Warning: Permanently added '[localhost]:57451' (ECDSA) to the list of known hosts.
2025/06/23 07:25:00 fuzzer started
2025/06/23 07:25:01 dialing manager at localhost:33119
syzkaller login: [   99.489402] cgroup: Unknown subsys name 'net'
[   99.620979] cgroup: Unknown subsys name 'cpuset'
[   99.658012] cgroup: Unknown subsys name 'rlimit'
2025/06/23 07:25:24 syscalls: 200
2025/06/23 07:25:24 code coverage: enabled
2025/06/23 07:25:24 comparison tracing: enabled
2025/06/23 07:25:24 extra coverage: enabled
2025/06/23 07:25:24 setuid sandbox: enabled
2025/06/23 07:25:24 namespace sandbox: enabled
2025/06/23 07:25:24 Android sandbox: enabled
2025/06/23 07:25:24 fault injection: enabled
2025/06/23 07:25:24 leak checking: enabled
2025/06/23 07:25:24 net packet injection: enabled
2025/06/23 07:25:24 net device setup: enabled
2025/06/23 07:25:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/23 07:25:24 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/23 07:25:24 USB emulation: enabled
2025/06/23 07:25:24 hci packet injection: enabled
2025/06/23 07:25:24 wifi device emulation: enabled
2025/06/23 07:25:24 802.15.4 emulation: enabled
2025/06/23 07:25:24 fetching corpus: 0, signal 0/0 (executing program)
2025/06/23 07:25:26 starting 8 fuzzer processes
07:25:26 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, @out_args}, './file0\x00'})
write$cgroup_devices(r0, &(0x7f0000000040)={'b', ' *:* ', 'rm\x00'}, 0x9)
r1 = syz_io_uring_complete(0x0)
ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000080)={'binder1\x00'})
r2 = syz_io_uring_setup(0x61d6, &(0x7f00000001c0)={0x0, 0x652b, 0xe6b0d87f43101593, 0x3, 0x3e7}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r1, &(0x7f00000002c0)=0x80, &(0x7f0000000300), 0x0, 0x80000, 0x1}, 0x7f)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r4=>r2, @in_args={0x1}}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000400)={0x0, 0x3, r0, 0x48, 0x80000})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r5=>r2, {0x1}}, './file0/file0\x00'})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x40)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000600)={0x5, &(0x7f00000005c0)=[{0x0, 0x7f, 0x4, 0x3}, {0x1f, 0x8, 0x1, 0x9}, {0x69c, 0x5, 0x1f, 0x9}, {0x1f, 0x1, 0x7f, 0x9}, {0x7ff, 0x6, 0x7, 0xffffffc1}]})
sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000780)={0x0, 0x4})
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4040805)
ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000008c0)=""/210)
r7 = openat$cgroup_int(r5, &(0x7f00000009c0)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000a00)={0x0, 0x2, r7, 0x3})
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a40), 0x1200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r0, {0x7, 0x6}}, './file0\x00'})

07:25:26 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, @in_args={0x4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x1, 0x9}}, './file0\x00'})
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, 0x0, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x34, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_TUPLE={0x90, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, 0x1, 0x3, 0x5, 0x0, 0x0, {0x1d, 0x0, 0x8}, [@NFQA_VLAN={0x24, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x9a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xff}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfff}]}, @NFQA_PAYLOAD={0x2e, 0xa, "224489577087f8b46e5460f197dda140bb8eb5cfffc31242ffbba1c38f7f37e7a59a5ef7ad70d62164f2"}, @NFQA_CT={0x54, 0xb, 0x0, 0x1, [@CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1c}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}]}}, @CTA_STATUS={0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x81}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1400}, @CTA_MARK_MASK={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r2=>r1, {0xfff, 0x5}}, './file0\x00'})
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000400))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}]}, 0x20}}, 0x4000000)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x240, 0x1, 0x3, 0x201, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFQA_PAYLOAD={0xd4, 0xa, "90841dbcf55a4cbd8c5db6a0d6f32e2ad8dcaf489adda1df4f38b2e294d2dbb2e11d48dc5a4e7f2c4b63ad516746edc5bbea672875564f661dcda198d583241e8558432672d4c2905012ebbdc029480dea4c6296058d8003183479960f2b3daf7c519bd9fe9cbcebf42d0a1d542029640966d2f79cfe246f7dc5a21238fda49246f7448d963905687b9f6c695913c941e31a6eb31d0d8c54936ceab6b35172541b58f7919a740639efe0a73215db31ef65a37e5b18fa6d9a165ad5ae6c5fbc6f1b6110339487a0e71322769e873ea376"}, @NFQA_CT={0x10, 0xb, 0x0, 0x1, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x4}]}, @NFQA_CT={0x34, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0xc, 0x17, [0x651a, 0x81]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_EXP={0xf8, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_TUPLE={0xb0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}]}]}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xf}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x880}, 0x4000010)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r4=>r0, {0x10001, 0x6}}, './file0\x00'})
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x188181}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'sane-20000\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x44}}, 0x2400c800)
pipe2(&(0x7f00000009c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xbc, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFQA_PAYLOAD={0x47, 0xa, "63a946ad7a95e57f66652d58f13ec8606306aab743d67922c0c79774b22598247a15d3be0aa87eb01054e15cc34524f43f94d4e2f4c1c76371efc9b96c60f17fe331fe"}, @NFQA_EXP={0x60, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8001}, @CTA_EXPECT_MASK={0x20, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004085)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000bc0), r3)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x6c, r6, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20b}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x44040080)
mknodat$null(r5, &(0x7f0000000d00)='./file0\x00', 0x4, 0x103)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x64, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1a}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000001)

07:25:26 executing program 2:
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0xffff8df6, 0x9, 0xffffffff, 0x3ff, 0x484000, 0x3})
ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000000c0)=""/88)
r4 = pidfd_getfd(r2, r2, 0x0)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000140))
r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x6, 0x1)
ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000240)={0x0, 0x4d, &(0x7f00000001c0)="3d86b05ba84fcdb371212f37600e550c84035bce4c75bc0bad83a9075924e13299aa249f92c2e8049075f6c2530e60131de5d09b75561c85d9d47b72650f16908076b7e7b7846c2b796ede2fae"})
ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r5, {0x4}}, './file1\x00'})
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), r2)
sendmsg$FOU_CMD_GET(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r7, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x60}, 0x1, 0x0, 0x0, 0x48d0}, 0x4010)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x2001c010}, 0x8)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)

07:25:26 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x3ff}}, './file0\x00'})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001bc0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000001cc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x64, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000001)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d40), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x3c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22000000}, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x305050}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7a40}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x40)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000001fc0)={{0x1, 0x1, 0x18, <r5=>r4, {0x529}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001f80), r5)
syz_open_dev$evdev(&(0x7f0000002000), 0x3, 0x400100)
pipe2(&(0x7f0000002040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4400)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000022c0)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000023c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x58, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x18, <r10=>r7, @out_args}, './file0\x00'})
r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000002480), r5)
sendmsg$GTP_CMD_GETPDP(r10, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x10010000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x2c, r11, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040850}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000002580))
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_VLAN(r12, &(0x7f0000002880)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040880}, 0x4000001)

[  124.618898] audit: type=1400 audit(1750663526.683:7): avc:  denied  { execmem } for  pid=282 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
07:25:26 executing program 4:
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x1, 0xfb7d, 0x0, 0x4, 0x81, 0x401})
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000040)=""/144)
pipe2(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x81000)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000140)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]})
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3c}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008044}, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0)
pidfd_send_signal(r2, 0x3, &(0x7f0000000300)={0x0, 0x3, 0x6}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x12c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6456}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_vlan\x00'}, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_COMMENT={0xe, 0x1a, '-.()-}&]]\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}, @IPSET_ATTR_COMMENT={0x7, 0x1a, ']-\x00'}]}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="0851fb6947b2"}}]}, @IPSET_ATTR_LINENO={0x8}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000000)
pipe2(&(0x7f0000000580)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4000)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080d0}, 0x80c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001e40)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000001f00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x3c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x4040)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000001f40)={{0x1, 0x1, 0x18, <r6=>r1, {0x100, 0x5}}, './file0\x00'})
syz_genetlink_get_family_id$gtp(&(0x7f0000001f80), r3)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000001fc0)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0xfffff129}}, './file0\x00'})
mq_notify(r7, &(0x7f0000002080)={0x0, 0x2d, 0x1, @thr={&(0x7f0000002000)="42818267a8", &(0x7f0000002040)="9007d45903cef7d13e41a59c9fa5b93020b9187d0d29e7fc4de3332a8560d21fe1f4154b"}})
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000021c0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f00000022c0)=0xe8)
sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000023c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7135}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}]}, 0x64}, 0x1, 0x0, 0x0, 0x1080}, 0x40)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000002640)={0x4c, 0x0, &(0x7f0000002500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002440)={@flat=@handle={0x73682a85, 0x1, 0x3}, @fda={0x66646185, 0x0, 0x0, 0x16}, @ptr={0x70742a85, 0x0, &(0x7f0000002400)=""/8, 0x8, 0x0, 0x38}}, &(0x7f00000024c0)={0x0, 0x18, 0x38}}}, @acquire], 0xb9, 0x0, &(0x7f0000002580)="c1743961a74f0a343cc7a2ab09202912650846bf86bca99cdb95f5476c4132b0792c6142f4d90aacdb562aaabf56f7535acf94dfc7ba7572d3d5217b1a2cb056019c6d28e6410e5b4bbd7065dac7a100b7f3bc92c93a9f44dfd0aadbf14999fdaef475a6bb43bfa380ad8d32878a42c60809f95b375244d358b9260fa982898e3c5a6f7ce88cc61d6c572d9f030f5023ccec0b3bcfb85acb2ef50a56c1a5848c905e894e8a07414fbf8b96d82b1c87d16858158cddca0af6c5"})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x200040d4)

07:25:26 executing program 5:
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c004)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000b80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000400)={0x710, 0x1, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x4}, 0x81, 0x0, 0x8, 0x800, 0x1e, 'syz1\x00', "797b8d1e1cecb44471afb8fdda26f638bc824e10d3711970d3793643eb5f50c9", "6159508d3ecf1aa96a5b9d119afb04e2145b776975c2826057eddd12b7df4914", [{0x101, 0xda13}, {0x81, 0xfc01, {0x1}}, {0x2, 0x83, {0x3, 0x8}}, {0xb4, 0x2, {0x0, 0x3f}}, {0x9, 0x8, {0x0, 0x8}}, {0x2, 0x6, {0x3, 0x6}}, {0x100, 0x5, {0x1, 0x8000}}, {0x6, 0x5, {0x0, 0x1}}, {0x8032, 0x40, {0x1, 0x1ff}}, {0x0, 0x60, {0x2}}, {0x70, 0x1000, {0x2, 0x9}}, {0x2, 0x1ff, {0x0, 0x8}}, {0x1cd, 0x0, {0x3, 0x8001}}, {0x8, 0x401, {0x0, 0x695}}, {0x6, 0x0, {0x1, 0x100}}, {0x6, 0x3, {0x2, 0xcb}}, {0x0, 0xf4, {0x1, 0x40}}, {0x101, 0x8000, {0x1, 0x7}}, {0x0, 0x1107, {0x0, 0x17}}, {0x1f, 0x1d0, {0x0, 0x2173}}, {0x1}, {0xff, 0xff7f, {0x3, 0x5fb3}}, {0x7, 0x4, {0x2, 0xb}}, {0x7990, 0x8000}, {0x4, 0x9}, {0x3, 0x6, {0x0, 0x4}}, {0x7, 0x1b66, {0x0, 0x1}}, {0xf02, 0xfff, {0x2, 0x4a7}}, {0xd74, 0xfff, {0x1, 0x73f}}, {0x2, 0x8, {0x3, 0xe4}}, {0x2, 0x3, {0x0, 0x5}}, {0x6, 0xffff, {0x1, 0x100}}, {0x2, 0x8, {0x2, 0xfffffffc}}, {0x7, 0x7fff, {0x2, 0x20}}, {0x6, 0x4, {0x2}}, {0x800, 0xe92, {0xb4633790ce8e37b3, 0xffffffff}}, {0xe25, 0x5, {0x0, 0xfff}}, {0x8, 0x619, {0x0, 0x1}}, {0xf457, 0x5, {0x2, 0x8001}}, {0x7, 0x3f}]}}}, {{0x254, 0x1, {{0x1, 0x7fffffff}, 0x6, 0x1, 0xb10, 0xfffd, 0x2, 'syz1\x00', "dae1ac9634db028fd9488e34f8414b4fba697aed17a18c03473ab4e52ddefebb", "427983890fc10341758cb0d87efd2d5d2808e98d7e518892fd24920abfaa3cb7", [{0x2, 0x5, {0x2, 0xa9d}}, {0x2, 0xee, {0x2, 0x1}}, {0x58, 0x5, {0x0, 0x1f}}, {0x6, 0x5, {0x3, 0x80000000}}, {0x8f, 0x9, {0x1, 0x3}}, {0x7, 0x81, {0x3, 0x907}}, {0x2, 0x2, {0x1, 0x6dc6}}, {0x5, 0x2, {0x2, 0x7}}, {0xffff, 0xffff, {0x2, 0x1000}}, {0x2f, 0x6e, {0x3, 0x1}}, {0x7, 0x3, {0x3, 0x7}}, {0x9, 0x7, {0x1, 0x7}}, {0x7, 0xe44b, {0x2, 0xfffffffe}}, {0xff01, 0x1015, {0x1, 0xffff}}, {0x675, 0xffff, {0x2, 0xfe}}, {0xff3c, 0x7ff, {0x0, 0x9}}, {0x2, 0xfff9, {0x3, 0x1}}, {0x9, 0x100, {0x1, 0x8aba}}, {0x6, 0x3e3, {0x3, 0x82}}, {0x7, 0x8, {0x3, 0xffffffff}}, {0x2, 0x1, {0x2, 0x6}}, {0x723, 0x7, {0x1, 0x95}}, {0x0, 0x2, {0x0, 0x3}}, {0x8001, 0xffff, {0x2, 0x8}}, {0x5, 0x8, {0x1, 0x2b}}, {0x7f, 0x3, {0x3, 0x7}}, {0x6, 0xfff, {0x0, 0x1}}, {0x3, 0x100, {0x0, 0x6}}, {0x4, 0xfffa, {0x0, 0x8}}, {0x800, 0x8001, {0x1}}, {0x7, 0x1, {0x1, 0x80}}, {0x3, 0xfff8, {0x1, 0xfff}}, {0x307, 0x7, {0x3, 0x9}}, {0x400, 0xff, {0x3, 0x8}}, {0x6e, 0x3, {0x1, 0x3}}, {0x3, 0x3, {0x0, 0x7}}, {0x42d, 0x1, {0x2, 0x9}}, {0xab6, 0x6, {0x3, 0x7}}, {0x7, 0x1, {0x0, 0x400}}, {0x9, 0x7ff, {0x0, 0x800000}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x4, 0x1f, 0xffff, 0xfff8, 0x10, 'syz1\x00', "145ae7b3f5e7d1ade89c36b7126d1091c929abfb6f7730655221f45b67cf7780", "6079c687e03259177e77e8e97e47deeb7dc247263eba2ba782b8d59d151e9c56", [{0x0, 0x578, {0x3, 0x20}}, {0x2bf, 0x48, {0x1, 0x9d00}}, {0xff, 0x7, {0x2, 0x7}}, {0x3, 0x7, {0x2, 0xff}}, {0x1ff, 0x60, {0x0, 0x8001}}, {0x7ff, 0x6, {0x2, 0xfff}}, {0x6, 0xfffa, {0x0, 0x7}}, {0x40b5, 0xfffe, {0x1, 0x7}}, {0x2, 0x1, {0x0, 0x92}}, {0x5, 0x7, {0x2, 0x1}}, {0x3, 0x3}, {0x3f, 0x91, {0x0, 0xffffff7f}}, {0x9, 0x200}, {0x9, 0x20, {0x0, 0x7a00}}, {0x4454, 0x4, {0x2, 0xfbb}}, {0x6, 0x2, {0x0, 0x2}}, {0x1f, 0x6, {0x3, 0xf168d50}}, {0x3, 0x6ef4, {0x2, 0xffffff4f}}, {0x2, 0x401, {0x1, 0x57c}}, {0x1, 0x7180, {0x2, 0x7}}, {0x0, 0x5, {0x0, 0x8}}, {0x800, 0x8, {0x0, 0xc4}}, {0x7f, 0x8, {0x2, 0x9}}, {0x2, 0x6, {0x3, 0x4}}, {0x800, 0x8000, {0x1, 0x5}}, {0x401, 0x5, {0x1, 0x8000}}, {0x3f, 0x3f, {0x3, 0x7fffffff}}, {0x4, 0x6, {0x3, 0x8}}, {0x8001, 0x8001, {0x0, 0x1}}, {0x0, 0x0, {0x3, 0x9}}, {0x7, 0x3, {0x0, 0x8}}, {0x2, 0x8001, {0x0, 0xcfab}}, {0x8, 0x7, {0x3, 0x8}}, {0x0, 0x9482, {0x3, 0x4}}, {0x3, 0x4, {0x0, 0x7}}, {0x8, 0x81, {0x1, 0x80}}, {0x5, 0xfffa, {0x0, 0x91}}, {0x9, 0x0, {0x0, 0x76}}, {0x3, 0xc27b, {0x3, 0x3f}}, {0x101, 0x7f6c, {0x0, 0xffffffff}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4040054}, 0x4000000)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x239}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x706}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20004004)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10040000}, 0x4004000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008801}, 0x4)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8880)
r2 = syz_io_uring_complete(0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40804)
ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000001100))
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000001180)={{0x1, 0x1, 0x18, <r3=>r1, {0xb2, 0x3}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000001140), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000002d00)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000002e00)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x75ce}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xdd}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x4048000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002e40))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000002e80))
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000033c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}}}, &(0x7f00000034c0)=0xe8)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000003580)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x3c, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008000)

07:25:26 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c001}, 0x800)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa4000018}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f9ab2fb}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1a}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1c000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x808)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4840}, 0x5000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r6, 0x302, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="4d6dca9fb327"}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x4004040)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40881000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x68}, 0x1, 0x0, 0x0, 0x30008801}, 0x20000044)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000a80)=0xe8)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffdbf9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x44040)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, <r10=>r5, {0x9}}, './file0\x00'})
read$eventfd(r10, &(0x7f0000000c00), 0x8)

07:25:26 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
mq_timedreceive(r0, &(0x7f0000000040)=""/78, 0x4e, 0x8, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r1, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000060}, 0x4000)
r2 = pidfd_getfd(r0, r0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000082}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000)
r4 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r0)
sendmsg$FOU_CMD_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x14022800}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r2)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x11002402}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20004801)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x20002005)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r2)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r6, 0x480, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe0}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040814}, 0x4040000)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000980)={{0x1, 0x1, 0x18, <r7=>r2, {0xfffffff7}}, './file0\x00'})
mq_timedreceive(r7, &(0x7f00000009c0)=""/240, 0xf0, 0x10001, &(0x7f0000000ac0)={0x0, 0x3938700})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r0)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r8, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffff80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x811)

[  126.013480] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.017548] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  126.020480] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.026554] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.032260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  126.139396] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  126.162261] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  126.164558] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  126.171124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  126.174104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  126.179201] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  126.196224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  126.202910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  126.205529] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  126.210407] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  126.212486] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  126.215258] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  126.227216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  126.248321] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  126.250454] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  126.257792] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  126.262479] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  126.266565] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  126.268756] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  126.270408] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  126.275961] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  126.277848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  126.289110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  126.296367] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  126.307146] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  126.313105] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  126.329005] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  126.347294] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  126.349550] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  126.352900] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  126.384235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  126.405302] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  126.422222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  126.423721] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  126.495523] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  128.096209] Bluetooth: hci0: command tx timeout
[  128.289749] Bluetooth: hci2: command tx timeout
[  128.351907] Bluetooth: hci5: command tx timeout
[  128.352497] Bluetooth: hci3: command tx timeout
[  128.352523] Bluetooth: hci1: command tx timeout
[  128.415895] Bluetooth: hci7: command tx timeout
[  128.543710] Bluetooth: hci4: command tx timeout
[  128.543789] Bluetooth: hci6: command tx timeout
[  130.144916] Bluetooth: hci0: command tx timeout
[  130.336772] Bluetooth: hci2: command tx timeout
[  130.399987] Bluetooth: hci5: command tx timeout
[  130.400462] Bluetooth: hci1: command tx timeout
[  130.401183] Bluetooth: hci3: command tx timeout
[  130.463898] Bluetooth: hci7: command tx timeout
[  130.591805] Bluetooth: hci6: command tx timeout
[  130.594879] Bluetooth: hci4: command tx timeout
[  132.194145] Bluetooth: hci0: command tx timeout
[  132.384757] Bluetooth: hci2: command tx timeout
[  132.448053] Bluetooth: hci3: command tx timeout
[  132.448080] Bluetooth: hci1: command tx timeout
[  132.448126] Bluetooth: hci5: command tx timeout
[  132.513662] Bluetooth: hci7: command tx timeout
[  132.640921] Bluetooth: hci4: command tx timeout
[  132.641358] Bluetooth: hci6: command tx timeout
[  134.239736] Bluetooth: hci0: command tx timeout
[  134.431691] Bluetooth: hci2: command tx timeout
[  134.495734] Bluetooth: hci5: command tx timeout
[  134.496178] Bluetooth: hci3: command tx timeout
[  134.496588] Bluetooth: hci1: command tx timeout
[  134.559686] Bluetooth: hci7: command tx timeout
[  134.687715] Bluetooth: hci6: command tx timeout
[  134.688151] Bluetooth: hci4: command tx timeout
[  188.665776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  188.669487] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  188.672032] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  188.683265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  188.688837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  188.738345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  188.754879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  188.757237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  188.759399] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  188.764322] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  188.769994] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  188.771827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  188.777318] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  188.785180] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  188.792721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  188.851963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  188.871950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  188.889170] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  188.892678] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  188.903466] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  188.921912] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  188.923250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  188.941934] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  188.951202] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  188.964041] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  188.982782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  189.015913] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  189.025425] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  189.042239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  189.052424] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  189.061100] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  189.070499] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  189.074165] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  189.078575] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  189.084687] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  189.091778] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  189.093962] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  189.097908] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  189.107511] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  189.143134] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  190.752828] Bluetooth: hci0: command tx timeout
[  190.879737] Bluetooth: hci1: command tx timeout
[  190.880464] Bluetooth: hci2: command tx timeout
[  191.071827] Bluetooth: hci3: command tx timeout
[  191.135713] Bluetooth: hci4: command tx timeout
[  191.200059] Bluetooth: hci6: command tx timeout
[  191.201027] Bluetooth: hci5: command tx timeout
[  191.263797] Bluetooth: hci7: command tx timeout
[  192.799726] Bluetooth: hci0: command tx timeout
[  192.928665] Bluetooth: hci2: command tx timeout
[  192.929132] Bluetooth: hci1: command tx timeout
[  193.119789] Bluetooth: hci3: command tx timeout
[  193.184770] Bluetooth: hci4: command tx timeout
[  193.248473] Bluetooth: hci6: command tx timeout
[  193.248915] Bluetooth: hci5: command tx timeout
[  193.311856] Bluetooth: hci7: command tx timeout
[  194.847835] Bluetooth: hci0: command tx timeout
[  194.975703] Bluetooth: hci2: command tx timeout
[  194.976138] Bluetooth: hci1: command tx timeout
[  195.168837] Bluetooth: hci3: command tx timeout
[  195.232045] Bluetooth: hci4: command tx timeout
[  195.295711] Bluetooth: hci5: command tx timeout
[  195.296141] Bluetooth: hci6: command tx timeout
[  195.359841] Bluetooth: hci7: command tx timeout
[  196.895891] Bluetooth: hci0: command tx timeout
[  197.023695] Bluetooth: hci1: command tx timeout
[  197.024163] Bluetooth: hci2: command tx timeout
[  197.215878] Bluetooth: hci3: command tx timeout
[  197.279674] Bluetooth: hci4: command tx timeout
[  197.344856] Bluetooth: hci6: command tx timeout
[  197.345290] Bluetooth: hci5: command tx timeout
[  197.408746] Bluetooth: hci7: command tx timeout
[  250.803419] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  250.811164] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  250.813554] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  250.823709] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  250.828276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  250.898276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  250.900999] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  250.911137] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  250.923912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  250.930722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  251.007303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  251.012540] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  251.020349] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  251.033415] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  251.041647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  251.133148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  251.140209] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  251.149391] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  251.174573] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  251.191501] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  251.207081] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  251.222226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  251.234645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  251.246168] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  251.247892] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  251.289918] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  251.313549] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  251.313637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  251.322987] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  251.327205] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  251.328258] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  251.360136] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  251.362432] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  251.366815] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  251.396861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  251.400132] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  251.425064] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  251.426855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  251.469378] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  251.479150] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  252.897139] Bluetooth: hci0: command tx timeout
[  253.025511] Bluetooth: hci1: command tx timeout
[  253.087858] Bluetooth: hci2: command tx timeout
[  253.343682] Bluetooth: hci3: command tx timeout
[  253.472473] Bluetooth: hci5: command tx timeout
[  253.473473] Bluetooth: hci4: command tx timeout
[  253.535849] Bluetooth: hci6: command tx timeout
[  253.536650] Bluetooth: hci7: command tx timeout
[  254.944051] Bluetooth: hci0: command tx timeout
[  255.071992] Bluetooth: hci1: command tx timeout
[  255.137159] Bluetooth: hci2: command tx timeout
[  255.391683] Bluetooth: hci3: command tx timeout
[  255.520672] Bluetooth: hci5: command tx timeout
[  255.521174] Bluetooth: hci4: command tx timeout
[  255.583768] Bluetooth: hci7: command tx timeout
[  255.584266] Bluetooth: hci6: command tx timeout
[  256.991688] Bluetooth: hci0: command tx timeout
[  257.119921] Bluetooth: hci1: command tx timeout
[  257.184232] Bluetooth: hci2: command tx timeout
[  257.439905] Bluetooth: hci3: command tx timeout
[  257.567898] Bluetooth: hci5: command tx timeout
[  257.568365] Bluetooth: hci4: command tx timeout
[  257.633053] Bluetooth: hci7: command tx timeout
[  257.633495] Bluetooth: hci6: command tx timeout
[  259.039947] Bluetooth: hci0: command tx timeout
[  259.169645] Bluetooth: hci1: command tx timeout
[  259.231690] Bluetooth: hci2: command tx timeout
[  259.487872] Bluetooth: hci3: command tx timeout
[  259.615747] Bluetooth: hci5: command tx timeout
[  259.616227] Bluetooth: hci4: command tx timeout
[  259.679712] Bluetooth: hci6: command tx timeout
[  259.680152] Bluetooth: hci7: command tx timeout
[  313.268623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  313.271124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  313.276365] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  313.285459] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  313.293228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  313.528463] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  313.532312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  313.534819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  313.536786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  313.539424] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  313.544318] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  313.547959] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  313.558255] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  313.560532] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  313.569382] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  313.666316] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  313.676510] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  313.681809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  313.688430] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  313.711153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  313.722573] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  313.725153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  313.756895] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  313.758537] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  313.774151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  313.796198] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  313.799522] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  313.801731] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  313.804449] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  313.806183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  313.810203] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  313.821111] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  313.823312] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  313.831424] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  313.839550] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  313.846263] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  313.860179] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  313.874074] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  313.887403] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  313.892213] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  315.359714] Bluetooth: hci0: command tx timeout
[  315.616256] Bluetooth: hci1: command tx timeout
[  315.617863] Bluetooth: hci2: command tx timeout
[  315.936253] Bluetooth: hci3: command tx timeout
[  315.936299] Bluetooth: hci6: command tx timeout
[  315.937453] Bluetooth: hci5: command tx timeout
[  315.938297] Bluetooth: hci4: command tx timeout
[  316.063705] Bluetooth: hci7: command tx timeout
[  317.408654] Bluetooth: hci0: command tx timeout
[  317.664026] Bluetooth: hci1: command tx timeout
[  317.664489] Bluetooth: hci2: command tx timeout
[  317.983691] Bluetooth: hci5: command tx timeout
[  317.984155] Bluetooth: hci6: command tx timeout
[  317.984802] Bluetooth: hci3: command tx timeout
[  317.985256] Bluetooth: hci4: command tx timeout
[  318.111689] Bluetooth: hci7: command tx timeout
[  319.455829] Bluetooth: hci0: command tx timeout
[  319.712774] Bluetooth: hci2: command tx timeout
[  319.713276] Bluetooth: hci1: command tx timeout
[  320.032733] Bluetooth: hci4: command tx timeout
[  320.033228] Bluetooth: hci3: command tx timeout
[  320.034192] Bluetooth: hci6: command tx timeout
[  320.034633] Bluetooth: hci5: command tx timeout
[  320.160678] Bluetooth: hci7: command tx timeout
[  321.505386] Bluetooth: hci0: command tx timeout
[  321.760756] Bluetooth: hci1: command tx timeout
[  321.761246] Bluetooth: hci2: command tx timeout
[  322.080804] Bluetooth: hci6: command tx timeout
[  322.081289] Bluetooth: hci5: command tx timeout
[  322.082729] Bluetooth: hci3: command tx timeout
[  322.083148] Bluetooth: hci4: command tx timeout
[  322.208109] Bluetooth: hci7: command tx timeout
[  375.536817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  375.540330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  375.543021] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  375.549287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  375.553831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  375.737926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  375.753197] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  375.758331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  375.778161] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  375.785042] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  375.881758] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  375.886124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  375.892161] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  375.897873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  375.903258] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  376.028412] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  376.054320] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  376.060300] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  376.092129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  376.109317] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  376.157158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  376.178016] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  376.204037] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  376.249147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  376.280513] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  376.466508] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  376.483326] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  376.521286] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  376.533390] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  376.540290] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  376.558472] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  376.566377] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  376.585241] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  376.622393] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  376.629229] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  376.761347] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  376.765261] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  376.772120] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  376.811129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  376.837228] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  377.631988] Bluetooth: hci0: command tx timeout
[  377.824113] Bluetooth: hci1: command tx timeout
[  377.951827] Bluetooth: hci2: command tx timeout
[  378.271679] Bluetooth: hci3: command tx timeout
[  378.527710] Bluetooth: hci4: command tx timeout
[  378.719763] Bluetooth: hci6: command tx timeout
[  378.720480] Bluetooth: hci7: command tx timeout
[  378.911850] Bluetooth: hci5: command tx timeout
[  379.679712] Bluetooth: hci0: command tx timeout
[  379.873671] Bluetooth: hci1: command tx timeout
[  379.999685] Bluetooth: hci2: command tx timeout
[  380.319858] Bluetooth: hci3: command tx timeout
[  380.575804] Bluetooth: hci4: command tx timeout
[  380.768830] Bluetooth: hci7: command tx timeout
[  380.769299] Bluetooth: hci6: command tx timeout
[  380.959731] Bluetooth: hci5: command tx timeout
[  381.729797] Bluetooth: hci0: command tx timeout
[  381.920280] Bluetooth: hci1: command tx timeout
[  382.047968] Bluetooth: hci2: command tx timeout
[  382.367699] Bluetooth: hci3: command tx timeout
[  382.623909] Bluetooth: hci4: command tx timeout
[  382.815732] Bluetooth: hci6: command tx timeout
[  382.816204] Bluetooth: hci7: command tx timeout
[  383.007861] Bluetooth: hci5: command tx timeout
[  383.775872] Bluetooth: hci0: command tx timeout
[  383.967645] Bluetooth: hci1: command tx timeout
[  384.095731] Bluetooth: hci2: command tx timeout
[  384.415804] Bluetooth: hci3: command tx timeout
[  384.671652] Bluetooth: hci4: command tx timeout
[  384.863934] Bluetooth: hci7: command tx timeout
[  384.864382] Bluetooth: hci6: command tx timeout
[  385.055656] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
07:30:29  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88802769fbe0 RCX=ffffffff822b84e3 RDX=ffff88802e3a8000
RSI=0000000000000040 RDI=0000000000000005 RBP=ffff88800f79b808 RSP=ffff88802769f960
R8 =0000000000000010 R9 =ffff88802769fbe0 R10=0000000000000010 R11=0000000000000001
R12=0000000000000010 R13=ffff88800fb8c0e0 R14=1ffff11004ed3f31 R15=00000000ffffffea
RIP=ffffffff81738d90 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe3300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffae7aeb7d0 CR3=0000000029eaf000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff888034f00ad0 RBX=ffff88802e38f2b8 RCX=ffff88802e38f0d4 RDX=0000000000000004
RSI=ffffffff85c1cc40 RDI=ffff888034f00ad0 RBP=ffffffff85c1cc40 RSP=ffff88802e38f0c8
R8 =ffffffff867fc9f8 R9 =ffff88802e38f1c0 R10=000000000003b53d R11=0000000000012b30
R12=ffffffff81354012 R13=0000000000000202 R14=ffff888034f00000 R15=0000000000000004
RIP=ffffffff8151ac81 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f855a456540 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe4900000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f855a930000 CR3=000000002ac0f000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff0000ff
XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69
XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000