Warning: Permanently added '[localhost]:54493' (ECDSA) to the list of known hosts.
2022/10/02 10:14:34 fuzzer started
2022/10/02 10:14:34 dialing manager at localhost:35095
syzkaller login: [   44.268657] cgroup: Unknown subsys name 'net'
[   44.354703] cgroup: Unknown subsys name 'rlimit'
2022/10/02 10:14:49 syscalls: 205
2022/10/02 10:14:49 code coverage: enabled
2022/10/02 10:14:49 comparison tracing: enabled
2022/10/02 10:14:49 extra coverage: enabled
2022/10/02 10:14:49 setuid sandbox: enabled
2022/10/02 10:14:49 namespace sandbox: enabled
2022/10/02 10:14:49 Android sandbox: enabled
2022/10/02 10:14:49 fault injection: enabled
2022/10/02 10:14:49 leak checking: enabled
2022/10/02 10:14:49 net packet injection: enabled
2022/10/02 10:14:49 net device setup: enabled
2022/10/02 10:14:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/02 10:14:49 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/02 10:14:49 USB emulation: enabled
2022/10/02 10:14:49 hci packet injection: enabled
2022/10/02 10:14:49 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930                                          )
2022/10/02 10:14:49 802.15.4 emulation: enabled
2022/10/02 10:14:49 fetching corpus: 0, signal 0/0 (executing program)
2022/10/02 10:14:50 starting 8 fuzzer processes
10:14:50 executing program 0:
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="29056d4838cd589531fe2280e373be788587cff7f7bb388a889112b13334621a42e4c90138c0a5eb54304b22a1fb98dca7ccda23f24c5c9afe6c9b97df87b8ff867807db2dea", 0x46}, 0x1, 0x0, 0x0, 0x40000}, 0x2000010)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1003, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000180))
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14, &(0x7f0000000280)={&(0x7f0000000200)="d0de75049f63f55d35113557a83cc9b7ac6f1c2c8e8fe3bda5962b967f39c2271b48fb2ef30196da55e97bd10ac2cc6f1f610e27200326392a340dd59c81b7dcf56c8bdfa691c28f5f638dd7eed5477f48e7ab62b9755ca710f02bfb", 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x26a}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4040)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffff}}, ["", "", "", "", ""]}, 0x24}}, 0x810)
r3 = socket(0x0, 0x3, 0x1ff)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socketpair(0x1, 0x3, 0x3c43, &(0x7f0000000980)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4000005)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r7)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'tunl0\x00', <r9=>r5, 0x7, 0x90f, 0x80000000, 0x0, {{0xa, 0x4, 0x1, 0x5, 0x28, 0x67, 0x0, 0x9d, 0x8ba88961eacf48cd, 0x0, @local, @broadcast, {[@generic={0x44, 0x10, "10aaf98f7537ce6376886234f1e8"}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000c40)={0xfffffffffffffffe, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r8, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)

10:14:50 executing program 1:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4)
io_pgetevents(0x0, 0x9, 0x3, &(0x7f00000009c0)=[{}, {}, {}], &(0x7f0000000a40), &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x802]}, 0x8})
syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r4)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

[   59.825134] audit: type=1400 audit(1664705690.610:6): avc:  denied  { execmem } for  pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:14:50 executing program 2:
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x30000004)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'xfrm0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd8e01553b32e811b}, 0x8000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x70}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6b49}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008011}, 0x4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20008014)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'gretap0\x00', <r7=>r0, 0x40, 0x20, 0x1, 0x1, {{0xc, 0x4, 0x1, 0x6, 0x30, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @private=0xa010100, {[@ssrr={0x89, 0x1b, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @remote, @multicast1, @remote]}]}}}}})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0000}, 0x8000)
sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0xfffffffb}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x9}, 0x4040)
socketpair(0x2a, 0x6, 0x9, &(0x7f0000000c40)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000c80))

10:14:50 executing program 3:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', <r0=>0x0, 0x2f, 0xf0, 0xfb, 0x20c3, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x8000, 0x7, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'erspan0\x00', <r1=>r0, 0x7, 0x1, 0x8, 0x2, {{0xb, 0x4, 0x0, 0x38, 0x2c, 0x68, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @empty, {[@end, @rr={0x7, 0x17, 0x54, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', r1, 0x80, 0x700, 0x101, 0x5, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_addr={0x44, 0xc, 0x92, 0x1, 0x3, [{@broadcast, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x56, 0x1, 0x7, [{@local, 0x6}, {@loopback, 0x40}]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x0, 0xa, "abcbb0619f660bfa"}, {0x1, 0x7, "52857ec4ce"}]}, @generic={0x94, 0x10, "f41400709735795bdecbcc92cfbb"}, @lsrr={0x83, 0xf, 0x66, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @end]}}}}})
r2 = socket(0x0, 0x80000, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'rose0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r3, 0x29, 0xb7, 0xaf, 0x20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x700, 0x40, 0x9, 0xfff}})
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8808}, 0x8800)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', <r4=>r0, 0x700, 0x7, 0xffffffff, 0x9, {{0x24, 0x4, 0x1, 0x4, 0x90, 0x64, 0x0, 0xff, 0x2f, 0x0, @remote, @local, {[@ssrr={0x89, 0x2b, 0xfe, [@multicast2, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010101, @private=0xa010102, @loopback, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x16}, @local]}, @generic={0x83, 0xd, "02389ba6a408d3c1ae6b7d"}, @rr={0x7, 0x1f, 0x63, [@multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, @multicast2, @private=0xa010100, @remote, @private=0xa010101]}, @timestamp_addr={0x44, 0x24, 0x5c, 0x1, 0x2, [{@multicast1, 0xffff}, {@multicast1, 0x3}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xff}]}]}}}}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcdf}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004050}, 0x24)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0xfd)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
io_setup(0x1000, &(0x7f0000000740)=<r6=>0x0)
r7 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x80000)
io_cancel(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x1ff, r5, &(0x7f0000000780)="07dabce532c7e853bbd34813759d8ff91a6b1e5c65bcea15827ebf0be2c443ea35bd69f62455b34c83c6ddb8cabe9007a22edd5f8e7c64e1518fa574276ef6d48f95d08b99dc81262f8936772661cd7f81847a1027f85d09db1057166c412152ee8ecb14c2d4", 0x66, 0x80000000, 0x0, 0x2, r7}, &(0x7f0000000880))
socketpair(0x23, 0x1, 0x0, &(0x7f00000008c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$802154_dgram(r8, &(0x7f0000000900)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40)
sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x810)

10:14:50 executing program 4:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))
clock_gettime(0x4, &(0x7f0000000040))
clock_gettime(0x6, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x3, 0xce6, 0x2, 0x401, 0x0, 0x8, 0x1, 0xd4f}, &(0x7f0000000100)={0x7fffffff, 0x0, 0x0, 0x2800000000000000, 0x8, 0x1000, 0x529c, 0x3}, &(0x7f0000000140)={0x1, 0x1, 0x9, 0xeffe, 0x4, 0x7ff, 0x0, 0x8}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8})
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
sched_yield()
ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b)
clock_gettime(0x2, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macsec0\x00', <r0=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340))
r1 = getpgid(0xffffffffffffffff)
sched_setattr(r1, &(0x7f0000000380)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffff41, 0x7, 0x65e, 0x5}, 0x0)
rt_sigqueueinfo(r1, 0x10, &(0x7f00000003c0)={0x2f, 0x0, 0x9})
clock_gettime(0x3, &(0x7f0000000440))
sysfs$2(0x2, 0x3ff, &(0x7f0000000480)=""/125)
syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0x1, 0xb1}, "8fa9999b061d8e3d902ce83bc7760675dd3565eacb36275f277d2d7e9fb8c2fac3f7e4d56634f160b925bc1abf14fdba57730524a734da87d16281092adecb2b75bbb55edf235beee5d55fdae7e1379ccbccff6a31712f1027cbf89cf744a76db0f011aa4967064d1a2795314d69acd02c504443897070d4868a1e8c9655e21090494423676a5717cd0bfece35c057289bcf4e3a4ab8afec9c63c58f7f9b30f6d301c7129903cf5799cd4a34ceb6777782"}, 0xb5)
syz_emit_vhci(&(0x7f00000005c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xbe}, @l2cap_cid_signaling={{0xba}, [@l2cap_conn_req={{0x2, 0x7, 0x4}, {0x0, 0x40}}, @l2cap_conf_req={{0x4, 0x2a, 0x4e}, {0x9, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x0, 0x7f, 0xf88, 0x5}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x0, 0xfff9, 0x6, 0x400, 0x7}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0xcf}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x6, 0x7, 0x7, 0x3, 0x8e90, 0x4}}]}}, @l2cap_conn_rsp={{0x3, 0x1f, 0x8}, {0x7, 0x20, 0xf7f, 0x200}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x4, 0x6}}, @l2cap_info_rsp={{0xb, 0x5, 0x3f}, {0x1, 0x7, "632f1f9a6dd9dd4cdca3b05b2ac9393232c95d99409713fbf2afef9e07dada8ce1a3b6091aaafec8ca8619aa152617c50cc798c9dedf3bf60b9f0e"}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x3, 0x0, 0x80}}]}}, 0xc3)
sysfs$3(0x3)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6fd}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x69}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008081}, 0x40000024)

10:14:50 executing program 6:
r0 = getgid()
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
getresgid(&(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
r3 = getgid()
getresgid(&(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0), &(0x7f0000000200))
getresgid(&(0x7f0000000240), &(0x7f0000000280)=<r5=>0x0, &(0x7f00000002c0))
setgroups(0x6, &(0x7f0000000300)=[0xee00, r3, r2, r4, r5, r1])
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)
setfsgid(r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000440)=[@request_death, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x100a, 0x1}, @flat=@handle={0x73682a85, 0x1000}, @fd}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0xa8, 0x0, &(0x7f00000004c0)="a2494ac7d1a0cb8e518330281df9e710bb7a15eeae77227482b8b72587980fd528781e6b704b916ab68b594dbb3e7784adc6c0377dfd4b6a68be0cd9229d02db4f4141b08ce9e7b58acd813c56805736912ac5187cf3ad902c4cdb2ee0ab2b96b768318a7cfb1378953b685c840675459d6c23c2832395d2cf36c18b4dcf4ed18a7af76216eb7b1e19e0c1ded6eee624be097ff16368409f7199ed48263bd787fde901844eff13ca"})
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x4)
getitimer(0x0, &(0x7f0000000640))
getresgid(&(0x7f0000000680)=<r6=>0x0, &(0x7f00000006c0), &(0x7f0000000700))
setgroups(0x2, &(0x7f0000000740)=[0xee00, r6])
clone(0x0, &(0x7f0000000780)="cb9b7a1e5763132b48629eef7955dd14b70b832d8d8844ce5c0aeb7f16beb2d0e342aa6e31d61f356210", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="83e61ecdeca2c8855bc9559ee226219097b06e6f1d9921f38852e7f2148ac7e656c2d8719f37fec1751a5a4e83163be3c128cb05d3264d604c374f261be3daa270b973a0b151fbb9626e6692d71cc4f6a36cb4c82989636cdb64fb21977f837a18b02c3e8bd7fce0d945af6b904f0e81a6697fcdafc1569d245b5d88dc130b4889ff1f5dc89b3bf9c61604057c15b50bdb5824e21653741eee1643238989f762d6659ee800e46cbd509494aaba992881a52a9a05a9c12cdc")
socketpair(0x26, 0x4, 0xffff, &(0x7f0000000900))
r7 = getgid()
getresgid(&(0x7f0000000940), &(0x7f0000000980)=<r8=>0x0, &(0x7f00000009c0)=<r9=>0x0)
setregid(r7, r9)
setgroups(0x7, &(0x7f0000000b40)=[0x0, r8, r1, r0, 0x0, 0x0, r9])

10:14:50 executing program 7:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0)
r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "449045741b72116810ab1c193827b95c1c406d7d662f147a38a43e5aa0bf53cc344704bb86f0afb009774e7463a89cdd89113044845c31bf24d6648560d00e7e", 0x15}, 0x48, 0xfffffffffffffffc)
keyctl$negate(0xd, r0, 0x3, r1)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3)
sysfs$2(0x2, 0x7, &(0x7f0000000180)=""/217)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x4c080)
keyctl$get_persistent(0x16, 0xee00, r1)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$unlink(0x9, r4, r0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r5, 0xb28, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x40804)
r6 = request_key(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='batadv\x00', 0xffffffffffffffff)
r7 = request_key(&(0x7f0000000680)='trusted\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)='batadv\x00', r1)
keyctl$reject(0x13, r7, 0x36d, 0x2, r4)
keyctl$KEYCTL_MOVE(0x1e, r6, r4, r4, 0x0)
r8 = request_key(&(0x7f0000000740)='cifs.idmap\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r8, 0xfffffffffffffffd)
pselect6(0x40, &(0x7f0000000800)={0x0, 0x20, 0x0, 0x2, 0x401, 0x4, 0xffffffffffffff7f, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x80000000, 0x4, 0x5, 0x1, 0x7f, 0x9}, &(0x7f0000000880)={0x101, 0x9, 0x100000001, 0x4, 0x80000000, 0xffffffffffffffe1, 0x4eb, 0x200}, &(0x7f00000008c0)={0x77359400}, &(0x7f0000000940)={&(0x7f0000000900)={[0x8]}, 0x8})

10:14:50 executing program 5:
r0 = getuid()
keyctl$get_persistent(0x16, r0, 0xfffffffffffffffa)
r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r1, 0xfffffffffffffffe)
setfsuid(r0)
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x61, 0x32, 0x38, 0x35, 0x37, 0x39, 0x7, 0x61, 0x38, 0x32, 0x32, 0x38, 0x34, 0x37, 0x30, 0x36]}, &(0x7f0000000140)={0x0, "a4a90a9636f7d6dd776f51a27c6094301d16186db68f5680673b5837578c28eefb2d950eaef07ac8050543aca422512b593e1016cc8f905db19418c0a8e91bc1", 0x1a}, 0x48, r1)
r3 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='syz', r1)
keyctl$reject(0x13, r2, 0x100, 0x7, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff)
r4 = getuid()
setfsuid(r4)
r5 = getuid()
setresuid(r4, r5, r4)
keyctl$negate(0xd, r2, 0x1, r3)
r6 = getuid()
setresuid(r5, r0, r6)
r7 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$reject(0x13, r7, 0x5, 0x53, r8)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, r7, 0x0)

[   61.007215] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.009279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.010776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.013861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.015766] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   61.017115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.021993] Bluetooth: hci0: HCI_REQ-0x0c1a
[   61.060692] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.071118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.072964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.076514] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.079188] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   61.080566] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.086207] Bluetooth: hci1: HCI_REQ-0x0c1a
[   61.132345] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.144571] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   61.146391] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   61.147975] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.149123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   61.152715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.153723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   61.155447] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   61.158027] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   61.159212] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.160171] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   61.160429] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   61.162635] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   61.164648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   61.166335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.167801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   61.167947] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   61.170666] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   61.176064] Bluetooth: hci2: HCI_REQ-0x0c1a
[   61.190485] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   61.192391] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   61.193679] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   61.195885] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   61.197480] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   61.202073] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   61.203676] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   61.203865] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   61.205140] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   61.206740] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   61.211602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   61.218005] Bluetooth: hci7: HCI_REQ-0x0c1a
[   61.219196] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   61.219860] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   61.224830] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   61.226369] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   61.226423] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   61.232530] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   61.233609] Bluetooth: hci4: HCI_REQ-0x0c1a
[   61.246019] Bluetooth: hci3: HCI_REQ-0x0c1a
[   61.265135] Bluetooth: hci5: HCI_REQ-0x0c1a
[   61.295236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   61.306629] Bluetooth: hci6: HCI_REQ-0x0c1a
[   63.093517] Bluetooth: hci0: command 0x0409 tx timeout
[   63.156995] Bluetooth: hci1: command 0x0409 tx timeout
[   63.221980] Bluetooth: hci2: command 0x0409 tx timeout
[   63.284969] Bluetooth: hci5: command 0x0409 tx timeout
[   63.285539] Bluetooth: hci4: command 0x0409 tx timeout
[   63.286066] Bluetooth: hci7: command 0x0409 tx timeout
[   63.286572] Bluetooth: hci3: command 0x0409 tx timeout
[   63.349999] Bluetooth: hci6: command 0x0409 tx timeout
[   65.140964] Bluetooth: hci0: command 0x041b tx timeout
[   65.204952] Bluetooth: hci1: command 0x041b tx timeout
[   65.270009] Bluetooth: hci2: command 0x041b tx timeout
[   65.332976] Bluetooth: hci3: command 0x041b tx timeout
[   65.333515] Bluetooth: hci7: command 0x041b tx timeout
[   65.334081] Bluetooth: hci4: command 0x041b tx timeout
[   65.334593] Bluetooth: hci5: command 0x041b tx timeout
[   65.396947] Bluetooth: hci6: command 0x041b tx timeout
[   67.190008] Bluetooth: hci0: command 0x040f tx timeout
[   67.252945] Bluetooth: hci1: command 0x040f tx timeout
[   67.316938] Bluetooth: hci2: command 0x040f tx timeout
[   67.381957] Bluetooth: hci5: command 0x040f tx timeout
[   67.382420] Bluetooth: hci4: command 0x040f tx timeout
[   67.382825] Bluetooth: hci7: command 0x040f tx timeout
[   67.383283] Bluetooth: hci3: command 0x040f tx timeout
[   67.445980] Bluetooth: hci6: command 0x040f tx timeout
[   69.237972] Bluetooth: hci0: command 0x0419 tx timeout
[   69.302003] Bluetooth: hci1: command 0x0419 tx timeout
[   69.365938] Bluetooth: hci2: command 0x0419 tx timeout
[   69.429962] Bluetooth: hci3: command 0x0419 tx timeout
[   69.430368] Bluetooth: hci7: command 0x0419 tx timeout
[   69.430739] Bluetooth: hci4: command 0x0419 tx timeout
[   69.431160] Bluetooth: hci5: command 0x0419 tx timeout
[   69.492936] Bluetooth: hci6: command 0x0419 tx timeout
10:15:46 executing program 6:
r0 = getgid()
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
getresgid(&(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
r3 = getgid()
getresgid(&(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0), &(0x7f0000000200))
getresgid(&(0x7f0000000240), &(0x7f0000000280)=<r5=>0x0, &(0x7f00000002c0))
setgroups(0x6, &(0x7f0000000300)=[0xee00, r3, r2, r4, r5, r1])
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)
setfsgid(r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000440)=[@request_death, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x100a, 0x1}, @flat=@handle={0x73682a85, 0x1000}, @fd}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0xa8, 0x0, &(0x7f00000004c0)="a2494ac7d1a0cb8e518330281df9e710bb7a15eeae77227482b8b72587980fd528781e6b704b916ab68b594dbb3e7784adc6c0377dfd4b6a68be0cd9229d02db4f4141b08ce9e7b58acd813c56805736912ac5187cf3ad902c4cdb2ee0ab2b96b768318a7cfb1378953b685c840675459d6c23c2832395d2cf36c18b4dcf4ed18a7af76216eb7b1e19e0c1ded6eee624be097ff16368409f7199ed48263bd787fde901844eff13ca"})
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x4)
getitimer(0x0, &(0x7f0000000640))
getresgid(&(0x7f0000000680)=<r6=>0x0, &(0x7f00000006c0), &(0x7f0000000700))
setgroups(0x2, &(0x7f0000000740)=[0xee00, r6])
clone(0x0, &(0x7f0000000780)="cb9b7a1e5763132b48629eef7955dd14b70b832d8d8844ce5c0aeb7f16beb2d0e342aa6e31d61f356210", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="83e61ecdeca2c8855bc9559ee226219097b06e6f1d9921f38852e7f2148ac7e656c2d8719f37fec1751a5a4e83163be3c128cb05d3264d604c374f261be3daa270b973a0b151fbb9626e6692d71cc4f6a36cb4c82989636cdb64fb21977f837a18b02c3e8bd7fce0d945af6b904f0e81a6697fcdafc1569d245b5d88dc130b4889ff1f5dc89b3bf9c61604057c15b50bdb5824e21653741eee1643238989f762d6659ee800e46cbd509494aaba992881a52a9a05a9c12cdc")
socketpair(0x26, 0x4, 0xffff, &(0x7f0000000900))
r7 = getgid()
getresgid(&(0x7f0000000940), &(0x7f0000000980)=<r8=>0x0, &(0x7f00000009c0)=<r9=>0x0)
setregid(r7, r9)
setgroups(0x7, &(0x7f0000000b40)=[0x0, r8, r1, r0, 0x0, 0x0, r9])

10:15:46 executing program 6:
r0 = getgid()
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
getresgid(&(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
r3 = getgid()
getresgid(&(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0), &(0x7f0000000200))
getresgid(&(0x7f0000000240), &(0x7f0000000280)=<r5=>0x0, &(0x7f00000002c0))
setgroups(0x6, &(0x7f0000000300)=[0xee00, r3, r2, r4, r5, r1])
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)
setfsgid(r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000440)=[@request_death, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x100a, 0x1}, @flat=@handle={0x73682a85, 0x1000}, @fd}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0xa8, 0x0, &(0x7f00000004c0)="a2494ac7d1a0cb8e518330281df9e710bb7a15eeae77227482b8b72587980fd528781e6b704b916ab68b594dbb3e7784adc6c0377dfd4b6a68be0cd9229d02db4f4141b08ce9e7b58acd813c56805736912ac5187cf3ad902c4cdb2ee0ab2b96b768318a7cfb1378953b685c840675459d6c23c2832395d2cf36c18b4dcf4ed18a7af76216eb7b1e19e0c1ded6eee624be097ff16368409f7199ed48263bd787fde901844eff13ca"})
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x4)
getitimer(0x0, &(0x7f0000000640))
getresgid(&(0x7f0000000680)=<r6=>0x0, &(0x7f00000006c0), &(0x7f0000000700))
setgroups(0x2, &(0x7f0000000740)=[0xee00, r6])
clone(0x0, &(0x7f0000000780)="cb9b7a1e5763132b48629eef7955dd14b70b832d8d8844ce5c0aeb7f16beb2d0e342aa6e31d61f356210", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="83e61ecdeca2c8855bc9559ee226219097b06e6f1d9921f38852e7f2148ac7e656c2d8719f37fec1751a5a4e83163be3c128cb05d3264d604c374f261be3daa270b973a0b151fbb9626e6692d71cc4f6a36cb4c82989636cdb64fb21977f837a18b02c3e8bd7fce0d945af6b904f0e81a6697fcdafc1569d245b5d88dc130b4889ff1f5dc89b3bf9c61604057c15b50bdb5824e21653741eee1643238989f762d6659ee800e46cbd509494aaba992881a52a9a05a9c12cdc")
socketpair(0x26, 0x4, 0xffff, &(0x7f0000000900))
r7 = getgid()
getresgid(&(0x7f0000000940), &(0x7f0000000980)=<r8=>0x0, &(0x7f00000009c0)=<r9=>0x0)
setregid(r7, r9)
setgroups(0x7, &(0x7f0000000b40)=[0x0, r8, r1, r0, 0x0, 0x0, r9])

10:15:46 executing program 1:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4)
io_pgetevents(0x0, 0x9, 0x3, &(0x7f00000009c0)=[{}, {}, {}], &(0x7f0000000a40), &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x802]}, 0x8})
syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r4)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

10:15:47 executing program 6:
r0 = getgid()
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
getresgid(&(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
r3 = getgid()
getresgid(&(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0), &(0x7f0000000200))
getresgid(&(0x7f0000000240), &(0x7f0000000280)=<r5=>0x0, &(0x7f00000002c0))
setgroups(0x6, &(0x7f0000000300)=[0xee00, r3, r2, r4, r5, r1])
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)
setfsgid(r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x58, 0x0, &(0x7f0000000440)=[@request_death, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x100a, 0x1}, @flat=@handle={0x73682a85, 0x1000}, @fd}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0xa8, 0x0, &(0x7f00000004c0)="a2494ac7d1a0cb8e518330281df9e710bb7a15eeae77227482b8b72587980fd528781e6b704b916ab68b594dbb3e7784adc6c0377dfd4b6a68be0cd9229d02db4f4141b08ce9e7b58acd813c56805736912ac5187cf3ad902c4cdb2ee0ab2b96b768318a7cfb1378953b685c840675459d6c23c2832395d2cf36c18b4dcf4ed18a7af76216eb7b1e19e0c1ded6eee624be097ff16368409f7199ed48263bd787fde901844eff13ca"})
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x4)
getitimer(0x0, &(0x7f0000000640))
getresgid(&(0x7f0000000680)=<r6=>0x0, &(0x7f00000006c0), &(0x7f0000000700))
setgroups(0x2, &(0x7f0000000740)=[0xee00, r6])
clone(0x0, &(0x7f0000000780)="cb9b7a1e5763132b48629eef7955dd14b70b832d8d8844ce5c0aeb7f16beb2d0e342aa6e31d61f356210", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="83e61ecdeca2c8855bc9559ee226219097b06e6f1d9921f38852e7f2148ac7e656c2d8719f37fec1751a5a4e83163be3c128cb05d3264d604c374f261be3daa270b973a0b151fbb9626e6692d71cc4f6a36cb4c82989636cdb64fb21977f837a18b02c3e8bd7fce0d945af6b904f0e81a6697fcdafc1569d245b5d88dc130b4889ff1f5dc89b3bf9c61604057c15b50bdb5824e21653741eee1643238989f762d6659ee800e46cbd509494aaba992881a52a9a05a9c12cdc")
socketpair(0x26, 0x4, 0xffff, &(0x7f0000000900))
r7 = getgid()
getresgid(&(0x7f0000000940), &(0x7f0000000980)=<r8=>0x0, &(0x7f00000009c0)=<r9=>0x0)
setregid(r7, r9)
setgroups(0x7, &(0x7f0000000b40)=[0x0, r8, r1, r0, 0x0, 0x0, r9])

10:15:47 executing program 1:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4)
io_pgetevents(0x0, 0x9, 0x3, &(0x7f00000009c0)=[{}, {}, {}], &(0x7f0000000a40), &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x802]}, 0x8})
syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r4)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

10:15:47 executing program 6:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4)
io_pgetevents(0x0, 0x9, 0x3, &(0x7f00000009c0)=[{}, {}, {}], &(0x7f0000000a40), &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x802]}, 0x8})
syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r4)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

10:15:47 executing program 1:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4)
io_pgetevents(0x0, 0x9, 0x3, &(0x7f00000009c0)=[{}, {}, {}], &(0x7f0000000a40), &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x802]}, 0x8})
syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r4)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

10:15:47 executing program 6:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4)
io_pgetevents(0x0, 0x9, 0x3, &(0x7f00000009c0)=[{}, {}, {}], &(0x7f0000000a40), &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x802]}, 0x8})
syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r4)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

[  117.124214] Bluetooth: hci7: SCO packet for unknown connection handle 1
[  117.125796] Bluetooth: Wrong link type (-22)
[  117.126790] Bluetooth: hci7: link tx timeout
[  117.127215] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.141436] Bluetooth: hci7: SCO packet for unknown connection handle 1
[  117.141578] Bluetooth: Wrong link type (-22)
[  117.142823] Bluetooth: hci7: link tx timeout
[  117.143179] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.632313] random: crng reseeded on system resumption
[  117.954217] random: crng reseeded on system resumption
[  119.156978] Bluetooth: hci7: command 0x0406 tx timeout
10:16:06 executing program 4:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))
clock_gettime(0x4, &(0x7f0000000040))
clock_gettime(0x6, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x3, 0xce6, 0x2, 0x401, 0x0, 0x8, 0x1, 0xd4f}, &(0x7f0000000100)={0x7fffffff, 0x0, 0x0, 0x2800000000000000, 0x8, 0x1000, 0x529c, 0x3}, &(0x7f0000000140)={0x1, 0x1, 0x9, 0xeffe, 0x4, 0x7ff, 0x0, 0x8}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8})
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
sched_yield()
ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b)
clock_gettime(0x2, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macsec0\x00', <r0=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340))
r1 = getpgid(0xffffffffffffffff)
sched_setattr(r1, &(0x7f0000000380)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffff41, 0x7, 0x65e, 0x5}, 0x0)
rt_sigqueueinfo(r1, 0x10, &(0x7f00000003c0)={0x2f, 0x0, 0x9})
clock_gettime(0x3, &(0x7f0000000440))
sysfs$2(0x2, 0x3ff, &(0x7f0000000480)=""/125)
syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0x1, 0xb1}, "8fa9999b061d8e3d902ce83bc7760675dd3565eacb36275f277d2d7e9fb8c2fac3f7e4d56634f160b925bc1abf14fdba57730524a734da87d16281092adecb2b75bbb55edf235beee5d55fdae7e1379ccbccff6a31712f1027cbf89cf744a76db0f011aa4967064d1a2795314d69acd02c504443897070d4868a1e8c9655e21090494423676a5717cd0bfece35c057289bcf4e3a4ab8afec9c63c58f7f9b30f6d301c7129903cf5799cd4a34ceb6777782"}, 0xb5)
syz_emit_vhci(&(0x7f00000005c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xbe}, @l2cap_cid_signaling={{0xba}, [@l2cap_conn_req={{0x2, 0x7, 0x4}, {0x0, 0x40}}, @l2cap_conf_req={{0x4, 0x2a, 0x4e}, {0x9, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x0, 0x7f, 0xf88, 0x5}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x0, 0xfff9, 0x6, 0x400, 0x7}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0xcf}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x6, 0x7, 0x7, 0x3, 0x8e90, 0x4}}]}}, @l2cap_conn_rsp={{0x3, 0x1f, 0x8}, {0x7, 0x20, 0xf7f, 0x200}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x4, 0x6}}, @l2cap_info_rsp={{0xb, 0x5, 0x3f}, {0x1, 0x7, "632f1f9a6dd9dd4cdca3b05b2ac9393232c95d99409713fbf2afef9e07dada8ce1a3b6091aaafec8ca8619aa152617c50cc798c9dedf3bf60b9f0e"}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x3, 0x0, 0x80}}]}}, 0xc3)
sysfs$3(0x3)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6fd}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x69}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008081}, 0x40000024)

10:16:06 executing program 2:
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x30000004)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'xfrm0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd8e01553b32e811b}, 0x8000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x70}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6b49}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008011}, 0x4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20008014)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'gretap0\x00', <r7=>r0, 0x40, 0x20, 0x1, 0x1, {{0xc, 0x4, 0x1, 0x6, 0x30, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @private=0xa010100, {[@ssrr={0x89, 0x1b, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @remote, @multicast1, @remote]}]}}}}})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0000}, 0x8000)
sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0xfffffffb}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x9}, 0x4040)
socketpair(0x2a, 0x6, 0x9, &(0x7f0000000c40)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000c80))

10:16:06 executing program 0:
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="29056d4838cd589531fe2280e373be788587cff7f7bb388a889112b13334621a42e4c90138c0a5eb54304b22a1fb98dca7ccda23f24c5c9afe6c9b97df87b8ff867807db2dea", 0x46}, 0x1, 0x0, 0x0, 0x40000}, 0x2000010)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1003, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000180))
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14, &(0x7f0000000280)={&(0x7f0000000200)="d0de75049f63f55d35113557a83cc9b7ac6f1c2c8e8fe3bda5962b967f39c2271b48fb2ef30196da55e97bd10ac2cc6f1f610e27200326392a340dd59c81b7dcf56c8bdfa691c28f5f638dd7eed5477f48e7ab62b9755ca710f02bfb", 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x26a}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4040)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffff}}, ["", "", "", "", ""]}, 0x24}}, 0x810)
r3 = socket(0x0, 0x3, 0x1ff)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socketpair(0x1, 0x3, 0x3c43, &(0x7f0000000980)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4000005)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r7)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'tunl0\x00', <r9=>r5, 0x7, 0x90f, 0x80000000, 0x0, {{0xa, 0x4, 0x1, 0x5, 0x28, 0x67, 0x0, 0x9d, 0x8ba88961eacf48cd, 0x0, @local, @broadcast, {[@generic={0x44, 0x10, "10aaf98f7537ce6376886234f1e8"}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000c40)={0xfffffffffffffffe, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r8, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)

10:16:06 executing program 1:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4)
io_pgetevents(0x0, 0x9, 0x3, &(0x7f00000009c0)=[{}, {}, {}], &(0x7f0000000a40), &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x802]}, 0x8})
syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r4)
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

10:16:07 executing program 7:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0)
r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "449045741b72116810ab1c193827b95c1c406d7d662f147a38a43e5aa0bf53cc344704bb86f0afb009774e7463a89cdd89113044845c31bf24d6648560d00e7e", 0x15}, 0x48, 0xfffffffffffffffc)
keyctl$negate(0xd, r0, 0x3, r1)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3)
sysfs$2(0x2, 0x7, &(0x7f0000000180)=""/217)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x4c080)
keyctl$get_persistent(0x16, 0xee00, r1)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$unlink(0x9, r4, r0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r5, 0xb28, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x40804)
r6 = request_key(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='batadv\x00', 0xffffffffffffffff)
r7 = request_key(&(0x7f0000000680)='trusted\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)='batadv\x00', r1)
keyctl$reject(0x13, r7, 0x36d, 0x2, r4)
keyctl$KEYCTL_MOVE(0x1e, r6, r4, r4, 0x0)
r8 = request_key(&(0x7f0000000740)='cifs.idmap\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r8, 0xfffffffffffffffd)
pselect6(0x40, &(0x7f0000000800)={0x0, 0x20, 0x0, 0x2, 0x401, 0x4, 0xffffffffffffff7f, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x80000000, 0x4, 0x5, 0x1, 0x7f, 0x9}, &(0x7f0000000880)={0x101, 0x9, 0x100000001, 0x4, 0x80000000, 0xffffffffffffffe1, 0x4eb, 0x200}, &(0x7f00000008c0)={0x77359400}, &(0x7f0000000940)={&(0x7f0000000900)={[0x8]}, 0x8})

10:16:07 executing program 5:
r0 = getuid()
keyctl$get_persistent(0x16, r0, 0xfffffffffffffffa)
r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r1, 0xfffffffffffffffe)
setfsuid(r0)
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x61, 0x32, 0x38, 0x35, 0x37, 0x39, 0x7, 0x61, 0x38, 0x32, 0x32, 0x38, 0x34, 0x37, 0x30, 0x36]}, &(0x7f0000000140)={0x0, "a4a90a9636f7d6dd776f51a27c6094301d16186db68f5680673b5837578c28eefb2d950eaef07ac8050543aca422512b593e1016cc8f905db19418c0a8e91bc1", 0x1a}, 0x48, r1)
r3 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='syz', r1)
keyctl$reject(0x13, r2, 0x100, 0x7, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff)
r4 = getuid()
setfsuid(r4)
r5 = getuid()
setresuid(r4, r5, r4)
keyctl$negate(0xd, r2, 0x1, r3)
r6 = getuid()
setresuid(r5, r0, r6)
r7 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$reject(0x13, r7, 0x5, 0x53, r8)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, r7, 0x0)

10:16:07 executing program 3:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', <r0=>0x0, 0x2f, 0xf0, 0xfb, 0x20c3, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x8000, 0x7, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'erspan0\x00', <r1=>r0, 0x7, 0x1, 0x8, 0x2, {{0xb, 0x4, 0x0, 0x38, 0x2c, 0x68, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @empty, {[@end, @rr={0x7, 0x17, 0x54, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', r1, 0x80, 0x700, 0x101, 0x5, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_addr={0x44, 0xc, 0x92, 0x1, 0x3, [{@broadcast, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x56, 0x1, 0x7, [{@local, 0x6}, {@loopback, 0x40}]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x0, 0xa, "abcbb0619f660bfa"}, {0x1, 0x7, "52857ec4ce"}]}, @generic={0x94, 0x10, "f41400709735795bdecbcc92cfbb"}, @lsrr={0x83, 0xf, 0x66, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @end]}}}}})
r2 = socket(0x0, 0x80000, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'rose0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r3, 0x29, 0xb7, 0xaf, 0x20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x700, 0x40, 0x9, 0xfff}})
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8808}, 0x8800)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', <r4=>r0, 0x700, 0x7, 0xffffffff, 0x9, {{0x24, 0x4, 0x1, 0x4, 0x90, 0x64, 0x0, 0xff, 0x2f, 0x0, @remote, @local, {[@ssrr={0x89, 0x2b, 0xfe, [@multicast2, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010101, @private=0xa010102, @loopback, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x16}, @local]}, @generic={0x83, 0xd, "02389ba6a408d3c1ae6b7d"}, @rr={0x7, 0x1f, 0x63, [@multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, @multicast2, @private=0xa010100, @remote, @private=0xa010101]}, @timestamp_addr={0x44, 0x24, 0x5c, 0x1, 0x2, [{@multicast1, 0xffff}, {@multicast1, 0x3}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xff}]}]}}}}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcdf}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004050}, 0x24)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0xfd)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
io_setup(0x1000, &(0x7f0000000740)=<r6=>0x0)
r7 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x80000)
io_cancel(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x1ff, r5, &(0x7f0000000780)="07dabce532c7e853bbd34813759d8ff91a6b1e5c65bcea15827ebf0be2c443ea35bd69f62455b34c83c6ddb8cabe9007a22edd5f8e7c64e1518fa574276ef6d48f95d08b99dc81262f8936772661cd7f81847a1027f85d09db1057166c412152ee8ecb14c2d4", 0x66, 0x80000000, 0x0, 0x2, r7}, &(0x7f0000000880))
socketpair(0x23, 0x1, 0x0, &(0x7f00000008c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$802154_dgram(r8, &(0x7f0000000900)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40)
sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x810)

10:16:07 executing program 6:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4)
io_pgetevents(0x0, 0x9, 0x3, &(0x7f00000009c0)=[{}, {}, {}], &(0x7f0000000a40), &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x802]}, 0x8})
syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r4)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

[  136.266050] Bluetooth: hci7: SCO packet for unknown connection handle 1
[  136.268243] Bluetooth: Wrong link type (-22)
[  136.269966] Bluetooth: hci7: link tx timeout
[  136.270592] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa
[  136.284610] random: crng reseeded on system resumption
10:16:07 executing program 5:
r0 = getuid()
keyctl$get_persistent(0x16, r0, 0xfffffffffffffffa)
r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r1, 0xfffffffffffffffe)
setfsuid(r0)
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x61, 0x32, 0x38, 0x35, 0x37, 0x39, 0x7, 0x61, 0x38, 0x32, 0x32, 0x38, 0x34, 0x37, 0x30, 0x36]}, &(0x7f0000000140)={0x0, "a4a90a9636f7d6dd776f51a27c6094301d16186db68f5680673b5837578c28eefb2d950eaef07ac8050543aca422512b593e1016cc8f905db19418c0a8e91bc1", 0x1a}, 0x48, r1)
r3 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='syz', r1)
keyctl$reject(0x13, r2, 0x100, 0x7, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff)
r4 = getuid()
setfsuid(r4)
r5 = getuid()
setresuid(r4, r5, r4)
keyctl$negate(0xd, r2, 0x1, r3)
r6 = getuid()
setresuid(r5, r0, r6)
r7 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$reject(0x13, r7, 0x5, 0x53, r8)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, r7, 0x0)

10:16:20 executing program 5:
r0 = getuid()
keyctl$get_persistent(0x16, r0, 0xfffffffffffffffa)
r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r1, 0xfffffffffffffffe)
setfsuid(r0)
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x61, 0x32, 0x38, 0x35, 0x37, 0x39, 0x7, 0x61, 0x38, 0x32, 0x32, 0x38, 0x34, 0x37, 0x30, 0x36]}, &(0x7f0000000140)={0x0, "a4a90a9636f7d6dd776f51a27c6094301d16186db68f5680673b5837578c28eefb2d950eaef07ac8050543aca422512b593e1016cc8f905db19418c0a8e91bc1", 0x1a}, 0x48, r1)
r3 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='syz', r1)
keyctl$reject(0x13, r2, 0x100, 0x7, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff)
r4 = getuid()
setfsuid(r4)
r5 = getuid()
setresuid(r4, r5, r4)
keyctl$negate(0xd, r2, 0x1, r3)
r6 = getuid()
setresuid(r5, r0, r6)
r7 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$reject(0x13, r7, 0x5, 0x53, r8)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, r7, 0x0)

10:16:20 executing program 4:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))
clock_gettime(0x4, &(0x7f0000000040))
clock_gettime(0x6, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x3, 0xce6, 0x2, 0x401, 0x0, 0x8, 0x1, 0xd4f}, &(0x7f0000000100)={0x7fffffff, 0x0, 0x0, 0x2800000000000000, 0x8, 0x1000, 0x529c, 0x3}, &(0x7f0000000140)={0x1, 0x1, 0x9, 0xeffe, 0x4, 0x7ff, 0x0, 0x8}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8})
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
sched_yield()
ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b)
clock_gettime(0x2, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macsec0\x00', <r0=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340))
r1 = getpgid(0xffffffffffffffff)
sched_setattr(r1, &(0x7f0000000380)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffff41, 0x7, 0x65e, 0x5}, 0x0)
rt_sigqueueinfo(r1, 0x10, &(0x7f00000003c0)={0x2f, 0x0, 0x9})
clock_gettime(0x3, &(0x7f0000000440))
sysfs$2(0x2, 0x3ff, &(0x7f0000000480)=""/125)
syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0x1, 0xb1}, "8fa9999b061d8e3d902ce83bc7760675dd3565eacb36275f277d2d7e9fb8c2fac3f7e4d56634f160b925bc1abf14fdba57730524a734da87d16281092adecb2b75bbb55edf235beee5d55fdae7e1379ccbccff6a31712f1027cbf89cf744a76db0f011aa4967064d1a2795314d69acd02c504443897070d4868a1e8c9655e21090494423676a5717cd0bfece35c057289bcf4e3a4ab8afec9c63c58f7f9b30f6d301c7129903cf5799cd4a34ceb6777782"}, 0xb5)
syz_emit_vhci(&(0x7f00000005c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xbe}, @l2cap_cid_signaling={{0xba}, [@l2cap_conn_req={{0x2, 0x7, 0x4}, {0x0, 0x40}}, @l2cap_conf_req={{0x4, 0x2a, 0x4e}, {0x9, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x0, 0x7f, 0xf88, 0x5}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x0, 0xfff9, 0x6, 0x400, 0x7}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0xcf}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x6, 0x7, 0x7, 0x3, 0x8e90, 0x4}}]}}, @l2cap_conn_rsp={{0x3, 0x1f, 0x8}, {0x7, 0x20, 0xf7f, 0x200}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x4, 0x6}}, @l2cap_info_rsp={{0xb, 0x5, 0x3f}, {0x1, 0x7, "632f1f9a6dd9dd4cdca3b05b2ac9393232c95d99409713fbf2afef9e07dada8ce1a3b6091aaafec8ca8619aa152617c50cc798c9dedf3bf60b9f0e"}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x3, 0x0, 0x80}}]}}, 0xc3)
sysfs$3(0x3)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6fd}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x69}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008081}, 0x40000024)

10:16:20 executing program 0:
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="29056d4838cd589531fe2280e373be788587cff7f7bb388a889112b13334621a42e4c90138c0a5eb54304b22a1fb98dca7ccda23f24c5c9afe6c9b97df87b8ff867807db2dea", 0x46}, 0x1, 0x0, 0x0, 0x40000}, 0x2000010)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1003, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000180))
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14, &(0x7f0000000280)={&(0x7f0000000200)="d0de75049f63f55d35113557a83cc9b7ac6f1c2c8e8fe3bda5962b967f39c2271b48fb2ef30196da55e97bd10ac2cc6f1f610e27200326392a340dd59c81b7dcf56c8bdfa691c28f5f638dd7eed5477f48e7ab62b9755ca710f02bfb", 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x26a}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4040)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffff}}, ["", "", "", "", ""]}, 0x24}}, 0x810)
r3 = socket(0x0, 0x3, 0x1ff)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socketpair(0x1, 0x3, 0x3c43, &(0x7f0000000980)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4000005)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r7)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'tunl0\x00', <r9=>r5, 0x7, 0x90f, 0x80000000, 0x0, {{0xa, 0x4, 0x1, 0x5, 0x28, 0x67, 0x0, 0x9d, 0x8ba88961eacf48cd, 0x0, @local, @broadcast, {[@generic={0x44, 0x10, "10aaf98f7537ce6376886234f1e8"}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000c40)={0xfffffffffffffffe, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r8, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)

10:16:20 executing program 2:
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x30000004)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'xfrm0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd8e01553b32e811b}, 0x8000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x70}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6b49}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008011}, 0x4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20008014)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'gretap0\x00', <r7=>r0, 0x40, 0x20, 0x1, 0x1, {{0xc, 0x4, 0x1, 0x6, 0x30, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @private=0xa010100, {[@ssrr={0x89, 0x1b, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @remote, @multicast1, @remote]}]}}}}})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0000}, 0x8000)
sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0xfffffffb}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x9}, 0x4040)
socketpair(0x2a, 0x6, 0x9, &(0x7f0000000c40)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000c80))

10:16:20 executing program 6:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4)
io_pgetevents(0x0, 0x9, 0x3, &(0x7f00000009c0)=[{}, {}, {}], &(0x7f0000000a40), &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x802]}, 0x8})
syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r4)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

10:16:20 executing program 3:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', <r0=>0x0, 0x2f, 0xf0, 0xfb, 0x20c3, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x8000, 0x7, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'erspan0\x00', <r1=>r0, 0x7, 0x1, 0x8, 0x2, {{0xb, 0x4, 0x0, 0x38, 0x2c, 0x68, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @empty, {[@end, @rr={0x7, 0x17, 0x54, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', r1, 0x80, 0x700, 0x101, 0x5, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_addr={0x44, 0xc, 0x92, 0x1, 0x3, [{@broadcast, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x56, 0x1, 0x7, [{@local, 0x6}, {@loopback, 0x40}]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x0, 0xa, "abcbb0619f660bfa"}, {0x1, 0x7, "52857ec4ce"}]}, @generic={0x94, 0x10, "f41400709735795bdecbcc92cfbb"}, @lsrr={0x83, 0xf, 0x66, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @end]}}}}})
r2 = socket(0x0, 0x80000, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'rose0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r3, 0x29, 0xb7, 0xaf, 0x20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x700, 0x40, 0x9, 0xfff}})
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8808}, 0x8800)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', <r4=>r0, 0x700, 0x7, 0xffffffff, 0x9, {{0x24, 0x4, 0x1, 0x4, 0x90, 0x64, 0x0, 0xff, 0x2f, 0x0, @remote, @local, {[@ssrr={0x89, 0x2b, 0xfe, [@multicast2, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010101, @private=0xa010102, @loopback, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x16}, @local]}, @generic={0x83, 0xd, "02389ba6a408d3c1ae6b7d"}, @rr={0x7, 0x1f, 0x63, [@multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, @multicast2, @private=0xa010100, @remote, @private=0xa010101]}, @timestamp_addr={0x44, 0x24, 0x5c, 0x1, 0x2, [{@multicast1, 0xffff}, {@multicast1, 0x3}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xff}]}]}}}}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcdf}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004050}, 0x24)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0xfd)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
io_setup(0x1000, &(0x7f0000000740)=<r6=>0x0)
r7 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x80000)
io_cancel(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x1ff, r5, &(0x7f0000000780)="07dabce532c7e853bbd34813759d8ff91a6b1e5c65bcea15827ebf0be2c443ea35bd69f62455b34c83c6ddb8cabe9007a22edd5f8e7c64e1518fa574276ef6d48f95d08b99dc81262f8936772661cd7f81847a1027f85d09db1057166c412152ee8ecb14c2d4", 0x66, 0x80000000, 0x0, 0x2, r7}, &(0x7f0000000880))
socketpair(0x23, 0x1, 0x0, &(0x7f00000008c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$802154_dgram(r8, &(0x7f0000000900)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40)
sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x810)

10:16:20 executing program 1:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4)
io_pgetevents(0x0, 0x9, 0x3, &(0x7f00000009c0)=[{}, {}, {}], &(0x7f0000000a40), &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x802]}, 0x8})
syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r4)
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

10:16:20 executing program 7:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0)
r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "449045741b72116810ab1c193827b95c1c406d7d662f147a38a43e5aa0bf53cc344704bb86f0afb009774e7463a89cdd89113044845c31bf24d6648560d00e7e", 0x15}, 0x48, 0xfffffffffffffffc)
keyctl$negate(0xd, r0, 0x3, r1)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3)
sysfs$2(0x2, 0x7, &(0x7f0000000180)=""/217)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x4c080)
keyctl$get_persistent(0x16, 0xee00, r1)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$unlink(0x9, r4, r0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r5, 0xb28, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x40804)
r6 = request_key(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='batadv\x00', 0xffffffffffffffff)
r7 = request_key(&(0x7f0000000680)='trusted\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)='batadv\x00', r1)
keyctl$reject(0x13, r7, 0x36d, 0x2, r4)
keyctl$KEYCTL_MOVE(0x1e, r6, r4, r4, 0x0)
r8 = request_key(&(0x7f0000000740)='cifs.idmap\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r8, 0xfffffffffffffffd)
pselect6(0x40, &(0x7f0000000800)={0x0, 0x20, 0x0, 0x2, 0x401, 0x4, 0xffffffffffffff7f, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x80000000, 0x4, 0x5, 0x1, 0x7f, 0x9}, &(0x7f0000000880)={0x101, 0x9, 0x100000001, 0x4, 0x80000000, 0xffffffffffffffe1, 0x4eb, 0x200}, &(0x7f00000008c0)={0x77359400}, &(0x7f0000000940)={&(0x7f0000000900)={[0x8]}, 0x8})

[  150.048268] random: crng reseeded on system resumption
[  150.117412] Bluetooth: hci7: SCO packet for unknown connection handle 1
[  150.119185] Bluetooth: Wrong link type (-22)
[  150.120191] Bluetooth: hci7: link tx timeout
[  150.120541] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa
10:16:20 executing program 5:
r0 = getuid()
keyctl$get_persistent(0x16, r0, 0xfffffffffffffffa)
r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r1, 0xfffffffffffffffe)
setfsuid(r0)
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x61, 0x32, 0x38, 0x35, 0x37, 0x39, 0x7, 0x61, 0x38, 0x32, 0x32, 0x38, 0x34, 0x37, 0x30, 0x36]}, &(0x7f0000000140)={0x0, "a4a90a9636f7d6dd776f51a27c6094301d16186db68f5680673b5837578c28eefb2d950eaef07ac8050543aca422512b593e1016cc8f905db19418c0a8e91bc1", 0x1a}, 0x48, r1)
r3 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='syz', r1)
keyctl$reject(0x13, r2, 0x100, 0x7, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff)
r4 = getuid()
setfsuid(r4)
r5 = getuid()
setresuid(r4, r5, r4)
keyctl$negate(0xd, r2, 0x1, r3)
r6 = getuid()
setresuid(r5, r0, r6)
r7 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, r7, 0x0)

10:16:21 executing program 5:
r0 = getuid()
keyctl$get_persistent(0x16, r0, 0xfffffffffffffffa)
r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r1, 0xfffffffffffffffe)
setfsuid(r0)
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x61, 0x32, 0x38, 0x35, 0x37, 0x39, 0x7, 0x61, 0x38, 0x32, 0x32, 0x38, 0x34, 0x37, 0x30, 0x36]}, &(0x7f0000000140)={0x0, "a4a90a9636f7d6dd776f51a27c6094301d16186db68f5680673b5837578c28eefb2d950eaef07ac8050543aca422512b593e1016cc8f905db19418c0a8e91bc1", 0x1a}, 0x48, r1)
r3 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='syz', r1)
keyctl$reject(0x13, r2, 0x100, 0x7, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff)
r4 = getuid()
setfsuid(r4)
r5 = getuid()
setresuid(r4, r5, r4)
keyctl$negate(0xd, r2, 0x1, r3)
r6 = getuid()
setresuid(r5, r0, r6)
r7 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, r7, 0x0)

10:16:21 executing program 3:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', <r0=>0x0, 0x2f, 0xf0, 0xfb, 0x20c3, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x8000, 0x7, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'erspan0\x00', <r1=>r0, 0x7, 0x1, 0x8, 0x2, {{0xb, 0x4, 0x0, 0x38, 0x2c, 0x68, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @empty, {[@end, @rr={0x7, 0x17, 0x54, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', r1, 0x80, 0x700, 0x101, 0x5, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_addr={0x44, 0xc, 0x92, 0x1, 0x3, [{@broadcast, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x56, 0x1, 0x7, [{@local, 0x6}, {@loopback, 0x40}]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x0, 0xa, "abcbb0619f660bfa"}, {0x1, 0x7, "52857ec4ce"}]}, @generic={0x94, 0x10, "f41400709735795bdecbcc92cfbb"}, @lsrr={0x83, 0xf, 0x66, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @end]}}}}})
r2 = socket(0x0, 0x80000, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'rose0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r3, 0x29, 0xb7, 0xaf, 0x20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x700, 0x40, 0x9, 0xfff}})
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8808}, 0x8800)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', <r4=>r0, 0x700, 0x7, 0xffffffff, 0x9, {{0x24, 0x4, 0x1, 0x4, 0x90, 0x64, 0x0, 0xff, 0x2f, 0x0, @remote, @local, {[@ssrr={0x89, 0x2b, 0xfe, [@multicast2, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010101, @private=0xa010102, @loopback, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x16}, @local]}, @generic={0x83, 0xd, "02389ba6a408d3c1ae6b7d"}, @rr={0x7, 0x1f, 0x63, [@multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, @multicast2, @private=0xa010100, @remote, @private=0xa010101]}, @timestamp_addr={0x44, 0x24, 0x5c, 0x1, 0x2, [{@multicast1, 0xffff}, {@multicast1, 0x3}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xff}]}]}}}}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcdf}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004050}, 0x24)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0xfd)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
io_setup(0x1000, &(0x7f0000000740)=<r6=>0x0)
r7 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x80000)
io_cancel(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x1ff, r5, &(0x7f0000000780)="07dabce532c7e853bbd34813759d8ff91a6b1e5c65bcea15827ebf0be2c443ea35bd69f62455b34c83c6ddb8cabe9007a22edd5f8e7c64e1518fa574276ef6d48f95d08b99dc81262f8936772661cd7f81847a1027f85d09db1057166c412152ee8ecb14c2d4", 0x66, 0x80000000, 0x0, 0x2, r7}, &(0x7f0000000880))
socketpair(0x23, 0x1, 0x0, &(0x7f00000008c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$802154_dgram(r8, &(0x7f0000000900)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40)
sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x810)

10:16:21 executing program 5:
r0 = getuid()
keyctl$get_persistent(0x16, r0, 0xfffffffffffffffa)
r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r1, 0xfffffffffffffffe)
setfsuid(r0)
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x61, 0x32, 0x38, 0x35, 0x37, 0x39, 0x7, 0x61, 0x38, 0x32, 0x32, 0x38, 0x34, 0x37, 0x30, 0x36]}, &(0x7f0000000140)={0x0, "a4a90a9636f7d6dd776f51a27c6094301d16186db68f5680673b5837578c28eefb2d950eaef07ac8050543aca422512b593e1016cc8f905db19418c0a8e91bc1", 0x1a}, 0x48, r1)
r3 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='syz', r1)
keyctl$reject(0x13, r2, 0x100, 0x7, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff)
r4 = getuid()
setfsuid(r4)
r5 = getuid()
setresuid(r4, r5, r4)
keyctl$negate(0xd, r2, 0x1, r3)
r6 = getuid()
setresuid(r5, r0, r6)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, 0x0, 0x0)

10:16:35 executing program 7:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0)
r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "449045741b72116810ab1c193827b95c1c406d7d662f147a38a43e5aa0bf53cc344704bb86f0afb009774e7463a89cdd89113044845c31bf24d6648560d00e7e", 0x15}, 0x48, 0xfffffffffffffffc)
keyctl$negate(0xd, r0, 0x3, r1)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3)
sysfs$2(0x2, 0x7, &(0x7f0000000180)=""/217)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x4c080)
keyctl$get_persistent(0x16, 0xee00, r1)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$unlink(0x9, r4, r0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r5, 0xb28, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x40804)
r6 = request_key(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='batadv\x00', 0xffffffffffffffff)
r7 = request_key(&(0x7f0000000680)='trusted\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)='batadv\x00', r1)
keyctl$reject(0x13, r7, 0x36d, 0x2, r4)
keyctl$KEYCTL_MOVE(0x1e, r6, r4, r4, 0x0)
r8 = request_key(&(0x7f0000000740)='cifs.idmap\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r8, 0xfffffffffffffffd)
pselect6(0x40, &(0x7f0000000800)={0x0, 0x20, 0x0, 0x2, 0x401, 0x4, 0xffffffffffffff7f, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x80000000, 0x4, 0x5, 0x1, 0x7f, 0x9}, &(0x7f0000000880)={0x101, 0x9, 0x100000001, 0x4, 0x80000000, 0xffffffffffffffe1, 0x4eb, 0x200}, &(0x7f00000008c0)={0x77359400}, &(0x7f0000000940)={&(0x7f0000000900)={[0x8]}, 0x8})

10:16:35 executing program 3:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', <r0=>0x0, 0x2f, 0xf0, 0xfb, 0x20c3, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x8000, 0x7, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'erspan0\x00', <r1=>r0, 0x7, 0x1, 0x8, 0x2, {{0xb, 0x4, 0x0, 0x38, 0x2c, 0x68, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @empty, {[@end, @rr={0x7, 0x17, 0x54, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', r1, 0x80, 0x700, 0x101, 0x5, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_addr={0x44, 0xc, 0x92, 0x1, 0x3, [{@broadcast, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x56, 0x1, 0x7, [{@local, 0x6}, {@loopback, 0x40}]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x0, 0xa, "abcbb0619f660bfa"}, {0x1, 0x7, "52857ec4ce"}]}, @generic={0x94, 0x10, "f41400709735795bdecbcc92cfbb"}, @lsrr={0x83, 0xf, 0x66, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @end]}}}}})
r2 = socket(0x0, 0x80000, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'rose0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r3, 0x29, 0xb7, 0xaf, 0x20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x700, 0x40, 0x9, 0xfff}})
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8808}, 0x8800)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', <r4=>r0, 0x700, 0x7, 0xffffffff, 0x9, {{0x24, 0x4, 0x1, 0x4, 0x90, 0x64, 0x0, 0xff, 0x2f, 0x0, @remote, @local, {[@ssrr={0x89, 0x2b, 0xfe, [@multicast2, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010101, @private=0xa010102, @loopback, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x16}, @local]}, @generic={0x83, 0xd, "02389ba6a408d3c1ae6b7d"}, @rr={0x7, 0x1f, 0x63, [@multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, @multicast2, @private=0xa010100, @remote, @private=0xa010101]}, @timestamp_addr={0x44, 0x24, 0x5c, 0x1, 0x2, [{@multicast1, 0xffff}, {@multicast1, 0x3}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xff}]}]}}}}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcdf}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004050}, 0x24)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0xfd)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
io_setup(0x1000, &(0x7f0000000740)=<r6=>0x0)
r7 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x80000)
io_cancel(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x1ff, r5, &(0x7f0000000780)="07dabce532c7e853bbd34813759d8ff91a6b1e5c65bcea15827ebf0be2c443ea35bd69f62455b34c83c6ddb8cabe9007a22edd5f8e7c64e1518fa574276ef6d48f95d08b99dc81262f8936772661cd7f81847a1027f85d09db1057166c412152ee8ecb14c2d4", 0x66, 0x80000000, 0x0, 0x2, r7}, &(0x7f0000000880))
socketpair(0x23, 0x1, 0x0, &(0x7f00000008c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$802154_dgram(r8, &(0x7f0000000900)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40)

10:16:35 executing program 4:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))
clock_gettime(0x4, &(0x7f0000000040))
clock_gettime(0x6, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x3, 0xce6, 0x2, 0x401, 0x0, 0x8, 0x1, 0xd4f}, &(0x7f0000000100)={0x7fffffff, 0x0, 0x0, 0x2800000000000000, 0x8, 0x1000, 0x529c, 0x3}, &(0x7f0000000140)={0x1, 0x1, 0x9, 0xeffe, 0x4, 0x7ff, 0x0, 0x8}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8})
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
sched_yield()
ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b)
clock_gettime(0x2, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macsec0\x00', <r0=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340))
r1 = getpgid(0xffffffffffffffff)
sched_setattr(r1, &(0x7f0000000380)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffff41, 0x7, 0x65e, 0x5}, 0x0)
rt_sigqueueinfo(r1, 0x10, &(0x7f00000003c0)={0x2f, 0x0, 0x9})
clock_gettime(0x3, &(0x7f0000000440))
sysfs$2(0x2, 0x3ff, &(0x7f0000000480)=""/125)
syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0x1, 0xb1}, "8fa9999b061d8e3d902ce83bc7760675dd3565eacb36275f277d2d7e9fb8c2fac3f7e4d56634f160b925bc1abf14fdba57730524a734da87d16281092adecb2b75bbb55edf235beee5d55fdae7e1379ccbccff6a31712f1027cbf89cf744a76db0f011aa4967064d1a2795314d69acd02c504443897070d4868a1e8c9655e21090494423676a5717cd0bfece35c057289bcf4e3a4ab8afec9c63c58f7f9b30f6d301c7129903cf5799cd4a34ceb6777782"}, 0xb5)
syz_emit_vhci(&(0x7f00000005c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xbe}, @l2cap_cid_signaling={{0xba}, [@l2cap_conn_req={{0x2, 0x7, 0x4}, {0x0, 0x40}}, @l2cap_conf_req={{0x4, 0x2a, 0x4e}, {0x9, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x0, 0x7f, 0xf88, 0x5}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x0, 0xfff9, 0x6, 0x400, 0x7}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0xcf}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x6, 0x7, 0x7, 0x3, 0x8e90, 0x4}}]}}, @l2cap_conn_rsp={{0x3, 0x1f, 0x8}, {0x7, 0x20, 0xf7f, 0x200}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x4, 0x6}}, @l2cap_info_rsp={{0xb, 0x5, 0x3f}, {0x1, 0x7, "632f1f9a6dd9dd4cdca3b05b2ac9393232c95d99409713fbf2afef9e07dada8ce1a3b6091aaafec8ca8619aa152617c50cc798c9dedf3bf60b9f0e"}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x3, 0x0, 0x80}}]}}, 0xc3)
sysfs$3(0x3)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6fd}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x69}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008081}, 0x40000024)

10:16:35 executing program 1:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4)
io_pgetevents(0x0, 0x9, 0x3, &(0x7f00000009c0)=[{}, {}, {}], &(0x7f0000000a40), &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x802]}, 0x8})
syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r4)
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

10:16:35 executing program 2:
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x30000004)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'xfrm0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd8e01553b32e811b}, 0x8000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x70}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6b49}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008011}, 0x4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20008014)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'gretap0\x00', <r7=>r0, 0x40, 0x20, 0x1, 0x1, {{0xc, 0x4, 0x1, 0x6, 0x30, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @private=0xa010100, {[@ssrr={0x89, 0x1b, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @remote, @multicast1, @remote]}]}}}}})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0000}, 0x8000)
sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0xfffffffb}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x9}, 0x4040)
socketpair(0x2a, 0x6, 0x9, &(0x7f0000000c40)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000c80))

10:16:35 executing program 6:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4)
io_pgetevents(0x0, 0x9, 0x3, &(0x7f00000009c0)=[{}, {}, {}], &(0x7f0000000a40), &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x802]}, 0x8})
syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r4)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

10:16:35 executing program 0:
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="29056d4838cd589531fe2280e373be788587cff7f7bb388a889112b13334621a42e4c90138c0a5eb54304b22a1fb98dca7ccda23f24c5c9afe6c9b97df87b8ff867807db2dea", 0x46}, 0x1, 0x0, 0x0, 0x40000}, 0x2000010)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1003, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000180))
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14, &(0x7f0000000280)={&(0x7f0000000200)="d0de75049f63f55d35113557a83cc9b7ac6f1c2c8e8fe3bda5962b967f39c2271b48fb2ef30196da55e97bd10ac2cc6f1f610e27200326392a340dd59c81b7dcf56c8bdfa691c28f5f638dd7eed5477f48e7ab62b9755ca710f02bfb", 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x26a}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4040)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffff}}, ["", "", "", "", ""]}, 0x24}}, 0x810)
r3 = socket(0x0, 0x3, 0x1ff)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socketpair(0x1, 0x3, 0x3c43, &(0x7f0000000980)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4000005)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r7)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'tunl0\x00', <r9=>r5, 0x7, 0x90f, 0x80000000, 0x0, {{0xa, 0x4, 0x1, 0x5, 0x28, 0x67, 0x0, 0x9d, 0x8ba88961eacf48cd, 0x0, @local, @broadcast, {[@generic={0x44, 0x10, "10aaf98f7537ce6376886234f1e8"}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000c40)={0xfffffffffffffffe, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r8, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)

10:16:35 executing program 5:
r0 = getuid()
keyctl$get_persistent(0x16, r0, 0xfffffffffffffffa)
r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r1, 0xfffffffffffffffe)
setfsuid(r0)
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x61, 0x32, 0x38, 0x35, 0x37, 0x39, 0x7, 0x61, 0x38, 0x32, 0x32, 0x38, 0x34, 0x37, 0x30, 0x36]}, &(0x7f0000000140)={0x0, "a4a90a9636f7d6dd776f51a27c6094301d16186db68f5680673b5837578c28eefb2d950eaef07ac8050543aca422512b593e1016cc8f905db19418c0a8e91bc1", 0x1a}, 0x48, r1)
r3 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='syz', r1)
keyctl$reject(0x13, r2, 0x100, 0x7, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff)
r4 = getuid()
setfsuid(r4)
r5 = getuid()
setresuid(r4, r5, r4)
keyctl$negate(0xd, r2, 0x1, r3)
getuid()
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, 0x0, 0x0)

[  165.114260] Bluetooth: hci7: SCO packet for unknown connection handle 1
[  165.114843] Bluetooth: Wrong link type (-22)
[  165.116866] Bluetooth: hci7: link tx timeout
[  165.117582] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa
[  165.118706] Bluetooth: hci7: link tx timeout
[  165.119391] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa
[  165.154576] random: crng reseeded on system resumption
10:16:36 executing program 5:
r0 = getuid()
keyctl$get_persistent(0x16, r0, 0xfffffffffffffffa)
r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r1, 0xfffffffffffffffe)
setfsuid(r0)
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x61, 0x32, 0x38, 0x35, 0x37, 0x39, 0x7, 0x61, 0x38, 0x32, 0x32, 0x38, 0x34, 0x37, 0x30, 0x36]}, &(0x7f0000000140)={0x0, "a4a90a9636f7d6dd776f51a27c6094301d16186db68f5680673b5837578c28eefb2d950eaef07ac8050543aca422512b593e1016cc8f905db19418c0a8e91bc1", 0x1a}, 0x48, r1)
r3 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='syz', r1)
keyctl$reject(0x13, r2, 0x100, 0x7, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff)
r4 = getuid()
setfsuid(r4)
r5 = getuid()
setresuid(r4, r5, r4)
keyctl$negate(0xd, r2, 0x1, r3)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, 0x0, 0x0)

10:16:36 executing program 4:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))
clock_gettime(0x4, &(0x7f0000000040))
clock_gettime(0x6, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x3, 0xce6, 0x2, 0x401, 0x0, 0x8, 0x1, 0xd4f}, &(0x7f0000000100)={0x7fffffff, 0x0, 0x0, 0x2800000000000000, 0x8, 0x1000, 0x529c, 0x3}, &(0x7f0000000140)={0x1, 0x1, 0x9, 0xeffe, 0x4, 0x7ff, 0x0, 0x8}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8})
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
sched_yield()
ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b)
clock_gettime(0x2, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macsec0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340))
r0 = getpgid(0xffffffffffffffff)
sched_setattr(r0, &(0x7f0000000380)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffff41, 0x7, 0x65e, 0x5}, 0x0)
rt_sigqueueinfo(r0, 0x10, &(0x7f00000003c0)={0x2f, 0x0, 0x9})
clock_gettime(0x3, &(0x7f0000000440))
sysfs$2(0x2, 0x3ff, &(0x7f0000000480)=""/125)
syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0x1, 0xb1}, "8fa9999b061d8e3d902ce83bc7760675dd3565eacb36275f277d2d7e9fb8c2fac3f7e4d56634f160b925bc1abf14fdba57730524a734da87d16281092adecb2b75bbb55edf235beee5d55fdae7e1379ccbccff6a31712f1027cbf89cf744a76db0f011aa4967064d1a2795314d69acd02c504443897070d4868a1e8c9655e21090494423676a5717cd0bfece35c057289bcf4e3a4ab8afec9c63c58f7f9b30f6d301c7129903cf5799cd4a34ceb6777782"}, 0xb5)
syz_emit_vhci(&(0x7f00000005c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xbe}, @l2cap_cid_signaling={{0xba}, [@l2cap_conn_req={{0x2, 0x7, 0x4}, {0x0, 0x40}}, @l2cap_conf_req={{0x4, 0x2a, 0x4e}, {0x9, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x0, 0x7f, 0xf88, 0x5}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x0, 0xfff9, 0x6, 0x400, 0x7}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0xcf}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x6, 0x7, 0x7, 0x3, 0x8e90, 0x4}}]}}, @l2cap_conn_rsp={{0x3, 0x1f, 0x8}, {0x7, 0x20, 0xf7f, 0x200}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x4, 0x6}}, @l2cap_info_rsp={{0xb, 0x5, 0x3f}, {0x1, 0x7, "632f1f9a6dd9dd4cdca3b05b2ac9393232c95d99409713fbf2afef9e07dada8ce1a3b6091aaafec8ca8619aa152617c50cc798c9dedf3bf60b9f0e"}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x3, 0x0, 0x80}}]}}, 0xc3)
sysfs$3(0x3)

10:16:36 executing program 3:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', <r0=>0x0, 0x2f, 0xf0, 0xfb, 0x20c3, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x8000, 0x7, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'erspan0\x00', <r1=>r0, 0x7, 0x1, 0x8, 0x2, {{0xb, 0x4, 0x0, 0x38, 0x2c, 0x68, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @empty, {[@end, @rr={0x7, 0x17, 0x54, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', r1, 0x80, 0x700, 0x101, 0x5, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_addr={0x44, 0xc, 0x92, 0x1, 0x3, [{@broadcast, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x56, 0x1, 0x7, [{@local, 0x6}, {@loopback, 0x40}]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x0, 0xa, "abcbb0619f660bfa"}, {0x1, 0x7, "52857ec4ce"}]}, @generic={0x94, 0x10, "f41400709735795bdecbcc92cfbb"}, @lsrr={0x83, 0xf, 0x66, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @end]}}}}})
r2 = socket(0x0, 0x80000, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'rose0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r3, 0x29, 0xb7, 0xaf, 0x20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x700, 0x40, 0x9, 0xfff}})
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8808}, 0x8800)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', <r4=>r0, 0x700, 0x7, 0xffffffff, 0x9, {{0x24, 0x4, 0x1, 0x4, 0x90, 0x64, 0x0, 0xff, 0x2f, 0x0, @remote, @local, {[@ssrr={0x89, 0x2b, 0xfe, [@multicast2, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010101, @private=0xa010102, @loopback, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x16}, @local]}, @generic={0x83, 0xd, "02389ba6a408d3c1ae6b7d"}, @rr={0x7, 0x1f, 0x63, [@multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, @multicast2, @private=0xa010100, @remote, @private=0xa010101]}, @timestamp_addr={0x44, 0x24, 0x5c, 0x1, 0x2, [{@multicast1, 0xffff}, {@multicast1, 0x3}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xff}]}]}}}}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcdf}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004050}, 0x24)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0xfd)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
io_setup(0x1000, &(0x7f0000000740)=<r6=>0x0)
r7 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x80000)
io_cancel(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x1ff, r5, &(0x7f0000000780)="07dabce532c7e853bbd34813759d8ff91a6b1e5c65bcea15827ebf0be2c443ea35bd69f62455b34c83c6ddb8cabe9007a22edd5f8e7c64e1518fa574276ef6d48f95d08b99dc81262f8936772661cd7f81847a1027f85d09db1057166c412152ee8ecb14c2d4", 0x66, 0x80000000, 0x0, 0x2, r7}, &(0x7f0000000880))
socketpair(0x23, 0x1, 0x0, &(0x7f00000008c0)={<r8=>0xffffffffffffffff})
connect$802154_dgram(r8, &(0x7f0000000900)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)

10:16:36 executing program 5:
r0 = getuid()
keyctl$get_persistent(0x16, r0, 0xfffffffffffffffa)
r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r1, 0xfffffffffffffffe)
setfsuid(r0)
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x61, 0x32, 0x38, 0x35, 0x37, 0x39, 0x7, 0x61, 0x38, 0x32, 0x32, 0x38, 0x34, 0x37, 0x30, 0x36]}, &(0x7f0000000140)={0x0, "a4a90a9636f7d6dd776f51a27c6094301d16186db68f5680673b5837578c28eefb2d950eaef07ac8050543aca422512b593e1016cc8f905db19418c0a8e91bc1", 0x1a}, 0x48, r1)
r3 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='syz', r1)
keyctl$reject(0x13, r2, 0x100, 0x7, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff)
r4 = getuid()
setfsuid(r4)
r5 = getuid()
setresuid(r4, r5, r4)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, 0x0, 0x0)

10:16:36 executing program 1:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4)
io_pgetevents(0x0, 0x9, 0x3, &(0x7f00000009c0)=[{}, {}, {}], &(0x7f0000000a40), &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x802]}, 0x8})
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

10:16:36 executing program 7:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0)
r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "449045741b72116810ab1c193827b95c1c406d7d662f147a38a43e5aa0bf53cc344704bb86f0afb009774e7463a89cdd89113044845c31bf24d6648560d00e7e", 0x15}, 0x48, 0xfffffffffffffffc)
keyctl$negate(0xd, r0, 0x3, r1)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3)
sysfs$2(0x2, 0x7, &(0x7f0000000180)=""/217)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x4c080)
keyctl$get_persistent(0x16, 0xee00, r1)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$unlink(0x9, r4, r0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r5, 0xb28, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x40804)
r6 = request_key(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='batadv\x00', 0xffffffffffffffff)
r7 = request_key(&(0x7f0000000680)='trusted\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)='batadv\x00', r1)
keyctl$reject(0x13, r7, 0x36d, 0x2, r4)
keyctl$KEYCTL_MOVE(0x1e, r6, r4, r4, 0x0)
r8 = request_key(&(0x7f0000000740)='cifs.idmap\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r8, 0xfffffffffffffffd)

10:16:36 executing program 6:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4)
io_pgetevents(0x0, 0x9, 0x3, &(0x7f00000009c0)=[{}, {}, {}], &(0x7f0000000a40), &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x802]}, 0x8})
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

10:16:36 executing program 2:
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x30000004)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'xfrm0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd8e01553b32e811b}, 0x8000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x70}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6b49}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008011}, 0x4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20008014)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'gretap0\x00', <r7=>r0, 0x40, 0x20, 0x1, 0x1, {{0xc, 0x4, 0x1, 0x6, 0x30, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @private=0xa010100, {[@ssrr={0x89, 0x1b, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @remote, @multicast1, @remote]}]}}}}})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0000}, 0x8000)
sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0xfffffffb}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x9}, 0x4040)
socketpair(0x2a, 0x6, 0x9, &(0x7f0000000c40))

10:16:36 executing program 0:
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="29056d4838cd589531fe2280e373be788587cff7f7bb388a889112b13334621a42e4c90138c0a5eb54304b22a1fb98dca7ccda23f24c5c9afe6c9b97df87b8ff867807db2dea", 0x46}, 0x1, 0x0, 0x0, 0x40000}, 0x2000010)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1003, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000180))
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14, &(0x7f0000000280)={&(0x7f0000000200)="d0de75049f63f55d35113557a83cc9b7ac6f1c2c8e8fe3bda5962b967f39c2271b48fb2ef30196da55e97bd10ac2cc6f1f610e27200326392a340dd59c81b7dcf56c8bdfa691c28f5f638dd7eed5477f48e7ab62b9755ca710f02bfb", 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x26a}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4040)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffff}}, ["", "", "", "", ""]}, 0x24}}, 0x810)
r3 = socket(0x0, 0x3, 0x1ff)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socketpair(0x1, 0x3, 0x3c43, &(0x7f0000000980)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4000005)
syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r7)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'tunl0\x00', r5, 0x7, 0x90f, 0x80000000, 0x0, {{0xa, 0x4, 0x1, 0x5, 0x28, 0x67, 0x0, 0x9d, 0x8ba88961eacf48cd, 0x0, @local, @broadcast, {[@generic={0x44, 0x10, "10aaf98f7537ce6376886234f1e8"}, @ra={0x94, 0x4, 0x1}]}}}}})

[  165.862341] Bluetooth: hci7: SCO packet for unknown connection handle 1
[  165.969127] random: crng reseeded on system resumption
10:16:36 executing program 4:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))
clock_gettime(0x4, &(0x7f0000000040))
clock_gettime(0x6, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x3, 0xce6, 0x2, 0x401, 0x0, 0x8, 0x1, 0xd4f}, &(0x7f0000000100)={0x7fffffff, 0x0, 0x0, 0x2800000000000000, 0x8, 0x1000, 0x529c, 0x3}, &(0x7f0000000140)={0x1, 0x1, 0x9, 0xeffe, 0x4, 0x7ff, 0x0, 0x8}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8})
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
sched_yield()
ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b)
clock_gettime(0x2, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macsec0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340))
r0 = getpgid(0xffffffffffffffff)
sched_setattr(r0, &(0x7f0000000380)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffff41, 0x7, 0x65e, 0x5}, 0x0)
rt_sigqueueinfo(r0, 0x10, &(0x7f00000003c0)={0x2f, 0x0, 0x9})
clock_gettime(0x3, &(0x7f0000000440))
sysfs$2(0x2, 0x3ff, &(0x7f0000000480)=""/125)
syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0x1, 0xb1}, "8fa9999b061d8e3d902ce83bc7760675dd3565eacb36275f277d2d7e9fb8c2fac3f7e4d56634f160b925bc1abf14fdba57730524a734da87d16281092adecb2b75bbb55edf235beee5d55fdae7e1379ccbccff6a31712f1027cbf89cf744a76db0f011aa4967064d1a2795314d69acd02c504443897070d4868a1e8c9655e21090494423676a5717cd0bfece35c057289bcf4e3a4ab8afec9c63c58f7f9b30f6d301c7129903cf5799cd4a34ceb6777782"}, 0xb5)
syz_emit_vhci(&(0x7f00000005c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xbe}, @l2cap_cid_signaling={{0xba}, [@l2cap_conn_req={{0x2, 0x7, 0x4}, {0x0, 0x40}}, @l2cap_conf_req={{0x4, 0x2a, 0x4e}, {0x9, 0x7, [@l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x0, 0x0, 0x7f, 0xf88, 0x5}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x0, 0xfff9, 0x6, 0x400, 0x7}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0xcf}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x6, 0x7, 0x7, 0x3, 0x8e90, 0x4}}]}}, @l2cap_conn_rsp={{0x3, 0x1f, 0x8}, {0x7, 0x20, 0xf7f, 0x200}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x4, 0x6}}, @l2cap_info_rsp={{0xb, 0x5, 0x3f}, {0x1, 0x7, "632f1f9a6dd9dd4cdca3b05b2ac9393232c95d99409713fbf2afef9e07dada8ce1a3b6091aaafec8ca8619aa152617c50cc798c9dedf3bf60b9f0e"}}, @l2cap_create_chan_req={{0xc, 0x20, 0x5}, {0x3, 0x0, 0x80}}]}}, 0xc3)

[  166.195954] Bluetooth: hci7: SCO packet for unknown connection handle 1
[  167.157004] Bluetooth: hci7: command 0x0406 tx timeout
10:16:49 executing program 0:
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="29056d4838cd589531fe2280e373be788587cff7f7bb388a889112b13334621a42e4c90138c0a5eb54304b22a1fb98dca7ccda23f24c5c9afe6c9b97df87b8ff867807db2dea", 0x46}, 0x1, 0x0, 0x0, 0x40000}, 0x2000010)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1003, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000180))
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14, &(0x7f0000000280)={&(0x7f0000000200)="d0de75049f63f55d35113557a83cc9b7ac6f1c2c8e8fe3bda5962b967f39c2271b48fb2ef30196da55e97bd10ac2cc6f1f610e27200326392a340dd59c81b7dcf56c8bdfa691c28f5f638dd7eed5477f48e7ab62b9755ca710f02bfb", 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x26a}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4040)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffff}}, ["", "", "", "", ""]}, 0x24}}, 0x810)
r3 = socket(0x0, 0x3, 0x1ff)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socketpair(0x1, 0x3, 0x3c43, &(0x7f0000000980)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4000005)
syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r7)

10:16:49 executing program 5:
r0 = getuid()
keyctl$get_persistent(0x16, r0, 0xfffffffffffffffa)
r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r1, 0xfffffffffffffffe)
setfsuid(r0)
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x61, 0x32, 0x38, 0x35, 0x37, 0x39, 0x7, 0x61, 0x38, 0x32, 0x32, 0x38, 0x34, 0x37, 0x30, 0x36]}, &(0x7f0000000140)={0x0, "a4a90a9636f7d6dd776f51a27c6094301d16186db68f5680673b5837578c28eefb2d950eaef07ac8050543aca422512b593e1016cc8f905db19418c0a8e91bc1", 0x1a}, 0x48, r1)
r3 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='syz', r1)
keyctl$reject(0x13, r2, 0x100, 0x7, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff)
r4 = getuid()
setfsuid(r4)
getuid()
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, 0x0, 0x0)

10:16:49 executing program 2:
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x30000004)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'xfrm0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd8e01553b32e811b}, 0x8000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x70}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6b49}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008011}, 0x4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20008014)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'gretap0\x00', <r7=>r0, 0x40, 0x20, 0x1, 0x1, {{0xc, 0x4, 0x1, 0x6, 0x30, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @private=0xa010100, {[@ssrr={0x89, 0x1b, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @remote, @multicast1, @remote]}]}}}}})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0000}, 0x8000)
socketpair(0x2a, 0x6, 0x9, &(0x7f0000000c40))

10:16:49 executing program 6:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

10:16:50 executing program 4:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))
clock_gettime(0x4, &(0x7f0000000040))
clock_gettime(0x6, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x3, 0xce6, 0x2, 0x401, 0x0, 0x8, 0x1, 0xd4f}, &(0x7f0000000100)={0x7fffffff, 0x0, 0x0, 0x2800000000000000, 0x8, 0x1000, 0x529c, 0x3}, &(0x7f0000000140)={0x1, 0x1, 0x9, 0xeffe, 0x4, 0x7ff, 0x0, 0x8}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8})
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
sched_yield()
ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b)
clock_gettime(0x2, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macsec0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340))
r0 = getpgid(0xffffffffffffffff)
sched_setattr(r0, &(0x7f0000000380)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffff41, 0x7, 0x65e, 0x5}, 0x0)
rt_sigqueueinfo(r0, 0x10, &(0x7f00000003c0)={0x2f, 0x0, 0x9})
clock_gettime(0x3, &(0x7f0000000440))
sysfs$2(0x2, 0x3ff, &(0x7f0000000480)=""/125)
syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0x1, 0xb1}, "8fa9999b061d8e3d902ce83bc7760675dd3565eacb36275f277d2d7e9fb8c2fac3f7e4d56634f160b925bc1abf14fdba57730524a734da87d16281092adecb2b75bbb55edf235beee5d55fdae7e1379ccbccff6a31712f1027cbf89cf744a76db0f011aa4967064d1a2795314d69acd02c504443897070d4868a1e8c9655e21090494423676a5717cd0bfece35c057289bcf4e3a4ab8afec9c63c58f7f9b30f6d301c7129903cf5799cd4a34ceb6777782"}, 0xb5)

10:16:50 executing program 3:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', <r0=>0x0, 0x2f, 0xf0, 0xfb, 0x20c3, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x8000, 0x7, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'erspan0\x00', <r1=>r0, 0x7, 0x1, 0x8, 0x2, {{0xb, 0x4, 0x0, 0x38, 0x2c, 0x68, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @empty, {[@end, @rr={0x7, 0x17, 0x54, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', r1, 0x80, 0x700, 0x101, 0x5, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_addr={0x44, 0xc, 0x92, 0x1, 0x3, [{@broadcast, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x56, 0x1, 0x7, [{@local, 0x6}, {@loopback, 0x40}]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x0, 0xa, "abcbb0619f660bfa"}, {0x1, 0x7, "52857ec4ce"}]}, @generic={0x94, 0x10, "f41400709735795bdecbcc92cfbb"}, @lsrr={0x83, 0xf, 0x66, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @end]}}}}})
r2 = socket(0x0, 0x80000, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'rose0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r3, 0x29, 0xb7, 0xaf, 0x20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x700, 0x40, 0x9, 0xfff}})
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8808}, 0x8800)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', <r4=>r0, 0x700, 0x7, 0xffffffff, 0x9, {{0x24, 0x4, 0x1, 0x4, 0x90, 0x64, 0x0, 0xff, 0x2f, 0x0, @remote, @local, {[@ssrr={0x89, 0x2b, 0xfe, [@multicast2, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010101, @private=0xa010102, @loopback, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x16}, @local]}, @generic={0x83, 0xd, "02389ba6a408d3c1ae6b7d"}, @rr={0x7, 0x1f, 0x63, [@multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, @multicast2, @private=0xa010100, @remote, @private=0xa010101]}, @timestamp_addr={0x44, 0x24, 0x5c, 0x1, 0x2, [{@multicast1, 0xffff}, {@multicast1, 0x3}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xff}]}]}}}}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcdf}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004050}, 0x24)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0xfd)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
io_setup(0x1000, &(0x7f0000000740)=<r6=>0x0)
r7 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x80000)
io_cancel(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x1ff, r5, &(0x7f0000000780)="07dabce532c7e853bbd34813759d8ff91a6b1e5c65bcea15827ebf0be2c443ea35bd69f62455b34c83c6ddb8cabe9007a22edd5f8e7c64e1518fa574276ef6d48f95d08b99dc81262f8936772661cd7f81847a1027f85d09db1057166c412152ee8ecb14c2d4", 0x66, 0x80000000, 0x0, 0x2, r7}, &(0x7f0000000880))
connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000900)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)

[  179.235876] random: crng reseeded on system resumption
10:16:50 executing program 1:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

10:16:50 executing program 7:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0)
r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "449045741b72116810ab1c193827b95c1c406d7d662f147a38a43e5aa0bf53cc344704bb86f0afb009774e7463a89cdd89113044845c31bf24d6648560d00e7e", 0x15}, 0x48, 0xfffffffffffffffc)
keyctl$negate(0xd, r0, 0x3, r1)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3)
sysfs$2(0x2, 0x7, &(0x7f0000000180)=""/217)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x4c080)
keyctl$get_persistent(0x16, 0xee00, r1)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$unlink(0x9, r4, r0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r5, 0xb28, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x40804)
r6 = request_key(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='batadv\x00', 0xffffffffffffffff)
r7 = request_key(&(0x7f0000000680)='trusted\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)='batadv\x00', r1)
keyctl$reject(0x13, r7, 0x36d, 0x2, r4)
keyctl$KEYCTL_MOVE(0x1e, r6, r4, r4, 0x0)
keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd)

10:16:50 executing program 5:
r0 = getuid()
keyctl$get_persistent(0x16, r0, 0xfffffffffffffffa)
r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r1, 0xfffffffffffffffe)
setfsuid(r0)
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x61, 0x32, 0x38, 0x35, 0x37, 0x39, 0x7, 0x61, 0x38, 0x32, 0x32, 0x38, 0x34, 0x37, 0x30, 0x36]}, &(0x7f0000000140)={0x0, "a4a90a9636f7d6dd776f51a27c6094301d16186db68f5680673b5837578c28eefb2d950eaef07ac8050543aca422512b593e1016cc8f905db19418c0a8e91bc1", 0x1a}, 0x48, r1)
r3 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='syz', r1)
keyctl$reject(0x13, r2, 0x100, 0x7, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff)
r4 = getuid()
setfsuid(r4)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, 0x0, 0x0)

10:16:50 executing program 4:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))
clock_gettime(0x4, &(0x7f0000000040))
clock_gettime(0x6, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x3, 0xce6, 0x2, 0x401, 0x0, 0x8, 0x1, 0xd4f}, &(0x7f0000000100)={0x7fffffff, 0x0, 0x0, 0x2800000000000000, 0x8, 0x1000, 0x529c, 0x3}, &(0x7f0000000140)={0x1, 0x1, 0x9, 0xeffe, 0x4, 0x7ff, 0x0, 0x8}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8})
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
sched_yield()
ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b)
clock_gettime(0x2, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macsec0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340))
r0 = getpgid(0xffffffffffffffff)
sched_setattr(r0, &(0x7f0000000380)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffff41, 0x7, 0x65e, 0x5}, 0x0)
rt_sigqueueinfo(r0, 0x10, &(0x7f00000003c0)={0x2f, 0x0, 0x9})
clock_gettime(0x3, &(0x7f0000000440))
sysfs$2(0x2, 0x3ff, &(0x7f0000000480)=""/125)

10:16:50 executing program 1:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

[  179.241065] Bluetooth: hci7: SCO packet for unknown connection handle 1
[  183.733079] Bluetooth: hci0: command 0x0406 tx timeout
[  183.735208] Bluetooth: hci1: command 0x0406 tx timeout
[  183.736135] Bluetooth: hci2: command 0x0406 tx timeout
[  183.737065] Bluetooth: hci4: command 0x0406 tx timeout
[  183.737968] Bluetooth: hci3: command 0x0406 tx timeout
[  183.738824] Bluetooth: hci5: command 0x0406 tx timeout
[  183.739854] Bluetooth: hci6: command 0x0406 tx timeout
[  187.317034] INFO: task rcu_gp:3 blocked for more than 143 seconds.
[  187.318319]       Not tainted 6.0.0-rc7-next-20220930 #1
[  187.319306] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  187.320633] task:rcu_gp          state:I stack:30328 pid:3     ppid:2      flags:0x00004000
[  187.322763] Call Trace:
[  187.323232]  <TASK>
[  187.324148]  __schedule+0x893/0x2470
[  187.324818]  ? io_schedule_timeout+0x150/0x150
[  187.325647]  ? do_raw_spin_lock+0x121/0x260
[  187.326427]  ? rwlock_bug.part.0+0x90/0x90
[  187.327204]  schedule+0xda/0x1b0
[  187.327798]  rescuer_thread+0x851/0xdb0
[  187.328519]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.329402]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.330319]  ? lockdep_hardirqs_on+0x79/0x100
[  187.331162]  ? worker_thread+0x1260/0x1260
[  187.331980]  kthread+0x2ed/0x3a0
[  187.332602]  ? kthread_complete_and_exit+0x40/0x40
[  187.333553]  ret_from_fork+0x22/0x30
[  187.334206]  </TASK>
[  187.334578] INFO: task rcu_par_gp:4 blocked for more than 143 seconds.
[  187.335597]       Not tainted 6.0.0-rc7-next-20220930 #1
[  187.336446] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  187.337644] task:rcu_par_gp      state:I stack:30944 pid:4     ppid:2      flags:0x00004000
[  187.338956] Call Trace:
[  187.339357]  <TASK>
[  187.339732]  __schedule+0x893/0x2470
[  187.340383]  ? io_schedule_timeout+0x150/0x150
[  187.341158]  ? do_raw_spin_lock+0x121/0x260
[  187.341837]  ? rwlock_bug.part.0+0x90/0x90
[  187.342566]  schedule+0xda/0x1b0
[  187.343163]  rescuer_thread+0x851/0xdb0
[  187.343800]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.344626]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.345468]  ? lockdep_hardirqs_on+0x79/0x100
[  187.346231]  ? worker_thread+0x1260/0x1260
[  187.346941]  kthread+0x2ed/0x3a0
[  187.347496]  ? kthread_complete_and_exit+0x40/0x40
[  187.348297]  ret_from_fork+0x22/0x30
[  187.348974]  </TASK>
[  187.349347] INFO: task slub_flushwq:5 blocked for more than 143 seconds.
[  187.350405]       Not tainted 6.0.0-rc7-next-20220930 #1
[  187.351254] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  187.352466] task:slub_flushwq    state:I stack:30944 pid:5     ppid:2      flags:0x00004000
[  187.353786] Call Trace:
[  187.354237]  <TASK>
[  187.354608]  __schedule+0x893/0x2470
[  187.355266]  ? io_schedule_timeout+0x150/0x150
[  187.356022]  ? do_raw_spin_lock+0x121/0x260
[  187.356706]  ? rwlock_bug.part.0+0x90/0x90
[  187.357440]  schedule+0xda/0x1b0
[  187.358024]  rescuer_thread+0x851/0xdb0
[  187.358652]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.359479]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.360296]  ? lockdep_hardirqs_on+0x79/0x100
[  187.361075]  ? worker_thread+0x1260/0x1260
[  187.361759]  kthread+0x2ed/0x3a0
[  187.362349]  ? kthread_complete_and_exit+0x40/0x40
[  187.363156]  ret_from_fork+0x22/0x30
[  187.363769]  </TASK>
[  187.364190] INFO: task netns:6 blocked for more than 143 seconds.
[  187.365170]       Not tainted 6.0.0-rc7-next-20220930 #1
[  187.366004] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  187.367205] task:netns           state:I stack:30944 pid:6     ppid:2      flags:0x00004000
[  187.368513] Call Trace:
[  187.368974]  <TASK>
[  187.369350]  __schedule+0x893/0x2470
[  187.369995]  ? io_schedule_timeout+0x150/0x150
[  187.370710]  ? do_raw_spin_lock+0x121/0x260
[  187.371423]  ? rwlock_bug.part.0+0x90/0x90
[  187.372132]  schedule+0xda/0x1b0
[  187.372675]  rescuer_thread+0x851/0xdb0
[  187.373360]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.374188]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.375011]  ? lockdep_hardirqs_on+0x79/0x100
[  187.375730]  ? worker_thread+0x1260/0x1260
[  187.376438]  kthread+0x2ed/0x3a0
[  187.377025]  ? kthread_complete_and_exit+0x40/0x40
[  187.377811]  ret_from_fork+0x22/0x30
[  187.378477]  </TASK>
[  187.378848] INFO: task kworker/0:0:7 blocked for more than 143 seconds.
[  187.379927]       Not tainted 6.0.0-rc7-next-20220930 #1
[  187.380736] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  187.381953] task:kworker/0:0     state:I stack:29592 pid:7     ppid:2      flags:0x00004000
[  187.383269] Workqueue:  0x0 (ata_sff)
[  187.383927] Call Trace:
[  187.384341]  <TASK>
[  187.384713]  __schedule+0x893/0x2470
[  187.385381]  ? io_schedule_timeout+0x150/0x150
[  187.386180]  schedule+0xda/0x1b0
[  187.386753]  worker_thread+0x15f/0x1260
[  187.387452]  ? process_one_work+0x16a0/0x16a0
[  187.388230]  kthread+0x2ed/0x3a0
[  187.388780]  ? kthread_complete_and_exit+0x40/0x40
[  187.389648]  ret_from_fork+0x22/0x30
[  187.390303]  </TASK>
[  187.390673] INFO: task kworker/0:0H:8 blocked for more than 143 seconds.
[  187.391747]       Not tainted 6.0.0-rc7-next-20220930 #1
[  187.392595] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  187.393797] task:kworker/0:0H    state:I stack:29760 pid:8     ppid:2      flags:0x00004000
[  187.395105] Workqueue:  0x0 (events_highpri)
[  187.395809] Call Trace:
[  187.396265]  <TASK>
[  187.396629]  __schedule+0x893/0x2470
[  187.397303]  ? io_schedule_timeout+0x150/0x150
[  187.398084]  schedule+0xda/0x1b0
[  187.398645]  worker_thread+0x15f/0x1260
[  187.399335]  ? process_one_work+0x16a0/0x16a0
[  187.400093]  kthread+0x2ed/0x3a0
[  187.400637]  ? kthread_complete_and_exit+0x40/0x40
[  187.401458]  ret_from_fork+0x22/0x30
[  187.402114]  </TASK>
[  187.402480] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds.
[  187.403556]       Not tainted 6.0.0-rc7-next-20220930 #1
[  187.404400] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  187.405608] task:mm_percpu_wq    state:I stack:30944 pid:10    ppid:2      flags:0x00004000
[  187.406929] Call Trace:
[  187.407331]  <TASK>
[  187.407699]  __schedule+0x893/0x2470
[  187.408346]  ? io_schedule_timeout+0x150/0x150
[  187.409117]  ? do_raw_spin_lock+0x121/0x260
[  187.409803]  ? rwlock_bug.part.0+0x90/0x90
[  187.410546]  schedule+0xda/0x1b0
[  187.411136]  rescuer_thread+0x851/0xdb0
[  187.411762]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.412584]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.413409]  ? lockdep_hardirqs_on+0x79/0x100
[  187.414167]  ? worker_thread+0x1260/0x1260
[  187.414838]  kthread+0x2ed/0x3a0
[  187.415422]  ? kthread_complete_and_exit+0x40/0x40
[  187.416234]  ret_from_fork+0x22/0x30
[  187.416849]  </TASK>
[  187.417270] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds.
[  187.418381]       Not tainted 6.0.0-rc7-next-20220930 #1
[  187.419227] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  187.420426] task:rcu_tasks_kthre state:I stack:29272 pid:11    ppid:2      flags:0x00004000
[  187.421755] Call Trace:
[  187.422192]  <TASK>
[  187.422556]  __schedule+0x893/0x2470
[  187.423208]  ? io_schedule_timeout+0x150/0x150
[  187.423978]  ? mark_held_locks+0x9e/0xe0
[  187.424613]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  187.425458]  schedule+0xda/0x1b0
[  187.426039]  rcu_tasks_one_gp+0x3db/0xc10
[  187.426728]  rcu_tasks_kthread+0x80/0xa0
[  187.427403]  ? rcu_tasks_postscan+0x10/0x10
[  187.428124]  kthread+0x2ed/0x3a0
[  187.428664]  ? kthread_complete_and_exit+0x40/0x40
[  187.429504]  ret_from_fork+0x22/0x30
[  187.430162]  </TASK>
[  187.430540] INFO: task kworker/1:0:20 blocked for more than 143 seconds.
[  187.431618]       Not tainted 6.0.0-rc7-next-20220930 #1
[  187.432464] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  187.433680] task:kworker/1:0     state:I stack:29760 pid:20    ppid:2      flags:0x00004000
[  187.434993] Workqueue:  0x0 (rcu_gp)
[  187.435588] Call Trace:
[  187.436029]  <TASK>
[  187.436393]  __schedule+0x893/0x2470
[  187.437060]  ? io_schedule_timeout+0x150/0x150
[  187.437796]  schedule+0xda/0x1b0
[  187.438398]  worker_thread+0x15f/0x1260
[  187.439087]  ? process_one_work+0x16a0/0x16a0
[  187.439802]  kthread+0x2ed/0x3a0
[  187.440394]  ? kthread_complete_and_exit+0x40/0x40
[  187.441221]  ret_from_fork+0x22/0x30
[  187.441830]  </TASK>
[  187.442246] INFO: task kworker/1:0H:21 blocked for more than 143 seconds.
[  187.443308]       Not tainted 6.0.0-rc7-next-20220930 #1
[  187.444164] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  187.445378] task:kworker/1:0H    state:I stack:29376 pid:21    ppid:2      flags:0x00004000
[  187.446672] Workqueue:  0x0 (kblockd)
[  187.447316] Call Trace:
[  187.447722]  <TASK>
[  187.448121]  __schedule+0x893/0x2470
[  187.448727]  ? io_schedule_timeout+0x150/0x150
[  187.449531]  schedule+0xda/0x1b0
[  187.450107]  worker_thread+0x15f/0x1260
[  187.450763]  ? process_one_work+0x16a0/0x16a0
[  187.451519]  kthread+0x2ed/0x3a0
[  187.452098]  ? kthread_complete_and_exit+0x40/0x40
[  187.452853]  ret_from_fork+0x22/0x30
[  187.453523]  </TASK>
[  187.453997] 
[  187.453997] Showing all locks held in the system:
[  187.454978] 1 lock held by rcu_tasks_kthre/11:
[  187.455663]  #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10
[  187.457210] 1 lock held by khungtaskd/25:
[  187.457840]  #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260
[  187.459356] 1 lock held by in:imklog/189:
[  187.460020]  #0: ffff888008c06868 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100
[  187.461416] 
[  187.461693] =============================================
[  187.461693] 
10:17:04 executing program 4:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))
clock_gettime(0x4, &(0x7f0000000040))
clock_gettime(0x6, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x3, 0xce6, 0x2, 0x401, 0x0, 0x8, 0x1, 0xd4f}, &(0x7f0000000100)={0x7fffffff, 0x0, 0x0, 0x2800000000000000, 0x8, 0x1000, 0x529c, 0x3}, &(0x7f0000000140)={0x1, 0x1, 0x9, 0xeffe, 0x4, 0x7ff, 0x0, 0x8}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8})
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
sched_yield()
ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b)
clock_gettime(0x2, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macsec0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340))
r0 = getpgid(0xffffffffffffffff)
sched_setattr(r0, &(0x7f0000000380)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffff41, 0x7, 0x65e, 0x5}, 0x0)
rt_sigqueueinfo(r0, 0x10, &(0x7f00000003c0)={0x2f, 0x0, 0x9})
clock_gettime(0x3, &(0x7f0000000440))
sysfs$2(0x2, 0x3ff, &(0x7f0000000480)=""/125)

10:17:04 executing program 3:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', <r0=>0x0, 0x2f, 0xf0, 0xfb, 0x20c3, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x8000, 0x7, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'erspan0\x00', <r1=>r0, 0x7, 0x1, 0x8, 0x2, {{0xb, 0x4, 0x0, 0x38, 0x2c, 0x68, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @empty, {[@end, @rr={0x7, 0x17, 0x54, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', r1, 0x80, 0x700, 0x101, 0x5, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_addr={0x44, 0xc, 0x92, 0x1, 0x3, [{@broadcast, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x56, 0x1, 0x7, [{@local, 0x6}, {@loopback, 0x40}]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x0, 0xa, "abcbb0619f660bfa"}, {0x1, 0x7, "52857ec4ce"}]}, @generic={0x94, 0x10, "f41400709735795bdecbcc92cfbb"}, @lsrr={0x83, 0xf, 0x66, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @end]}}}}})
r2 = socket(0x0, 0x80000, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'rose0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r3, 0x29, 0xb7, 0xaf, 0x20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x700, 0x40, 0x9, 0xfff}})
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8808}, 0x8800)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', <r4=>r0, 0x700, 0x7, 0xffffffff, 0x9, {{0x24, 0x4, 0x1, 0x4, 0x90, 0x64, 0x0, 0xff, 0x2f, 0x0, @remote, @local, {[@ssrr={0x89, 0x2b, 0xfe, [@multicast2, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010101, @private=0xa010102, @loopback, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x16}, @local]}, @generic={0x83, 0xd, "02389ba6a408d3c1ae6b7d"}, @rr={0x7, 0x1f, 0x63, [@multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, @multicast2, @private=0xa010100, @remote, @private=0xa010101]}, @timestamp_addr={0x44, 0x24, 0x5c, 0x1, 0x2, [{@multicast1, 0xffff}, {@multicast1, 0x3}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xff}]}]}}}}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcdf}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004050}, 0x24)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0xfd)
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
io_setup(0x1000, &(0x7f0000000740))
syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x80000)
connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000900)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)

[  193.440351] random: crng reseeded on system resumption
10:17:04 executing program 1:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

10:17:04 executing program 7:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0)
r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "449045741b72116810ab1c193827b95c1c406d7d662f147a38a43e5aa0bf53cc344704bb86f0afb009774e7463a89cdd89113044845c31bf24d6648560d00e7e", 0x15}, 0x48, 0xfffffffffffffffc)
keyctl$negate(0xd, r0, 0x3, r1)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3)
sysfs$2(0x2, 0x7, &(0x7f0000000180)=""/217)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x4c080)
keyctl$get_persistent(0x16, 0xee00, r1)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$unlink(0x9, r4, r0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r5, 0xb28, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x40804)
request_key(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='batadv\x00', 0xffffffffffffffff)
r6 = request_key(&(0x7f0000000680)='trusted\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)='batadv\x00', r1)
keyctl$reject(0x13, r6, 0x36d, 0x2, r4)
keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd)

10:17:04 executing program 0:
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="29056d4838cd589531fe2280e373be788587cff7f7bb388a889112b13334621a42e4c90138c0a5eb54304b22a1fb98dca7ccda23f24c5c9afe6c9b97df87b8ff867807db2dea", 0x46}, 0x1, 0x0, 0x0, 0x40000}, 0x2000010)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1003, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000180))
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14, &(0x7f0000000280)={&(0x7f0000000200)="d0de75049f63f55d35113557a83cc9b7ac6f1c2c8e8fe3bda5962b967f39c2271b48fb2ef30196da55e97bd10ac2cc6f1f610e27200326392a340dd59c81b7dcf56c8bdfa691c28f5f638dd7eed5477f48e7ab62b9755ca710f02bfb", 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x26a}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4040)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffff}}, ["", "", "", "", ""]}, 0x24}}, 0x810)
r3 = socket(0x0, 0x3, 0x1ff)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socketpair(0x1, 0x3, 0x3c43, &(0x7f0000000980)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r7)

10:17:04 executing program 2:
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x30000004)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'xfrm0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd8e01553b32e811b}, 0x8000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x70}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6b49}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008011}, 0x4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20008014)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'gretap0\x00', r0, 0x40, 0x20, 0x1, 0x1, {{0xc, 0x4, 0x1, 0x6, 0x30, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @private=0xa010100, {[@ssrr={0x89, 0x1b, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @remote, @multicast1, @remote]}]}}}}})
socketpair(0x2a, 0x6, 0x9, &(0x7f0000000c40))

10:17:04 executing program 5:
r0 = getuid()
keyctl$get_persistent(0x16, r0, 0xfffffffffffffffa)
r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r1, 0xfffffffffffffffe)
setfsuid(r0)
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x61, 0x32, 0x38, 0x35, 0x37, 0x39, 0x7, 0x61, 0x38, 0x32, 0x32, 0x38, 0x34, 0x37, 0x30, 0x36]}, &(0x7f0000000140)={0x0, "a4a90a9636f7d6dd776f51a27c6094301d16186db68f5680673b5837578c28eefb2d950eaef07ac8050543aca422512b593e1016cc8f905db19418c0a8e91bc1", 0x1a}, 0x48, r1)
r3 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='syz', r1)
keyctl$reject(0x13, r2, 0x100, 0x7, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff)
getuid()
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, 0x0, 0x0)

10:17:04 executing program 6:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000940)=0x1f, 0x4)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

10:17:04 executing program 5:
r0 = getuid()
keyctl$get_persistent(0x16, r0, 0xfffffffffffffffa)
r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r1, 0xfffffffffffffffe)
setfsuid(r0)
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x61, 0x32, 0x38, 0x35, 0x37, 0x39, 0x7, 0x61, 0x38, 0x32, 0x32, 0x38, 0x34, 0x37, 0x30, 0x36]}, &(0x7f0000000140)={0x0, "a4a90a9636f7d6dd776f51a27c6094301d16186db68f5680673b5837578c28eefb2d950eaef07ac8050543aca422512b593e1016cc8f905db19418c0a8e91bc1", 0x1a}, 0x48, r1)
r3 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='syz', r1)
keyctl$reject(0x13, r2, 0x100, 0x7, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, 0x0, 0x0)

10:17:04 executing program 4:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))
clock_gettime(0x4, &(0x7f0000000040))
clock_gettime(0x6, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x3, 0xce6, 0x2, 0x401, 0x0, 0x8, 0x1, 0xd4f}, &(0x7f0000000100)={0x7fffffff, 0x0, 0x0, 0x2800000000000000, 0x8, 0x1000, 0x529c, 0x3}, &(0x7f0000000140)={0x1, 0x1, 0x9, 0xeffe, 0x4, 0x7ff, 0x0, 0x8}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8})
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
sched_yield()
ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b)
clock_gettime(0x2, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macsec0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340))
r0 = getpgid(0xffffffffffffffff)
sched_setattr(r0, &(0x7f0000000380)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffff41, 0x7, 0x65e, 0x5}, 0x0)
rt_sigqueueinfo(r0, 0x10, &(0x7f00000003c0)={0x2f, 0x0, 0x9})
clock_gettime(0x3, &(0x7f0000000440))
sysfs$2(0x2, 0x3ff, &(0x7f0000000480)=""/125)

10:17:04 executing program 1:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

10:17:04 executing program 6:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

10:17:04 executing program 1:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

10:17:04 executing program 4:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))
clock_gettime(0x4, &(0x7f0000000040))
clock_gettime(0x6, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x3, 0xce6, 0x2, 0x401, 0x0, 0x8, 0x1, 0xd4f}, &(0x7f0000000100)={0x7fffffff, 0x0, 0x0, 0x2800000000000000, 0x8, 0x1000, 0x529c, 0x3}, &(0x7f0000000140)={0x1, 0x1, 0x9, 0xeffe, 0x4, 0x7ff, 0x0, 0x8}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8})
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
sched_yield()
ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b)
clock_gettime(0x2, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macsec0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340))
r0 = getpgid(0xffffffffffffffff)
sched_setattr(r0, &(0x7f0000000380)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffff41, 0x7, 0x65e, 0x5}, 0x0)
rt_sigqueueinfo(r0, 0x10, &(0x7f00000003c0)={0x2f, 0x0, 0x9})
clock_gettime(0x3, &(0x7f0000000440))
syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0x1, 0xb1}, "8fa9999b061d8e3d902ce83bc7760675dd3565eacb36275f277d2d7e9fb8c2fac3f7e4d56634f160b925bc1abf14fdba57730524a734da87d16281092adecb2b75bbb55edf235beee5d55fdae7e1379ccbccff6a31712f1027cbf89cf744a76db0f011aa4967064d1a2795314d69acd02c504443897070d4868a1e8c9655e21090494423676a5717cd0bfece35c057289bcf4e3a4ab8afec9c63c58f7f9b30f6d301c7129903cf5799cd4a34ceb6777782"}, 0xb5)

10:17:04 executing program 5:
r0 = getuid()
keyctl$get_persistent(0x16, r0, 0xfffffffffffffffa)
r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffff9)
keyctl$unlink(0x9, r1, 0xfffffffffffffffe)
setfsuid(r0)
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x61, 0x32, 0x38, 0x35, 0x37, 0x39, 0x7, 0x61, 0x38, 0x32, 0x32, 0x38, 0x34, 0x37, 0x30, 0x36]}, &(0x7f0000000140)={0x0, "a4a90a9636f7d6dd776f51a27c6094301d16186db68f5680673b5837578c28eefb2d950eaef07ac8050543aca422512b593e1016cc8f905db19418c0a8e91bc1", 0x1a}, 0x48, r1)
r3 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='syz', r1)
keyctl$reject(0x13, r2, 0x100, 0x7, r3)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r3, 0x0, 0x0)

10:17:04 executing program 6:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

10:17:04 executing program 3:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', <r0=>0x0, 0x2f, 0xf0, 0xfb, 0x20c3, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x8000, 0x7, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'erspan0\x00', <r1=>r0, 0x7, 0x1, 0x8, 0x2, {{0xb, 0x4, 0x0, 0x38, 0x2c, 0x68, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @empty, {[@end, @rr={0x7, 0x17, 0x54, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', r1, 0x80, 0x700, 0x101, 0x5, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_addr={0x44, 0xc, 0x92, 0x1, 0x3, [{@broadcast, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x56, 0x1, 0x7, [{@local, 0x6}, {@loopback, 0x40}]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x0, 0xa, "abcbb0619f660bfa"}, {0x1, 0x7, "52857ec4ce"}]}, @generic={0x94, 0x10, "f41400709735795bdecbcc92cfbb"}, @lsrr={0x83, 0xf, 0x66, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @end]}}}}})
r2 = socket(0x0, 0x80000, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'rose0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r3, 0x29, 0xb7, 0xaf, 0x20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x700, 0x40, 0x9, 0xfff}})
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8808}, 0x8800)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', <r4=>r0, 0x700, 0x7, 0xffffffff, 0x9, {{0x24, 0x4, 0x1, 0x4, 0x90, 0x64, 0x0, 0xff, 0x2f, 0x0, @remote, @local, {[@ssrr={0x89, 0x2b, 0xfe, [@multicast2, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010101, @private=0xa010102, @loopback, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x16}, @local]}, @generic={0x83, 0xd, "02389ba6a408d3c1ae6b7d"}, @rr={0x7, 0x1f, 0x63, [@multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, @multicast2, @private=0xa010100, @remote, @private=0xa010101]}, @timestamp_addr={0x44, 0x24, 0x5c, 0x1, 0x2, [{@multicast1, 0xffff}, {@multicast1, 0x3}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xff}]}]}}}}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcdf}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004050}, 0x24)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0xfd)
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
io_setup(0x1000, &(0x7f0000000740))
connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000900)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14)

10:17:04 executing program 0:
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="29056d4838cd589531fe2280e373be788587cff7f7bb388a889112b13334621a42e4c90138c0a5eb54304b22a1fb98dca7ccda23f24c5c9afe6c9b97df87b8ff867807db2dea", 0x46}, 0x1, 0x0, 0x0, 0x40000}, 0x2000010)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1003, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000180))
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14, &(0x7f0000000280)={&(0x7f0000000200)="d0de75049f63f55d35113557a83cc9b7ac6f1c2c8e8fe3bda5962b967f39c2271b48fb2ef30196da55e97bd10ac2cc6f1f610e27200326392a340dd59c81b7dcf56c8bdfa691c28f5f638dd7eed5477f48e7ab62b9755ca710f02bfb", 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x26a}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4040)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffff}}, ["", "", "", "", ""]}, 0x24}}, 0x810)
r3 = socket(0x0, 0x3, 0x1ff)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x8000)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff)

10:17:04 executing program 2:
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x30000004)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'xfrm0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd8e01553b32e811b}, 0x8000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x70}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6b49}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008011}, 0x4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20008014)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x2a, 0x6, 0x9, &(0x7f0000000c40))

10:17:04 executing program 1:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

10:17:04 executing program 4:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))
clock_gettime(0x4, &(0x7f0000000040))
clock_gettime(0x6, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x3, 0xce6, 0x2, 0x401, 0x0, 0x8, 0x1, 0xd4f}, &(0x7f0000000100)={0x7fffffff, 0x0, 0x0, 0x2800000000000000, 0x8, 0x1000, 0x529c, 0x3}, &(0x7f0000000140)={0x1, 0x1, 0x9, 0xeffe, 0x4, 0x7ff, 0x0, 0x8}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8})
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
sched_yield()
ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b)
clock_gettime(0x2, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macsec0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340))
r0 = getpgid(0xffffffffffffffff)
sched_setattr(r0, &(0x7f0000000380)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffff41, 0x7, 0x65e, 0x5}, 0x0)
rt_sigqueueinfo(r0, 0x10, &(0x7f00000003c0)={0x2f, 0x0, 0x9})
clock_gettime(0x3, &(0x7f0000000440))
syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0x1, 0xb1}, "8fa9999b061d8e3d902ce83bc7760675dd3565eacb36275f277d2d7e9fb8c2fac3f7e4d56634f160b925bc1abf14fdba57730524a734da87d16281092adecb2b75bbb55edf235beee5d55fdae7e1379ccbccff6a31712f1027cbf89cf744a76db0f011aa4967064d1a2795314d69acd02c504443897070d4868a1e8c9655e21090494423676a5717cd0bfece35c057289bcf4e3a4ab8afec9c63c58f7f9b30f6d301c7129903cf5799cd4a34ceb6777782"}, 0xb5)

10:17:04 executing program 7:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0)
r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "449045741b72116810ab1c193827b95c1c406d7d662f147a38a43e5aa0bf53cc344704bb86f0afb009774e7463a89cdd89113044845c31bf24d6648560d00e7e", 0x15}, 0x48, 0xfffffffffffffffc)
keyctl$negate(0xd, r0, 0x3, r1)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3)
sysfs$2(0x2, 0x7, &(0x7f0000000180)=""/217)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x4c080)
keyctl$get_persistent(0x16, 0xee00, r1)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$unlink(0x9, r4, r0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r5, 0xb28, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x40804)
request_key(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='batadv\x00', 0xffffffffffffffff)
request_key(&(0x7f0000000680)='trusted\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)='batadv\x00', r1)
keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd)

10:17:04 executing program 6:
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000000)="76837cee06d140058b90240f56592ec65637b15919326edc0af8f7d66ed783693b5a59c16987aec1e0b40ad430333e59ad3ea5ac5e31183f66a1ff6b900b679b1d2d9730792e6b7ecd806a7c73bf4a639ac685e55f3eb4e117359a30363256a62385cc2889a835b12f495a33fe4961c98c4c9bfcc8152307acf6a5daae5036c19eb453630f407c449346013e00e05537bdd76fa6330474ff91ded3035a145d520661e3ece23fcac91d48e9325e9aa8ce7839868c0571772e6056fa8437aab9e5cb124fd409f53bdfbd23fc44a3a076330a08f85b27eb53cd153c1face714", 0xde, 0xb5ed}, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"93de8d9258dbd380eef7dcebfa1dcbf3", <r0=>0x0, 0x0, {0x7, 0x7f}, {0x1, 0xff}, 0x5, [0x6, 0x3f, 0x3, 0x6, 0x9, 0x101, 0x4, 0x9, 0x57, 0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x2, 0x1f, 0xfffffffffffffffc]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"80ee9c4e5a4b3f8e02018a826dbe8bff", <r3=>r0, r1, {0x9, 0x101}, {0xf, 0x9}, 0x3, [0x0, 0x2, 0xfffffffffffffff9, 0x400, 0x9, 0x9a86, 0x83c, 0xffffffff80000000, 0x3, 0x70, 0xf88, 0x0, 0x8, 0x0, 0x1000, 0x3]})
r4 = syz_open_dev$mouse(&(0x7f0000000580), 0x5, 0xaa000)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000005c0)=r3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000600), &(0x7f0000000640)=0x4)
clock_gettime(0x2, &(0x7f0000000680))
setregid(0xee01, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000006c0)={"1fae5c8e2790cbb2090755eaccbdebe0", <r6=>r3, r2, {0x4, 0x3}, {0xff, 0x9}, 0xce387c6, [0x2, 0x3, 0x100000001, 0x1, 0x800, 0x0, 0x6, 0x8000, 0x8001, 0xffff, 0x1ff, 0x80000001, 0x0, 0x9, 0x81, 0x7]})
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000007c0)=r6)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000800)=[{}, {}, {}, {}, {}], &(0x7f00000008c0)={0x77359400})
syz_open_dev$mouse(&(0x7f0000000900), 0x81, 0x105000)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

[  193.920335] Bluetooth: hci7: SCO packet for unknown connection handle 1
[  194.089400] Bluetooth: hci7: SCO packet for unknown connection handle 1
[  194.091159] random: crng reseeded on system resumption

VM DIAGNOSIS:
10:16:58  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=1ffff110030f5fbb
RSI=ffffffff816903b2 RDI=0000000000000006 RBP=ffff8880187afd88 RSP=ffff8880187afcb0
R8 =0000000000000006 R9 =0000000000019fb4 R10=000000000007ffdf R11=0000000000000001
R12=ffffea000067ed00 R13=ffff88800dd3fd00 R14=ffff8880187afdd8 R15=ffff8880187afdb0
RIP=ffffffff81460c30 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb37e39c900 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb37d7b4310 CR3=000000000f09a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 6f4e202020202020 3d4547415353454d
YMM01=0000000000000000 0000000000000000 2d3763722d302e30 2e36206465746e69
YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572
YMM04=0000000000000000 0000000000000000 e9ba23f9979d1cf0 0000000000138828
YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0
YMM06=0000000000000000 0000000000000000 7ab9601e211d1af2 00000000000ae988
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0020002000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001
R12=0000000000000020 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0
RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000557f5a0fd648 CR3=00000000102c6000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 0000000000000000 3f847ae147ae147b
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 3f73fd9ac29d98f8
YMM04=0000000000000000 0000000000000000 000000c00037f200 000000c00062a900
YMM05=0000000000000000 0000000000000000 000000c00037f800 000000c00062af00
YMM06=0000000000000000 0000000000000000 000000c00062be00 000000c00062bb00
YMM07=0000000000000000 0000000000000000 000000c000868f00 000000c000868180
YMM08=0000000000000000 0000000000000000 000000c000012000 000000c000010000
YMM09=0000000000000000 0000000000000000 000000c00030a618 000000c000000600
YMM10=0000000000000000 0000000000000000 000000c000303c50 000000c0000120c0
YMM11=0000000000000000 0000000000000000 000000c0003037a0 000000c000303770
YMM12=0000000000000000 0000000000000000 000000c000056000 000000c000000c00
YMM13=0000000000000000 0000000000000000 000000c000308780 000000c000000a80
YMM14=0000000000000000 0000000000000000 000000c000308750 000000c000303c20
YMM15=0000000000000000 0000000000000000 000000c000344c60 000000c000303bf0