Warning: Permanently added '[localhost]:46302' (ECDSA) to the list of known hosts.
2024/12/12 22:18:25 fuzzer started
2024/12/12 22:18:25 dialing manager at localhost:43887
syzkaller login: [   55.328936] cgroup: Unknown subsys name 'net'
[   55.428194] cgroup: Unknown subsys name 'cpuset'
[   55.457450] cgroup: Unknown subsys name 'rlimit'
2024/12/12 22:18:45 syscalls: 203
2024/12/12 22:18:45 code coverage: enabled
2024/12/12 22:18:45 comparison tracing: enabled
2024/12/12 22:18:45 extra coverage: enabled
2024/12/12 22:18:45 setuid sandbox: enabled
2024/12/12 22:18:45 namespace sandbox: enabled
2024/12/12 22:18:45 Android sandbox: enabled
2024/12/12 22:18:45 fault injection: enabled
2024/12/12 22:18:45 leak checking: enabled
2024/12/12 22:18:45 net packet injection: enabled
2024/12/12 22:18:45 net device setup: enabled
2024/12/12 22:18:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/12/12 22:18:45 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/12/12 22:18:45 USB emulation: enabled
2024/12/12 22:18:45 hci packet injection: enabled
2024/12/12 22:18:45 wifi device emulation: enabled
2024/12/12 22:18:45 802.15.4 emulation: enabled
2024/12/12 22:18:45 fetching corpus: 0, signal 0/0 (executing program)
2024/12/12 22:18:47 starting 8 fuzzer processes
22:18:47 executing program 1:
init_module(&(0x7f0000000000)='@{,\x00', 0x4, &(0x7f0000000040)='\x00')
init_module(&(0x7f0000000080)='-\x00', 0x2, &(0x7f00000000c0)='\x00')
semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)=[0xc40, 0x4, 0x6, 0x7f, 0x100, 0x7, 0x8000, 0x2, 0xfffe])
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000140))
prctl$PR_SET_FPEMU(0xa, 0x7)
prctl$PR_SET_FPEMU(0xa, 0x0)
r0 = syz_io_uring_setup(0x1764, &(0x7f0000000180)={0x0, 0x6d28, 0x0, 0x2, 0x390}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x364a, &(0x7f0000000280)={0x0, 0xb9ba, 0xc, 0x3, 0x61, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340))
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x10000000)
init_module(&(0x7f0000000380)='-\x00', 0x2, &(0x7f00000003c0)='-\xcf\\*!\x83@)\'\x00')
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000440)=[0x9, 0x4, 0x7, 0xdc73, 0x0, 0x200])
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"8968da0d6de85760b164e48e4cadac28", 0x0, 0x0, {0x0, 0x1aa9}, {0xcd6, 0x3ff}, 0x2, [0x80000001, 0x6, 0x9, 0x8a9, 0x7, 0x20000000, 0xfffffffffffffff8, 0x7, 0x3, 0x4, 0x3, 0x3ff, 0x6, 0xffffffff7fffffff, 0xfffffffffffffff8, 0x10000]})
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000580)=@buf)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x200a00, 0x0)
syz_io_uring_setup(0x201d, &(0x7f0000000600)={0x0, 0x7730, 0x20, 0x2, 0x1d1, 0x0, r2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000680), &(0x7f00000006c0))
r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs2/binder-control\x00', 0x800, 0x0)
ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000740)={'custom1\x00'})
ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000008c0)=@req={0x28, &(0x7f0000000880)={'veth0_to_batadv\x00', @ifru_names}})
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000b40)={0x0, 0xfffffffffffffffc, 0x7a, 0x2, @buffer={0x0, 0x48, &(0x7f0000000900)=""/72}, &(0x7f0000000980)="3d5b3b3b6e7c3ff3a347f4df59e950ec84404e1556aa123168d652e0363e7169098b962054dc038937b3225b3d6e43c62498af5e530e1a47f81db423effacbef79a6f6ee132d16f97a939d89977e0e2341ac8437e370448c3858f4dd9145a18fd5828a02a8a984d2ce4e17b8a8946db9643e389c7ef51cdb8961", &(0x7f0000000a00)=""/247, 0xfffffffd, 0x20010, 0x0, &(0x7f0000000b00)})

22:18:47 executing program 0:
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000080)=""/242, 0xf2}, {&(0x7f0000000180)=""/13, 0xd}, {&(0x7f00000001c0)=""/90, 0x5a}, {&(0x7f0000000240)=""/12, 0xc}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/64, 0x40}, {&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000480)=""/125, 0x7d}, {&(0x7f0000000500)=""/243, 0xf3}, {&(0x7f0000000600)=""/48, 0x30}], 0xa, &(0x7f0000000700)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/178, 0xb2}], 0x1, &(0x7f0000000940)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000002c00)=[{&(0x7f0000000a40)=""/1, 0x1}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/190, 0xbe}, {&(0x7f0000001b40)=""/131, 0x83}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x5, &(0x7f0000002c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r0=>0xffffffffffffffff, 0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x148}}, {{0x0, 0x0, &(0x7f0000002e00), 0x0, &(0x7f0000002e40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}], 0x4, 0x1, &(0x7f0000003040)={0x77359400})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000003100)={'ip6_vti0\x00', &(0x7f0000003080)={'syztnl2\x00', 0x0, 0x4, 0x3f, 0x6, 0x3, 0x63, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0x400, 0x4}})
syz_open_dev$ttys(0xc, 0x2, 0x1)
getsockname$packet(r4, &(0x7f0000003140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003180)=0x14)
r5 = socket(0x2a, 0x2, 0x6)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003240)={'sit0\x00', &(0x7f00000031c0)={'syztnl2\x00', <r6=>0x0, 0x2f, 0x9c, 0x4d, 0x10001, 0x40, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x10, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000003300)={'syztnl0\x00', &(0x7f0000003280)={'ip6tnl0\x00', r6, 0x29, 0x3f, 0x5, 0x4, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x80, 0x3, 0x1}})
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_ifreq(r7, 0x8971, &(0x7f0000003340)={'veth0_to_team\x00', @ifru_ivalue})
recvmmsg$unix(r0, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000003380)=""/86, 0x56}], 0x1}}, {{&(0x7f0000003440)=@abs, 0x6e, &(0x7f0000004980)=[{&(0x7f00000034c0)=""/178, 0xb2}, {&(0x7f0000003580)=""/225, 0xe1}, {&(0x7f0000003680)=""/210, 0xd2}, {&(0x7f0000003780)=""/155, 0x9b}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/176, 0xb0}, {&(0x7f0000004900)=""/94, 0x5e}], 0x7, &(0x7f0000004a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000004a80)=@abs, 0x6e, &(0x7f0000004c00)=[{&(0x7f0000004b00)=""/1, 0x1}, {&(0x7f0000004b40)=""/159, 0x9f}], 0x2, &(0x7f0000004c40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r8=>0x0}}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x158}}, {{&(0x7f0000004dc0), 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000004e40)=""/78, 0x4e}, {&(0x7f0000004ec0)=""/236, 0xec}], 0x2, &(0x7f0000005000)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f00000050c0), 0x6e, &(0x7f00000061c0)=[{&(0x7f0000005140)=""/2, 0x2}, {&(0x7f0000005180)=""/4096, 0x1000}, {&(0x7f0000006180)=""/8, 0x8}], 0x3, &(0x7f0000006200)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000006240), 0x6e, &(0x7f0000006400)=[{&(0x7f00000062c0)=""/221, 0xdd}, {&(0x7f00000063c0)=""/56, 0x38}], 0x2, &(0x7f0000006440)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f0000006480)=""/74, 0x4a}], 0x1, &(0x7f0000006540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f0000006780)=[{&(0x7f0000006600)=""/172, 0xac}, {&(0x7f00000066c0)=""/181, 0xb5}], 0x2}}], 0x8, 0x62, &(0x7f00000069c0)={0x0, 0x3938700})
ptrace$poke(0x4, r8, &(0x7f0000006a00), 0x9)
r9 = timerfd_create(0x4, 0x0)
timerfd_settime(r9, 0x1, &(0x7f0000006a40)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000006a80))
r10 = syz_open_dev$mouse(&(0x7f0000006ac0), 0x4, 0x101000)
recvmmsg$unix(r10, &(0x7f00000076c0)=[{{&(0x7f0000006b00)=@abs, 0x6e, &(0x7f0000007040)=[{&(0x7f0000006b80)=""/120, 0x78}, {&(0x7f0000006c00)=""/124, 0x7c}, {&(0x7f0000006c80)=""/102, 0x66}, {&(0x7f0000006d00)=""/201, 0xc9}, {&(0x7f0000006e00)=""/188, 0xbc}, {&(0x7f0000006ec0)=""/26, 0x1a}, {&(0x7f0000006f00)=""/151, 0x97}, {&(0x7f0000006fc0)=""/88, 0x58}], 0x8, &(0x7f00000070c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000007100)=@abs, 0x6e, &(0x7f0000007280)=[{&(0x7f0000007180)=""/92, 0x5c}, {&(0x7f0000007200)=""/102, 0x66}], 0x2, &(0x7f00000072c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000007300), 0x6e, &(0x7f00000075c0)=[{&(0x7f0000007380)=""/29, 0x1d}, {&(0x7f00000073c0)=""/220, 0xdc}, {&(0x7f00000074c0)=""/28, 0x1c}, {&(0x7f0000007500)=""/141, 0x8d}], 0x4, &(0x7f0000007600)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x4, &(0x7f0000007780)={0x77359400})
ioctl$SG_GET_SCSI_ID(r11, 0x2276, &(0x7f00000077c0))
recvmmsg$unix(r3, &(0x7f000000a640)=[{{&(0x7f0000007800), 0x6e, &(0x7f00000079c0)=[{&(0x7f0000007880)=""/33, 0x21}, {&(0x7f00000078c0)=""/234, 0xea}], 0x2, &(0x7f0000007a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r12=>0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000007b40)=@abs, 0x6e, &(0x7f000000a0c0)=[{&(0x7f0000007bc0)=""/4096, 0x1000}, {&(0x7f0000008bc0)=""/4096, 0x1000}, {&(0x7f0000009bc0)=""/148, 0x94}, {&(0x7f0000009c80)=""/149, 0x95}, {&(0x7f0000009d40)=""/81, 0x51}, {&(0x7f0000009dc0)=""/113, 0x71}, {&(0x7f0000009e40)=""/164, 0xa4}, {&(0x7f0000009f00)=""/170, 0xaa}, {&(0x7f0000009fc0)=""/215, 0xd7}], 0x9, &(0x7f000000a180)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f000000a1c0)=@abs, 0x6e, &(0x7f000000a540)=[{&(0x7f000000a240)=""/249, 0xf9}, {&(0x7f000000a340)=""/68, 0x44}, {&(0x7f000000a3c0)=""/41, 0x29}, {&(0x7f000000a400)=""/212, 0xd4}, {&(0x7f000000a500)=""/4, 0x4}], 0x5, &(0x7f000000a5c0)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x3, 0x0, &(0x7f000000a700)={0x77359400})
ptrace$cont(0x18, r12, 0x7, 0x6)
r13 = syz_open_dev$mouse(&(0x7f000000a740), 0x2, 0x121000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r13, 0x1, &(0x7f000000a780)={0x98, 0x8, 0x8, "51683f4bc0f5332055ad4cf4a289e56e2c440e0c49c9906c1fee52d6cc1e6281745f826d9efea3e2c0c9b00c3eb3dfe7c5ed511d3db701bbe38d652248e58d4755f3cfae856bb90da19ef4e1563a97ec40ea6e00c49a347533dc6c3cb8977d941feaf5ca28e6f84ab1c7d9328f775bff42bbaa9f64e604cb4830cd803b9872020d4780bfb46ebdd31e25ca98c0445cd1b71163c8bb35890f"})

22:18:47 executing program 2:
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/200, 0xc8}, {&(0x7f0000000180)=""/126, 0x7e}], 0x2, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {<r1=>0x0}}}], 0x20}}], 0x1, 0x2000, &(0x7f00000002c0))
r2 = getpid()
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, r0, 0x20, 0x70bd26, 0x80000000, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0xa8}, 0x1, 0x0, 0x0, 0xa000}, 0x40000)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff80000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800)
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x7fff, 0x480e02)
sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x15}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x401)
r5 = syz_open_dev$mouse(&(0x7f0000000700), 0xc00000000000000, 0x541540)
clock_gettime(0x0, &(0x7f0000000740)={<r6=>0x0, <r7=>0x0})
timerfd_settime(r5, 0x0, &(0x7f0000000780)={{0x77359400}, {r6, r7+60000000}}, &(0x7f00000007c0))
sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10008080}, 0x8000)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'ip6_vti0\x00', <r8=>0x0, 0x29, 0x7, 0x79, 0x1, 0x3a, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x7800, 0x8, 0x7, 0x7ff}})
sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x40}}, 0x4000)
ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000b40)={'ip6tnl0\x00', &(0x7f0000000ac0)={'syztnl1\x00', r8, 0x4, 0x1f, 0xc0, 0x8001, 0x26, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x700, 0x20, 0x1, 0x95}})
sysfs$1(0x1, &(0x7f0000000b80)='batadv\x00')
sysfs$1(0x1, &(0x7f0000000bc0)='-\xca\x00')
r9 = getpgrp(r2)
waitid(0x0, r9, &(0x7f0000000c00), 0x40000000, 0x0)

22:18:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x4001)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x64}}, 0x81)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40000)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r3, 0x95, &(0x7f00000004c0)={'hsr0\x00', @ifru_flags})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r4, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xda}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffc201}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40004)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000017c0)={0x0, 0xfffffffffffffffb, 0xa1, 0x6, @buffer={0x0, 0x58, &(0x7f0000000640)=""/88}, &(0x7f00000006c0)="fe9c27bbf030ac673e5f8e82dbffa437a77cc6501c2b0a930530b5dc4ddfd09a8a3a9086229d7198291eab46fe927f6d3ea2c801444787b49d818d40313ef0988a1fadff630e254368195d4774b75dcf6d19238bcc9182018cc3942d32072c8814965978a8cb7a82a235b63e11a6e571beada20f337ba2a0a78f2de69e4534e99c9730297061d1322954a769d6dece731e8ca69268e70155f3983f74b90209324b", &(0x7f0000000780)=""/4096, 0xf16, 0x30, 0x2, &(0x7f0000001780)})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000018c0)={'ip6tnl0\x00', &(0x7f0000001840)={'ip6_vti0\x00', <r5=>0x0, 0x29, 0x5, 0x9, 0xab4, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x0, 0x2, 0x9}})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001940), r0)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x4c, r6, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x810)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001a80), 0x568e81, 0x0)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b00), r0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x60, r8, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x841}, 0x20000094)
r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c40), 0x180, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r9, 0x2286, &(0x7f0000001c80))

[   76.109662] audit: type=1400 audit(1734041927.303:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
22:18:47 executing program 4:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="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", 0xff)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="3e813cabd26825c724fd5d4cd55b5fbea6b39d26047b20c9cab3ba73ad312950964576ce94b71e904b2a40f1970f65475c1b87e336b2012d16582bf259b05d7f65958f299500a7444bd11d4c6c05bc661f6b2dd3ff259af6e77375b6e7a20008dc84c260bafda9c7057267f30d5cb0ab8cdd35a5db29db88493ab3829ef740651804a389f577696d5ef7a63919ff4009c5ea47e7c606664706fabfbf5f8d5d5c37b14cb01a027cde1312e8aa2b45245bc3c2bfc64a7e5adbb87c3f0f5d9a9a5edb03968cdbfd493afe365f3ae75f5ae1e791b07277019ee4b84260d80519199608", 0xe1)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa140, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x9}, 0x4)
getpid()
fcntl$getown(0xffffffffffffffff, 0x9)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder0\x00', 0x802, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x10000000)
recvmmsg$unix(r1, &(0x7f0000002c00)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/19, 0x13}, {&(0x7f0000000400)=""/66, 0x42}, {&(0x7f0000000480)=""/199, 0xc7}, {&(0x7f0000000580)=""/117, 0x75}, {&(0x7f0000000600)=""/92, 0x5c}, {&(0x7f0000000680)=""/194, 0xc2}], 0x7, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000900)=""/244, 0xf4}, {&(0x7f0000000a00)=""/160, 0xa0}, {&(0x7f0000000ac0)=""/220, 0xdc}, {&(0x7f0000000bc0)=""/52, 0x34}], 0x4, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000c80), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/216, 0xd8}, {&(0x7f0000001e00)=""/30, 0x1e}, {&(0x7f0000001e40)=""/10, 0xa}], 0x4, &(0x7f0000001ec0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000001f00), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001f80)=""/35, 0x23}], 0x1, &(0x7f0000002000)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x180}}, {{&(0x7f0000002180)=@abs, 0x6e, &(0x7f0000002400)=[{&(0x7f0000002200)=""/248, 0xf8}, {&(0x7f0000002300)=""/13, 0xd}, {&(0x7f0000002340)=""/151, 0x97}], 0x3, &(0x7f0000002440)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002480)=""/235, 0xeb}, {&(0x7f0000002580)=""/158, 0x9e}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)=""/40, 0x28}, {&(0x7f0000002780)=""/58, 0x3a}, {&(0x7f00000027c0)=""/30, 0x1e}], 0x6, &(0x7f0000002880)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000028c0), 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002940)=""/242, 0xf2}], 0x1}}, {{&(0x7f0000002a80)=@abs, 0x6e, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}], 0x8, 0x10000, &(0x7f0000002e00)={0x77359400})
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000002e40))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002f40)={&(0x7f0000400000/0xc00000)=nil, &(0x7f00008fb000/0xa000)=nil, &(0x7f00006e4000/0x2000)=nil, &(0x7f00009c5000/0x4000)=nil, &(0x7f000074b000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fdd000/0x1000)=nil, &(0x7f00009f9000/0x3000)=nil, &(0x7f0000a12000/0x2000)=nil, &(0x7f00008e3000/0x1000)=nil, &(0x7f0000002e80)="08d00fac7aef2a10bf3bee5fd3c209828d55af6ba0c5372e597366f6aafa749951d2a4be62390b39a6e388ae5ca257a64cc0c29a4a07c7525afdd1f8e77e34448019630885978ac95cf008fe0279c3b577ce51a8d107c8dee687a3d79d18bf6fd4a15de28c1b8a1554495d56d0ff62047c911d6795b34b5c98e2eee41083a97b3aff5d216808c293e08cb34b0d", 0x8d, r3}, 0x68)
timerfd_create(0x0, 0x80000)
sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003080)={&(0x7f0000003000)={0x44, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000000}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000031c0)={&(0x7f0000761000/0x4000)=nil, &(0x7f0000c56000/0x2000)=nil, &(0x7f00008d4000/0x1000)=nil, &(0x7f0000c13000/0x4000)=nil, &(0x7f00005cd000/0x1000)=nil, &(0x7f00004f3000/0x1000)=nil, &(0x7f0000e8d000/0x1000)=nil, &(0x7f0000b80000/0x3000)=nil, &(0x7f0000db7000/0x4000)=nil, &(0x7f000054c000/0x7000)=nil, &(0x7f0000ee3000/0x3000)=nil, &(0x7f0000003100)="ea8e3c9063a6fc03ccf973973154825a42f35948d6dda8a361a1efc30871288708e3922764c617b3a5a8d2988eab3f7ede9cad950b9364eb1d2c6e90fba3cbb79a19296669353e7acced500c55d699ed46e7691ebb9a5d9abfbaca9d070e2c3257c38dff9fc95c4516842e4eb618f5e107c4a37f49b6f5a2fa43c35f5ed0d360e60d75e232bead325056ac152319cbb81a0923bae40e66cf05e74a49b42d84f678c5cdca6e68fc9c17b93d69eb321205dff5143745", 0xb5, r5}, 0x68)
sched_rr_get_interval(r2, &(0x7f0000003240))
openat$zero(0xffffffffffffff9c, &(0x7f0000003280), 0x18080, 0x0)
r7 = syz_open_dev$mouse(&(0x7f00000032c0), 0xc890, 0x800)
ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5387, &(0x7f0000003300))
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f00000033c0)={'syztnl1\x00', &(0x7f0000003340)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x3f, 0x100, 0x10, @empty, @mcast1, 0x80, 0x1, 0x800, 0xffff}})

22:18:47 executing program 5:
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000))
mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x1, 0x40010, 0xffffffffffffffff, 0x10000000)
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040))
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080))
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r1=>0x0, 0x4, 0xab, 0x7, 0x4, 0x16, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x80, 0x9, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'sit0\x00', <r2=>r1, 0x2f, 0xfa, 0x2, 0x2, 0x1, @local, @remote, 0x1, 0x40, 0x40, 0x2}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r3=>0x0})
r4 = mq_open(&(0x7f0000000280)='batadv_slave_0\x00', 0x80, 0x41, &(0x7f00000002c0)={0x2, 0x68, 0x8, 0x87})
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000300)=<r5=>0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000340)=<r6=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000380)={"8c98daca132a32e3486392172b89f2b0", r5, r6, {0x8, 0x3b}, {0xfffffffffffffffa, 0x7}, 0x5, [0x40, 0x6, 0x9, 0x7, 0x0, 0x5, 0x0, 0xbb, 0x9, 0xa57, 0x5, 0x1, 0x8, 0x180000000000, 0x4, 0x3]})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/92, 0x5c}, {&(0x7f0000001500)=""/81, 0x51}, {&(0x7f0000001580)=""/212, 0xd4}, {&(0x7f0000001680)=""/35, 0x23}, {&(0x7f00000016c0)=""/203, 0xcb}, {&(0x7f00000017c0)=""/226, 0xe2}], 0x7, &(0x7f0000001940)=[@rights={{0x24, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001a00)=@abs, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000001a80)=""/252, 0xfc}, {&(0x7f0000001b80)=""/181, 0xb5}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000001d00)=""/15, 0xf}, {&(0x7f0000001d40)=""/242, 0xf2}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/24, 0x18}], 0x7, &(0x7f0000002f00)=[@cred={{0x1c, 0x1, 0x2, {<r9=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000003040), 0x6e, &(0x7f0000003180)=[{&(0x7f00000030c0)=""/12, 0xc}, {&(0x7f0000003100)=""/91, 0x5b}], 0x2, &(0x7f00000031c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000003240)=""/143, 0x8f}], 0x1}}], 0x4, 0x43, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000034c0)={'syztnl0\x00', &(0x7f0000003440)={'syztnl2\x00', r2, 0x2f, 0x6, 0x7, 0x79, 0x40, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x7, 0x677, 0x1}})
waitid(0x2, r9, &(0x7f0000003500), 0x8, &(0x7f0000003580))
sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000003700)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x24, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r8, 0x89fa, &(0x7f00000037c0)={'syztnl2\x00', &(0x7f0000003740)={'ip6tnl0\x00', <r12=>r3, 0x4, 0x1, 0x5, 0x6, 0x2, @private1, @local, 0x80, 0x7, 0x7ff, 0x4}})
r13 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r13, 0x89f9, &(0x7f0000003880)={'syztnl0\x00', &(0x7f0000003800)={'ip6_vti0\x00', r12, 0x7800884f66c206d4, 0xca, 0x7f, 0x81, 0x4c, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x20, 0x1, 0x8}})
setsockopt$inet6_icmp_ICMP_FILTER(r11, 0x1, 0x1, &(0x7f00000038c0)={0x74fd}, 0x4)

22:18:47 executing program 6:
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbe}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4081)
getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004048)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r1)
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r3, 0x501, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x90)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x600}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff04fe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008001)
ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000007c0))
r4 = socket(0x5, 0x80000, 0x6f87)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r2)
sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x60}}, 0x800)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x0, 0xfffffff8, 0x4a, @mcast2, @mcast1, 0x7, 0x8, 0x1, 0x3}})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040010}, 0x94)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, 0x0, 0x708, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400c0}, 0x2000c040)

22:18:47 executing program 7:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000040))
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa54dd7f05325c788}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8d}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x1)
r3 = syz_open_dev$mouse(&(0x7f0000000300), 0x0, 0x88100)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1f, 0x0, @l2={'ib', 0x3a, 'bond0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24004000}, 0x410)
recvmmsg$unix(r3, &(0x7f00000025c0)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000000940)=[{&(0x7f00000004c0)=""/141, 0x8d}, {&(0x7f0000000580)=""/217, 0xd9}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/130, 0x82}, {&(0x7f0000000780)=""/130, 0x82}, {&(0x7f0000000840)=""/177, 0xb1}, {&(0x7f0000000900)=""/18, 0x12}], 0x7, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000000b00), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b80)=""/237, 0xed}, {&(0x7f0000000c80)=""/100, 0x64}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000000e40), 0x6e, &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000f40)=""/70, 0x46}, {&(0x7f0000000fc0)=""/13, 0xd}, {&(0x7f0000001000)=""/92, 0x5c}, {&(0x7f0000001080)=""/204, 0xcc}, {&(0x7f0000001180)=""/246, 0xf6}, {&(0x7f0000001280)=""/202, 0xca}, {&(0x7f0000001380)=""/247, 0xf7}, {&(0x7f0000001480)=""/76, 0x4c}], 0x8, &(0x7f0000001580)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001600)=""/56, 0x38}], 0x1, &(0x7f0000001680)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001740)=""/177, 0xb1}, {&(0x7f0000001800)=""/70, 0x46}, {&(0x7f0000001880)=""/48, 0x30}, {&(0x7f00000018c0)=""/198, 0xc6}, {&(0x7f00000019c0)=""/117, 0x75}, {&(0x7f0000001a40)=""/190, 0xbe}, {&(0x7f0000001b00)=""/218, 0xda}], 0x7, &(0x7f0000001c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001e00)=""/130, 0x82}, {&(0x7f0000001ec0)=""/73, 0x49}, {&(0x7f0000001f40)=""/26, 0x1a}, {&(0x7f0000001f80)=""/153, 0x99}], 0x4}}, {{&(0x7f0000002080), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000002100)=""/129, 0x81}], 0x1, &(0x7f0000002200)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002480)=[{&(0x7f0000002380)=""/206, 0xce}], 0x1, &(0x7f00000024c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}], 0xa, 0x40000102, &(0x7f0000002840)={0x0, 0x989680})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x2147571aa5ebdb07}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4020}, 0x20008000)
ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f0000002980))
ioctl$SG_SET_KEEP_ORPHAN(r8, 0x2287, &(0x7f00000029c0)=0x4)
recvmmsg$unix(r9, &(0x7f0000005f80)=[{{&(0x7f0000002a00), 0x6e, &(0x7f0000003e80)=[{&(0x7f0000002a80)=""/16, 0x10}, {&(0x7f0000002ac0)=""/141, 0x8d}, {&(0x7f0000002b80)=""/167, 0xa7}, {&(0x7f0000002c40)=""/50, 0x32}, {&(0x7f0000002c80)=""/252, 0xfc}, {&(0x7f0000002d80)=""/61, 0x3d}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/125, 0x7d}, {&(0x7f0000003e40)=""/33, 0x21}], 0x9, &(0x7f0000003f40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003f80), 0x6e, &(0x7f0000005100)=[{&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/190, 0xbe}, {&(0x7f00000050c0)=""/53, 0x35}], 0x3, &(0x7f0000005140)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000005180)=@abs, 0x6e, &(0x7f00000058c0)=[{&(0x7f0000005200)=""/123, 0x7b}, {&(0x7f0000005280)=""/76, 0x4c}, {&(0x7f0000005300)=""/141, 0x8d}, {&(0x7f00000053c0)=""/199, 0xc7}, {&(0x7f00000054c0)=""/215, 0xd7}, {&(0x7f00000055c0)=""/194, 0xc2}, {&(0x7f00000056c0)=""/90, 0x5a}, {&(0x7f0000005740)=""/191, 0xbf}, {&(0x7f0000005800)=""/182, 0xb6}], 0x9, &(0x7f0000005980)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x178}}, {{&(0x7f0000005b00)=@abs, 0x6e, &(0x7f0000005d80)=[{&(0x7f0000005b80)=""/78, 0x4e}, {&(0x7f0000005c00)=""/124, 0x7c}, {&(0x7f0000005c80)=""/103, 0x67}, {&(0x7f0000005d00)=""/87, 0x57}], 0x4, &(0x7f0000005dc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000005e40)=@abs, 0x6e, &(0x7f0000005f00)=[{&(0x7f0000005ec0)=""/61, 0x3d}], 0x1, &(0x7f0000005f40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x5, 0x2000, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r10, 0x5)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000006100), r5)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000061c0)={&(0x7f00000060c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006180)={&(0x7f0000006140)={0x34, r11, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x48824)
r12 = syz_open_dev$sg(&(0x7f0000006200), 0x6, 0x18000)
ioctl$SG_GET_KEEP_ORPHAN(r12, 0x2288, &(0x7f0000006240))
r13 = syz_open_dev$mouse(&(0x7f0000006280), 0x6, 0x101000)
ioctl$SG_GET_KEEP_ORPHAN(r13, 0x2288, &(0x7f00000062c0))

[   77.552902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   77.559084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   77.561451] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.568752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.575543] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   77.581396] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.612287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   77.614972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.619587] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   77.628600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.634139] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   77.636934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   77.698746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   77.703973] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   77.708678] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.715597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   77.723684] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   77.726470] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   77.728824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.733548] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.736902] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   77.748231] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   77.752283] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   77.752815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   77.757454] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   77.761092] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   77.767477] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   77.770335] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   77.772460] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   77.785135] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   77.788438] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.793649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   77.794376] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   77.799166] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   77.799284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   77.802749] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   77.807299] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   77.812742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.814929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   77.871705] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   77.873332] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   77.889122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.899806] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   77.904708] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   77.907878] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   77.916927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   77.926882] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   77.932479] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   79.638539] Bluetooth: hci0: command tx timeout
[   79.702785] Bluetooth: hci1: command tx timeout
[   79.894114] Bluetooth: hci4: command tx timeout
[   79.894133] Bluetooth: hci3: command tx timeout
[   79.959103] Bluetooth: hci6: command tx timeout
[   79.959161] Bluetooth: hci2: command tx timeout
[   79.959869] Bluetooth: hci7: command tx timeout
[   80.022113] Bluetooth: hci5: command tx timeout
[   81.686080] Bluetooth: hci0: command tx timeout
[   81.752243] Bluetooth: hci1: command tx timeout
[   81.942119] Bluetooth: hci4: command tx timeout
[   81.942595] Bluetooth: hci3: command tx timeout
[   82.006134] Bluetooth: hci2: command tx timeout
[   82.006582] Bluetooth: hci7: command tx timeout
[   82.007096] Bluetooth: hci6: command tx timeout
[   82.070051] Bluetooth: hci5: command tx timeout
[   83.734704] Bluetooth: hci0: command tx timeout
[   83.798145] Bluetooth: hci1: command tx timeout
[   83.990222] Bluetooth: hci3: command tx timeout
[   83.990721] Bluetooth: hci4: command tx timeout
[   84.054112] Bluetooth: hci2: command tx timeout
[   84.054581] Bluetooth: hci7: command tx timeout
[   84.055093] Bluetooth: hci6: command tx timeout
[   84.118152] Bluetooth: hci5: command tx timeout
[   85.782178] Bluetooth: hci0: command tx timeout
[   85.846293] Bluetooth: hci1: command tx timeout
[   86.039474] Bluetooth: hci4: command tx timeout
[   86.041171] Bluetooth: hci3: command tx timeout
[   86.103147] Bluetooth: hci7: command tx timeout
[   86.103963] Bluetooth: hci2: command tx timeout
[   86.104877] Bluetooth: hci6: command tx timeout
[   86.166110] Bluetooth: hci5: command tx timeout
[  140.461936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  140.463820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  140.465184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  140.468331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  140.470569] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  140.471926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  140.516336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  140.523462] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  140.525462] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  140.533669] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  140.546683] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  140.548501] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  140.594852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  140.606695] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  140.625381] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  140.641482] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  140.647189] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  140.650845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  140.713537] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  140.725595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  140.731115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  140.768219] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  140.774310] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  140.776072] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  140.780526] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  140.781628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  140.787242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  140.795210] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  140.804211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  140.810751] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  140.817678] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  140.818630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  140.823872] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  140.825937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  140.832630] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  140.833643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  140.839950] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  140.845957] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  140.847564] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  140.848713] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  140.849595] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  140.860578] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  140.882880] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  140.929710] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  140.942211] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  141.032341] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  141.044427] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  141.058459] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  142.486103] Bluetooth: hci0: command tx timeout
[  142.614074] Bluetooth: hci1: command tx timeout
[  142.678134] Bluetooth: hci2: command tx timeout
[  142.870177] Bluetooth: hci3: command tx timeout
[  142.870772] Bluetooth: hci6: command tx timeout
[  142.934246] Bluetooth: hci4: command tx timeout
[  142.998048] Bluetooth: hci5: command tx timeout
[  143.126045] Bluetooth: hci7: command tx timeout
[  144.534091] Bluetooth: hci0: command tx timeout
[  144.663099] Bluetooth: hci1: command tx timeout
[  144.729032] Bluetooth: hci2: command tx timeout
[  144.918297] Bluetooth: hci6: command tx timeout
[  144.918791] Bluetooth: hci3: command tx timeout
[  144.982535] Bluetooth: hci4: command tx timeout
[  145.046091] Bluetooth: hci5: command tx timeout
[  145.174208] Bluetooth: hci7: command tx timeout
[  146.582389] Bluetooth: hci0: command tx timeout
[  146.710110] Bluetooth: hci1: command tx timeout
[  146.774109] Bluetooth: hci2: command tx timeout
[  146.966506] Bluetooth: hci3: command tx timeout
[  146.967391] Bluetooth: hci6: command tx timeout
[  147.030058] Bluetooth: hci4: command tx timeout
[  147.094140] Bluetooth: hci5: command tx timeout
[  147.222218] Bluetooth: hci7: command tx timeout
[  148.631161] Bluetooth: hci0: command tx timeout
[  148.758234] Bluetooth: hci1: command tx timeout
[  148.823008] Bluetooth: hci2: command tx timeout
[  149.014133] Bluetooth: hci6: command tx timeout
[  149.014582] Bluetooth: hci3: command tx timeout
[  149.079736] Bluetooth: hci4: command tx timeout
[  149.142047] Bluetooth: hci5: command tx timeout
[  149.270080] Bluetooth: hci7: command tx timeout
[  202.236293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  202.238289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  202.243377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  202.244213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  202.248382] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  202.249586] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  202.259349] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  202.260260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  202.262315] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  202.270077] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  202.270753] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  202.273270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  202.472304] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  202.478248] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  202.480214] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  202.490255] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  202.495331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  202.497132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  202.500360] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  202.501567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  202.509306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  202.510646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  202.526390] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  202.528672] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  202.533331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  202.534235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  202.540285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  202.545306] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  202.549162] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  202.551187] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  202.567704] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  202.571550] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  202.573326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  202.575904] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  202.577772] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  202.578912] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  202.626354] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  202.648458] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  202.652668] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  202.655815] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  202.659565] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  202.661714] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  202.687306] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  202.694567] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  202.708318] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  202.709224] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  202.721530] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  202.721576] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  204.310108] Bluetooth: hci0: command tx timeout
[  204.311045] Bluetooth: hci1: command tx timeout
[  204.566215] Bluetooth: hci2: command tx timeout
[  204.694278] Bluetooth: hci5: command tx timeout
[  204.694301] Bluetooth: hci4: command tx timeout
[  204.950263] Bluetooth: hci6: command tx timeout
[  204.951046] Bluetooth: hci7: command tx timeout
[  204.951817] Bluetooth: hci3: command tx timeout
[  206.358348] Bluetooth: hci1: command tx timeout
[  206.359528] Bluetooth: hci0: command tx timeout
[  206.614098] Bluetooth: hci2: command tx timeout
[  206.742436] Bluetooth: hci4: command tx timeout
[  206.743048] Bluetooth: hci5: command tx timeout
[  206.999005] Bluetooth: hci7: command tx timeout
[  206.999362] Bluetooth: hci6: command tx timeout
[  206.999581] Bluetooth: hci3: command tx timeout
[  208.408020] Bluetooth: hci0: command tx timeout
[  208.408118] Bluetooth: hci1: command tx timeout
[  208.662085] Bluetooth: hci2: command tx timeout
[  208.790087] Bluetooth: hci4: command tx timeout
[  208.791019] Bluetooth: hci5: command tx timeout
[  209.046548] Bluetooth: hci6: command tx timeout
[  209.046653] Bluetooth: hci7: command tx timeout
[  209.047100] Bluetooth: hci3: command tx timeout
[  210.454067] Bluetooth: hci1: command tx timeout
[  210.455272] Bluetooth: hci0: command tx timeout
[  210.710028] Bluetooth: hci2: command tx timeout
[  210.838103] Bluetooth: hci5: command tx timeout
[  210.838596] Bluetooth: hci4: command tx timeout
[  211.094076] Bluetooth: hci6: command tx timeout
[  211.094581] Bluetooth: hci3: command tx timeout
[  211.095153] Bluetooth: hci7: command tx timeout
[  264.682908] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  264.685922] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  264.690454] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  264.693205] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  264.695379] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  264.702310] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  264.708912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  264.715558] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  264.717347] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  264.720390] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  264.724115] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  264.732497] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  264.882213] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  264.885412] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  264.887698] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  264.889830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  264.891454] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  264.895229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  264.897811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  264.902389] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  264.905922] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  264.907560] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  264.917652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  264.919088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  264.958921] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  264.964296] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  264.968269] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  264.973235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  264.976139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  264.978177] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  264.982487] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  264.985327] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  264.987379] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  264.988188] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  264.993347] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  264.993495] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  265.001897] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  265.028852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  265.041371] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  265.044481] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  265.047421] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  265.062791] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  265.080614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  265.084663] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  265.089318] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  265.095866] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  265.104345] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  265.110596] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  266.774178] Bluetooth: hci0: command tx timeout
[  266.775249] Bluetooth: hci1: command tx timeout
[  267.031150] Bluetooth: hci2: command tx timeout
[  267.032534] Bluetooth: hci4: command tx timeout
[  267.033111] Bluetooth: hci3: command tx timeout
[  267.158185] Bluetooth: hci5: command tx timeout
[  267.158234] Bluetooth: hci6: command tx timeout
[  267.223054] Bluetooth: hci7: command tx timeout
[  268.822052] Bluetooth: hci0: command tx timeout
[  268.822557] Bluetooth: hci1: command tx timeout
[  269.079092] Bluetooth: hci4: command tx timeout
[  269.079578] Bluetooth: hci3: command tx timeout
[  269.080216] Bluetooth: hci2: command tx timeout
[  269.206041] Bluetooth: hci6: command tx timeout
[  269.206543] Bluetooth: hci5: command tx timeout
[  269.272967] Bluetooth: hci7: command tx timeout
[  270.870076] Bluetooth: hci0: command tx timeout
[  270.870576] Bluetooth: hci1: command tx timeout
[  271.126081] Bluetooth: hci3: command tx timeout
[  271.126571] Bluetooth: hci4: command tx timeout
[  271.127763] Bluetooth: hci2: command tx timeout
[  271.254053] Bluetooth: hci6: command tx timeout
[  271.254511] Bluetooth: hci5: command tx timeout
[  271.319015] Bluetooth: hci7: command tx timeout
[  272.919076] Bluetooth: hci1: command tx timeout
[  272.919569] Bluetooth: hci0: command tx timeout
[  273.175002] Bluetooth: hci2: command tx timeout
[  273.175481] Bluetooth: hci4: command tx timeout
[  273.175907] Bluetooth: hci3: command tx timeout
[  273.303204] Bluetooth: hci6: command tx timeout
[  273.303660] Bluetooth: hci5: command tx timeout
[  273.366005] Bluetooth: hci7: command tx timeout
[  321.725123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.725891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.894287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.894987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.329358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.330041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.653044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.653710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.939257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.940568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.168332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.169042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.851411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.852168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.379572] syz-executor.3 (10289) used greatest stack depth: 23296 bytes left
[  327.021882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  327.029225] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  327.034388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  327.049160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  327.053413] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  327.055814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  327.120182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  327.131158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  327.154673] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  327.156448] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  327.159843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  327.162907] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  327.165579] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  327.168818] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  327.170891] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  327.174366] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  327.181682] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  327.184856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  327.204224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  327.248618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  327.250589] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  327.252845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  327.257213] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  327.262311] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  327.263730] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  327.267203] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  327.270407] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  327.280167] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  327.281356] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  327.307525] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  327.309830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  327.315152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  327.320192] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  327.362431] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  327.364883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  327.369358] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  327.372220] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  327.374206] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  327.375697] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  327.385717] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  327.390730] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  327.392412] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  327.397547] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  327.415164] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  327.421775] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  327.429081] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  327.496467] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  327.505389] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  329.111050] Bluetooth: hci0: command tx timeout
[  329.238028] Bluetooth: hci2: command tx timeout
[  329.302032] Bluetooth: hci1: command tx timeout
[  329.430709] Bluetooth: hci3: command tx timeout
[  329.432401] Bluetooth: hci6: command tx timeout
[  329.495163] Bluetooth: hci5: command tx timeout
[  329.558986] Bluetooth: hci4: command tx timeout
[  329.624986] Bluetooth: hci7: command tx timeout
[  331.158028] Bluetooth: hci0: command tx timeout
[  331.287030] Bluetooth: hci2: command tx timeout
[  331.351058] Bluetooth: hci1: command tx timeout
[  331.479108] Bluetooth: hci6: command tx timeout
[  331.479637] Bluetooth: hci3: command tx timeout
[  331.542999] Bluetooth: hci5: command tx timeout
[  331.606011] Bluetooth: hci4: command tx timeout
[  331.671185] Bluetooth: hci7: command tx timeout
[  333.207234] Bluetooth: hci0: command tx timeout
[  333.335010] Bluetooth: hci2: command tx timeout
[  333.399086] Bluetooth: hci1: command tx timeout
[  333.527053] Bluetooth: hci6: command tx timeout
[  333.527516] Bluetooth: hci3: command tx timeout
[  333.590724] Bluetooth: hci5: command tx timeout
[  333.654048] Bluetooth: hci4: command tx timeout
[  333.718563] Bluetooth: hci7: command tx timeout
[  335.256975] Bluetooth: hci0: command tx timeout
[  335.381998] Bluetooth: hci2: command tx timeout
[  335.446974] Bluetooth: hci1: command tx timeout
[  335.575614] Bluetooth: hci3: command tx timeout
[  335.576084] Bluetooth: hci6: command tx timeout
[  335.639074] Bluetooth: hci5: command tx timeout
[  335.702988] Bluetooth: hci4: command tx timeout
[  335.766010] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
22:23:54  Registers:
info registers vcpu 0
RAX=ffffffff81abd9e9 RBX=ffffffff815f1290 RCX=ffffffff86840d01 RDX=1ffff110057acf03
RSI=ffffffff81abd9e9 RDI=ffff88802bd67888 RBP=ffff88802bd67858 RSP=ffff88802bd677b8
R8 =ffffffff86840d48 R9 =ffff88802bd67800 R10=000000000003a7f3 R11=0000000000024174
R12=ffff88802bd67888 R13=0000000000000000 R14=ffff888015cb0000 R15=ffff888015b61dc0
RIP=ffffffff815f1294 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcbd0af1ec3 CR3=000000000bf38000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f
XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000020 RBX=0000000000000000 RCX=0000000000000001 RDX=ffffffff882ad5e8
RSI=ffff88800c55abc0 RDI=0000000000000000 RBP=ffff88800dad86f0 RSP=ffff8880348e7ca0
R8 =0000000000000000 R9 =ffffed100691cf85 R10=0000000000000003 R11=0000000000000000
R12=ffff88800c55abc0 R13=0000000000000020 R14=0000000000000001 R15=0000000000000286
RIP=ffffffff81aefe68 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb9a9e1e59e CR3=00000000276ea000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000