x5ac, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xeb1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6000000}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r4}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffc0}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x233d}}, {0x8, 0x6, r10}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x14}, 0x4) fsmount(0xffffffffffffffff, 0x1, 0x82) [ 136.809358] kmemleak: Found object by alias at 0x607f1a6342cc [ 136.809380] CPU: 1 UID: 0 PID: 4079 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 136.809398] Tainted: [W]=WARN [ 136.809402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 136.809409] Call Trace: [ 136.809412] [ 136.809417] dump_stack_lvl+0xca/0x120 [ 136.809446] __lookup_object+0x94/0xb0 [ 136.809463] delete_object_full+0x27/0x70 [ 136.809478] free_percpu+0x30/0x1160 [ 136.809494] ? arch_uprobe_clear_state+0x16/0x140 [ 136.809514] futex_hash_free+0x38/0xc0 [ 136.809528] mmput+0x2d3/0x390 [ 136.809546] do_exit+0x79d/0x2970 [ 136.809559] ? signal_wake_up_state+0x85/0x120 [ 136.809575] ? zap_other_threads+0x2b9/0x3a0 [ 136.809590] ? __pfx_do_exit+0x10/0x10 [ 136.809602] ? do_group_exit+0x1c3/0x2a0 [ 136.809616] ? lock_release+0xc8/0x290 [ 136.809632] do_group_exit+0xd3/0x2a0 [ 136.809647] __x64_sys_exit_group+0x3e/0x50 [ 136.809660] x64_sys_call+0x18c5/0x18d0 [ 136.809676] do_syscall_64+0xbf/0x360 [ 136.809687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.809698] RIP: 0033:0x7f5894d3db19 [ 136.809707] Code: Unable to access opcode bytes at 0x7f5894d3daef. [ 136.809712] RSP: 002b:00007ffe49bca8e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 136.809723] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f5894d3db19 [ 136.809730] RDX: 00007f5894cf072b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 136.809737] RBP: 0000000000000000 R08: 0000001b2d7231c8 R09: 0000000000000000 [ 136.809744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.809751] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe49bca9d0 [ 136.809766] [ 136.809769] kmemleak: Object (percpu) 0x607f1a6342c8 (size 8): [ 136.809776] kmemleak: comm "syz-executor.0", pid 4083, jiffies 4294803639 [ 136.809783] kmemleak: min_count = 1 [ 136.809786] kmemleak: count = 0 [ 136.809790] kmemleak: flags = 0x21 [ 136.809794] kmemleak: checksum = 0 [ 136.809797] kmemleak: backtrace: [ 136.809801] pcpu_alloc_noprof+0x87a/0x1170 [ 136.809815] percpu_ref_init+0x37/0x400 [ 136.809833] ioctx_alloc+0x368/0x1e10 [ 136.809845] __x64_sys_io_setup+0xc8/0x1f0 [ 136.809857] do_syscall_64+0xbf/0x360 [ 136.809865] entry_SYSCALL_64_after_hwframe+0x77/0x7f 04:44:38 executing program 6: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000000)) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)=0x69) r0 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x1) timer_create(0x2, &(0x7f0000000200)={0x0, 0x1a, 0x4, @thr={&(0x7f0000000100)="bdb1d4cad2cede9bda4332ea668b0b2a611258eca979a89166d931784ce2f43cb409848be025647c4a6676feed60664abb0af6454c6cfbc61c8e1c5c54e407a8365b9763464592dbd2ab66c89ca8709e59d4d29add6c98e4130433eb8bd9bd5320b8c14e37a7a15ce400ef6c66fb019e9383dc950e251db7", &(0x7f0000000180)="db180dc3e439c4c603730a9e141ae45c29178c7d6d24ea3a96e4ffc0ac3c732ba21b0648a3c7659c2e51412d48ca75f17b4ba4ab99f6b533946fd47b40016beda8a3c9d2bebf2af38be3d527e4c303082cd79cfb625eadafb8d26b96d04f8ab4ccff7a0c129246bfc555"}}, &(0x7f0000000240)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000280)='autofs\x00', 0x0, r1) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000340)) io_setup(0x4, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) fsmount(r0, 0x0, 0xf4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0) fsmount(r0, 0x0, 0x9) perf_event_open(&(0x7f0000000900)={0x4, 0x80, 0x9a, 0x4, 0x0, 0x5, 0x0, 0x1, 0x20080, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000008c0), 0xe}, 0x0, 0x32, 0x2, 0x0, 0xa99, 0x894, 0x7ff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x9) 04:44:38 executing program 7: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}}, 0x4005) r0 = socket(0x9, 0xf96d83cd467c3ccd, 0x100) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x1bf, 0x0, 0x7ff, 0xfffffffa, 0x1}, 0x14) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x35c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x625}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa4}}}]}}]}, 0x35c}, 0x1, 0x0, 0x0, 0x54}, 0xceb05b165da288b2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000780)={0x101, 0x40, 0x1f, 0x436, 0x7}, 0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000900)='FROZEN\x00', 0x7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000c00)=""/135, &(0x7f0000000cc0)=0x87) 04:44:38 executing program 5: keyctl$link(0x8, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, 0xfffffffffffffffd) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x58, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffc}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20c0}, 0x4000) r1 = request_key(&(0x7f0000000280)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='nl802154\x00', 0xfffffffffffffff9) keyctl$search(0xa, r1, &(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000780)={&(0x7f00000003c0), 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x328, r0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xdb}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x5555555555540004}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x198, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffb}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffff65df}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1b4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x108, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x216}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x25f64c4b}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x524620b6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x328}, 0x1, 0x0, 0x0, 0x4}, 0x4) keyctl$link(0x8, r1, r1) accept$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a40)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000bc0), &(0x7f0000000c00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)) accept4$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001000)=0x14, 0x800) accept$packet(0xffffffffffffffff, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001100)=0x14) fsmount(0xffffffffffffffff, 0x1, 0x82) 04:44:38 executing program 2: io_uring_setup(0x258c, &(0x7f0000000000)={0x0, 0x9887, 0x10, 0x0, 0x8f}) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004004) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x20882, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc5df}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) sendto$packet(r0, &(0x7f0000000480)="9af3766bd48bf2e6cbf16435b842028d85ea6e60c3b95080c94512c62528b8fbc385839bf63f8350fd51bb241bdaa5be61713f30f5a393dbe7a104f94f3c42ecd9bd4c275a2669625fbff883ae962a3a2686ba166ffcd345ac54ae05485f8c8afad37c0c8fcc4215e5d908b12ef98714591ff86f58671653968d998f20b168a156765a9f670d32f1ecb397eb8ab8602e83d998d82626b1afb32079710e2a74d93f08aa96bc759fba08701068134ca21631bc3e46570fd5c72fcc2d808f83b78ae33248155bec505f71e7035332ee8d38b75b5748719b89369c7fa3330fd4", 0xde, 0x40080, &(0x7f0000000580)={0x11, 0xf5, r1, 0x1, 0x5, 0x6, @remote}, 0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x40d1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000740), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x400000}, @xdp={0x2c, 0x8, 0x0, 0x6}, 0xf947, 0x0, 0x0, 0x0, 0x80, &(0x7f00000007c0)='team_slave_0\x00', 0x4, 0x1, 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0}, &(0x7f00000009c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001180)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000000a00)={0x73c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf7}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3700}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x40, 0x4f, 0x6}, {0x0, 0x1, 0x5}, {0xff, 0x0, 0x4, 0x4ff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x188}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x9, 0x1f, 0x7}, {0x0, 0x6, 0x2, 0x5}, {0x7fff, 0xc1, 0x1a, 0x3}, {0x4, 0x30, 0x4, 0x8}, {0xfffe, 0xb1, 0x1d, 0x80000000}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x73c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000011c0)=@req3={0x1, 0x800, 0x2, 0x4, 0x0, 0x10001}, 0x1c) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x2c}}, 0x2050) [ 137.440716] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.442581] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.443651] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.444767] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.446244] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 137.447537] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 137.448672] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 137.449932] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 137.939165] ------------[ cut here ]------------ [ 137.940599] percpu ref (free_ioctx_reqs) <= 0 (0) after switching to atomic [ 137.940996] WARNING: lib/percpu-refcount.c:197 at percpu_ref_switch_to_atomic_rcu+0x3cc/0x480, CPU#1: swapper/1/0 [ 137.944475] Modules linked in: [ 137.945220] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 137.953016] Tainted: [W]=WARN [ 137.953658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 137.955249] RIP: 0010:percpu_ref_switch_to_atomic_rcu+0x3cc/0x480 [ 137.956442] Code: 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 9e 00 00 00 49 8b 75 e8 48 c7 c7 80 97 e2 84 e8 75 c5 e9 fe 90 <0f> 0b 90 90 e9 2b ff ff ff e8 f6 de 5f ff e9 9e fe ff ff e8 7c df [ 137.959807] RSP: 0018:ffff88806cf08e20 EFLAGS: 00010286 [ 137.960844] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8139de70 [ 137.962197] RDX: ffff888009633700 RSI: ffffffff8139de7e RDI: 0000000000000001 [ 137.963540] RBP: 8000000000000000 R08: 0000000000000001 R09: ffffed100d9e4801 [ 137.964885] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803c05a800 [ 137.966238] R13: ffff88803c05a820 R14: 0000000000000002 R15: 0000000000000003 [ 137.967582] FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 137.969104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.970229] CR2: 00007ffc16dcffd8 CR3: 000000003c169000 CR4: 0000000000350ef0 [ 137.971581] Call Trace: [ 137.972065] [ 137.972532] ? rcu_core+0x7c3/0x1800 [ 137.973274] rcu_core+0x7c8/0x1800 [ 137.973968] ? __pfx_rcu_core+0x10/0x10 [ 137.974776] handle_softirqs+0x1b1/0x770 [ 137.975600] __irq_exit_rcu+0xc4/0x100 [ 137.976386] irq_exit_rcu+0x9/0x20 [ 137.977048] sysvec_apic_timer_interrupt+0x70/0x80 [ 137.978017] [ 137.978486] [ 137.978915] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 137.979911] RIP: 0010:pv_native_safe_halt+0x1e/0x30 [ 137.980880] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 eb 0c 0f 1f 44 00 00 0f 00 2d 69 f7 09 00 0f 1f 44 00 00 fb f4 dd 83 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 [ 137.984199] RSP: 0018:ffff888009717e58 EFLAGS: 00000206 [ 137.985213] RAX: 0000000000051f0f RBX: 0000000000000001 RCX: ffffffff84bb95f7 [ 137.986569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff814c8304 [ 137.987892] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffed100d9e630a [ 137.989219] R10: ffff88806cf31853 R11: 0000000000000001 R12: ffffffff8643ac50 [ 137.990552] R13: 1ffff110012e2fd2 R14: 0000000000000000 R15: 0000000000000000 [ 137.991887] ? ct_kernel_exit.constprop.0+0x127/0x150 [ 137.992885] ? do_idle+0x344/0x490 [ 137.993601] default_idle+0xe/0x20 [ 137.994300] default_idle_call+0x6d/0xb0 [ 137.995047] do_idle+0x344/0x490 [ 137.995729] ? cpuhp_online_idle+0xa3/0xc0 [ 137.996545] ? __pfx_do_idle+0x10/0x10 [ 137.997316] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 137.998331] cpu_startup_entry+0x4f/0x60 [ 137.999123] start_secondary+0x1bd/0x210 [ 137.999867] common_startup_64+0x13e/0x148 [ 138.000701] [ 138.001177] irq event stamp: 336156 [ 138.001826] hardirqs last enabled at (336164): [] __up_console_sem+0x78/0x80 [ 138.003428] hardirqs last disabled at (336173): [] __up_console_sem+0x5d/0x80 [ 138.005021] softirqs last enabled at (335608): [] handle_softirqs+0x50c/0x770 [ 138.006637] softirqs last disabled at (335633): [] __irq_exit_rcu+0xc4/0x100 [ 138.008219] ---[ end trace 0000000000000000 ]--- [ 138.009059] percpu_ref_switch_to_atomic_rcu: percpu_ref_switch_to_atomic_rcu(): percpu_ref underflow slab kmalloc-64 start ffff88803c05a800 pointer offset 0 size 64 [ 138.654186] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.486415] Bluetooth: hci7: command 0x0c1a tx timeout [ 139.486526] Bluetooth: hci5: command 0x0c1a tx timeout [ 139.487530] Bluetooth: hci6: command 0x0c1a tx timeout [ 139.488572] Bluetooth: hci4: command 0x0c1a tx timeout [ 139.489495] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.490550] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.491456] Bluetooth: hci0: command 0x0c1a tx timeout VM DIAGNOSIS: 04:44:40 Registers: info registers vcpu 0 RAX=ffff888014353700 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8135841d RDI=fffffbfff0b838ec RBP=ffffffff85c1c760 RSP=ffff88800f7cef68 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003be53 R11=0000000000012bb3 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000246 RIP=ffffffff8151dd32 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd09c86e28 CR3=000000002f59d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88806cf08760 R8 =0000000000000000 R9 =ffffed10014ea046 R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc16dcffd8 CR3=000000003c169000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0040402e2f5b255d405cfe5c7d2b775c XMM02=340255ddad9f279c517187ef50b5a8a1 XMM03=e011fbcb21cdd4cef17d7951371d7ff5 XMM04=15c814deb9283bd8f9cf3199920bc1f0 XMM05=ed1d4fb0b2ffb91b6188925327a8447f XMM06=57fedc7f6a3d882bc43a5ffa5e9b3acf XMM07=517605c182c54546b15ab0954dc6dcc7 XMM08=b0954dc6dcc757fedc7f6a3d882bc43a XMM09=f61bf6973833517605c182c54546b15a XMM10=23e0a7ef954a72f15cb9c554af474980 XMM11=4fb6fa25ab4e33c0b8142aa5a6ac2939 XMM12=714f93892372b56658f5a406b56df791 XMM13=27e4879063444e03e46fd358020bb717 XMM14=658cc5e234c711a3d588f0c6e09d2887 XMM15=89d3b55956eca8b4d48daeefb6a626b7