syzkaller login: [   66.289689] sshd (232) used greatest stack depth: 24216 bytes left
Warning: Permanently added '[localhost]:56230' (ECDSA) to the list of known hosts.
2025/01/28 03:54:36 fuzzer started
2025/01/28 03:54:37 dialing manager at localhost:40883
[   68.992946] cgroup: Unknown subsys name 'net'
[   69.090825] cgroup: Unknown subsys name 'cpuset'
[   69.126367] cgroup: Unknown subsys name 'rlimit'
[   75.378079] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/28 03:54:53 syscalls: 226
2025/01/28 03:54:53 code coverage: enabled
2025/01/28 03:54:53 comparison tracing: enabled
2025/01/28 03:54:53 extra coverage: enabled
2025/01/28 03:54:53 setuid sandbox: enabled
2025/01/28 03:54:53 namespace sandbox: enabled
2025/01/28 03:54:53 Android sandbox: enabled
2025/01/28 03:54:53 fault injection: enabled
2025/01/28 03:54:53 leak checking: enabled
2025/01/28 03:54:53 net packet injection: enabled
2025/01/28 03:54:53 net device setup: enabled
2025/01/28 03:54:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/28 03:54:53 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/28 03:54:53 USB emulation: enabled
2025/01/28 03:54:53 hci packet injection: enabled
2025/01/28 03:54:53 wifi device emulation: enabled
2025/01/28 03:54:53 802.15.4 emulation: enabled
2025/01/28 03:54:53 fetching corpus: 0, signal 0/0 (executing program)
2025/01/28 03:54:54 starting 8 fuzzer processes
03:54:54 executing program 0:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r1=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x24000004)
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x280, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x86d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4232f1ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7789f98a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x602671f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xffeb}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc875}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8def}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c80}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53dca2d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52ab3dcd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19ada5e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x138e0fc9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8329}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x518a3f2c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x14c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74834f0e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33386cf9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdb6497b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39397e57}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8fe}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b3d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x787bbb71}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56676e4e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb284}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc33b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x873b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5608}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3394}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7808}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43cd4a44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13d906d3}]}, {0x4}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2de1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdba1134}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11cca26a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x715a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32d6b40a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe381}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59ebccde}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6379f0db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3dc0c7e0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e3f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x635351a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc40}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2dab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x834a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc95}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48f6403c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5c3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x730053f7}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55e8}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52c840f1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70f62e55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fc56857}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3db0f87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1830da61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6567ef9f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ae9631d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75e8ce30}]}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000000)
timerfd_create(0x1, 0x80800)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r4, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4800)
r5 = syz_open_dev$vcsa(&(0x7f0000000740), 0x0, 0x2003)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000b40)={&(0x7f0000000780), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r6, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008090)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), r3)
sendmsg$NLBL_CALIPSO_C_LISTALL(r8, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x5c, r9, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000054}, 0x800)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000d40), r8)
sendmsg$NLBL_CALIPSO_C_LISTALL(r10, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x5010082}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, r11, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0)

03:54:54 executing program 3:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x5, 0x3, 0x8001})
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x78, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000004)
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0xc5f, 0x0, 0x2})
ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000300)={0xa})
ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000640)={0x5, 0xe})
ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000680)={0x4})
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000b40)={'\x00', 0x6, 0x2, 0x6})
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000bc0)={{0x8c2b, 0x5}, {0x9}, 0x9})
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x14)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000d40), 0x440, 0x0)
ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000d80)={0x18})
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000010c0), 0x333240, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000001100)={0x1})
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001140), 0x2200, 0x0)
ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000001180)={{0x101, 0x79}, {0x5, 0x9}, 0x1})
read$ptp(r2, &(0x7f00000011c0)=""/106, 0x6a)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x40)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000880}, 0x14)

03:54:54 executing program 1:
ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0)
ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/4096)
r1 = syz_open_dev$vcsa(&(0x7f0000001040), 0x0, 0x20)
ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000001080)=[0x9, 0xfffff379])
r2 = add_key$fscrypt_v1(&(0x7f00000011c0), &(0x7f0000001200)={'fscrypt:', @desc4}, &(0x7f0000001240)={0x0, "d4334e503c4a2d1104729c2c3195f1c47a0d52447fb146662f16d7ada1cd103356b48f0c8a28dddee1e3d9962586e74b38433084c0a1629dd5d5b8223d071278", 0x33}, 0x48, 0xfffffffffffffffb)
add_key(&(0x7f00000010c0)='logon\x00', &(0x7f0000001100)={'syz', 0x2}, &(0x7f0000001140)="001d01a4f20915d30d80c7be6732e4aa87c5167ef77494a4b71cb79c500da0e49827c69f96ad785b0555eaa91afd3dfdceeb1452e2ee1f9164605f40b256d00e1c8dd3c0ea84", 0x46, r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004044}, 0x40080)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000001440), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001480)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00', <r6=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000007d40)=[{{&(0x7f0000001500)=@x25={0x9, @remote}, 0x80, &(0x7f0000004680)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/249, 0xf9}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/4096, 0x1000}], 0x4, &(0x7f00000046c0)=""/34, 0x22}, 0x746}, {{&(0x7f0000004700)=@hci, 0x80, &(0x7f0000005c40)=[{&(0x7f0000004780)=""/1, 0x1}, {&(0x7f00000047c0)=""/60, 0x3c}, {&(0x7f0000004800)=""/9, 0x9}, {&(0x7f0000004840)=""/128, 0x80}, {&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)=""/37, 0x25}, {&(0x7f0000005900)=""/44, 0x2c}, {&(0x7f0000005940)=""/250, 0xfa}, {&(0x7f0000005a40)=""/203, 0xcb}, {&(0x7f0000005b40)=""/253, 0xfd}], 0xa, &(0x7f0000005d00)=""/89, 0x59}, 0x4}, {{&(0x7f0000005d80)=@alg, 0x80, &(0x7f00000060c0)=[{&(0x7f0000005e00)=""/8, 0x8}, {&(0x7f0000005e40)=""/171, 0xab}, {&(0x7f0000005f00)=""/186, 0xba}, {&(0x7f0000005fc0)=""/158, 0x9e}, {&(0x7f0000006080)=""/30, 0x1e}], 0x5, &(0x7f0000006140)=""/160, 0xa0}, 0x7fffffff}, {{&(0x7f0000006200)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000007740)=[{&(0x7f0000006280)}, {&(0x7f00000062c0)=""/78, 0x4e}, {&(0x7f0000006340)}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000007380)=""/246, 0xf6}, {&(0x7f0000007480)=""/86, 0x56}, {&(0x7f0000007500)=""/143, 0x8f}, {&(0x7f00000075c0)=""/179, 0xb3}, {&(0x7f0000007680)=""/175, 0xaf}], 0x9, &(0x7f0000007800)=""/73, 0x49}, 0xf75}, {{&(0x7f0000007880)=@ll={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000007c80)=[{&(0x7f0000007900)=""/199, 0xc7}, {&(0x7f0000007a00)=""/17, 0x11}, {&(0x7f0000007a40)=""/11, 0xb}, {&(0x7f0000007a80)=""/20, 0x14}, {&(0x7f0000007ac0)=""/129, 0x81}, {&(0x7f0000007b80)=""/67, 0x43}, {&(0x7f0000007c00)=""/98, 0x62}], 0x7, &(0x7f0000007d00)=""/4, 0x4}, 0xfffffff8}], 0x5, 0x1040, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000007e80)={'batadv_slave_0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007ec0)={'team0\x00', <r9=>0x0})
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000007f00)={@multicast1, @local, <r10=>0x0}, &(0x7f0000007f40)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000007f80)={@multicast2, @multicast1, <r11=>0x0}, &(0x7f0000007fc0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000008000)={'team0\x00', <r12=>0x0})
getsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000008040)={@broadcast, @multicast1, <r13=>0x0}, &(0x7f0000008080)=0xc)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000008700)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000086c0)={&(0x7f00000080c0)={0x5dc, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ed}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x5e8c, 0x9, 0x5, 0xfffffffd}, {0x8, 0x9, 0x8, 0xfff}, {0x100, 0x8, 0x1, 0x7}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x1, 0x1, 0x400}, {0x1, 0x8, 0x9, 0x3f}, {0x8, 0x8, 0xd2, 0xb7}, {0x8, 0x6d, 0x7, 0x5}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x4, 0x5, 0x9c5d}, {0x9, 0xb5, 0x6, 0x4}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ae0}}}]}}, {{0x8, 0x1, r7}, {0x25c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x9, 0x6, 0x800}, {0x9, 0x1, 0x80, 0x7fffffff}, {0x0, 0x20, 0x7, 0x9}, {0x8, 0x80, 0x9, 0xf80}, {0x8000, 0x20, 0x3f, 0x200}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x4000800}, 0x45)

03:54:54 executing program 2:
r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000007440)=[{{&(0x7f0000001a00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a80)=""/147, 0x93}, {&(0x7f0000001b40)=""/61, 0x3d}], 0x2, &(0x7f0000001bc0)=""/70, 0x46}, 0x3ff}, {{&(0x7f0000001c40)=@x25, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001cc0)=""/255, 0xff}, {&(0x7f0000001dc0)=""/47, 0x2f}, {&(0x7f0000001e00)=""/186, 0xba}], 0x3, &(0x7f0000001f00)=""/4, 0x4}, 0x56}, {{&(0x7f0000001f40)=@nfc, 0x80, &(0x7f0000003500)=[{&(0x7f0000001fc0)=""/230, 0xe6}, {&(0x7f00000020c0)=""/95, 0x5f}, {&(0x7f0000002140)=""/100, 0x64}, {&(0x7f00000021c0)=""/157, 0x9d}, {&(0x7f0000002280)=""/148, 0x94}, {&(0x7f0000002340)=""/65, 0x41}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/246, 0xf6}, {&(0x7f00000034c0)=""/3, 0x3}], 0x9, &(0x7f00000035c0)=""/137, 0x89}}, {{&(0x7f0000003680)=@tipc, 0x80, &(0x7f0000004b40)=[{&(0x7f0000003700)=""/44, 0x2c}, {&(0x7f0000003740)}, {&(0x7f0000003780)=""/25, 0x19}, {&(0x7f00000037c0)=""/27, 0x1b}, {&(0x7f0000003800)=""/48, 0x30}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/232, 0xe8}, {&(0x7f0000004940)=""/167, 0xa7}, {&(0x7f0000004a00)=""/146, 0x92}, {&(0x7f0000004ac0)=""/72, 0x48}], 0xa, &(0x7f0000004c00)=""/39, 0x27}, 0x2}, {{&(0x7f0000004c40)=@generic, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004cc0)=""/31, 0x1f}, {&(0x7f0000004d00)=""/28, 0x1c}, {&(0x7f0000004d40)=""/149, 0x95}], 0x3, &(0x7f0000004e40)=""/237, 0xed}, 0x7}, {{&(0x7f0000004f40)=@generic, 0x80, 0xffffffffffffffff, 0x0, &(0x7f0000004fc0)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005fc0)=@ll={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000072c0)=[{&(0x7f0000006040)=""/4096, 0x1000}, {&(0x7f0000007040)=""/38, 0x26}, {&(0x7f0000007080)=""/64, 0x40}, {&(0x7f00000070c0)=""/33, 0x21}, {&(0x7f0000007100)=""/40, 0x28}, {&(0x7f0000007140)=""/226, 0xe2}, {&(0x7f0000007240)=""/123, 0x7b}], 0x7, &(0x7f0000007340)=""/236, 0xec}, 0xae}], 0x7, 0x120, &(0x7f0000007600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000007b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000007b40)={&(0x7f0000007640)={0x4e4, r0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x81, 0x81, 0x3, 0x3}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x98e3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0x9, 0x18, 0xfffffc01}, {0x5708, 0x4, 0x1, 0x10001}, {0x3, 0x20, 0x5, 0x5d1}, {0x3ff, 0x8, 0x4f, 0x10001}, {0x100, 0x5, 0x6, 0x153f}, {0x5, 0x4, 0x20, 0x2}, {0x200, 0x0, 0x80, 0x9}, {0x2, 0x0, 0x8, 0x9}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x64ee50db}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x20000040}, 0x80)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007c00)={@initdev, @multicast2, <r4=>0x0}, &(0x7f0000007c40)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000007d00)={@empty, @broadcast, <r5=>0x0}, &(0x7f0000007d40)=0xc)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000008000)={&(0x7f0000007bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000007fc0)={&(0x7f0000007d80)={0x23c, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x13}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8, 0x1, r5}, {0x98, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x40, 0x3, 0x6d49}, {0xffff, 0x86, 0x5, 0x7}, {0x4, 0x6, 0xff, 0xffff}, {0x8, 0x4c, 0x1, 0x9}]}}}]}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x884)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000008500)={&(0x7f0000008040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000084c0)={&(0x7f0000008080)={0x434, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x15c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r2}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2ac1}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r1}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x1f, 0x2, 0x6}, {0x5, 0x3, 0x84, 0xb05}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008000}, 0x800)
pipe(&(0x7f0000008540)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000008580)={@loopback, @multicast1}, &(0x7f00000085c0)=0xc)
socketpair(0xf, 0x800, 0x400, &(0x7f0000008640)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_genetlink_get_family_id$smc(&(0x7f0000008600), r9)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_VLAN(r10, &(0x7f0000008740)={&(0x7f0000008680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000008700)={&(0x7f00000086c0)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x1c}}, 0x10004000)
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000008940)={&(0x7f0000008780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000008900)={&(0x7f00000087c0)={0x108, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x41}, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "92a1e6421bf0807b5818d75d1c711b0d524bfc62b6b564e5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ebc0cb73c7ec34b13cb96913ea7bf07bba5abd8d1af02554"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3af367c407b4f9d0bdc6c2a41f98924c41d7a37db8c6c4d0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "905ce187017f0bca49f33da92e9db99ef9021aedf1a8ced5"}]]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840)
ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000008980)=""/248)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000008ac0), r8)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r10, &(0x7f0000008b80)={&(0x7f0000008a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000008b40)={&(0x7f0000008b00)={0x1c, r11, 0x500, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x24008044)
sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000008dc0)={&(0x7f0000008bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000008d80)={&(0x7f0000008c00)={0x178, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x448}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfe}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xcc}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4f8f371}]}, 0x178}, 0x1, 0x0, 0x0, 0x20040014}, 0x200048d1)

[   86.086623] audit: type=1400 audit(1738036494.696:7): avc:  denied  { execmem } for  pid=270 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:54:54 executing program 4:
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x90, 0xb5, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x3, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x5, 0xcd, 0xff}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x7, 0x57, 0x6, 0x40, 0x1f}, 0xb8, &(0x7f0000000080)={0x5, 0xf, 0xb8, 0x3, [@generic={0xa9, 0x10, 0xb, "7e8563e25f4d200d19e23e6c0d026803536a795408fdb7d901ae98bdd9d765140609c39778a27e64e6b05da2065c7c4a5b0ae29eeea7ac7746d1ba9ea55c898ceda0f21d62ae6d7b52d210d0bc47bd77095992c8e723c4868a18e03eb0ebe3f822b7ebd202038062da882c9f0788fff2bd8ee0392b8a4eebc3ac0f32d37c0a2532ec65cc8a10a00b0cf0407d729c89bb1c6aeae067d6825304488e4c6aafcf94c973f9599565"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xc, 0x6, 0xff}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x500a}}, {0xf5, &(0x7f0000000200)=@string={0xf5, 0x3, "64976b2dc5dd1dda0deeb2e3d9084afdb75e22abc496aaf108bd6d479e22d3a30ba3e590ae5f02db3a391af3041c42eea6699cc336a099f6c538980248461a2e8a9480d46163d226e0b6c277996ef60d7f73bdecd528f407dda8671c2a7d840333f44f22a406c669d5ed23d0f6f9f2b6dc5135b9f4710f6a1c82edd4d54e0439b9b04ea7d8180327f429044bec5d84147f2161bb38109d827f7ccf4d6cbb90535717cf48acb944e1761164ad2483f0caecacea911bcd92049f11e3c9f2cee5c1d1ba43933c98bf23c6b6b4a813fd4bc2fc4121d8ff52c8506d8237692279546db70f981baf960fce6bda6027690cc821ac5092"}}, {0xeb, &(0x7f0000000300)=@string={0xeb, 0x3, "63d55fb5501924e58250f7cff289ac01bcca39c5cfcb2c7c08c8687f9877688f442a679aae091a25ee09cd342dd6296c1bb0e1918467fd47aeb1e50aa7afc3103455cfbf2076e4e74518922852ff7ce7207cf64e0e0cf1521f86051663faf61fdedf3ee2779dd0b85feff3bc56cee779c986105ad679706b61acd106c605854bcdb74d71f10313d5f5495f3722f7c47ae4708bea8caf50b3d2768a250ded1f0ceb8ca1a7ca504435722127bd38836ca8651e6b76fae302610ef6bc2cd239a7e4d39474131aa0d6c3dbbd68324e92d6ec9768f8068e7859fea1106b2f7734bb760f99b8b82975d8d3ef"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x400a}}, {0x33, &(0x7f0000000440)=@string={0x33, 0x3, "b80d3d007de9e31525d5c8fb34376571c87419b8622ac32e0c247ecdbb443d3538a41e6c73cfbba69e875320fb165f9e3a"}}]})
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xa0, 0x4, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x1, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x0, 0x4, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x2, 0x5}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x3, 0xad, 0x0, 0x20, 0xba}, 0xfb, &(0x7f0000000580)={0x5, 0xf, 0xfb, 0x4, [@generic={0x1e, 0x10, 0x0, "8a4950cc3a95f47fe635565d19613298a27cd2f7646a0d0c57b315"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x5, 0x8, 0x80, 0x4, 0xad}, @generic={0xbd, 0x10, 0x4, "4c3290cf6ab63f0d98e489f5b93f05654dbcdefb9f291ede9e0d2f031e65f027b662f73f5dab19d6afbf729b85d2e3499d2eed3d81f0aceac4327b2fa2dc19695966849d04e82dc55ab69881e9433da436f4460a2d994ba2a06aa4c842fa4a0799af33abaafc06a06718ea03330b2a1e520a4d425c101a2e742b702105e88990e3b6c88d7c6dda9f19c951157af1cb2df451e42f28d9151554a7ccc8721b37d3d1ba609554a30d06aacb81df23f9fd624d68afe67ffef2df0090"}, @ssp_cap={0x10, 0x10, 0xa, 0xff, 0x1, 0xea, 0xf000, 0x7, [0x18000]}]}, 0x1, [{0xed, &(0x7f0000000680)=@string={0xed, 0x3, "70c97ea54785893916c4316786473c41bbaff559e3fc781c0d9004261ed9ad3e77effe7fab6f8cd47804c9764e8ad381acff2acb7c1ac2cd7f0a71d28bc086d7a49ca85d1c070093e5da2bfad4bbb28f67e8e87459c17e924706de4dd721549985eb896ca35a024c6f8c5966001c652bcc7e0d9aa2a5686765006a88fa548fe0d6a248e6af6d19c2404dbbfecaf71cff0653faea3b87800c3dc3ec82c49de3872a78e0835ea9d465ebace24f676769ce8eea73a6cd953c0b9d1bad17f61ac96902c4e19029be1714f2b85bde2ad16121e2d2110179e28816175c30bc830c83a2197b3e736c8f3f4d543e64"}}]})
syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x2, 0x1f, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x40, 0x6, 0x78}}}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x200, 0x8, 0x81, 0x81, 0xff, 0x40}, 0x104, &(0x7f0000000840)={0x5, 0xf, 0x104, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x1f, "48b40234ea02bba634dd3ef710a50eb5"}, @wireless={0xb, 0x10, 0x1, 0xf98656c16903f43a, 0x2, 0x8, 0x8, 0x5000, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0xf, 0x91d}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "0fd4b6e472cb3051a848476399bb330d"}, @generic={0xc5, 0x10, 0x3, "9d6257e4ca397a0be5061d2c973592645ab840d6b181ae133b8027fdfd73f515e2bad2665cf755f0241cacf70feee003d8f2815c8dbcfeac3a6aa596adf1986a9f74f850f9362957adc5695ae3dc40830b1fa238474985bc56b7e911d02918eae6c165e341cfccfae2d0582e972a30859b6380dc2740eb8e59d9eecd7b0573d37f8b435129f4b58d249f77e0f9040e7d0995dbcfe6b58b4629d7796f436b1f6618289a2c8ae99937b381df5a8e8f1f38a6b5459a78906149df8db46863d5712fb833"}]}, 0x6, [{0xb0, &(0x7f0000000980)=@string={0xb0, 0x3, "b837ddb4d86a0956e57a7f22cb300ec35b16338e4c166cb4d7c81cfe8248e6018cc6be179f1472c842efb1e6e1588e9f75aa775b4cd93131bc30439cf27992d656b1b648f3f39814039c2d4f00ca3fcd05d041a4aca4725550dc7cddb939ab27f3bedfd0d1635ea1f8322239cf2b854064caea41331a8cfcb1f0e89c25f6bfc38dca9463aec1e450c57e9ecab11b19fc69af3e4be2faf49cb3c7a3aebce96300fac92479501e7d574f727e436fdf"}}, {0xf8, &(0x7f0000000a40)=@string={0xf8, 0x3, "53bdb6d2fa2de2dbe83307b1e218b8b40eac86109328c27ecfafffc257fd812106b7ce29ad224ffc23c427335db77df4059bc9861424a79909d273bc05a69836e12733c5cad513a8671db07c1a55600c45939d00949927f9259af158926a13a7a8ac904136ab6d24f4f263648b5acde182a022296d312aa5c720cbfce93677c879bdd4f1b0bf5395c09c2b0d4fd7c24a7e4e712092d14fd71d8f90886c9703888d6c70ac18c06ab4cef6dc3de2a7d29dc5c95a9ded9a2d0b2c3ecf3c0542b05ba7d20d4ce852c2ae50fbf09295151aaf5d0d646b3445f953815859048acb68a5c5bc750981b31c6268042b27ff0286dcd681755e4e54"}}, {0xd9, &(0x7f0000000b40)=@string={0xd9, 0x3, "fc9e8121c722ed4634601222d8db3bc4d0028c6105c1419ebaaaecaf3e68a532b4ec4dbd4f620044f0af0721137806d9576f1d66db05e3f85134cdc487446d49e38914a08ec52eb3b46dd6898adad89e6d9fd6fec7cd0b58b9612d55efd0a7083ed5f4432e884b07708020dc78221a4f7e7d31e2f3a1acba0e4bcb863c0baa7daa8e62d33c24eec0894196cb572fb0b903af6b16d15708dc0d986605ee0d50fd74ecdc8b2aad54bfa0d8c6fda405cf27ca41a474b860f875c69292408c80ff04a098f8da60e9db350f75b5b62b8e7425d1c8cb00c7fbbc"}}, {0x36, &(0x7f0000000c40)=@string={0x36, 0x3, "a990a8898f083f8c76fb363f962765899546faea305a3c81b199b855890d1de06c633344f92dcf432b897af3cbaf2ad1d1578edb"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x180d}}]})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x810)
pipe(&(0x7f0000000e80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000f00), r0)
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x34, r3, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}}, 0x20000000)
clock_gettime(0x0, &(0x7f0000001000)={<r4=>0x0, <r5=>0x0})
write$evdev(r2, &(0x7f0000001040)=[{{0x0, 0xea60}, 0x12, 0x8, 0x8}, {{r4, r5/1000+10000}, 0x12, 0x7, 0xff}, {{0x77359400}, 0x14, 0x7ff, 0x7fffffff}, {{0x0, 0x2710}, 0x4, 0xc2, 0x1}, {{}, 0x4, 0x2}, {{0x77359400}, 0x5, 0x3, 0x3}], 0x90)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x70, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'NLBL_CALIPSO\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'NLBL_CALIPSO\x00'}]}, 0x70}}, 0x4040050)
ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000001240)=""/56)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x44, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3e180}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5d}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb8e}]}, 0x44}}, 0xc045)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000001400), r7)
pipe(&(0x7f0000001440))
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, r6, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc084}, 0x40)
syz_usb_connect$printer(0x6, 0x36, &(0x7f0000001580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x3, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x1, 0x80}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1f, 0x6, 0x2}}]}}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f00000015c0)={0xa, 0x6, 0x200, 0x9, 0x8, 0x8, 0x20, 0x3}, 0xc, &(0x7f0000001600)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x20, 0xb, 0xc}]}, 0x3, [{0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x439}}, {0x56, &(0x7f00000016c0)=@string={0x56, 0x3, "a135b25a8ae85b236769c50864ec86b9dc171f5f17bb8434b759b2874933e0d7d9f8cf21de0e03e4d98a6b649f0f116a87a636370c7858c0154c5d9dfd87ca54960a66f3ad816754c8ccb7ca21c1a06c0c146557"}}]})

03:54:54 executing program 5:
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000000))
ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000080)={0x18})
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40014}, 0x20000004)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0xa080004}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x1)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x4c, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf7f0}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff0000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6b5}]}, 0x34}}, 0x4000000)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001040))
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x48, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffc01}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x40080)
r4 = accept(0xffffffffffffffff, &(0x7f00000011c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000001240)=0x80)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xd0, r5, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x78}, @void, @val={0xc, 0x99, {0x34c, 0x3f}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8033ebfdb5de11f28c59799a1e487f9f4459b1da251499c1"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b2aad66c46b63161bf42f132409e6b52476c6e2cde4fc425"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7bb7b0b74b20125471e804cf47d9dc78c334c1657b355571"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b8575020c8f11d00fd3b7aab62146928eabf9c9663c374b1"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bad449b16bb1aad3ccd95fabd73d885220ad2a2e7577cee3"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004)
ptrace$setsig(0x4203, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x1, 0x2, 0xfffffff7})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000001600)={&(0x7f0000001500), 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x44, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x48800)
read$eventfd(0xffffffffffffffff, &(0x7f0000001640), 0x8)

03:54:54 executing program 6:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x888}, 0x48000)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="81f67f032a87"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="be609455287f"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x80)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x30d000, 0x0)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/time_for_children\x00')
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x2400c001)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000680)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x32}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20008844)
r5 = syz_open_dev$vcsa(&(0x7f0000000800), 0x1fb, 0x6c02)
syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r5)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r2)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r6, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x75f06f86}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x30}}, 0x3db65fe73db731ec)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb4, 0x13}}}}, [@NL80211_ATTR_PRIVACY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x8040)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r6, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20010810}, 0x20000080)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4c0d0)

03:54:54 executing program 7:
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/21)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000040)=""/164)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x8)
ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000140)={0xffff, 0x4, 0x6, 0x2, 0x94a, 0x6})
ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000180)=""/4096)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001180)=""/157)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000001240)=[0xff, 0x81])
ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001280)={0x3, 0x4, 0x5, 0x1, 0x0, 0x8})
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000012c0)=""/167)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000001380)=[0x4, 0x5])
ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000013c0)=""/170)
r0 = syz_open_dev$evdev(&(0x7f0000001480), 0xe911c1, 0x10281)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000014c0)=""/236)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000015c0)={0x2, 0x0, 0x6, 0x80000001, 0xfffff801, 0x4})
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001600)=""/224)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000001700)={0x3, 0x40, 0x0, 0x0, 0x4, 0x7fff})
pipe(&(0x7f0000001740)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000001780)={0xfc, 0x20, 0x400, 0x8a5c, "017bcca3d623ae916081404a6a80f317415c784307e863feb0c53cd9c079adf4"})
mount_setattr(r1, &(0x7f00000017c0)='./file0\x00', 0x8800, &(0x7f0000001800)={0x100004, 0x100000, 0x80000, {r2}}, 0x20)
ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000001840)=0x1)

[   87.397323] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.400608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.403037] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.410664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.414729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.416663] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.420168] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.425185] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   87.428773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.430960] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.440947] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   87.449941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.525327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.532262] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.538606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.543148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.547093] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.551811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.556311] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   87.561926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.563853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.590941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.596852] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   87.605691] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.611820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.620027] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.634568] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.646803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.660721] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   87.666718] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   87.670900] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   87.678056] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   87.679699] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   87.708709] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.710824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   87.721864] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   87.726814] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   87.731002] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   87.732829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   87.745751] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   87.756728] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   87.762020] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   87.765893] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   87.776964] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   87.786332] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   87.796275] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   87.825995] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   87.832821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   89.480918] Bluetooth: hci1: command tx timeout
[   89.545597] Bluetooth: hci0: command tx timeout
[   89.671502] Bluetooth: hci2: command tx timeout
[   89.735949] Bluetooth: hci3: command tx timeout
[   89.799477] Bluetooth: hci4: command tx timeout
[   89.800494] Bluetooth: hci5: command tx timeout
[   89.864484] Bluetooth: hci6: command tx timeout
[   89.927573] Bluetooth: hci7: command tx timeout
[   91.527501] Bluetooth: hci1: command tx timeout
[   91.591548] Bluetooth: hci0: command tx timeout
[   91.719888] Bluetooth: hci2: command tx timeout
[   91.783478] Bluetooth: hci3: command tx timeout
[   91.847514] Bluetooth: hci5: command tx timeout
[   91.847544] Bluetooth: hci4: command tx timeout
[   91.913442] Bluetooth: hci6: command tx timeout
[   91.975562] Bluetooth: hci7: command tx timeout
[   93.575594] Bluetooth: hci1: command tx timeout
[   93.639503] Bluetooth: hci0: command tx timeout
[   93.767767] Bluetooth: hci2: command tx timeout
[   93.831526] Bluetooth: hci3: command tx timeout
[   93.895939] Bluetooth: hci5: command tx timeout
[   93.896474] Bluetooth: hci4: command tx timeout
[   93.962450] Bluetooth: hci6: command tx timeout
[   94.024687] Bluetooth: hci7: command tx timeout
[   95.623979] Bluetooth: hci1: command tx timeout
[   95.687599] Bluetooth: hci0: command tx timeout
[   95.816453] Bluetooth: hci2: command tx timeout
[   95.879512] Bluetooth: hci3: command tx timeout
[   95.943612] Bluetooth: hci4: command tx timeout
[   95.944055] Bluetooth: hci5: command tx timeout
[   96.007530] Bluetooth: hci6: command tx timeout
[   96.072609] Bluetooth: hci7: command tx timeout
[  147.074829] syz-executor.1 (280) used greatest stack depth: 24016 bytes left
[  149.786011] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  149.788965] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  149.794943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  149.810972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  149.817803] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  149.822770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  149.850912] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  149.854690] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  149.857893] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  149.866037] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  149.869318] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  149.872208] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  149.930862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  149.933192] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  149.942127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  149.945110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  149.946879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  149.947787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  149.950477] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  149.952321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  149.958882] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  149.977302] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  149.980539] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  149.987744] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  149.991107] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  149.997942] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  150.002890] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  150.004536] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  150.007408] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  150.009611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  150.011659] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  150.014916] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  150.017799] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  150.023738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  150.024033] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  150.030142] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  150.030240] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  150.039004] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  150.051791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  150.064641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  150.073773] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  150.075543] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  150.075589] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  150.107109] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  150.112149] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  150.115049] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  150.160983] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  150.165032] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  151.880553] Bluetooth: hci0: command tx timeout
[  151.943560] Bluetooth: hci1: command tx timeout
[  152.071748] Bluetooth: hci3: command tx timeout
[  152.072610] Bluetooth: hci4: command tx timeout
[  152.135463] Bluetooth: hci2: command tx timeout
[  152.199483] Bluetooth: hci6: command tx timeout
[  152.200128] Bluetooth: hci5: command tx timeout
[  152.263462] Bluetooth: hci7: command tx timeout
[  153.927587] Bluetooth: hci0: command tx timeout
[  153.992430] Bluetooth: hci1: command tx timeout
[  154.119720] Bluetooth: hci3: command tx timeout
[  154.120203] Bluetooth: hci4: command tx timeout
[  154.184009] Bluetooth: hci2: command tx timeout
[  154.247797] Bluetooth: hci5: command tx timeout
[  154.248322] Bluetooth: hci6: command tx timeout
[  154.311587] Bluetooth: hci7: command tx timeout
[  155.975727] Bluetooth: hci0: command tx timeout
[  156.039508] Bluetooth: hci1: command tx timeout
[  156.167576] Bluetooth: hci4: command tx timeout
[  156.168051] Bluetooth: hci3: command tx timeout
[  156.231461] Bluetooth: hci2: command tx timeout
[  156.295773] Bluetooth: hci5: command tx timeout
[  156.296245] Bluetooth: hci6: command tx timeout
[  156.359610] Bluetooth: hci7: command tx timeout
[  158.025425] Bluetooth: hci0: command tx timeout
[  158.087456] Bluetooth: hci1: command tx timeout
[  158.215520] Bluetooth: hci4: command tx timeout
[  158.215997] Bluetooth: hci3: command tx timeout
[  158.279473] Bluetooth: hci2: command tx timeout
[  158.343492] Bluetooth: hci6: command tx timeout
[  158.343931] Bluetooth: hci5: command tx timeout
[  158.407656] Bluetooth: hci7: command tx timeout
[  211.700035] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  211.703603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  211.704625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  211.708024] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  211.712418] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  211.713422] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  211.728882] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  211.735284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  211.739377] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  211.742673] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  211.747929] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  211.749244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  211.790886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  211.795912] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  211.797239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  211.802999] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  211.805260] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  211.806311] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  211.861898] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  211.866562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  211.867821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  211.873572] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  211.879543] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  211.880559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  211.931576] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  211.941474] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  211.949418] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  211.955650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  211.956993] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  211.963135] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  212.147963] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  212.159555] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  212.192751] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  212.211035] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  212.230715] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  212.234549] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  212.235644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  212.242039] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  212.248455] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  212.248601] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  212.268635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  212.269312] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  212.273954] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  212.275266] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  212.276395] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  212.295473] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  212.309333] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  212.315675] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  213.767497] Bluetooth: hci1: command tx timeout
[  213.768283] Bluetooth: hci0: command tx timeout
[  213.831506] Bluetooth: hci2: command tx timeout
[  213.959511] Bluetooth: hci3: command tx timeout
[  214.023575] Bluetooth: hci4: command tx timeout
[  214.343440] Bluetooth: hci7: command tx timeout
[  214.407578] Bluetooth: hci5: command tx timeout
[  214.408188] Bluetooth: hci6: command tx timeout
[  215.816021] Bluetooth: hci1: command tx timeout
[  215.816538] Bluetooth: hci0: command tx timeout
[  215.879454] Bluetooth: hci2: command tx timeout
[  216.009404] Bluetooth: hci3: command tx timeout
[  216.071790] Bluetooth: hci4: command tx timeout
[  216.392533] Bluetooth: hci7: command tx timeout
[  216.456537] Bluetooth: hci5: command tx timeout
[  216.457007] Bluetooth: hci6: command tx timeout
[  217.863604] Bluetooth: hci0: command tx timeout
[  217.864103] Bluetooth: hci1: command tx timeout
[  217.927909] Bluetooth: hci2: command tx timeout
[  218.056432] Bluetooth: hci3: command tx timeout
[  218.122512] Bluetooth: hci4: command tx timeout
[  218.441413] Bluetooth: hci7: command tx timeout
[  218.503663] Bluetooth: hci6: command tx timeout
[  218.504134] Bluetooth: hci5: command tx timeout
[  219.914439] Bluetooth: hci1: command tx timeout
[  219.914953] Bluetooth: hci0: command tx timeout
[  219.976540] Bluetooth: hci2: command tx timeout
[  220.104509] Bluetooth: hci3: command tx timeout
[  220.168462] Bluetooth: hci4: command tx timeout
[  220.488386] Bluetooth: hci7: command tx timeout
[  220.552518] Bluetooth: hci5: command tx timeout
[  220.553019] Bluetooth: hci6: command tx timeout
[  268.722775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.723996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.961017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.962177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.115615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.116229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.251395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.251997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.378166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.378806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.511154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.512169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.654634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.655318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.845516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.846113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.929472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.930062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.020442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.021067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.163719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.164431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.323303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.324156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
03:57:59 executing program 7:
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/21)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000040)=""/164)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x8)
ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000140)={0xffff, 0x4, 0x6, 0x2, 0x94a, 0x6})
ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000180)=""/4096)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001180)=""/157)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000001240)=[0xff, 0x81])
ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001280)={0x3, 0x4, 0x5, 0x1, 0x0, 0x8})
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000012c0)=""/167)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000001380)=[0x4, 0x5])
ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000013c0)=""/170)
r0 = syz_open_dev$evdev(&(0x7f0000001480), 0xe911c1, 0x10281)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000014c0)=""/236)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000015c0)={0x2, 0x0, 0x6, 0x80000001, 0xfffff801, 0x4})
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001600)=""/224)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000001700)={0x3, 0x40, 0x0, 0x0, 0x4, 0x7fff})
pipe(&(0x7f0000001740)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000001780)={0xfc, 0x20, 0x400, 0x8a5c, "017bcca3d623ae916081404a6a80f317415c784307e863feb0c53cd9c079adf4"})
mount_setattr(r1, &(0x7f00000017c0)='./file0\x00', 0x8800, &(0x7f0000001800)={0x100004, 0x100000, 0x80000, {r2}}, 0x20)
ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000001840)=0x1)

[  270.446038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.446750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
03:57:59 executing program 7:
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/21)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000040)=""/164)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x8)
ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000140)={0xffff, 0x4, 0x6, 0x2, 0x94a, 0x6})
ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000180)=""/4096)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001180)=""/157)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000001240)=[0xff, 0x81])
ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001280)={0x3, 0x4, 0x5, 0x1, 0x0, 0x8})
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000012c0)=""/167)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000001380)=[0x4, 0x5])
ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000013c0)=""/170)
r0 = syz_open_dev$evdev(&(0x7f0000001480), 0xe911c1, 0x10281)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000014c0)=""/236)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000015c0)={0x2, 0x0, 0x6, 0x80000001, 0xfffff801, 0x4})
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001600)=""/224)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000001700)={0x3, 0x40, 0x0, 0x0, 0x4, 0x7fff})
pipe(&(0x7f0000001740)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000001780)={0xfc, 0x20, 0x400, 0x8a5c, "017bcca3d623ae916081404a6a80f317415c784307e863feb0c53cd9c079adf4"})
mount_setattr(r1, &(0x7f00000017c0)='./file0\x00', 0x8800, &(0x7f0000001800)={0x100004, 0x100000, 0x80000, {r2}}, 0x20)
ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000001840)=0x1)

03:57:59 executing program 7:
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/21)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000040)=""/164)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x8)
ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000140)={0xffff, 0x4, 0x6, 0x2, 0x94a, 0x6})
ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000180)=""/4096)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001180)=""/157)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000001240)=[0xff, 0x81])
ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001280)={0x3, 0x4, 0x5, 0x1, 0x0, 0x8})
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000012c0)=""/167)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000001380)=[0x4, 0x5])
ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000013c0)=""/170)
r0 = syz_open_dev$evdev(&(0x7f0000001480), 0xe911c1, 0x10281)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000014c0)=""/236)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000015c0)={0x2, 0x0, 0x6, 0x80000001, 0xfffff801, 0x4})
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001600)=""/224)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000001700)={0x3, 0x40, 0x0, 0x0, 0x4, 0x7fff})
pipe(&(0x7f0000001740)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000001780)={0xfc, 0x20, 0x400, 0x8a5c, "017bcca3d623ae916081404a6a80f317415c784307e863feb0c53cd9c079adf4"})
mount_setattr(r1, &(0x7f00000017c0)='./file0\x00', 0x8800, &(0x7f0000001800)={0x100004, 0x100000, 0x80000, {r2}}, 0x20)
ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000001840)=0x1)

03:57:59 executing program 3:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x5, 0x3, 0x8001})
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x78, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000004)
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0xc5f, 0x0, 0x2})
ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000300)={0xa})
ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000640)={0x5, 0xe})
ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000680)={0x4})
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000b40)={'\x00', 0x6, 0x2, 0x6})
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000bc0)={{0x8c2b, 0x5}, {0x9}, 0x9})
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x14)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000d40), 0x440, 0x0)
ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000d80)={0x18})
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000010c0), 0x333240, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000001100)={0x1})
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001140), 0x2200, 0x0)
ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000001180)={{0x101, 0x79}, {0x5, 0x9}, 0x1})
read$ptp(r2, &(0x7f00000011c0)=""/106, 0x6a)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x40)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000880}, 0x14)

03:57:59 executing program 7:
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/21)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000040)=""/164)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x8)
ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000140)={0xffff, 0x4, 0x6, 0x2, 0x94a, 0x6})
ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000180)=""/4096)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001180)=""/157)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000001240)=[0xff, 0x81])
ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001280)={0x3, 0x4, 0x5, 0x1, 0x0, 0x8})
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000012c0)=""/167)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000001380)=[0x4, 0x5])
ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000013c0)=""/170)
r0 = syz_open_dev$evdev(&(0x7f0000001480), 0xe911c1, 0x10281)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000014c0)=""/236)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000015c0)={0x2, 0x0, 0x6, 0x80000001, 0xfffff801, 0x4})
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001600)=""/224)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000001700)={0x3, 0x40, 0x0, 0x0, 0x4, 0x7fff})
pipe(&(0x7f0000001740)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000001780)={0xfc, 0x20, 0x400, 0x8a5c, "017bcca3d623ae916081404a6a80f317415c784307e863feb0c53cd9c079adf4"})
mount_setattr(r1, &(0x7f00000017c0)='./file0\x00', 0x8800, &(0x7f0000001800)={0x100004, 0x100000, 0x80000, {r2}}, 0x20)

03:57:59 executing program 7:
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/21)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000040)=""/164)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x8)
ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000140)={0xffff, 0x4, 0x6, 0x2, 0x94a, 0x6})
ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000180)=""/4096)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001180)=""/157)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000001240)=[0xff, 0x81])
ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001280)={0x3, 0x4, 0x5, 0x1, 0x0, 0x8})
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000012c0)=""/167)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000001380)=[0x4, 0x5])
ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000013c0)=""/170)
r0 = syz_open_dev$evdev(&(0x7f0000001480), 0xe911c1, 0x10281)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000014c0)=""/236)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000015c0)={0x2, 0x0, 0x6, 0x80000001, 0xfffff801, 0x4})
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001600)=""/224)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000001700)={0x3, 0x40, 0x0, 0x0, 0x4, 0x7fff})
pipe(&(0x7f0000001740)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount_setattr(r1, &(0x7f00000017c0)='./file0\x00', 0x8800, &(0x7f0000001800)={0x100004, 0x100000, 0x80000, {r2}}, 0x20)

[  271.163397] 
[  271.163636] ======================================================
[  271.164150] WARNING: possible circular locking dependency detected
[  271.164669] 6.13.0-next-20250124 #1 Not tainted
[  271.165075] ------------------------------------------------------
[  271.165589] kworker/u8:1/65 is trying to acquire lock:
[  271.169439] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[  271.170308] 
[  271.170308] but task is already holding lock:
[  271.170792] ffff888036400768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  271.171616] 
[  271.171616] which lock already depends on the new lock.
[  271.171616] 
[  271.172264] 
[  271.172264] the existing dependency chain (in reverse order) is:
[  271.172879] 
[  271.172879] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  271.173443]        __mutex_lock+0x13d/0xb50
[  271.173842]        wiphy_register+0x1b2e/0x25d0
[  271.174267]        ieee80211_register_hw+0x23a4/0x3d60
[  271.174729]        mac80211_hwsim_new_radio+0x2759/0x4d60
[  271.175213]        init_mac80211_hwsim+0x389/0x870
[  271.175663]        do_one_initcall+0xf9/0x640
[  271.176076]        kernel_init_freeable+0x53d/0x7a0
[  271.176529]        kernel_init+0x1e/0x2d0
[  271.176900]        ret_from_fork+0x48/0x80
[  271.177269]        ret_from_fork_asm+0x1a/0x30
[  271.177690] 
[  271.177690] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  271.178213]        __lock_acquire+0x29fd/0x4580
[  271.178628]        lock_acquire+0x19b/0x520
[  271.179013]        __mutex_lock+0x13d/0xb50
[  271.179409]        unregister_netdevice_many_notify+0x1612/0x1c80
[  271.179936]        unregister_netdevice_queue+0x224/0x2e0
[  271.180410]        _cfg80211_unregister_wdev+0x57b/0x700
[  271.180895]        ieee80211_remove_interfaces+0x2f2/0x6b0
[  271.181369]        ieee80211_unregister_hw+0x55/0x3a0
[  271.181820]        hwsim_exit_net+0x3a0/0x730
[  271.182217]        ops_exit_list+0xb3/0x180
[  271.182599]        cleanup_net+0x546/0xad0
[  271.182980]        process_one_work+0x8ee/0x1a10
[  271.183414]        worker_thread+0x674/0xe70
[  271.183822]        kthread+0x3ab/0x720
[  271.184185]        ret_from_fork+0x48/0x80
[  271.184551]        ret_from_fork_asm+0x1a/0x30
[  271.184977] 
[  271.184977] other info that might help us debug this:
[  271.184977] 
[  271.185625]  Possible unsafe locking scenario:
[  271.185625] 
[  271.186117]        CPU0                    CPU1
[  271.186503]        ----                    ----
[  271.186888]   lock(&rdev->wiphy.mtx);
[  271.187231]                                lock(rtnl_mutex);
[  271.187721]                                lock(&rdev->wiphy.mtx);
[  271.188254]   lock(rtnl_mutex);
[  271.188560] 
[  271.188560]  *** DEADLOCK ***
[  271.188560] 
[  271.189059] 4 locks held by kworker/u8:1/65:
[  271.189435]  #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[  271.190301]  #1: ffff88800ed37d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[  271.191134]  #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[  271.191912]  #3: ffff888036400768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  271.192790] 
[  271.192790] stack backtrace:
[  271.193163] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250124 #1
[  271.193200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  271.193223] Workqueue: netns cleanup_net
[  271.193263] Call Trace:
[  271.193273]  <TASK>
[  271.193284]  dump_stack_lvl+0xca/0x120
[  271.193344]  print_circular_bug+0x47b/0x750
[  271.193391]  check_noncircular+0x2e9/0x3c0
[  271.193433]  ? __pfx_check_noncircular+0x10/0x10
[  271.193475]  ? hlock_class+0x4e/0x130
[  271.193506]  ? mark_lock+0xac/0xed0
[  271.193546]  ? srso_return_thunk+0x5/0x5f
[  271.193601]  ? sched_clock+0x37/0x60
[  271.193659]  ? lockdep_lock+0xba/0x1b0
[  271.193716]  ? __pfx_lockdep_lock+0x10/0x10
[  271.193779]  __lock_acquire+0x29fd/0x4580
[  271.193832]  ? __pfx___lock_acquire+0x10/0x10
[  271.193876]  ? lock_release+0x20f/0x6f0
[  271.193920]  ? __pfx_lock_release+0x10/0x10
[  271.193968]  lock_acquire+0x19b/0x520
[  271.194011]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  271.194060]  ? __pfx_lock_acquire+0x10/0x10
[  271.194105]  ? srso_return_thunk+0x5/0x5f
[  271.194160]  ? lock_release+0x20f/0x6f0
[  271.194204]  ? srso_return_thunk+0x5/0x5f
[  271.194259]  ? lock_is_held_type+0x9e/0x120
[  271.194314]  ? srso_return_thunk+0x5/0x5f
[  271.194373]  __mutex_lock+0x13d/0xb50
[  271.194425]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  271.194470]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  271.194516]  ? srso_return_thunk+0x5/0x5f
[  271.194571]  ? synchronize_rcu_expedited+0x38a/0x420
[  271.194616]  ? __pfx___mutex_lock+0x10/0x10
[  271.194669]  ? __pfx_autoremove_wake_function+0x10/0x10
[  271.194724]  ? srso_return_thunk+0x5/0x5f
[  271.194779]  ? kasan_quarantine_put+0x84/0x1e0
[  271.194840]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  271.194876]  ? srso_return_thunk+0x5/0x5f
[  271.194935]  unregister_netdevice_many_notify+0x1612/0x1c80
[  271.194981]  ? __virt_addr_valid+0x2e8/0x5d0
[  271.195034]  ? __pfx_lock_release+0x10/0x10
[  271.195079]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  271.195125]  ? find_held_lock+0x2c/0x110
[  271.195183]  ? srso_return_thunk+0x5/0x5f
[  271.195240]  ? kernfs_remove_by_name_ns+0xc7/0x130
[  271.195301]  ? srso_return_thunk+0x5/0x5f
[  271.195356]  ? lock_release+0x20f/0x6f0
[  271.195401]  ? __pfx_lock_release+0x10/0x10
[  271.195444]  ? srso_return_thunk+0x5/0x5f
[  271.195499]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  271.195546]  ? srso_return_thunk+0x5/0x5f
[  271.195607]  unregister_netdevice_queue+0x224/0x2e0
[  271.195650]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  271.195694]  ? up_write+0x195/0x520
[  271.195749]  _cfg80211_unregister_wdev+0x57b/0x700
[  271.195801]  ? srso_return_thunk+0x5/0x5f
[  271.195860]  ieee80211_remove_interfaces+0x2f2/0x6b0
[  271.195898]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  271.195937]  ? srso_return_thunk+0x5/0x5f
[  271.195992]  ? srso_return_thunk+0x5/0x5f
[  271.196047]  ? synchronize_rcu+0x1ff/0x260
[  271.196090]  ieee80211_unregister_hw+0x55/0x3a0
[  271.196134]  hwsim_exit_net+0x3a0/0x730
[  271.196176]  ? __pfx_hwsim_exit_net+0x10/0x10
[  271.196217]  ? srso_return_thunk+0x5/0x5f
[  271.196272]  ? netdev_run_todo+0x788/0x1040
[  271.196322]  ? __pfx_hwsim_exit_net+0x10/0x10
[  271.196365]  ops_exit_list+0xb3/0x180
[  271.196407]  cleanup_net+0x546/0xad0
[  271.196452]  ? __pfx_cleanup_net+0x10/0x10
[  271.196505]  process_one_work+0x8ee/0x1a10
[  271.196571]  ? __pfx_lock_acquire+0x10/0x10
[  271.196616]  ? __pfx_process_one_work+0x10/0x10
[  271.196674]  ? srso_return_thunk+0x5/0x5f
[  271.196736]  ? move_linked_works+0x172/0x270
[  271.196781]  ? srso_return_thunk+0x5/0x5f
[  271.196836]  ? assign_work+0x196/0x240
[  271.196893]  worker_thread+0x674/0xe70
[  271.196952]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  271.197004]  ? srso_return_thunk+0x5/0x5f
[  271.197059]  ? __pfx_worker_thread+0x10/0x10
[  271.197118]  kthread+0x3ab/0x720
[  271.197170]  ? __pfx_kthread+0x10/0x10
[  271.197222]  ? srso_return_thunk+0x5/0x5f
[  271.197277]  ? finish_task_switch.isra.0+0x206/0x840
[  271.197328]  ? __pfx_kthread+0x10/0x10
[  271.197382]  ret_from_fork+0x48/0x80
[  271.197414]  ? __pfx_kthread+0x10/0x10
[  271.197467]  ret_from_fork_asm+0x1a/0x30
[  271.197533]  </TASK>
03:57:59 executing program 7:
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/21)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000040)=""/164)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x8)
ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000140)={0xffff, 0x4, 0x6, 0x2, 0x94a, 0x6})
ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000180)=""/4096)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001180)=""/157)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000001240)=[0xff, 0x81])
ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001280)={0x3, 0x4, 0x5, 0x1, 0x0, 0x8})
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000012c0)=""/167)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000001380)=[0x4, 0x5])
ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000013c0)=""/170)
r0 = syz_open_dev$evdev(&(0x7f0000001480), 0xe911c1, 0x10281)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000014c0)=""/236)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000015c0)={0x2, 0x0, 0x6, 0x80000001, 0xfffff801, 0x4})
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001600)=""/224)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000001700)={0x3, 0x40, 0x0, 0x0, 0x4, 0x7fff})
mount_setattr(0xffffffffffffffff, &(0x7f00000017c0)='./file0\x00', 0x8800, &(0x7f0000001800)={0x100004, 0x100000, 0x80000}, 0x20)

03:57:59 executing program 3:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x5, 0x3, 0x8001})
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x78, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000004)
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000280)={'\x00', 0xc5f, 0x0, 0x2})
ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000300)={0xa})
ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000640)={0x5, 0xe})
ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000680)={0x4})
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000b40)={'\x00', 0x6, 0x2, 0x6})
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000bc0)={{0x8c2b, 0x5}, {0x9}, 0x9})
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x14)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000d40), 0x440, 0x0)
ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000d80)={0x18})
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000010c0), 0x333240, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000001100)={0x1})
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001140), 0x2200, 0x0)
ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000001180)={{0x101, 0x79}, {0x5, 0x9}, 0x1})
read$ptp(r2, &(0x7f00000011c0)=""/106, 0x6a)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x40)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000880}, 0x14)

[  271.470497] syz-executor.2 (7058) used greatest stack depth: 23728 bytes left
[  273.295148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  273.296038] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  273.298075] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  273.299488] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  273.300528] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  273.301288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  273.674595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  273.678050] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  273.678915] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  273.680249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  273.681422] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  273.682270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  273.692842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  273.695591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  273.706832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  273.711243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  273.719259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  273.722447] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  273.723854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  273.739869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  273.749566] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  273.751174] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  273.753091] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  273.770833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  273.773763] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  273.777488] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  273.780553] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  273.787418] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  273.790507] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  273.790678] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  273.792754] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  273.796510] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  273.797499] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  273.805416] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  273.809763] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  273.811499] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  275.335382] Bluetooth: hci0: command tx timeout
[  275.719504] Bluetooth: hci1: command tx timeout
[  275.847608] Bluetooth: hci2: command tx timeout
[  275.847643] Bluetooth: hci7: command tx timeout
[  275.848012] Bluetooth: hci5: command tx timeout
[  275.848464] Bluetooth: hci3: command tx timeout
[  277.383577] Bluetooth: hci0: command tx timeout
[  277.767487] Bluetooth: hci1: command tx timeout
[  277.897552] Bluetooth: hci3: command tx timeout
[  277.897751] Bluetooth: hci7: command tx timeout
[  277.898028] Bluetooth: hci5: command tx timeout
[  277.898467] Bluetooth: hci2: command tx timeout
[  279.432430] Bluetooth: hci0: command tx timeout
[  279.815396] Bluetooth: hci1: command tx timeout
[  279.943404] Bluetooth: hci5: command tx timeout
[  279.943517] Bluetooth: hci2: command tx timeout
[  279.943857] Bluetooth: hci7: command tx timeout
[  279.944688] Bluetooth: hci3: command tx timeout

VM DIAGNOSIS:
03:57:59  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff819e7fdd RDX=ffff888033e68000
RSI=00000000000000f4 RDI=0000000000000005 RBP=ffffea00009239c0 RSP=ffff8880304375f8
R8 =0000000000000000 R9 =fffff94000124738 R10=0000000000000000 R11=00000000fa83b2da
R12=ffffea00009239c0 R13=0000000000000000 R14=ffff888035115620 R15=ffff8880304377c0
RIP=ffffffff819e7fe4 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005581cb4494c8 CR3=000000002d40c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000071 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800ed36d20
R8 =0000000000000000 R9 =ffffed1001c8d046 R10=0000000000000071 R11=2f72656b726f776b
R12=0000000000000071 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150
RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005558fe750500 CR3=000000000dd1e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff812bf531ffffffff812bf4fc XMM01=ffffffff81b15d32ffffffff812bf531
XMM02=7463656a6e695f31313230385f7a7973 XMM03=ffffffff81990645ffffffff819905ef
XMM04=ffffffff81990689ffffffff81990645 XMM05=ffffffff819905efffffffff81631251
XMM06=ffffffff81631244ffffffff8163122f XMM07=ffffffff816311fbffffffff816311ed
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000