Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:56905' (ECDSA) to the list of known hosts.
2023/08/25 09:05:09 fuzzer started
2023/08/25 09:05:10 dialing manager at localhost:40489
syzkaller login: [   93.026581] cgroup: Unknown subsys name 'net'
[   93.165682] cgroup: Unknown subsys name 'rlimit'
[  104.898841] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2023/08/25 09:05:23 syscalls: 205
2023/08/25 09:05:23 code coverage: enabled
2023/08/25 09:05:23 comparison tracing: enabled
2023/08/25 09:05:23 extra coverage: enabled
2023/08/25 09:05:23 setuid sandbox: enabled
2023/08/25 09:05:23 namespace sandbox: enabled
2023/08/25 09:05:23 Android sandbox: enabled
2023/08/25 09:05:23 fault injection: enabled
2023/08/25 09:05:23 leak checking: enabled
2023/08/25 09:05:23 net packet injection: enabled
2023/08/25 09:05:23 net device setup: enabled
2023/08/25 09:05:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2023/08/25 09:05:23 devlink PCI setup: PCI device 0000:00:10.0 is not available
2023/08/25 09:05:23 USB emulation: enabled
2023/08/25 09:05:23 hci packet injection: enabled
2023/08/25 09:05:23 wifi device emulation: enabled
2023/08/25 09:05:23 802.15.4 emulation: enabled
2023/08/25 09:05:23 fetching corpus: 0, signal 0/0 (executing program)
2023/08/25 09:05:25 starting 8 fuzzer processes
09:05:25 executing program 0:
clock_gettime(0x1, &(0x7f0000000000))
r0 = socket(0x1d, 0x5, 0x9597)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x508, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xfff8, 0x0, 0x1, 0x1ff}, {0xc2, 0x1, 0x0, 0x4}, {0x20, 0x1f, 0x1f, 0x7}, {0x8d, 0x5, 0x1, 0xfffffff9}, {0x8, 0x8, 0x9, 0x3}, {0x0, 0x7, 0x7, 0x5}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x508}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r3 = accept4$bt_l2cap(r0, &(0x7f00000006c0), &(0x7f0000000700)=0xe, 0x0)
ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x1)
r4 = accept4$bt_l2cap(r3, &(0x7f0000000740), &(0x7f0000000780)=0xe, 0x40000)
bind$bt_l2cap(r4, &(0x7f00000007c0)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0x1}, 0xe)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008004)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000940))
clock_getres(0x1, &(0x7f0000000980))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000814}, 0x44000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r6)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_VLANID={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8003}, 0x20004000)
clock_gettime(0x4, &(0x7f0000000c40))
sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000008}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x10)

09:05:25 executing program 2:
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000000)=0x1)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x240)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000080))
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x20000)
ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000200))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x12}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008080}, 0x40000)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x62}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044001}, 0x8000)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x6)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f00000004c0))
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x6ce6e054f7d7fcf0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000640))
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000006c0))
perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x20, 0x6c, 0x0, 0x8, 0x0, 0x6, 0x20, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000700), 0x6}, 0x6400, 0xffffffff, 0x80000000, 0x8, 0x3a, 0x8000, 0x339, 0x0, 0x1, 0x0, 0x17d140000000}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20084881)

09:05:25 executing program 1:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x2, 0x2, 0x6}}, 0x14)
write$P9_RLINK(r1, &(0x7f0000000080)={0x7, 0x47, 0x1}, 0x7)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
write$P9_RAUTH(r1, &(0x7f0000000100)={0x14, 0x67, 0x2, {0x8, 0x4}}, 0x14)
clock_gettime(0x4, &(0x7f0000000140))
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x84000)
write$P9_RAUTH(r4, &(0x7f0000000240)={0x14, 0x67, 0x2, {0x40, 0x2, 0x3}}, 0x14)
clock_gettime(0x2, &(0x7f0000000280))
r5 = socket(0xf, 0x3, 0x5)
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r5)
openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000300), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000340)={0x3, 0x8, 0x1, 0x0, 0x7fffffff, 0x6, 0x3f}, &(0x7f0000000380)={0xfff, 0xd475, 0x3, 0x2, 0x4, 0x48, 0x7, 0x9}, &(0x7f00000003c0)={0x2, 0xa7, 0x100000001, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x80000001}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x92a4]}, 0x8})
r6 = socket(0x26, 0x2, 0xc7ea)
getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, &(0x7f00000004c0)=""/199, &(0x7f00000005c0)=0xc7)

[  106.432149] audit: type=1400 audit(1692954325.240:6): avc:  denied  { execmem } for  pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:05:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @initdev, <r2=>0x0}, &(0x7f00000000c0)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @broadcast, <r3=>0x0}, &(0x7f0000000140)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', <r5=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@multicast2, @rand_addr, <r6=>0x0}, &(0x7f0000000240)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@loopback, @loopback, <r7=>0x0}, &(0x7f00000002c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000340)={0x93c, r1, 0x4, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x18c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x0, 0x3, 0x10000}, {0x0, 0x9, 0x8, 0x3}, {0x7, 0x5, 0x3, 0x3f}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff01}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x40, 0x40, 0xffffff26}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x44}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff0000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xeb}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xeddc}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r7}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x5, 0x1, 0x2cc}, {0x9, 0x3, 0x5, 0x9}, {0x0, 0x5, 0x6, 0x7fff}, {0x3, 0x22, 0xb, 0x6}, {0x5, 0x1f, 0x0, 0x1}, {0x5, 0xaa, 0x1, 0x8}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x85}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x7, 0x3f, 0x2}, {0x8001, 0x4, 0x7, 0x5}, {0xc0, 0x40, 0x20, 0x7}, {0x8, 0xf9, 0x3}, {0x2, 0x94, 0x81, 0x4}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb9e}}}]}}]}, 0x93c}, 0x1, 0x0, 0x0, 0x100}, 0x4040880)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d40)={'team0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)={'team0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000e00)={'team0\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000e40)={'batadv_slave_1\x00', <r12=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001680)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001640)={&(0x7f0000000e80)={0x7b4, r1, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x230, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff321c}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x80, 0x9, 0x1}, {0x0, 0x3, 0xe8, 0x7f}, {0x4, 0x1, 0x6, 0x4}, {0xfffe, 0x0, 0x98, 0x8}, {0xfff, 0x8, 0xe5, 0x7}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r10}, {0x154, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1f, 0x5b, 0x0, 0x2}, {0x8, 0x2, 0x7c, 0x3}, {0x1300, 0x7, 0x5, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x124, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf2e4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcd}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r11}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe6}}}]}}, {{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb9}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xd8, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x53, 0xa4, 0xfffffffe}, {0x20, 0x9, 0x3f, 0x7faa}, {0xffff, 0x80, 0x2, 0xc3}, {0x4, 0xe0, 0x2, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r13 = openat$null(0xffffffffffffff9c, &(0x7f00000016c0), 0x20000, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r13, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x1)
sendmsg$BATADV_CMD_GET_VLAN(r13, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, 0x0, 0x280, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000001900), 0x4080, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000894)

09:05:25 executing program 4:
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x194, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x98}, {0x6, 0x16, 0x2b}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x636}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x83}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x11}, {0x6, 0x16, 0xff}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x21c}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x32e2}, {0x5, 0x12, 0x1}}]}, 0x194}, 0x1, 0x0, 0x0, 0x10041}, 0x80)
r0 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', <r2=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@initdev, @multicast2, <r3=>0x0}, &(0x7f00000003c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000580)={0x700, r0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xfffe, 0x7f, 0x80, 0x9b5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x9, 0xff, 0x8, 0x5c}, {0x4, 0x2, 0xa7}, {0x8, 0x9, 0x0, 0x8e2}, {0x3f, 0x35, 0x1c, 0x2}, {0x0, 0x8, 0x20, 0xfffffffd}, {0x9dd, 0xff, 0x7f, 0x200}, {0x1, 0x6, 0x66}, {0x5, 0x5, 0x3, 0x96}, {0x6b8a, 0x7, 0x40}]}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2cf4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x24e44}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}]}, 0x700}, 0x1, 0x0, 0x0, 0x440c0}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r10, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x74, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x74}, 0x1, 0x0, 0x0, 0xc085}, 0x81)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000f40)=""/104, &(0x7f0000000fc0)=0x68)
sendmsg$IPVS_CMD_GET_SERVICE(r10, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x80, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3a}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040}, 0x44051)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001280), r10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r10, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r11, 0x800, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8800)

09:05:25 executing program 5:
select(0x40, &(0x7f0000000000)={0x5, 0x9, 0x4, 0x38000, 0xfffffffffffffffb, 0x4, 0x7f, 0xfffffffffffffffd}, &(0x7f0000000040)={0x4d4, 0x4, 0xd56, 0x2, 0x4, 0x6, 0x3, 0x1}, &(0x7f0000000080)={0x3, 0x83, 0x2, 0x10000, 0x8, 0x8, 0x1, 0x8}, &(0x7f00000000c0))
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x20002)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000180))
pselect6(0x40, &(0x7f0000000200)={0x6, 0x1, 0x9, 0x1, 0x1000, 0x7e, 0x3}, &(0x7f0000000240)={0x5, 0x0, 0x101, 0xd5c1, 0x5, 0x9, 0x1}, &(0x7f0000000280)={0x7, 0x6, 0x5, 0x8, 0x1, 0x9504, 0x0, 0xffffffffffff8c34}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x5]}, 0x8})
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb5ef}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9078}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008840}, 0x8808)
syz_open_dev$evdev(&(0x7f0000000480), 0x400, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000004c0)=0x1)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000500))
pselect6(0x40, &(0x7f0000000540)={0x2, 0x5, 0x4, 0xfffffffffffffff7, 0x4, 0x0, 0x6, 0x7}, &(0x7f0000000580)={0x7, 0x10001, 0x7f, 0xfffffffffffffffd, 0x10001, 0xffffffffffffffc1, 0x2400000000000000, 0x5}, &(0x7f00000005c0)={0x200, 0x1000, 0x4, 0xb9, 0x7, 0x1f, 0x80000001, 0x401}, &(0x7f0000000600)={0x77359400}, &(0x7f0000000680)={&(0x7f0000000640)={[0x2]}, 0x8})
r1 = gettid()
perf_event_open$cgroup(&(0x7f0000000700)={0x5, 0x80, 0xc0, 0x3, 0x63, 0x1f, 0x0, 0x3a00000, 0x20000, 0xf, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000006c0), 0x9}, 0x10000, 0x2, 0x7, 0x0, 0x800, 0x6, 0x0, 0x0, 0x8, 0x0, 0x7fff}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3)
ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000780)={0x2})
waitid(0x1, r1, &(0x7f00000007c0), 0x2, &(0x7f0000000840))
ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000900)={0x3, 0x1})
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x444801, 0x0)
ioctl$CDROMPLAYMSF(r2, 0x5303, &(0x7f0000000980)={0x1, 0x40, 0x5, 0x76, 0xae, 0xff})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000009c0))
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa0}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc22e}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x40)

09:05:25 executing program 6:
r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x8080)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x2040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x4, 0x0, 0x1ff, 0x0, 0x6})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000200)={0x6, 0x3f, 0x4, 0x0, 0xe})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x28044014}, 0x8000)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x28c, 0x0, 0x185b882852737633, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0xc8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x7c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x856}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "31c946b6988ec4442e7772c7775e372f4517dc1d11fca410cf200e9368cf7087"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9f370e9527be5166631c891158cae994f420ebfc5acae74aec99a9391bc72246"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x18c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "afc2a89f166cd28dfd73f58212069d2c"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffc}]}, @NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x3ce57113c796cbd8}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x401}]}, @NL802154_KEY_ATTR_ID={0x90, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555e}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "abc8f3e85be89ef3b09624244eb607bfa16bcd4942ebada6dc3392a4c5281e24"}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = socket(0x28, 0x4, 0x591)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x3ff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x870}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000004)
r6 = socket(0xf, 0xa, 0x1)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1)
sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r7, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x40804)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40084}, 0x20000801)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d00), 0x501301)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000d40)={{0x2, 0x1, 0x1, 0x1, 0x8}})

09:05:25 executing program 7:
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x8000)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080)
r1 = socket(0x29, 0x5, 0x5)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r3, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x42810}, 0x40080)
r4 = socket(0x26, 0x1, 0x80000001)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r4)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xd8, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x68}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4e0}, 0x800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x4000000)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x278}]}, 0x1c}}, 0x4008000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4000008)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4880)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2d}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), r1)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, r8, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000884)

[  107.723941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  107.727734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  107.735794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  107.742774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  107.746152] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  107.751839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  107.774926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  107.782001] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  107.784917] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  107.794327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  107.804805] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  107.806686] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  107.928303] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  107.942363] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  107.945197] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  107.946419] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  107.948932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  107.951667] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  107.953691] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  107.955743] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  107.963870] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  107.965289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  107.965994] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  107.967532] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  107.980658] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  107.988711] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  108.012523] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  108.014708] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  108.016947] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  108.020637] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  108.021947] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  108.032631] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  108.052005] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  108.055676] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  108.060920] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  108.065857] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  109.809893] Bluetooth: hci0: command 0x0409 tx timeout
[  109.873773] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  109.873820] Bluetooth: hci1: command 0x0409 tx timeout
[  109.874079] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  110.065535] Bluetooth: hci5: command 0x0409 tx timeout
[  110.068540] Bluetooth: hci4: command 0x0409 tx timeout
[  110.129766] Bluetooth: hci6: command 0x0409 tx timeout
[  110.193549] Bluetooth: hci7: command 0x0409 tx timeout
[  111.857658] Bluetooth: hci0: command 0x041b tx timeout
[  111.922633] Bluetooth: hci1: command 0x041b tx timeout
[  112.115390] Bluetooth: hci4: command 0x041b tx timeout
[  112.115974] Bluetooth: hci5: command 0x041b tx timeout
[  112.177576] Bluetooth: hci6: command 0x041b tx timeout
[  112.241321] Bluetooth: hci7: command 0x041b tx timeout
[  113.906315] Bluetooth: hci0: command 0x040f tx timeout
[  113.970367] Bluetooth: hci1: command 0x040f tx timeout
[  114.161327] Bluetooth: hci4: command 0x040f tx timeout
[  114.161699] Bluetooth: hci5: command 0x040f tx timeout
[  114.226345] Bluetooth: hci6: command 0x040f tx timeout
[  114.289384] Bluetooth: hci7: command 0x040f tx timeout
[  115.377353] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  115.441390] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  115.953317] Bluetooth: hci0: command 0x0419 tx timeout
[  116.018087] Bluetooth: hci1: command 0x0419 tx timeout
[  116.209343] Bluetooth: hci5: command 0x0419 tx timeout
[  116.209371] Bluetooth: hci4: command 0x0419 tx timeout
[  116.273556] Bluetooth: hci6: command 0x0419 tx timeout
[  116.339351] Bluetooth: hci7: command 0x0419 tx timeout
[  120.817816] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  120.946534] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  124.015977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  124.029373] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  124.051644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  124.083778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  124.086645] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  124.113134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  126.193811] Bluetooth: hci2: command 0x0409 tx timeout
[  126.257364] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  128.242310] Bluetooth: hci2: command 0x041b tx timeout
[  129.243571] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  129.246153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  129.252856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  129.297724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  129.308601] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  129.310502] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  130.289321] Bluetooth: hci2: command 0x040f tx timeout
[  131.377435] Bluetooth: hci3: command 0x0409 tx timeout
[  132.337764] Bluetooth: hci2: command 0x0419 tx timeout
[  133.425348] Bluetooth: hci3: command 0x041b tx timeout
[  135.473370] Bluetooth: hci3: command 0x040f tx timeout
[  137.522384] Bluetooth: hci3: command 0x0419 tx timeout
[  169.849171] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  169.853495] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  169.855163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  169.859537] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  169.861716] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  169.862814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  170.370179] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  170.376662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  170.385037] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  170.393623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  170.412791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  170.414611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  170.454588] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  170.458483] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  170.460715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  170.470588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  170.473222] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  170.475466] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  170.511915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  170.532763] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  170.544062] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  170.569351] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  170.571863] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  170.573985] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  171.889633] Bluetooth: hci0: command 0x0409 tx timeout
[  172.467335] Bluetooth: hci1: command 0x0409 tx timeout
[  172.529702] Bluetooth: hci4: command 0x0409 tx timeout
[  172.593458] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  172.657429] Bluetooth: hci5: command 0x0409 tx timeout
[  172.657457] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  173.938595] Bluetooth: hci0: command 0x041b tx timeout
[  174.513891] Bluetooth: hci1: command 0x041b tx timeout
[  174.578219] Bluetooth: hci4: command 0x041b tx timeout
[  174.705311] Bluetooth: hci5: command 0x041b tx timeout
[  175.985342] Bluetooth: hci0: command 0x040f tx timeout
[  176.023723] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  176.046652] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  176.090743] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  176.094255] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  176.097016] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  176.100632] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  176.104550] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  176.109199] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  176.110690] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  176.134745] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  176.157836] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  176.195375] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  176.561685] Bluetooth: hci1: command 0x040f tx timeout
[  176.625324] Bluetooth: hci4: command 0x040f tx timeout
[  176.756376] Bluetooth: hci5: command 0x040f tx timeout
[  178.034358] Bluetooth: hci0: command 0x0419 tx timeout
[  178.225723] Bluetooth: hci6: command 0x0409 tx timeout
[  178.225849] Bluetooth: hci7: command 0x0409 tx timeout
[  178.611345] Bluetooth: hci1: command 0x0419 tx timeout
[  178.673558] Bluetooth: hci4: command 0x0419 tx timeout
[  178.801807] Bluetooth: hci5: command 0x0419 tx timeout
[  180.273642] Bluetooth: hci6: command 0x041b tx timeout
[  180.274401] Bluetooth: hci7: command 0x041b tx timeout
[  182.321354] Bluetooth: hci7: command 0x040f tx timeout
[  182.321595] Bluetooth: hci6: command 0x040f tx timeout
[  184.369351] Bluetooth: hci6: command 0x0419 tx timeout
[  184.370587] Bluetooth: hci7: command 0x0419 tx timeout
[  186.290504] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  186.305927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  186.321873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  186.372204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  186.385724] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  186.387324] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  188.465393] Bluetooth: hci2: command 0x0409 tx timeout
[  190.513636] Bluetooth: hci2: command 0x041b tx timeout
[  191.143383] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  191.184066] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  191.185392] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  191.201486] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  191.232728] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  191.236625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  192.563546] Bluetooth: hci2: command 0x040f tx timeout
[  193.394874] Bluetooth: hci3: command 0x0409 tx timeout
[  194.611297] Bluetooth: hci2: command 0x0419 tx timeout
[  195.441327] Bluetooth: hci3: command 0x041b tx timeout
[  197.490291] Bluetooth: hci3: command 0x040f tx timeout
[  199.537343] Bluetooth: hci3: command 0x0419 tx timeout
[  232.725957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  232.740831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  232.754501] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  232.785465] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  232.791733] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  232.797754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  233.046739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  233.050042] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  233.060939] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  233.110651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  233.144615] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  233.146037] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  233.206999] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  233.233189] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  233.237600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  233.280833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  233.294583] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  233.295735] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  234.673844] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  234.868599] Bluetooth: hci1: command 0x0409 tx timeout
[  235.186476] Bluetooth: hci4: command 0x0409 tx timeout
[  235.443364] Bluetooth: hci5: command 0x0409 tx timeout
[  236.913629] Bluetooth: hci1: command 0x041b tx timeout
[  237.233650] Bluetooth: hci4: command 0x041b tx timeout
[  237.489303] Bluetooth: hci5: command 0x041b tx timeout
[  238.078030] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  238.084493] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  238.091655] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  238.136743] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  238.141936] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  238.145534] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  238.961352] Bluetooth: hci1: command 0x040f tx timeout
[  239.282313] Bluetooth: hci4: command 0x040f tx timeout
[  239.537671] Bluetooth: hci5: command 0x040f tx timeout
[  239.601563] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  239.986319] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  240.242764] Bluetooth: hci7: command 0x0409 tx timeout
[  241.009481] Bluetooth: hci1: command 0x0419 tx timeout
[  241.330332] Bluetooth: hci4: command 0x0419 tx timeout
[  241.588348] Bluetooth: hci5: command 0x0419 tx timeout
[  242.290310] Bluetooth: hci7: command 0x041b tx timeout
[  244.338276] Bluetooth: hci7: command 0x040f tx timeout
[  244.849322] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  245.233341] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  246.386447] Bluetooth: hci7: command 0x0419 tx timeout
[  248.150297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  248.189141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  248.204629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  248.222442] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  248.225608] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  248.231807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  248.751369] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  248.755128] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  248.770996] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  248.787188] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  248.790594] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  248.798796] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  250.289342] Bluetooth: hci0: command 0x0409 tx timeout
[  250.609406] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  250.930564] Bluetooth: hci6: command 0x0409 tx timeout
[  252.338332] Bluetooth: hci0: command 0x041b tx timeout
[  252.977622] Bluetooth: hci6: command 0x041b tx timeout
[  254.385333] Bluetooth: hci0: command 0x040f tx timeout
[  254.833354] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  255.026426] Bluetooth: hci6: command 0x040f tx timeout
[  255.732308] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  256.433566] Bluetooth: hci0: command 0x0419 tx timeout
[  257.075490] Bluetooth: hci6: command 0x0419 tx timeout
[  259.953345] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  260.786625] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  262.826839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  262.836822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  262.846663] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  262.871677] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  262.879965] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  262.915591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  263.787775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  263.807684] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  263.833559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  263.859590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  263.885718] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  263.887581] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  265.012569] Bluetooth: hci2: command 0x0409 tx timeout
[  266.033434] Bluetooth: hci3: command 0x0409 tx timeout
[  267.058508] Bluetooth: hci2: command 0x041b tx timeout
[  268.083704] Bluetooth: hci3: command 0x041b tx timeout
[  269.105373] Bluetooth: hci2: command 0x040f tx timeout
[  270.130309] Bluetooth: hci3: command 0x040f tx timeout
[  271.154947] Bluetooth: hci2: command 0x0419 tx timeout
[  272.177309] Bluetooth: hci3: command 0x0419 tx timeout
[  295.696783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  295.702672] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  295.706757] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  295.715571] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  295.775883] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  295.781487] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  295.784055] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  295.789513] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  295.791388] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  295.791809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  295.795174] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  295.796724] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  297.329981] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  297.905357] Bluetooth: hci4: command 0x0409 tx timeout
[  297.905401] Bluetooth: hci5: command 0x0409 tx timeout
[  299.953408] Bluetooth: hci5: command 0x041b tx timeout
[  299.954326] Bluetooth: hci4: command 0x041b tx timeout
[  300.249224] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  300.257601] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  300.261660] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  300.268130] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  300.298841] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  300.321448] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  301.745310] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  302.004563] Bluetooth: hci4: command 0x040f tx timeout
[  302.004596] Bluetooth: hci5: command 0x040f tx timeout
[  302.450341] Bluetooth: hci7: command 0x0409 tx timeout
[  304.049794] Bluetooth: hci4: command 0x0419 tx timeout
[  304.050447] Bluetooth: hci5: command 0x0419 tx timeout
[  304.497554] Bluetooth: hci7: command 0x041b tx timeout
[  304.944923] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  304.958690] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  304.974444] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  305.000703] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  305.007554] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  305.010926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  306.545311] Bluetooth: hci7: command 0x040f tx timeout
[  307.122046] Bluetooth: hci1: command 0x0409 tx timeout
[  308.593307] Bluetooth: hci7: command 0x0419 tx timeout
[  309.169518] Bluetooth: hci1: command 0x041b tx timeout
[  311.220325] Bluetooth: hci1: command 0x040f tx timeout
[  311.922658] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  312.434512] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  313.268297] Bluetooth: hci1: command 0x0419 tx timeout
[  314.963044] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  314.965550] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  314.973843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  314.991622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  315.002093] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  315.010951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  317.107813] Bluetooth: hci0: command 0x0409 tx timeout
[  317.490324] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  319.153486] Bluetooth: hci0: command 0x041b tx timeout
[  320.679676] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  320.683592] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  320.688763] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  320.700660] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  320.709133] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  320.724591] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  321.201584] Bluetooth: hci0: command 0x040f tx timeout
[  322.804217] Bluetooth: hci6: command 0x0409 tx timeout
[  323.250317] Bluetooth: hci0: command 0x0419 tx timeout
[  324.850455] Bluetooth: hci6: command 0x041b tx timeout
[  325.395471] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  325.398700] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  325.410634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  325.424923] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  325.445116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  325.449837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  326.770706] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  326.899536] Bluetooth: hci6: command 0x040f tx timeout
[  327.539320] Bluetooth: hci3: command 0x0409 tx timeout
[  328.946478] Bluetooth: hci6: command 0x0419 tx timeout
[  329.585593] Bluetooth: hci3: command 0x041b tx timeout
[  329.897473] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  329.905698] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  329.916769] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  329.955871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  330.006018] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  330.020889] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  331.633309] Bluetooth: hci3: command 0x040f tx timeout
[  332.145505] Bluetooth: hci2: command 0x0409 tx timeout
[  333.681324] Bluetooth: hci3: command 0x0419 tx timeout
[  334.193654] Bluetooth: hci2: command 0x041b tx timeout
[  336.241910] Bluetooth: hci2: command 0x040f tx timeout
[  338.289326] Bluetooth: hci2: command 0x0419 tx timeout
[  359.602571] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  360.241334] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  362.023716] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  362.037484] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  362.051285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  362.098619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  362.109968] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  362.125848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  362.523538] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  362.525605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  362.531632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  362.579454] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  362.634581] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  362.648930] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  363.798704] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  363.800125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  363.805808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  363.811368] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  363.817753] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  363.819658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  364.209580] Bluetooth: hci4: command 0x0409 tx timeout
[  364.787750] Bluetooth: hci5: command 0x0409 tx timeout
[  365.875925] Bluetooth: hci1: command 0x0409 tx timeout
[  366.258324] Bluetooth: hci4: command 0x041b tx timeout
[  366.833557] Bluetooth: hci5: command 0x041b tx timeout
[  366.933733] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  366.945287] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  366.947612] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  366.967567] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  366.985892] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  367.010754] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  367.922331] Bluetooth: hci1: command 0x041b tx timeout
[  368.306321] Bluetooth: hci4: command 0x040f tx timeout
[  368.881663] Bluetooth: hci5: command 0x040f tx timeout
[  369.074901] Bluetooth: hci7: command 0x0409 tx timeout
[  369.969958] Bluetooth: hci1: command 0x040f tx timeout
[  370.353794] Bluetooth: hci4: command 0x0419 tx timeout
[  370.929806] Bluetooth: hci5: command 0x0419 tx timeout
[  371.121327] Bluetooth: hci7: command 0x041b tx timeout
[  372.017324] Bluetooth: hci1: command 0x0419 tx timeout
[  373.169562] Bluetooth: hci7: command 0x040f tx timeout
[  375.218273] Bluetooth: hci7: command 0x0419 tx timeout
[  379.313310] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  382.982070] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  382.986703] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  382.995586] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  383.053696] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  383.108692] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  383.131841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  384.881546] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  385.201462] Bluetooth: hci6: command 0x0409 tx timeout
[  387.249839] Bluetooth: hci6: command 0x041b tx timeout
[  387.297407] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  387.303663] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  387.321817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  387.334073] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  387.337177] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  387.339676] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  389.297534] Bluetooth: hci6: command 0x040f tx timeout
[  389.425366] Bluetooth: hci0: command 0x0409 tx timeout
[  390.065304] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  391.345528] Bluetooth: hci6: command 0x0419 tx timeout
[  391.473316] Bluetooth: hci0: command 0x041b tx timeout
[  393.521662] Bluetooth: hci0: command 0x040f tx timeout
[  393.584196] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  393.587713] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  393.589798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  393.595824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  393.598073] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  393.599781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  393.906420] Bluetooth: hci2: Opcode 0x c03 failed: -110
2023/08/25 09:10:13 executor 5 failed 11 times:
executor 5: exit status 67
SYZFAIL: wrong response packet
 (errno 2: No such file or directory)
loop exited with status 67

VM DIAGNOSIS:
09:10:13  Registers:
info registers vcpu 0
RAX=0000000000000003 RBX=ffff88801a70ab40 RCX=1ffffffff0baa6be RDX=0000000000000001
RSI=0000000000000040 RDI=ffff88801a70ab40 RBP=ffff88800c6f7b80 RSP=ffff88800c6f7b00
R8 =0000000000000001 R9 =fffffbfff0eea36d R10=ffffffff87751b6f R11=0000000000000001
R12=ffff88801a70ab40 R13=ffff88803479d1c0 R14=ffffffff8178fbb7 R15=0000000000000000
RIP=ffffffff812db2ae RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6120ddb610 CR3=000000000965e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=00007f47f561b000 RCX=ffffffff8172cf24 RDX=ffff8880325b0000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffea00009b9a00 RSP=ffff8880232bf728
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000001 R14=ffff888030cd20d0 R15=dffffc0000000000
RIP=ffffffff814d8c78 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0427966008 CR3=0000000015aa6000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000