syzkaller login: [   57.407354] sshd (238) used greatest stack depth: 24088 bytes left
Warning: Permanently added '[localhost]:35962' (ECDSA) to the list of known hosts.
2025/01/22 22:52:55 fuzzer started
2025/01/22 22:52:55 dialing manager at localhost:38529
[   63.096110] cgroup: Unknown subsys name 'net'
[   63.227627] cgroup: Unknown subsys name 'cpuset'
[   63.252130] cgroup: Unknown subsys name 'rlimit'
[   70.197891] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
[   82.680631] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/22 22:53:15 syscalls: 2217
2025/01/22 22:53:15 code coverage: enabled
2025/01/22 22:53:15 comparison tracing: enabled
2025/01/22 22:53:15 extra coverage: enabled
2025/01/22 22:53:15 setuid sandbox: enabled
2025/01/22 22:53:15 namespace sandbox: enabled
2025/01/22 22:53:15 Android sandbox: enabled
2025/01/22 22:53:15 fault injection: enabled
2025/01/22 22:53:15 leak checking: enabled
2025/01/22 22:53:15 net packet injection: enabled
2025/01/22 22:53:15 net device setup: enabled
2025/01/22 22:53:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/22 22:53:15 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/22 22:53:15 USB emulation: enabled
2025/01/22 22:53:15 hci packet injection: enabled
2025/01/22 22:53:15 wifi device emulation: enabled
2025/01/22 22:53:15 802.15.4 emulation: enabled
2025/01/22 22:53:15 fetching corpus: 0, signal 0/2000 (executing program)
2025/01/22 22:53:15 fetching corpus: 0, signal 0/4000 (executing program)
2025/01/22 22:53:15 fetching corpus: 0, signal 0/6000 (executing program)
2025/01/22 22:53:15 fetching corpus: 0, signal 0/6463 (executing program)
2025/01/22 22:53:15 fetching corpus: 0, signal 0/6463 (executing program)
2025/01/22 22:53:18 starting 8 fuzzer processes
22:53:18 executing program 0:
fchdir(0xffffffffffffffff)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000000)={0x0, 0x4, 0x6, 0x1})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/143, 0x8f, 0x1, &(0x7f00000004c0)=""/17, 0x11}, &(0x7f0000000540)=0x40)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000680)=0xe8)
getresgid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=<r1=>0x0)
keyctl$chown(0x4, 0x0, r0, r1)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0506617, &(0x7f0000000780)={@desc={0x1, 0x0, @desc1}, 0xa, 0x0, '\x00', @auto=[0x24, 0x20, 0x3e, 0x2a, 0x19, 0x11, 0x22, 0x11, 0x34, 0x22]})
finit_module(0xffffffffffffffff, &(0x7f0000000800)='\x00\x00\x11\x11\"\"33', 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x8100, 0x0)
getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000880), &(0x7f00000008c0)=0x4)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000900), 0x202, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000940)={0x2, 0x1, 0x9})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000980)={0x0, <r4=>0x0})
prctl$PR_SET_PTRACER(0x59616d61, r4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000a40)={0x7, &(0x7f0000000a00)=[{0x8001, 0x1f, 0x8, 0x50}, {0xffff, 0xc, 0x9, 0x6}, {0x20, 0xf9, 0x4}, {0x7f, 0x0, 0x0, 0x5}, {0x401, 0x7, 0x40, 0x3f}, {0x4, 0xe7, 0x1, 0x20}, {0x0, 0x1, 0xb7, 0x2}]})
getpeername(r2, &(0x7f0000000a80)=@generic, &(0x7f0000000b00)=0x80)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffc000/0x3000)=nil)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b40), 0x40000, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000b80)=[@mss={0x2, 0x1}, @window={0x3, 0x600, 0x26}, @timestamp, @mss={0x2, 0x7}, @mss={0x2, 0xecf}, @window={0x3, 0x1000, 0x5}], 0x6)

22:53:18 executing program 1:
r0 = shmget(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/166)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
ptrace$poke(0x4, r1, &(0x7f00000000c0), 0x5)
r2 = getpgrp(r1)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x4, 0x3b, 0x40, 0x1, 0x1, r2})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {<r4=>0xffffffffffffffff}}, './file0\x00'})
sendmsg$IPSET_CMD_DEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x10000}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044}, 0x1)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000300)="09b6a892f4a066c86dec9923325a34ac25976393c701525cbcfd0dd94331a055a5ca84c7fe52d4aa05e6e5162f9bcd1dc69e11c584159e417bb73a9d1adc0a4027ae31541df865ba079e2032c0362dbc1e06e40bda25f6c761118719c36cc37e936f2599563fb25d45108777decfb5c4dbf4c37870c52c3e1d42938dc961c5ead444efc235faa034d1cdda12721b9e0c8ff5242de64f98b40ce864d2c5ee3e8c9e70f70c413a90428a57c0b20627e6cc7ab057f3682c688d1f25ada3d9da5b89cdb94c44495431e35d3eaf3dfd", 0xcd)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000400)={<r5=>r4, 0x240, 0x800, 0x9})
ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000840)={0x1, 0x0, 0x8, 0x14, 0xe2, &(0x7f0000000440)})
sendmsg$NFT_BATCH(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x4000012}, 0x800)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f00000009c0)={0x3, 'sit0\x00', {0x20}, 0x80})
getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f0000000a00)=""/135, &(0x7f0000000ac0)=0x87)
sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, 0x1, 0x9, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1)
syz_mount_image$nfs(&(0x7f0000000c00), &(0x7f0000000c40)='./file0\x00', 0xfffffffffffffffd, 0x4, &(0x7f0000000f00)=[{&(0x7f0000000c80)="82ebf0e488594ee96cdd0bf24f8e671820d8220245a24fa3a664ed86fed9f00e4a57c820a57a1e0f7bd7dcfb65bfc208b14d1367d762babff0f3c56ba5f3f9b6fefa26cd3dedd4cdbcb57ccc15a21a180db5a41a295fd819884a3f617d515021fd0ed662c7a47e931d47057f94774f64b4", 0x71, 0x5}, {&(0x7f0000000d00)="d86f88c28eeee2283cb3abdd909377fe5e8d485d7679392ed9778abc3b95b4f219078f805ab65d96a265f3bfe27a7d1759b59b3f95882c320a31692023f8401556851f4ee97641659226e61b1e1d049bf476d4028c4d9b97c2af07ffddc3f6b80fe23d829d13c734a5aec31bfe77cb7c1f5aa939acb1e5e196b4a094d1e0911d2fab29153588ed1e2a10b176a7", 0x8d, 0x15}, {&(0x7f0000000dc0)="2ac1424fc50357a4f75b78610138d89f261c24093cf5c734e1db42165bf9c738693299a2177b27cd61eb8a", 0x2b, 0x100}, {&(0x7f0000000e00)="fbb741b2be448caa3f0ab4f924dc133da964ca606834364652e61d913e83a5703be954537415a4f353f7a115f5ab2c0e36730bf2b67c475f5c39a29e2e07c35726ffc67c8653a0fa201758d860224f68fd08c5759ce1168d9e21bd2ec5cee32c804a91c8427d96023ec341a131ed64529e622c2831dc001395de41dcca4bfd2e93cca3ccf852cacc6fe2a6c91b9c928f0a9a424f72db3bc0f8add5f3b827885cb8427f23b666e4fc75f18dd8f9301a8b4d0cf7c12bb59297f1e09034b530659fa9fe07ca70782bb9108ab75a9e5ccaa713f27103b628", 0xd6, 0x7f}], 0x1, &(0x7f0000000f80)={[{}, {'\t\\}.(,&,&&\xf1D/)-%:%*:\x11\xa1\\'}], [{@obj_user={'obj_user', 0x3d, 'syz2\x00'}}, {@appraise_type}, {@euid_gt={'euid>', 0xee01}}, {@appraise}, {@appraise}, {@obj_user={'obj_user', 0x3d, 'syz2\x00'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]})
sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x58, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x44044}, 0x8000)
r6 = open_tree(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x80900)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f00000016c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001680)={&(0x7f0000001200)={0x468, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x245e}, @device_b, @device_a, @initial, {0x9, 0x20}}, @tdls_setup_req={0xc, 0x0, "", 0x2, @val=0x4000, @void, @val={0x2d, 0x1a, {0x8000, 0x1, 0x1, 0x0, {0x8, 0x40, 0x0, 0x20, 0x0, 0x1, 0x1, 0x3}, 0x6, 0x9, 0x67}}, @val={0x65, 0x12, {@initial, @device_b, @broadcast}}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x104, 0x33, @mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7}, @device_a, @device_a, @random="eef49c6399f0", {0xa, 0x285}}, @ver_80211n={0x0, 0x40, 0x3, 0x2, 0x0, 0x1, 0x1}}, 0x8, 0x4, @broadcast, {0x0, 0x3, @random="d92d70"}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x2, 0x0, {0xfff, 0x8, 0x0, 0x6, 0x0, 0x0, 0x1, 0x1}, 0x300, 0xff800, 0x81}}, [{0xdd, 0x47, "5a29d5f7a5bef99619e533e0bad98beefdef61b8b5b53ffd3ff339f718376d9e96f44b41e46b0e9dea5af07a270a4338996f63eddc967f9b22bf04915f31a8743a6491c8b7f687"}, {0xdd, 0x6e, "2432f7b8bb69b2e4be608c04c80713a0e5798236684e513508d30da29b7722140775df2b2a61a9a5b2649fc9fca25af3c15dfd226cff38b574e58e2e2978c0cf52ba5f8906a8ef31b50fcc1f99c9c0839c98651dfc8ae9099898a260f0aeaddd71e9024da05269b4f4a3638038e2"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x2cf, 0x33, @mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_b, @device_b, @from_mac=@broadcast, {0x7, 0x1}}, 0x10000, @random=0xf800, 0x1840, @void, @void, @val={0x3, 0x1, 0xac}, @val={0x4, 0x6, {0x7f, 0xf7, 0x8, 0x3}}, @void, @val={0x2d, 0x1a, {0x2000, 0x1, 0x5, 0x0, {0x81, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x4, 0x5}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x48}}, [{0xdd, 0x64, "742e29c956e372306e459edc6e64c1db86cd12d84867feb709ea0e6604867219e398ffe3d1d234bcd2cc44c2912382920aea2939cca5c0db3b12628f77942077368b495719c0bfc9b16afb23b8035868c3933d6ef58e0317cc7ad1e106530b4ef376e80e"}, {0xdd, 0x60, "4128ffe8e3f605db942c35555f2a666fd225bed128cf19c005932e647f033dd4b45bc6f7b944f0ea9bb278332eef6ba49d46096d5b040c216a23a5a01b99835566999d709fcd896e701d86114b4c1b75cd927b0fd5a5917960aced88271009ce"}, {0xdd, 0x14, "a75f2ef0ccc686b65efadfb860883fda03eed12e"}, {0xdd, 0xc6, "b013594c4d26c33fc03a57fa634930871f64758d3e33364cbfe8db45a7c3acad2bba11308e668e2a697d6e1787532cc279f631dcf7c9ebb3a4aeec2ea46c94e9286889fa5d6f749635157010a939d6b8ac94a13ec49492baf53844fb479767213913a1f99bf77b3ac4190b7fa84a2f43552412189d5c582fcf67860dc19cf10b2483ec1cd3ffed1a1a1a244aba47aeb174aecba8240470573bcdf0cf364e3873608078cf2a36eab3d32642d88c48a65d5ddb5915db4e13cd80e5fe10189ebdb1e869d5b232c0"}, {0xdd, 0xcf, "c28d25bf402c67e085ebca10a0804989135da135458ab3844f53df109eea9855c0a49a016845e5582458739eb23970bd8a73eaceae9718f9a653659de4cb54e352fbc72bdfd12d5e73cb464c3474c05a8ad2af48a1646ef2b7943176c6594e1d0a507faeaef23b3e23deaccd5b2aab9b997fd92559544bc019bb586d1e6d8103dfe845becab199a58b5bbf4375256bb59608555354c2bb921713d0e3b121d221ff7b75df3ecc9af69c4ee355cfa83d4028bc9f4cdebe5e6d1e7af68bcecb9eceacd6eace9d22be1dfccc531a8a09d7"}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x4000814}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002b40)=[{&(0x7f0000001700)=""/215, 0xd7}, {&(0x7f0000001800)=""/126, 0x7e}, {&(0x7f0000001880)=""/181, 0xb5}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/126, 0x7e}, {&(0x7f00000029c0)=""/157, 0x9d}, {&(0x7f0000002a80)=""/129, 0x81}], 0x7, 0x70d, 0x0)

22:53:18 executing program 2:
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x13}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @broadcast}, 0x10)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x44000, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6f}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x101}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008c0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1b4, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x110}, 0x4)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000540)={@empty}, 0x14)
r1 = getpgid(0x0)
fcntl$setown(0xffffffffffffffff, 0x8, r1)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000580)=0x40)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f00000005c0)={0x6, 0x4})
fadvise64(r0, 0x7, 0x3ff, 0x0)
read$usbmon(0xffffffffffffffff, &(0x7f0000000600)=""/50, 0x32)
r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffff8)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000640)={0xe7, 0x7, 0x7, 0x9, 0xfffffc00, 0x1})
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000680)={'syz1', "74741daa5a2304396f9df2f66c2db253ced4f50aa2c67a0b468a955b3d30ae19dcf67cc7e9cc2897b102891670744feebf8df69173d8fff941d0547197552a370c062b021c2b2cc27b933d506831198c2650c771bbe05925137b06d75dcc2601fd47c65f9a6b4202e778cd18b03ccaa8dd4a17cd8295db5755bf91e3d606a0d764d10545be65549db6698cc4303f694258bf97f936cc747ee1202f50ff676b1986624f192af17fe0f6297cc78a4c312311e4942fa497378b8b34251adba80e6d81307b779507b048a1edbe3407"}, 0xd1)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000800)={0x220, r3, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2d5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ad}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "a3963ced955b642aafa904d7bf1a127b3cdfda99e0bd01da4a"}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14000}]}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x200088c1}, 0x4)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r2, {<r4=>0xffffffffffffffff}}, './file0\x00'})
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000b00)={0x7f, "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"})

[   86.181139] audit: type=1400 audit(1737586398.999:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
22:53:18 executing program 3:
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='.dead\x00', &(0x7f0000000040)=@chain)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xbc, r0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x70}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "98cbc0d89497233e9bb4060e0619a8c5191fd19512385b0c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1b908568d2c6f3067d2620cb8b82aefd0ce866887b3950b5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3a92ed829703d20e20f6b5d4b51c54b4c2ff93c1c914274e"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d91936266f37ceca8c87d0f2e7ae2c3eab7d14c5c6b1945"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004010)
r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$negate(0xd, r1, 0x5, 0xfffffffffffffffc)
keyctl$join(0x1, &(0x7f00000002c0)={'syz', 0x2})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x344, r0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xe8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x3, 0x2, 0x3, 0x2, 0x3, 0xea79]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0xe000, 0x78, 0x8, 0x20, 0x7, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x1, 0x200, 0x1, 0x8, 0x4, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x65, 0x7ff, 0x9, 0x3, 0x1, 0x8, 0x20]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xab29, 0x1, 0x7, 0x4, 0x2, 0x8, 0x9]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6c, 0x4, 0x12bd32c02c9b4d40, 0x16, 0x2, 0x4, 0x1b, 0x36, 0x48, 0x6c, 0xc, 0x16, 0x9, 0x39, 0x6, 0x3, 0x1e, 0x12, 0x18, 0x18, 0x4, 0xb, 0x24, 0x6, 0x1, 0x6c, 0x24, 0x2, 0x1, 0x60, 0x2, 0x12]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x4}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0x8}, {0x5, 0x6}, {0x3, 0x1}, {}, {0x3, 0xa}, {0x5, 0x6}, {0x5, 0x2}, {0x6, 0x8}, {0x5, 0x5}, {0x6, 0x5}, {0x6, 0x8}, {}, {0x1, 0x4}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0x5}, {0x5, 0xa}, {0x1, 0x2}, {0x5}, {0x5}, {0x1, 0x2}, {0x2, 0x7}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x1}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x8}, {0x4, 0x3}, {0x2, 0x6}, {0x4, 0x2}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x9}, {0x4, 0x2}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x7}, {0x0, 0x5}, {0x7, 0x3}, {0x1, 0x4}, {0x0, 0x9}, {0x3, 0xa}, {0x7, 0x7}, {0x0, 0x7}, {0x7, 0x8}, {0x2, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x240, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x9}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0x2}, {0x2, 0xa}, {0x0, 0x4}, {0x4, 0x3}, {0x3, 0x8}, {0x2, 0x4}, {0x3}, {0x5, 0x1}, {0x7, 0xa}, {0x5}, {0x6, 0x5}, {0x4, 0x5}, {0x1, 0x1}, {0x4, 0x4}, {0x5, 0x2}, {0x6, 0x9}, {0x7, 0x9}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0xa}, {0x4, 0x3}, {0x1, 0xa}, {0x5, 0x6}, {0x5, 0x7}, {0x3, 0x8}, {0x6, 0x2}, {0x2}, {0x0, 0x8}, {0x1, 0x7}, {0x4, 0x7}, {0x2, 0x3}, {0x7, 0x7}, {0x1}, {0x3, 0x1}, {0x2, 0x6}, {0x0, 0x8}, {0x5, 0x2}, {0x7, 0xa}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x6, 0x1}, {0x0, 0x5}, {0x0, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x1, 0x6}, {0x4, 0x2}, {0x7, 0x2}, {0x6, 0x4}, {0x1, 0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0xa}, {0x6, 0x5}, {0x3, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x99123785f5c5a8c, 0x36fbcdeb96268ec8, 0x3, 0x0, 0x5, 0x18, 0x48, 0x3, 0x24, 0x6, 0x2, 0x2, 0x1, 0x6c, 0x60, 0x4, 0x48, 0x60, 0x9, 0xc, 0x12, 0x5, 0x48, 0x4]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1, 0x0, 0x4, 0x5, 0x3186, 0x0, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x9}, {0x0, 0x1}, {0x5, 0x8}, {0x4, 0x7}, {0x4, 0x6}, {0x1, 0x2}, {0x3, 0x7}, {0x0, 0x9}, {0x7, 0x4}, {0x4, 0x3}, {0x6, 0x3}, {0x7, 0x6}, {0x6, 0x4}, {0x2, 0x1}, {0x3}, {0x3, 0x9}, {0x3, 0xa}, {0x7, 0x1}, {0x3, 0x7}, {0x7, 0x4}, {0x7, 0x9}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x4, 0x1}, {0x3}, {0x0, 0x3}, {0x7, 0xa}, {0x3, 0x8}, {0x4}, {0x1, 0x8}, {0x3, 0x7}, {0x1, 0xa}, {0x7}, {0x3, 0x9}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x8}, {0x5, 0x9}, {0x2, 0x5}, {0x4}, {0x1, 0x4}, {0x6, 0x4}, {0x7, 0x6}, {0x1, 0x2}, {0x4, 0x9}, {0x2, 0x6}, {0x4, 0xa}, {0x1, 0x2}, {0x2, 0x5}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x6, 0x4, 0xc683, 0x6, 0x3ef, 0x2, 0x5]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4f, 0x6, 0x2, 0xf14, 0x400, 0x8, 0x8, 0x8]}}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0xb, 0x24, 0x12, 0x30, 0x18, 0x60, 0x5, 0x6, 0x6c, 0x1b, 0x60, 0x6c, 0x5d9f1dd02c16f6ef, 0x3d, 0x2, 0x48, 0x60]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x6}, {0x7, 0x9}, {0x4, 0x9}, {0x4, 0x7}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x4}, {0x2, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x3}, {0x2, 0x9}, {0x7, 0x9}, {0x5, 0x9}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0x8}, {0x7, 0x3}, {0x6, 0x8}, {0x6, 0x6}, {0x5}, {0x2, 0xa}, {0x0, 0x2}, {0x1, 0xa}, {0x3, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x8, 0x200, 0x100, 0x3, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0xfffc, 0x0, 0xfff, 0x1, 0x7, 0x20]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x12, 0x30, 0x9, 0xc, 0x6]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x77e, 0x200, 0x0, 0x8, 0x200, 0x6, 0xff]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0x9, 0x1b, 0xb, 0x1, 0xb, 0x1b, 0x39, 0x16, 0x1b, 0x30, 0x16, 0x16, 0x9, 0x5, 0x12, 0x6c, 0x30, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x101, 0x5, 0x0, 0x0, 0x1, 0x8001]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x1}, {0x5, 0x2}, {0x0, 0x8}, {0x3, 0x4}, {0x0, 0x4}, {0x2, 0x7}, {0x0, 0x1}, {}, {0x1, 0x7}, {0x0, 0x1}, {0x5, 0x5}, {0x0, 0x8}, {0x1, 0x4}, {0x6, 0x1}, {0x5, 0x7}, {0x7, 0x8}, {0x6, 0x3}, {0x0, 0x3}, {0x5, 0x9}, {0x4, 0x5}, {0x0, 0x3}, {0x2, 0x6}, {0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x60, 0x0, 0xb, 0x16, 0x6c, 0x24, 0x2, 0x3, 0x60, 0x32, 0x1b, 0x16, 0x4, 0x9, 0x4, 0x1, 0x60, 0x30, 0x1b, 0x5, 0x30]}]}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x4000000}, 0x804)
keyctl$update(0x2, r1, &(0x7f0000000780)="320f6e720b663fdb4de9df925656da65d3c5966fbcbf2173d145", 0x1a)
add_key(&(0x7f00000007c0)='trusted\x00', &(0x7f0000000800)={'syz', 0x0}, &(0x7f0000000840)="26142ab7eb8f114bc0ef46494ab99bef0e2752fc9dedc43cf77fe2258fa6c44eaf089a7be7b9a95e5047a4e297317ca144c40c65b67070c22c6f5473c3ae20fac65fb00a485b4b597bb20e6dafc80390d0c6e61193d2f4f6e5a94861b600a582996f1d228bd8e4b7bbb427f1e89e69d971cc4097e1c087546c3c50ff0ca880", 0x7f, r1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000008c0)={[{0x2d, 'net_cls'}, {0x2b, 'net'}, {0x2d, 'pids'}, {0x2b, 'net'}, {0x2d, 'net'}, {0x2d, 'perf_event'}, {0x2d, 'net_prio'}, {0x0, 'blkio'}]}, 0x3b)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000940), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000980)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000009c0)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x6}}, './file0\x00'})
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb4, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000004}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000b40)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
ioctl$HIDIOCGPHYS(r7, 0x80404812, &(0x7f0000000b80))
sendmsg$OSF_MSG_REMOVE(r6, &(0x7f0000001cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000c00)={0x1060, 0x1, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0x9}, 0x9, 0x3f, 0x8001, 0x7, 0x23, 'syz1\x00', "bc2b3464deae54977c45f74707aa4da6aab383d268d3569fb8757335b68e69dd", "b76b0147eb6ff4116c1db45bbfc3be05e688444af0deaec4e6132005cad8a389", [{0x3ff, 0x101, {0x2, 0xae27}}, {0xffff, 0x6, {0x3, 0x9e}}, {0x80, 0x7, {0x2, 0x1c6}}, {0x1ff, 0x3, {0x0, 0xffffffff}}, {0x81, 0x2, {0x3, 0x1}}, {0x7, 0x7ff, {0x1, 0x3ff}}, {0xf6, 0x0, {0x3, 0xfff}}, {0x7fff, 0x200, {0x3, 0x8}}, {0xffff, 0x9, {0x2, 0x6}}, {0x8, 0x3ff, {0x2, 0x3}}, {0x100, 0xa346, {0x3, 0xffffffff}}, {0x6, 0x8000, {0x3, 0x5}}, {0x0, 0x4, {0x2, 0x7ff}}, {0x7, 0x1, {0x1, 0x1}}, {0x0, 0x3, {0x3, 0x4c01}}, {0xb7e5, 0x4, {0x1, 0x7fffffff}}, {0x7, 0x40, {0x2, 0xffffffff}}, {0x1, 0x6, {0x1, 0xfff}}, {0x1ff, 0x1, {0x2, 0x4}}, {0xf9, 0xe35b, {0x2, 0xffff7fff}}, {0x27b, 0x20, {0x2, 0x8}}, {0x40, 0x7fff, {0x0, 0x2}}, {0x1, 0x1f, {0x1, 0x122}}, {0xff, 0x5, {0x0, 0x3}}, {0x8000, 0x401, {0x3, 0xfff}}, {0xf040, 0xff, {0x0, 0x7fff}}, {0x2, 0x4, {0x1, 0x7}}, {0x7, 0x9, {0x2, 0x3ff}}, {0x8, 0x996, {0x3, 0x10000}}, {0x2, 0x11, {0x2, 0x3}}, {0xff, 0x4, {0x0, 0x1}}, {0x9, 0x3, {0x3, 0x4}}, {0x4576, 0x9ff, {0x1, 0x2}}, {0x2, 0x9, {0x2, 0x7}}, {0x0, 0x9, {0x0, 0x7}}, {0x6, 0x8, {0x1, 0x7}}, {0x5, 0x1, {0x1, 0x1f}}, {0xad1a, 0x2, {0x1, 0x1000}}, {0x4, 0x3}, {0x8000, 0xfffe, {0x1, 0x80}}]}}}, {{0x254, 0x1, {{0x2, 0x10001}, 0x1, 0x1, 0x0, 0x6, 0xc, 'syz0\x00', "27a23722d13b498c6fc6c155feed1586d8414762091722007f43c1ed1dbc974d", "6e240f1c4dd06005f2cbffbb6f39b182fe91d8583ae9a9f36fedc51698b72295", [{0x9, 0xfff, {0x2, 0x571}}, {0x80, 0x5, {0x3, 0x7}}, {0xff, 0x8001, {0x3, 0x2}}, {0x101, 0x20, {0x3, 0x80000001}}, {0x6, 0x7f, {0x0, 0x87}}, {0x1ff, 0x20, {0x2, 0x5}}, {0x7, 0x7, {0xfc00847127ac39f5, 0x7f}}, {0xfff, 0xa7, {0x3, 0x80}}, {0x2, 0x1ff, {0x1, 0x1bd35328}}, {0xdff, 0x5, {0x1, 0x10001}}, {0x20, 0xfb, {0x1, 0x3}}, {0x1, 0xd861, {0x1, 0x3f}}, {0x7, 0x0, {0x2, 0x6}}, {0xff7f, 0x1, {0x3a825d59c9d765d4, 0xd5}}, {0x5, 0x0, {0x0, 0x5}}, {0x2, 0x3, {0x0, 0x4}}, {0x8000, 0x9, {0x1, 0x5}}, {0x20, 0x4, {0x2, 0x5}}, {0x1ff, 0x4, {0x3, 0x7}}, {0xc49b, 0xca, {0x1, 0x5}}, {0x4, 0x7fff, {0x1, 0x800}}, {0x0, 0xffc5, {0x1, 0x20}}, {0x100, 0x2, {0x1, 0x3ff}}, {0x1, 0x5, {0x1, 0x8000}}, {0x3, 0x6, {0x2}}, {0x7f, 0x8, {0x3, 0x7fffffff}}, {0x6, 0xf9, {0x3, 0x6}}, {0x6, 0x3, {0x3, 0x1ff}}, {0x7f, 0x3, {0x4, 0x5}}, {0x2, 0x6, {0x0, 0x2}}, {0x7, 0x1, {0x1, 0x1ff}}, {0x4, 0x4, {0x2, 0x5}}, {0x0, 0x101, {0x1, 0x3}}, {0x1000, 0x5, {0x3, 0x10000}}, {0xffc1, 0x2, {0x2, 0x7}}, {0x5b, 0x9, {0x3, 0x5}}, {0x6, 0x9, {0x3}}, {0x4, 0x1000, {0x0, 0x7ad}}, {0x9, 0x8000, {0x1, 0x9}}, {0x3, 0x4, {0x3}}]}}}, {{0x254, 0x1, {{0x2, 0xfff}, 0x6b, 0x80, 0x9, 0x87c, 0xc, 'syz0\x00', "ddbaf8ce69f26e8f17b37720741f3d199161f158861248c1aa7fa67ebfb638dc", "59a4c31d6df8663166d3efedb831df53327c31b94a8e613ddbdec11c0d57212a", [{0x3, 0xf193, {0x2, 0x9}}, {0x401, 0x8001, {0x3, 0x7}}, {0xfffb, 0x20, {0x3, 0x7f}}, {0x1, 0x7ff, {0x2, 0x9}}, {0x400, 0x0, {0x2, 0x80}}, {0xfffb, 0x2, {0x2, 0x2}}, {0x6, 0x8, {0x0, 0x5}}, {0x7, 0x9, {0x2, 0x1e5a}}, {0x1ff, 0x3, {0x2, 0xbd}}, {0xff, 0x4, {0x2, 0x3}}, {0x7, 0x8, {0x1, 0xa8}}, {0xff81, 0x0, {0x1, 0x101}}, {0x8, 0xfffa, {0x1, 0x222}}, {0x4, 0x5, {0x2, 0x2}}, {0x7f, 0x3, {0x0, 0x8ff}}, {0x40, 0x7, {0x1, 0xffff}}, {0x7f, 0xbf, {0x1, 0x7}}, {0x8001, 0x497, {0x0, 0x51347c7}}, {0x99e2, 0x8, {0x2, 0x1}}, {0x40, 0x2cbd, {0x2, 0x6}}, {0x7, 0x0, {0x1, 0x3}}, {0x9, 0x9e, {0x2, 0x2}}, {0x6, 0x7f, {0x1, 0x8000}}, {0x14d1, 0x7f, {0x3, 0x8}}, {0x5, 0x6ce, {0x0, 0xbc}}, {0x1ff, 0x2d, {0x2, 0x400}}, {0x4, 0x7, {0x1, 0x1}}, {0x1, 0x5d24, {0x3, 0x69c}}, {0x2, 0x8001, {0x0, 0x200}}, {0xff, 0x9, {0x1, 0x1}}, {0xfffe, 0x8, {0x1, 0x1}}, {0x3eef, 0x6, {0x1, 0x5}}, {0xff, 0x0, {0x0, 0x7}}, {0x1365, 0xfe00, {0x0, 0xfffffffb}}, {0xa9, 0x1, {0x1, 0xc55b}}, {0x7, 0x1, {0x1, 0x1}}, {0x7, 0x8, {0x0, 0x2}}, {0x8, 0x4, {0x1, 0x7}}, {0x8, 0x7, {0x2, 0x1}}, {0xbb, 0x26c, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x1, 0x4, 0x8000, 0xeb5, 0x18, 'syz0\x00', "cdc5200aa24550a4a60c38b90165be12833017cf6008ebef9484774e262cebed", "26af209313f5ba4259ba97a5970ce77d2a0ffdcad477b2bb19eba62f285ae969", [{0x7ff, 0x3, {0x1, 0x2}}, {0xfc00, 0x5, {0x3, 0x2}}, {0x9, 0xf5, {0x0, 0xa7}}, {0x8, 0x2, {0x2, 0x1}}, {0x5, 0x3, {0x1, 0xa2f3}}, {0x3f, 0x2, {0x2, 0x4}}, {0x3, 0x1, {0x1, 0xffff}}, {0x4, 0x1, {0x3, 0x10000}}, {0x9, 0x4, {0x1, 0x2}}, {0xf801, 0x2, {0x3, 0xffffffc1}}, {0x8, 0x6, {0x3, 0x3}}, {0x4, 0x6, {0x1, 0x7}}, {0x6, 0x7, {0x1, 0x3a5}}, {0x6, 0xdb, {0x3, 0x5a2f}}, {0xb73, 0x7f6c, {0x3, 0x8}}, {0x7, 0x8001, {0x1}}, {0x9, 0x2ba0, {0x1, 0x3}}, {0x0, 0x63, {0x2, 0x80}}, {0x7, 0x3, {0x1, 0x30000}}, {0x7, 0x9, {0x0, 0x7}}, {0xc42f, 0x6c5f, {0x0, 0x10001}}, {0x5, 0x6, {0x0, 0x2}}, {0x1000, 0x400, {0x2, 0x8}}, {0xddfd, 0x20, {0x1, 0x6f2}}, {0xaa, 0xbf5a, {0x0, 0x9}}, {0x3775, 0x8, {0x0, 0x5}}, {0x8, 0x0, {0x3, 0x8}}, {0x4, 0x40, {0x3, 0x1}}, {0x5609, 0x8, {0x2, 0x1}}, {0x8, 0x1ff, {0x3, 0xffff}}, {0x3, 0x0, {0x1, 0xc5e}}, {0xa84, 0x40, {0x3, 0xffffffe1}}, {0x7, 0x1}, {0x7, 0x2, {0x2}}, {0x1, 0x7, {0x2, 0x3}}, {0xd823, 0xe00d, {0x2, 0x2}}, {0x401, 0x3ff, {0xd22076a951b62f2a, 0x51e}}, {0x9, 0x2, {0x2, 0x2}}, {0xff, 0x8, {0x0, 0x1}}, {0x1, 0x81, {0x2, 0x1ff}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x8, 0x5d, 0x0, 0x9, 0x1b, 'syz0\x00', "a2bab4eb9effd6c897de7271537f917533f96c54d3a98d27db86224710f8602e", "e77cfacd346f288b4a26b040b9a02a36034655b32916a6a7cef1340a6524f698", [{0x4, 0x3f, {0x1, 0x4}}, {0x4, 0x6, {0x0, 0x80000001}}, {0x5, 0x2, {0x1, 0x1000}}, {0x8, 0x1, {0x1, 0x10001}}, {0x7, 0x0, {0x1, 0x7}}, {0x2, 0x1, {0x3, 0x60a1}}, {0x200, 0x0, {0x3, 0x1d}}, {0x6, 0xffff, {0x0, 0xd48a}}, {0x6, 0x7, {0x2, 0x10000}}, {0x9, 0x2, {0x0, 0x91}}, {0x4fa7, 0x1, {0x1, 0x5}}, {0x4, 0x0, {0x1, 0x4}}, {0x9, 0x7fff, {0x0, 0x6}}, {0xcac0, 0x0, {0x2, 0x7}}, {0xff, 0x9, {0x3, 0x1}}, {0x0, 0x5, {0x0, 0x9}}, {0x80, 0x8, {0x1, 0x9}}, {0x200, 0xdc, {0x3, 0x1f}}, {0x1000, 0xad5, {0x0, 0x7}}, {0x1, 0x68, {0x3, 0x4}}, {0x36, 0x8, {0x3, 0x7f}}, {0x7fff, 0xfffe, {0x3, 0x100}}, {0x0, 0x1, {0x0, 0x6}}, {0x3ff, 0xffe7, {0x3}}, {0x8000, 0x8000, {0x3, 0x8001}}, {0x1, 0x3, {0x2, 0x9}}, {0x2, 0x45a, {0x1, 0x7}}, {0xd1, 0x101, {0x0, 0x6}}, {0x73, 0x9, {0x3, 0x800}}, {0x49a, 0x40, {0x1, 0x6}}, {0xff, 0x6, {0x3, 0x1}}, {0x6, 0x20, {0x0, 0x3000000}}, {0x4, 0x5, {0x3, 0xffffff60}}, {0x3, 0x2, {0x2, 0x9}}, {0x6, 0x7, {0x3, 0x8}}, {0x6, 0x426, {0x3, 0x8c}}, {0x3, 0x0, {0x2, 0xfffffff9}}, {0x7ff, 0x800, {0x2, 0xffff}}, {0x1, 0x6, {0x2, 0x5}}, {0x4, 0x1ff, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x8000}, 0x6f, 0x2, 0x40, 0x2, 0x22, 'syz0\x00', "995b75535f6788c60a40b1df3c717a5d995f7b3d98364fe5cd2f6471539b7bc6", "39b3686f3b535022dc5ea9564956c9ca9cf54439f114733c4d63aa8cf7518015", [{0x7, 0xb9e9, {0x3}}, {0xefb4, 0x0, {0x1, 0x7ff}}, {0x3f, 0x8, {0x2, 0x100}}, {0xff0b, 0x4000, {0x3, 0x9}}, {0x18, 0x0, {0x1, 0x9}}, {0x80, 0x67, {0x1, 0xb6a8}}, {0x1, 0x3f, {0x0, 0x7ff}}, {0x8, 0x1f, {0x1, 0xb20}}, {0x8001, 0x7db7, {0x1, 0x1000000}}, {0x1, 0xe8, {0x1, 0x1}}, {0x8001, 0x1, {0x3, 0x6}}, {0x2, 0xcdef, {0x2, 0x24e}}, {0x4, 0x2, {0x1, 0x4}}, {0x2, 0x0, {0x3, 0x6}}, {0x8b2, 0x9, {0x0, 0x7}}, {0x1ff, 0x7, {0x2, 0x1f}}, {0x400, 0xffff, {0x2, 0x2}}, {0x7fff, 0x5f1d, {0x1, 0x5}}, {0x5, 0x5, {0x0, 0x6}}, {0x8001, 0x1, {0x2, 0x8}}, {0x0, 0x5, {0x3, 0x1}}, {0x4, 0x0, {0x2}}, {0x2, 0x3c8, {0x3, 0x7}}, {0xfff, 0x3f, {0x1, 0x101}}, {0x8cc, 0x0, {0x1, 0x4}}, {0x8, 0x8, {0x0, 0xffffffc9}}, {0xe32, 0x0, {0x0, 0x401}}, {0x8, 0x0, {0x2, 0x1}}, {0xfa21, 0x401, {0x0, 0x8001}}, {0x101, 0x3a, {0x0, 0x3}}, {0x9, 0x200, {0x1, 0x4}}, {0x3, 0x1000, {0x1, 0x10000}}, {0x4, 0x18, {0x0, 0x9}}, {0x3, 0x4, {0x3, 0x2b}}, {0x0, 0x1f, {0x1, 0x80000000}}, {0x0, 0x800, {0x1, 0x3}}, {0x8a6, 0x6, {0x3, 0x6}}, {0x6, 0x3, {0x2, 0x5}}, {0xdb4, 0x7ff, {0x1}}, {0x9fa5, 0xfff, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x101}, 0x3, 0x5, 0x7f, 0x7, 0x18, 'syz1\x00', "d60bd88936d2d7f8ca388ca0666755eab67f067c480574799f29691790830893", "cbfa7cbb096a288a8570d53e30abde0c2f4bfef980e0c02ce5523e1038e88fb0", [{0x2, 0x6, {0x3, 0xb897}}, {0x3, 0xabfb, {0x2, 0x49}}, {0x7f, 0xc4, {0x3, 0x3f}}, {0x1, 0x9, {0x1, 0x3ff}}, {0x30, 0x7, {0x1, 0x9}}, {0x7fff, 0x5, {0x1, 0xfffffffe}}, {0xfff, 0xffff, {0x2, 0x1}}, {0x9, 0x1, {0x0, 0x5}}, {0x3f, 0x81, {0x2, 0x578}}, {0x0, 0x3ff, {0x2, 0xf2}}, {0x7f, 0x8, {0x3, 0x5}}, {0xec, 0x800, {0x0, 0x3}}, {0xa3b, 0x200, {0x1, 0x2}}, {0xc8af, 0x1, {0x2, 0x9}}, {0x1f, 0x5, {0x2, 0x4d92}}, {0x2, 0x101, {0x2, 0x7fff}}, {0x7, 0x1, {0x3, 0x1}}, {0x79d3, 0x7, {0x1, 0x7}}, {0x5, 0x2, {0x2, 0x8}}, {0xc083, 0xf1b, {0x3}}, {0x98a, 0x8, {0x1, 0x1f}}, {0x3, 0x146, {0x0, 0x81}}, {0x4, 0xd5a, {0x3, 0x7}}, {0x6, 0x81, {0x2, 0x1000}}, {0x5, 0x8001, {0x3, 0x7}}, {0x4, 0x0, {0x1, 0x7}}, {0x7ff, 0x401, {0x3, 0x80000001}}, {0x5, 0x7ff, {0x0, 0x1}}, {0x4, 0xfe, {0x3, 0x4}}, {0xffff, 0x4, {0x0, 0x1000}}, {0x7, 0x0, {0x0, 0x6}}, {0x8, 0x5, {0x0, 0xffffffff}}, {0x719f, 0x81, {0x0, 0xa3a3}}, {0x0, 0x6, {0x2, 0x2}}, {0xbf, 0x101, {0x2, 0x6}}, {0x40, 0x7, {0x2}}, {0x9, 0x7, {0x3, 0xffffffff}}, {0xb323, 0x8000, {0x3, 0xffff0000}}, {0x9, 0xabb, {0x3}}, {0x8, 0xc11, {0x3, 0x1}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x40080}, 0x4080)

22:53:19 executing program 4:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r0=>0x0, 0x29, 0x0, 0x6, 0x9, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, 0x40, 0x1, 0x2, 0x280}})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private0, @in=@initdev}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8)
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', <r2=>r0, 0x47, 0x7800, 0x20, 0x1, {{0x1a, 0x4, 0x0, 0x6, 0x68, 0x68, 0x0, 0x2, 0x2f, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xcd, 0x1, 0x6, [{@loopback, 0x8000}, {@multicast1, 0x9}, {@remote, 0x1000}]}, @end, @lsrr={0x83, 0x17, 0x51, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @generic={0x83, 0x3, "89"}, @timestamp={0x44, 0x1c, 0xf6, 0x0, 0x7, [0x200, 0x8c4, 0x8, 0x0, 0x9, 0x5]}]}}}}})
setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000380)={@empty, @broadcast, r2}, 0xc)
ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f00000003c0)=""/146)
pipe2$9p(&(0x7f0000000480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl1\x00', <r7=>r6, 0x700, 0xa0, 0x6, 0x6, {{0x11, 0x4, 0x2, 0x9, 0x44, 0x64, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @empty, {[@end, @ssrr={0x89, 0xb, 0xe0, [@local, @multicast1]}, @generic={0x83, 0xe, "4047fee2f46d454d75100cf1"}, @noop, @timestamp={0x44, 0x14, 0x16, 0x0, 0xc, [0x0, 0x9, 0x0, 0x6]}]}}}}})
open_by_handle_at(r5, &(0x7f0000000600)=@FILEID_NILFS_WITH_PARENT={0x20, 0x62, {0x4, 0x7fffffff, 0x3ff, 0x8, 0x1d12}}, 0x202002)
ioctl(r4, 0x2, &(0x7f0000000640)="76ded5878adeef18d7cec757bedd2892b218cae812d950d9d2180030f84c13cc992b72a8a9990e7a8cb998668e1d1238226b293b5b9c70b8d10760464254ae113acecb4392e4114921feb272d7673840577c26f53940baa8fa14f2fca115e5690adc175d17c440c1a1de72ec8da77640b1ef22a30e9e79b41ee93a4d65f3e1fbaa5767f5452d238b0ef4e0ec96e51272de568973630d56ca6de30b016243ebdb78e6fd578a1f3beba3205e6d0567ec286a4266a5627abfb338808f14b86f9140e7c2004ae0f45aad30")
sendto$inet6(r4, &(0x7f0000000740)="eb10b4c5a79a74dd4bb81ca655e07b2204816d94c778598c96b7cc70c005f29a628b2b0b787109769c1635d1269ec917bca608bb9e217d772ff6f93dc2d7cb3f399ebe897720ebfd3b3979c9dc1e0075a45bdd810fdeed767f1bbc16e9a5b622610a113e0815a083985f133d21a667c1437d5f0cb4a35d75f3b30d9065206e1bc61255aa488fb1debed7f7928c19874cf20407bf3f7ecf7019258047f315520aa0e57cf2a09cdd", 0xa7, 0x4000000, &(0x7f0000000800)={0xa, 0x4e24, 0x9, @private1, 0x100000}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000880)={'syztnl1\x00', <r8=>r6, 0x2f, 0x7, 0x3f, 0xffff, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x7800, 0x9, 0x7ff}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000940)={'ip6gre0\x00', <r9=>r6, 0x4, 0x81, 0xff, 0x6, 0x2, @private1, @loopback, 0x10, 0x10, 0x1, 0x6}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb8, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r10, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20040004)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)

22:53:19 executing program 5:
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff)
fsync(0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x2004})
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0))
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, 0x15, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5e4d858d63e4583a}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000804}, 0x8040)
r1 = fcntl$getown(r0, 0x9)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = syz_io_uring_complete(0x0)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000001140), 0x8, 0x400601)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001180)={{0x1, 0x1, 0x18, <r7=>r0}, './file0\x00'})
r8 = getpgrp(0xffffffffffffffff)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000011c0)={{{@in=@private, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000012c0)=0xe8)
r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001300), 0x400040, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="5e6f5208c71f9e2b42561eb1e941f2e4", 0x10}, {&(0x7f00000002c0)="03008741df5f101f2e5641c8d109e84752f72b6b8c6dfdd18882d08bef92baeb196525f27aa3c10b3e18361bb92affedadd6c78b2108847b3ba1a16f29ff07b967084c36dfa6851aef5dfaf9fafcbcd4d31e152d100c0c456ceccc25733bd14ff704adcc1e6bf6e27ebb2582533b74e03422fe53c0dd50f712e14b33ffe09a09f46e1f6e53a6883de837", 0x8a}, {&(0x7f0000000380)="f5f97806c5ac9ecb5e4dd91be5bc920e07df8eef8043f1b1b7748444f55402b1416414fb21717b3ea3cc498cefb9306154", 0x31}], 0x3}}, {{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000480)="950608583f5fa279bf6e1079a8702835b37a6dda9280dd1ddbfe3143eff06e260d9c2b29ceaf22318a6ed7fe3b5c1e3ca69909a0", 0x34}, {&(0x7f00000004c0)="c59c51c0439c4a9b819da6e6953f18947c84daf9fee274d37effecdadb2f18cc6d55471594819ca4f3a0e5405f72a586688c30b1f46d61402a3990171a1ef9946071d31331cc6734a3af38cb328be56103e85ba76772b87773c31a86eedaa2291d79fd7b52a66b1ad3a37355a5de40678e27ea852a89647ee7904fd370369947e0170e400b1ecaad8dcdd7cecf806f7c532be9d800fa3881d064329aba", 0x9d}, {&(0x7f0000000580)="0781d018a291adcbc6e95906305e0d25c0da96fc414e54a065cd67b00d8c2b060374d7e9ff4fb13e0430e752fb86eb29a375cb2fab77d53b0b69d173c144c931c7e3bbb03610bcd7887b220e91f76f54f992772eeb9f4f9f2900537a510cf047d1381046ac1852f383fd8cb2ed2c1e0e629f811ef3c430daf1d6307d4c2e7ed349e0d9c739e3a0723e05a601f4228893226ed528eaadd27cb22bd643cd07c50697c6fc83babb8cff6c6c8faec9045feb78f46f5e163253a91302c058f989ccae320dd1a2fa5f9d2404e0c0eb0e71aa2d19af34e895b8cc5d9477647e93be14", 0xdf}, {&(0x7f0000000680)="27d8320150efa0f015ca0f11d80970e01ec7a8136a018d3452f2bd2d7b68774fe7beab1e106692dd717707a664175242531f10a73e7ae932e03c85ec838f78fc4f7730644ca861431d5fc3efd85e05e30ee0de6d6e1f92abb9243b33bdd45a996f44357023730769b7ab8fa6015c3fcfc349a0b653ad8940f0a753874c71053af68b290d10caddcccd9c0740c620a925411ccd5319cb32c0b5cd9ed088074c3975a3286ffe656ff7de88bdacd0f893b7f1536fa90cd626b873", 0xb9}, {&(0x7f0000000740)="ffa66e20a01818db1cf8894e5700127c2af691059efabf17dac8a60675301d89a22587c9b4b2fb60ced446b9e85697121d49330d06d0856e321c24f0bb9b1a273d188260c5c869315cbffe79b8c4f039457de9526b1b4593427a29310830e808a6387b44f350940f470db0c500847da28f7e51d2f6", 0x75}, {&(0x7f00000007c0)="968329ac635f51a9d0829150bea6c67bc1121d5d87851ac55411b763817a0095e23438b0168d955d36b97614241afea81bfcec6a7989a4aab0100043716f3e6ef2f3d739047144828509dd10e766db4d811a97e247210560ac0d4c9c3738da7ead769744", 0x64}, {&(0x7f0000000840)="3246c995800f406b7e921dfb1913b15389f92c7d1868201afdaa0ace416b9fcd86de98dc4f6727632c", 0x29}], 0x7, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x38, 0x1, 0x1, [r2, r0, r0, r0, r3, r0, r0, r4, r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xa8, 0x80}}, {{&(0x7f0000000a40)=@file={0xa526cc569c3ef434, './file0\x00'}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000ac0)="cbde3bb47b508583254e7b259f6e66a79995dbcc2e69a9a8313f5c36b620132860e7011c8e4ed484d048b10c18a899d84b3130f70d19c76b4c771ecc0d89f025099b14689c27260fb9b5a440ca01914cada461edadda9e24c8b43e4ee4115e53c5ec5c9e903e71b27485ecfb45cfe21d679f9908deb7", 0x76}, {&(0x7f0000000b40)="41f0198bc574d0332f717899c8325713c779d1e9d3226d2070bf189e2cdd3d1e7bff5633e544e33e3aad10187691a9b789fff4e1550e791e1a6044e9bffb0728964c8425bd4929802770a18b9334375d41d5cf01f6acd1e2e1e0943cb19b39b45de8fd5bd76e7be7e29d9e6950bcff15f8c7b60c2c9384cf91f2fa5ee1ebad8a1f85b2980e155a4af78ea285bb52d7d04246cc538aac0bc836fa8148bdcbaeb42d7e642d45a6e1ec8ce56fdc76775a6e32c4dad9459e65fb5637328024d1fe3134a802b5e92b2a280ad7f672cf2ce4c9d3fd3892", 0xd4}, {&(0x7f0000000c40)="888b1515fd7f5b5fbfcf42399d00ba0860d2be6095c9d78b8e423de3f995215e97365c9b0c823248eb78f7307dcbd8c02d4e05745560d171ec1c62f57938d2c06c6b684bf7463fc99c90a2a203309cb7ed30b02b97314ad856312d53e02c11c1fca75ac80ec3805feb2329cc7bc0edeac88642c3706a544d50ef9bc587efb6820ecfb4280905d92e1427eae2d2c6f1db742d2cf3a6470f616c6cc0443af2dd3385d08b15caa310", 0xa7}, {&(0x7f0000000d00)="2e4bccf293bd91a4d0a6203f520e787bcf4455526e9cb2d3a704de33ca3cac8dc812829366f0f09e5bd153dc6cb36794ffb3ac2163d4cc8f95685796d187cb8d2cd2242a0729887047e60109", 0x4c}, {&(0x7f0000000d80)="c8a579ff8dd35df0615d36894b26b667a4ed4168b4d76686c4409165820380ad3bf5e1a804a8549d3c9fecc93f7209caeb78f4030dbd81469953eaeae10703919c8510d916a424f15d45138e1dcc1de80be8707f695ddc5c81d305721d56f87f40d06ca4957d4a5c4f1d5e053655138d948012643e80d7ae5845eb078075f5e5d81e6f9c5ddd558a618e207a4a74298e4008268bfcbfeab280484df13b5decf68ef8d4b5f433124b3346cb1f83842ddd6cc3f32a7ed61c6d33e1a38b5b4dc8f1764110a1db6bb2d8f1e9b9661c477ba4c500f4019f7befc423753297136b287e815dca082e6548d2", 0xe8}, {&(0x7f0000000e80)="83ef1620104f925b8a1a9c4bb66a2effb91396e680924338feb7aed7bb7b6ba5c8edb649556e7b3e8715e71d557f04e3f2db22f6f9ad7041cc14bfa09c8046884e3131b8ae2b9f23274ee594e083ab7c624199e03b8ec5513aa172b8d87eccd40ebce038373a9f3af90541cd2ec954b8e3ba0295f1e5437ad21a11e6677196d084ce7c15c8c17a6e6d5f9ddd1d1aafb327ddc1e455cb7879", 0x98}, {&(0x7f0000000f40)="170d0af4516e39c8606edc089b3a741d0ba390d6e4814bbb6145f136825f5dbc2c551bcb3f943105fa7c9830fc0452ac2142fb5edefc6a5cdb5e0abfa3203b3fd2c3c7fbf0660cbb39eb1a43bcd08fc634381ab45924ba69986a3f8a88e3b8228abf784b7e3871427f5068632f90fa09d976fec3d9e09251828dd094cc4d684e221c417ff8a3ca7b0d33aede102a91753f7c8b218be51afc2fc424b2d0", 0x9d}, {&(0x7f0000001000)="99f1fc83e316bd18cf84c1c0f2d53304b03ef8529a65bae4984caede4b448b23b22376ec031234c8656e6761e97c41cbfa291f64ceddcdf1c801ddb39fc8cc62322e8cffde0409716939de27ac2eaa8097aaa803fc53874f2950bea3227215b33b1abc0779f299e68cd0cec07b866508e3b061f4de33753c5afdf3ede2b2df980e69e9a464014d69a36c2e62b6ebbd3a18ad28203e5dea2a843a4d04d591819c087060596414527dea70df1d24e2a012ee2b", 0xb2}], 0x8, &(0x7f0000001340)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r6, r0, r0, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r10]}}], 0xe0, 0x48000}}], 0x3, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000001500)=<r11=>0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000001540)={{r7}, r11, 0x8, @unused=[0x2, 0xffffffff, 0x2, 0x6], @subvolid=0xfffffffffffffd91})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r10, 0xc0709411, &(0x7f0000002540)={{0x0, 0xeda0, 0x40000000400, 0xc2, 0x3, 0x5, 0x81, 0x8, 0x5, 0x2, 0x80000001, 0x4, 0x2, 0xfffffffffffffffa, 0x1}, 0x8, [0x0]})

22:53:19 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x7, 0x1a7aabed}}, './file0\x00'})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r1=>0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1)
r2 = pidfd_getfd(r0, r0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x1}, 0x9, [0xac3, 0x800, 0x9, 0x7, 0x3f, 0x9, 0xfffffffa, 0x6]}, 0x5c)
sendmsg$802154_dgram(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14, &(0x7f0000000200)={&(0x7f0000000180)="c4e1b43618d52c710b6401ac95bcce46f3350fcde6a86b04decc14881ba3c0db6a13e35e510c8aedd13804d7e5c74f3456c524975d09c0c5622928c064dc4016b1acc7e488b59bbae24e4b49f0f86102d0a3c2c21ce6bc6b", 0x58}, 0x1, 0x0, 0x0, 0x400c004}, 0x448)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0)
fchdir(r3)
getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x0, [0x1ff, 0x3ff6, 0x40]}, &(0x7f0000000340)=0x44)
ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000380))
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f00000004c0)=""/162)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000580)={'ipvs\x00'}, &(0x7f00000005c0)=0x1e)
prctl$PR_SET_PDEATHSIG(0x1, 0x41)
openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000640)=""/136)
syz_genetlink_get_family_id$fou(&(0x7f0000000700), r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000740)=""/240)
r4 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$binfmt_aout(r4, &(0x7f0000000880)={{0x108, 0x7f, 0xdb, 0x8b, 0x244, 0x1, 0x265, 0xffff8001}, "ae35f986908c15ad1e0c5aed9a553c5433881005afbfe8b074691826b796511e4a5c377515c506cfd76a8e8d442dd530dd4f7a201980a73bf03036350b4a50edc2fc3241216f37d2d13041eefb93e706db77290ab233bec5f2ee955cb17bfa82d12f1c3c177f5a29081878fa76660808e47b4681f22d6874f3a0517e6c318c2d27f1ad6e159478eeef7c7d69296cfa0f66d1baf7a98db968061b0d3c703173129f7c5a3e1a47bcbf75507d2f8c1489877f6b61c34dd0efc5edf754e86a5c8b76598f77e2a089d88cf1ece5de528865c2f8fa", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7f2)

22:53:19 executing program 7:
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "1d4e13b409ee6e09", "d42cce32f14dc06aaa08e462039a1e95", "e3cc95ae", "c3ada59340e0d5e7"}, 0x28)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x210102, 0x0)
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x64)
fcntl$getflags(r2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x80, 0x7, 0xffffffff, 0x1, {{0xe, 0x4, 0x3, 0x6, 0x38, 0x65, 0x0, 0x9d, 0x4, 0x0, @local, @multicast2, {[@generic={0x86, 0xf, "79342aad53ec95652695fa59db"}, @end, @ssrr={0x89, 0x13, 0x2f, [@broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}})
r3 = eventfd2(0x425bcb8e, 0x180800)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6004809}, 0x41)
r5 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
vmsplice(r5, &(0x7f0000000680)=[{&(0x7f0000000300)="dfbd877a336cbd8553913b7fa5626632b74ac0c19939df8865d29124fc1ce59ac187296eacab31d69b338b1ea609d7d3f88362719a2be868a9cecc1a9d52aeba7004534a053e6667b3a96becdc8fab4587c46d657e64351ea95ef2d8bf1d153a6338065f783eb8247dc4a34bd541de815e36bc51ab27d744447bbb296fa3326d1d7f2838ffc8bc4fcb752304daabd981a630427c24f0777dbb0f2387878ea0e8e4c0541d2403ea1390f03c8f79bbbd9c5bd3b0a891b9dcfa962b7683596f49f1de6714de0c2b676799bdd18c1c6400edfa5e1a043dea656617f0e37023445b", 0xdf}, {&(0x7f0000000400)="4ddabbb6496522ea500935484905850d90c2a2a0ca424b815fc6b9ae01e890a33a0da7e0e04fd044dfbf371dea3c758ef1a506f6196219937111675e009109ba17fbac39af646695817625408eec2376de092549b1402ce94e3b31bd869c", 0x5e}, {&(0x7f0000000480)="945364bea12d942539a84636dfa99bb909ad3b4e4c89c4326a18dd59a01d107ff9388a59ca6d40b201a6692d7ba4760dc5e6939661ddbcabb9b3f1fbe7d97bf31d8a52deace0a6086b3179e2ce5b4dc7611228de6406fde0fc8f38a29ed127cdbbb14f9dcb695174491c81e77c4283cf938163091bb0217ae7b7378e4d35539c015fe9d779658ea40e3093d80daa1b2054780306b73a463593c282b8243d1729c1faf88b6257c592c934a4b9c37840739bf5b21dd7c02c929c8333d9", 0xbc}, {&(0x7f0000000540)="ca692946f8ac28c0e5d289d1c3f79a55ef4eb2b3aeb1cc939d6605ec17728833cef98743d122d4a9a4ea37aa6719c83d5469b0dda1f43f9a89f63d6fa84c68310f8f655d2424b01e762e0a2801686cac9fb8129f99e4ec1efb223f1725159d3016ec756ac1a1ddc544d8cc7e1011ebded218331812bf9cff64ae1e8c03ee02cee5ba711769319569db51c38bc4f36b3bec8d4872ba887aadc1a5bedf3452d3ae98cc9f7890920e71eabd8b3b7d2a623f8c4b1fe66d462a5b2a346632bc4ab448e348d2398786df536c4f2896b9ec83f1a44829372e1bf5", 0xd7}, {&(0x7f0000000640)="b16300f58cd353201d3553d12c5e4b103f9b04", 0x13}], 0x5, 0x1)
r6 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f00000007c0)={&(0x7f0000000700)=""/159, 0x9f, 0x6})
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000800))
ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611)
ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000840))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r4)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r7, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x4000100)
sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8814}, 0x10)
sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x52}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x8010)

[   87.637123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.642538] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.645000] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.651151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.654954] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   87.657754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.710622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.725778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.729136] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.744459] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.747429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.751648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.762471] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   87.767858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.768484] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.770009] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.774728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.777654] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.783021] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.784845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.786869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.788787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.789135] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   87.790923] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.794088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.804511] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   87.812864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.813211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.824763] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   87.828021] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.899192] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   87.900012] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   87.908848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   87.912372] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   87.928804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   87.933666] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   87.940521] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   87.940792] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   87.950556] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   87.960000] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   87.973639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   87.974464] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   87.977038] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   87.981443] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   87.983736] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   87.987729] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   87.990863] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   88.001594] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   89.721925] Bluetooth: hci0: command tx timeout
[   89.849346] Bluetooth: hci2: command tx timeout
[   89.913420] Bluetooth: hci1: command tx timeout
[   89.914864] Bluetooth: hci3: command tx timeout
[   89.977343] Bluetooth: hci4: command tx timeout
[   90.041456] Bluetooth: hci5: command tx timeout
[   90.107334] Bluetooth: hci6: command tx timeout
[   90.107699] Bluetooth: hci7: command tx timeout
[   91.769490] Bluetooth: hci0: command tx timeout
[   91.897424] Bluetooth: hci2: command tx timeout
[   91.961625] Bluetooth: hci3: command tx timeout
[   91.962009] Bluetooth: hci1: command tx timeout
[   92.025342] Bluetooth: hci4: command tx timeout
[   92.089466] Bluetooth: hci5: command tx timeout
[   92.153542] Bluetooth: hci7: command tx timeout
[   92.153730] Bluetooth: hci6: command tx timeout
[   93.817413] Bluetooth: hci0: command tx timeout
[   93.945712] Bluetooth: hci2: command tx timeout
[   94.009358] Bluetooth: hci3: command tx timeout
[   94.009532] Bluetooth: hci1: command tx timeout
[   94.073471] Bluetooth: hci4: command tx timeout
[   94.137432] Bluetooth: hci5: command tx timeout
[   94.201477] Bluetooth: hci6: command tx timeout
[   94.201643] Bluetooth: hci7: command tx timeout
[   95.866392] Bluetooth: hci0: command tx timeout
[   95.994346] Bluetooth: hci2: command tx timeout
[   96.058297] Bluetooth: hci1: command tx timeout
[   96.058396] Bluetooth: hci3: command tx timeout
[   96.121326] Bluetooth: hci4: command tx timeout
[   96.185464] Bluetooth: hci5: command tx timeout
[   96.249414] Bluetooth: hci7: command tx timeout
[   96.249517] Bluetooth: hci6: command tx timeout
[  149.958644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  149.961966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  149.964972] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  149.970850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  149.976585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  149.979377] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  149.981140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  149.984537] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  149.986989] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  149.988314] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  149.991065] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  149.995393] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  150.160672] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  150.164655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  150.164910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  150.169786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  150.170345] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  150.171835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  150.175414] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  150.176475] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  150.178966] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  150.180454] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  150.180663] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  150.184681] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  150.200001] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  150.204464] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  150.208509] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  150.208528] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  150.210460] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  150.211812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  150.278930] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  150.281536] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  150.284742] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  150.288330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  150.291942] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  150.295867] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  150.301285] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  150.302454] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  150.302809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  150.332190] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  150.332726] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  150.336797] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  150.337850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  150.341604] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  150.343585] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  150.378454] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  150.382400] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  150.383419] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  152.057362] Bluetooth: hci0: command tx timeout
[  152.057762] Bluetooth: hci1: command tx timeout
[  152.313361] Bluetooth: hci4: command tx timeout
[  152.313779] Bluetooth: hci2: command tx timeout
[  152.377368] Bluetooth: hci3: command tx timeout
[  152.378130] Bluetooth: hci7: command tx timeout
[  152.505610] Bluetooth: hci6: command tx timeout
[  152.506448] Bluetooth: hci5: command tx timeout
[  154.108265] Bluetooth: hci1: command tx timeout
[  154.108364] Bluetooth: hci0: command tx timeout
[  154.361322] Bluetooth: hci2: command tx timeout
[  154.361418] Bluetooth: hci4: command tx timeout
[  154.425428] Bluetooth: hci3: command tx timeout
[  154.426165] Bluetooth: hci7: command tx timeout
[  154.554457] Bluetooth: hci6: command tx timeout
[  154.555316] Bluetooth: hci5: command tx timeout
[  156.155320] Bluetooth: hci0: command tx timeout
[  156.155425] Bluetooth: hci1: command tx timeout
[  156.410337] Bluetooth: hci4: command tx timeout
[  156.410440] Bluetooth: hci2: command tx timeout
[  156.474333] Bluetooth: hci7: command tx timeout
[  156.474437] Bluetooth: hci3: command tx timeout
[  156.602312] Bluetooth: hci5: command tx timeout
[  156.602407] Bluetooth: hci6: command tx timeout
[  158.201375] Bluetooth: hci1: command tx timeout
[  158.201472] Bluetooth: hci0: command tx timeout
[  158.458335] Bluetooth: hci2: command tx timeout
[  158.458438] Bluetooth: hci4: command tx timeout
[  158.522407] Bluetooth: hci3: command tx timeout
[  158.522703] Bluetooth: hci7: command tx timeout
[  158.650313] Bluetooth: hci6: command tx timeout
[  158.650421] Bluetooth: hci5: command tx timeout
[  212.097058] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  212.098697] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  212.103507] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  212.110841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  212.113641] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  212.115320] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  212.242744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  212.245627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  212.252741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  212.258426] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  212.260065] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  212.262447] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  212.266588] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  212.274623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  212.285907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  212.304705] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  212.308600] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  212.314597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  212.367723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  212.372584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  212.378849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  212.384656] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  212.391540] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  212.401754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  212.496615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  212.497897] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  212.499473] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  212.512425] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  212.515561] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  212.516547] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  212.683303] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  212.693458] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  212.702095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  212.704643] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  212.714088] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  212.728080] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  212.743154] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  212.753652] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  212.759951] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  212.764892] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  212.769604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  212.769992] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  212.773120] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  212.774470] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  212.793462] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  212.906899] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  212.921442] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  212.925871] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  214.138749] Bluetooth: hci0: command tx timeout
[  214.329401] Bluetooth: hci1: command tx timeout
[  214.394331] Bluetooth: hci2: command tx timeout
[  214.458401] Bluetooth: hci3: command tx timeout
[  214.587724] Bluetooth: hci4: command tx timeout
[  214.905483] Bluetooth: hci5: command tx timeout
[  214.906969] Bluetooth: hci6: command tx timeout
[  215.034461] Bluetooth: hci7: command tx timeout
[  216.185323] Bluetooth: hci0: command tx timeout
[  216.377704] Bluetooth: hci1: command tx timeout
[  216.442987] Bluetooth: hci2: command tx timeout
[  216.505297] Bluetooth: hci3: command tx timeout
[  216.633285] Bluetooth: hci4: command tx timeout
[  216.953340] Bluetooth: hci5: command tx timeout
[  216.954260] Bluetooth: hci6: command tx timeout
[  217.081278] Bluetooth: hci7: command tx timeout
[  218.234259] Bluetooth: hci0: command tx timeout
[  218.426253] Bluetooth: hci1: command tx timeout
[  218.489318] Bluetooth: hci2: command tx timeout
[  218.554292] Bluetooth: hci3: command tx timeout
[  218.681353] Bluetooth: hci4: command tx timeout
[  219.002299] Bluetooth: hci6: command tx timeout
[  219.002390] Bluetooth: hci5: command tx timeout
[  219.130350] Bluetooth: hci7: command tx timeout
[  220.282276] Bluetooth: hci0: command tx timeout
[  220.474345] Bluetooth: hci1: command tx timeout
[  220.538310] Bluetooth: hci2: command tx timeout
[  220.602442] Bluetooth: hci3: command tx timeout
[  220.730439] Bluetooth: hci4: command tx timeout
[  221.050464] Bluetooth: hci5: command tx timeout
[  221.052300] Bluetooth: hci6: command tx timeout
[  221.177559] Bluetooth: hci7: command tx timeout
[  272.187038] syz-executor.5 (7105) used greatest stack depth: 23896 bytes left
[  272.529711] 
[  272.529957] ======================================================
[  272.530561] WARNING: possible circular locking dependency detected
[  272.531156] 6.13.0-next-20250122 #1 Not tainted
[  272.531613] ------------------------------------------------------
[  272.532516] kworker/u8:0/11 is trying to acquire lock:
[  272.533547] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[  272.535437] 
[  272.535437] but task is already holding lock:
[  272.536620] ffff8880365d0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  272.538930] 
[  272.538930] which lock already depends on the new lock.
[  272.538930] 
[  272.543317] 
[  272.543317] the existing dependency chain (in reverse order) is:
[  272.544480] 
[  272.544480] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  272.545548]        __mutex_lock+0x13d/0xb50
[  272.546287]        wiphy_register+0x1b2e/0x25d0
[  272.547077]        ieee80211_register_hw+0x23a4/0x3d60
[  272.547947]        mac80211_hwsim_new_radio+0x2759/0x4d60
[  272.548861]        init_mac80211_hwsim+0x389/0x870
[  272.549696]        do_one_initcall+0xf9/0x640
[  272.550467]        kernel_init_freeable+0x53d/0x7a0
[  272.551329]        kernel_init+0x1e/0x2d0
[  272.552012]        ret_from_fork+0x48/0x80
[  272.552692]        ret_from_fork_asm+0x1a/0x30
[  272.553469] 
[  272.553469] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  272.554454]        __lock_acquire+0x29fd/0x4580
[  272.555236]        lock_acquire+0x19b/0x520
[  272.555963]        __mutex_lock+0x13d/0xb50
[  272.556715]        unregister_netdevice_many_notify+0x1612/0x1c80
[  272.557699]        unregister_netdevice_queue+0x224/0x2e0
[  272.558580]        _cfg80211_unregister_wdev+0x57b/0x700
[  272.559464]        ieee80211_remove_interfaces+0x2f2/0x6b0
[  272.560350]        ieee80211_unregister_hw+0x55/0x3a0
[  272.561185]        hwsim_exit_net+0x3a0/0x730
[  272.561941]        ops_exit_list+0xb3/0x180
[  272.562642]        cleanup_net+0x546/0xad0
[  272.563341]        process_one_work+0x8ee/0x1a10
[  272.564155]        worker_thread+0x674/0xe70
[  272.564904]        kthread+0x3ab/0x720
[  272.565568]        ret_from_fork+0x48/0x80
[  272.566246]        ret_from_fork_asm+0x1a/0x30
[  272.567016] 
[  272.567016] other info that might help us debug this:
[  272.567016] 
[  272.568201]  Possible unsafe locking scenario:
[  272.568201] 
[  272.569096]        CPU0                    CPU1
[  272.569806]        ----                    ----
[  272.570520]   lock(&rdev->wiphy.mtx);
[  272.571157]                                lock(rtnl_mutex);
[  272.572075]                                lock(&rdev->wiphy.mtx);
[  272.572997]   lock(rtnl_mutex);
[  272.573353] 
[  272.573353]  *** DEADLOCK ***
[  272.573353] 
[  272.573918] 4 locks held by kworker/u8:0/11:
[  272.574356]  #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[  272.575375]  #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[  272.576360]  #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[  272.577272]  #3: ffff8880365d0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  272.578299] 
[  272.578299] stack backtrace:
[  272.578741] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250122 #1
[  272.579513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  272.580294] Workqueue: netns cleanup_net
[  272.580702] Call Trace:
[  272.580952]  <TASK>
[  272.581176]  dump_stack_lvl+0xca/0x120
[  272.581585]  print_circular_bug+0x47b/0x750
[  272.582022]  check_noncircular+0x2e9/0x3c0
[  272.582453]  ? __pfx_check_noncircular+0x10/0x10
[  272.582931]  ? hlock_class+0x4e/0x130
[  272.583301]  ? mark_lock+0xac/0xed0
[  272.583671]  ? srso_return_thunk+0x5/0x5f
[  272.584106]  ? dl_scaled_delta_exec+0xd4/0x2c0
[  272.584572]  ? lockdep_lock+0xba/0x1b0
[  272.584988]  ? __pfx_lockdep_lock+0x10/0x10
[  272.585448]  __lock_acquire+0x29fd/0x4580
[  272.585884]  ? __pfx___lock_acquire+0x10/0x10
[  272.586338]  ? lock_release+0x20f/0x6f0
[  272.586747]  ? __pfx_lock_release+0x10/0x10
[  272.587191]  lock_acquire+0x19b/0x520
[  272.587583]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  272.588178]  ? __pfx_lock_acquire+0x10/0x10
[  272.588621]  ? srso_return_thunk+0x5/0x5f
[  272.589049]  ? lock_release+0x20f/0x6f0
[  272.589459]  ? srso_return_thunk+0x5/0x5f
[  272.589899]  ? lock_is_held_type+0x9e/0x120
[  272.590355]  ? srso_return_thunk+0x5/0x5f
[  272.590791]  __mutex_lock+0x13d/0xb50
[  272.591200]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  272.591782]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  272.592370]  ? srso_return_thunk+0x5/0x5f
[  272.592806]  ? synchronize_rcu_expedited+0x38a/0x420
[  272.593333]  ? __pfx___mutex_lock+0x10/0x10
[  272.593788]  ? __pfx_autoremove_wake_function+0x10/0x10
[  272.594331]  ? srso_return_thunk+0x5/0x5f
[  272.594767]  ? kasan_quarantine_put+0x84/0x1e0
[  272.595251]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  272.595705]  ? srso_return_thunk+0x5/0x5f
[  272.596150]  unregister_netdevice_many_notify+0x1612/0x1c80
[  272.596715]  ? __virt_addr_valid+0x2e8/0x5d0
[  272.597169]  ? __pfx_lock_release+0x10/0x10
[  272.597609]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  272.598209]  ? find_held_lock+0x2c/0x110
[  272.598640]  ? srso_return_thunk+0x5/0x5f
[  272.599080]  ? kernfs_remove_by_name_ns+0xc7/0x130
[  272.599590]  ? srso_return_thunk+0x5/0x5f
[  272.600033]  ? lock_release+0x20f/0x6f0
[  272.600437]  ? __pfx_lock_release+0x10/0x10
[  272.600873]  ? srso_return_thunk+0x5/0x5f
[  272.601311]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  272.601836]  ? srso_return_thunk+0x5/0x5f
[  272.602278]  unregister_netdevice_queue+0x224/0x2e0
[  272.602779]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  272.603327]  ? up_write+0x195/0x520
[  272.603716]  _cfg80211_unregister_wdev+0x57b/0x700
[  272.604223]  ? srso_return_thunk+0x5/0x5f
[  272.604660]  ieee80211_remove_interfaces+0x2f2/0x6b0
[  272.605159]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  272.605703]  ? srso_return_thunk+0x5/0x5f
[  272.606138]  ? srso_return_thunk+0x5/0x5f
[  272.606574]  ? synchronize_rcu+0x1ff/0x260
[  272.607000]  ieee80211_unregister_hw+0x55/0x3a0
[  272.607476]  hwsim_exit_net+0x3a0/0x730
[  272.607884]  ? __pfx_hwsim_exit_net+0x10/0x10
[  272.608346]  ? srso_return_thunk+0x5/0x5f
[  272.608786]  ? netdev_run_todo+0x788/0x1040
[  272.609231]  ? __pfx_hwsim_exit_net+0x10/0x10
[  272.609686]  ops_exit_list+0xb3/0x180
[  272.610085]  cleanup_net+0x546/0xad0
[  272.610475]  ? __pfx_cleanup_net+0x10/0x10
[  272.610913]  ? _raw_spin_unlock_irq+0x23/0x40
[  272.611378]  process_one_work+0x8ee/0x1a10
[  272.611833]  ? __pfx_lock_acquire+0x10/0x10
[  272.612281]  ? __pfx_process_one_work+0x10/0x10
[  272.612763]  ? srso_return_thunk+0x5/0x5f
[  272.613201]  ? move_linked_works+0x172/0x270
[  272.613649]  ? srso_return_thunk+0x5/0x5f
[  272.614087]  ? assign_work+0x196/0x240
[  272.614504]  worker_thread+0x674/0xe70
[  272.614918]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  272.615448]  ? __pfx_worker_thread+0x10/0x10
[  272.615907]  kthread+0x3ab/0x720
[  272.616281]  ? __pfx_kthread+0x10/0x10
[  272.616693]  ? srso_return_thunk+0x5/0x5f
[  272.617132]  ? finish_task_switch.isra.0+0x206/0x840
[  272.617647]  ? __pfx_kthread+0x10/0x10
[  272.618057]  ret_from_fork+0x48/0x80
[  272.618432]  ? __pfx_kthread+0x10/0x10
[  272.618843]  ret_from_fork_asm+0x1a/0x30
[  272.619287]  </TASK>
[  274.113504] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  274.119110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  274.124046] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  274.128784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  274.131634] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  274.133495] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  274.307952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  274.312131] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  274.314690] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  274.321591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  274.326562] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  274.328987] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  274.383854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  274.389530] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  274.406935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  274.413368] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  274.418643] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  274.421040] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  274.444567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  274.445282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  274.448394] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  274.449046] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  274.452512] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  274.452940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  274.486354] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  274.489402] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  274.490985] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  274.491967] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  274.498488] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  274.506665] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  274.569279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  274.571505] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  274.574761] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  274.580509] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  274.583547] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  274.587119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  274.636630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  274.648461] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  274.680327] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  274.711547] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  274.713757] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  274.718644] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  274.732689] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  274.737585] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  274.752336] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  274.801319] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  274.809420] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  274.822610] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  276.153292] Bluetooth: hci0: command tx timeout
[  276.409326] Bluetooth: hci1: command tx timeout
[  276.473220] Bluetooth: hci2: command tx timeout
[  276.538241] Bluetooth: hci3: command tx timeout
[  276.538314] Bluetooth: hci4: command tx timeout
[  276.666252] Bluetooth: hci5: command tx timeout
[  276.795199] Bluetooth: hci6: command tx timeout
[  276.921252] Bluetooth: hci7: command tx timeout
[  278.201307] Bluetooth: hci0: command tx timeout
[  278.457601] Bluetooth: hci1: command tx timeout
[  278.521445] Bluetooth: hci2: command tx timeout
[  278.585426] Bluetooth: hci3: command tx timeout
[  278.585635] Bluetooth: hci4: command tx timeout
[  278.713217] Bluetooth: hci5: command tx timeout
[  278.842208] Bluetooth: hci6: command tx timeout
[  278.970274] Bluetooth: hci7: command tx timeout
[  280.249248] Bluetooth: hci0: command tx timeout
[  280.506289] Bluetooth: hci1: command tx timeout
[  280.571253] Bluetooth: hci2: command tx timeout
[  280.634222] Bluetooth: hci3: command tx timeout
[  280.634295] Bluetooth: hci4: command tx timeout
[  280.762259] Bluetooth: hci5: command tx timeout
[  280.891307] Bluetooth: hci6: command tx timeout
[  281.019458] Bluetooth: hci7: command tx timeout
[  282.298232] Bluetooth: hci0: command tx timeout

VM DIAGNOSIS:
22:56:25  Registers:
info registers vcpu 0
RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8283e865 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095debb8
R8 =0000000000000001 R9 =ffffed10012bbd67 R10=0000000000000035 R11=6f6c206863696877
R12=0000000000000035 R13=0000000000000001 R14=ffff888008fea008 R15=ffff8880095deeb8
RIP=ffffffff8283e8bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff5ae32000 CR3=000000000ea3c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65
XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369
XMM04=2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e XMM05=000055f3e92e8090000055f3e92af4a0
XMM06=000055f3e933006563697665642e3769 XMM07=00000000000000000000000000000000
XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffed1001e2bfa8 RBX=ffff888008c504a0 RCX=ffffffff81509004 RDX=0000000000000001
RSI=0000000000000004 RDI=ffff88800f15fd40 RBP=ffffed1001e2bfa8 RSP=ffff88800f15fcf8
R8 =0000000000000001 R9 =ffffed1001e2bfa8 R10=ffff88800f15fd43 R11=0000000000000532
R12=ffff888008c504a8 R13=ffff888008c504b0 R14=ffff88800eb63780 R15=0000000000000086
RIP=ffffffff81abc24a RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe4900000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9554c53610 CR3=000000001ac60000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000c000084d50000000c000084d60
XMM02=000000c000084d10000000c000084ce0 XMM03=000000c000084ca0000000c000084c90
XMM04=000000c000084dd0000000c000084de0 XMM05=000000c000084d90000000c000084d80
XMM06=000000c000084c50000000c000084cf0 XMM07=000000c00001d3e0000000c000084e00
XMM08=000000c000084c70000000c000084c80 XMM09=000000c000084c30000000c000084d00
XMM10=000000c000084c10000000c000084df0 XMM11=000000c000084de0000000c000084da0
XMM12=000000c000084d80000000c000084dd0 XMM13=000000c000084cf0000000c000084d90
XMM14=000000c000084e00000000c000084c50 XMM15=000000c000084190000000c00001d3e0