Warning: Permanently added '[localhost]:22881' (ECDSA) to the list of known hosts.
2025/11/15 17:10:46 fuzzer started
2025/11/15 17:10:46 dialing manager at localhost:37161
syzkaller login: [   50.290951] cgroup: Unknown subsys name 'net'
[   50.365744] cgroup: Unknown subsys name 'cpuset'
[   50.391773] cgroup: Unknown subsys name 'rlimit'
2025/11/15 17:10:55 syscalls: 2214
2025/11/15 17:10:55 code coverage: enabled
2025/11/15 17:10:55 comparison tracing: enabled
2025/11/15 17:10:55 extra coverage: enabled
2025/11/15 17:10:55 setuid sandbox: enabled
2025/11/15 17:10:55 namespace sandbox: enabled
2025/11/15 17:10:55 Android sandbox: enabled
2025/11/15 17:10:55 fault injection: enabled
2025/11/15 17:10:55 leak checking: enabled
2025/11/15 17:10:55 net packet injection: enabled
2025/11/15 17:10:55 net device setup: enabled
2025/11/15 17:10:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/11/15 17:10:55 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/11/15 17:10:55 USB emulation: enabled
2025/11/15 17:10:55 hci packet injection: enabled
2025/11/15 17:10:55 wifi device emulation: enabled
2025/11/15 17:10:55 802.15.4 emulation: enabled
2025/11/15 17:10:56 fetching corpus: 50, signal 24098/25924 (executing program)
2025/11/15 17:10:56 fetching corpus: 100, signal 34313/37819 (executing program)
2025/11/15 17:10:56 fetching corpus: 150, signal 46575/51572 (executing program)
2025/11/15 17:10:56 fetching corpus: 200, signal 56067/62435 (executing program)
2025/11/15 17:10:56 fetching corpus: 250, signal 61758/69502 (executing program)
2025/11/15 17:10:56 fetching corpus: 300, signal 66711/75796 (executing program)
2025/11/15 17:10:56 fetching corpus: 350, signal 71265/81607 (executing program)
2025/11/15 17:10:56 fetching corpus: 400, signal 75328/86921 (executing program)
2025/11/15 17:10:56 fetching corpus: 450, signal 78285/91152 (executing program)
2025/11/15 17:10:56 fetching corpus: 500, signal 80954/95026 (executing program)
2025/11/15 17:10:57 fetching corpus: 550, signal 82927/98193 (executing program)
2025/11/15 17:10:57 fetching corpus: 600, signal 86657/102958 (executing program)
2025/11/15 17:10:57 fetching corpus: 650, signal 89299/106713 (executing program)
2025/11/15 17:10:57 fetching corpus: 700, signal 92641/111071 (executing program)
2025/11/15 17:10:57 fetching corpus: 750, signal 95022/114555 (executing program)
2025/11/15 17:10:57 fetching corpus: 800, signal 96957/117599 (executing program)
2025/11/15 17:10:57 fetching corpus: 850, signal 98463/120205 (executing program)
2025/11/15 17:10:57 fetching corpus: 900, signal 101096/123804 (executing program)
2025/11/15 17:10:57 fetching corpus: 950, signal 103287/126972 (executing program)
2025/11/15 17:10:57 fetching corpus: 1000, signal 105411/130023 (executing program)
2025/11/15 17:10:58 fetching corpus: 1050, signal 109393/134572 (executing program)
2025/11/15 17:10:58 fetching corpus: 1100, signal 110662/136830 (executing program)
2025/11/15 17:10:58 fetching corpus: 1150, signal 112494/139577 (executing program)
2025/11/15 17:10:58 fetching corpus: 1200, signal 113655/141717 (executing program)
2025/11/15 17:10:58 fetching corpus: 1250, signal 114615/143646 (executing program)
2025/11/15 17:10:58 fetching corpus: 1300, signal 116498/146353 (executing program)
2025/11/15 17:10:58 fetching corpus: 1350, signal 118688/149305 (executing program)
2025/11/15 17:10:58 fetching corpus: 1400, signal 119880/151354 (executing program)
2025/11/15 17:10:58 fetching corpus: 1450, signal 121152/153489 (executing program)
2025/11/15 17:10:59 fetching corpus: 1500, signal 122265/155491 (executing program)
2025/11/15 17:10:59 fetching corpus: 1550, signal 123516/157566 (executing program)
2025/11/15 17:10:59 fetching corpus: 1600, signal 124897/159725 (executing program)
2025/11/15 17:10:59 fetching corpus: 1650, signal 126025/161669 (executing program)
2025/11/15 17:10:59 fetching corpus: 1700, signal 127101/163552 (executing program)
2025/11/15 17:10:59 fetching corpus: 1750, signal 128718/165792 (executing program)
2025/11/15 17:10:59 fetching corpus: 1800, signal 130315/168059 (executing program)
2025/11/15 17:10:59 fetching corpus: 1850, signal 131644/170084 (executing program)
2025/11/15 17:10:59 fetching corpus: 1900, signal 133144/172155 (executing program)
2025/11/15 17:11:00 fetching corpus: 1950, signal 134294/174019 (executing program)
2025/11/15 17:11:00 fetching corpus: 2000, signal 135071/175564 (executing program)
2025/11/15 17:11:00 fetching corpus: 2050, signal 136220/177382 (executing program)
2025/11/15 17:11:00 fetching corpus: 2100, signal 137253/179089 (executing program)
2025/11/15 17:11:00 fetching corpus: 2150, signal 138080/180709 (executing program)
2025/11/15 17:11:00 fetching corpus: 2200, signal 138966/182371 (executing program)
2025/11/15 17:11:00 fetching corpus: 2250, signal 139848/183926 (executing program)
2025/11/15 17:11:00 fetching corpus: 2300, signal 140581/185379 (executing program)
2025/11/15 17:11:00 fetching corpus: 2350, signal 142154/187406 (executing program)
2025/11/15 17:11:00 fetching corpus: 2400, signal 142916/188790 (executing program)
2025/11/15 17:11:00 fetching corpus: 2450, signal 143535/190120 (executing program)
2025/11/15 17:11:01 fetching corpus: 2500, signal 144199/191470 (executing program)
2025/11/15 17:11:01 fetching corpus: 2550, signal 144924/192851 (executing program)
2025/11/15 17:11:01 fetching corpus: 2600, signal 146199/194579 (executing program)
2025/11/15 17:11:01 fetching corpus: 2650, signal 146841/195872 (executing program)
2025/11/15 17:11:01 fetching corpus: 2700, signal 147534/197220 (executing program)
2025/11/15 17:11:01 fetching corpus: 2750, signal 148449/198701 (executing program)
2025/11/15 17:11:01 fetching corpus: 2800, signal 149181/200073 (executing program)
2025/11/15 17:11:01 fetching corpus: 2850, signal 149794/201361 (executing program)
2025/11/15 17:11:01 fetching corpus: 2900, signal 150548/202734 (executing program)
2025/11/15 17:11:02 fetching corpus: 2950, signal 151214/204030 (executing program)
2025/11/15 17:11:02 fetching corpus: 3000, signal 152091/205438 (executing program)
2025/11/15 17:11:02 fetching corpus: 3050, signal 153200/206918 (executing program)
2025/11/15 17:11:02 fetching corpus: 3100, signal 154381/208425 (executing program)
2025/11/15 17:11:02 fetching corpus: 3150, signal 155015/209646 (executing program)
2025/11/15 17:11:02 fetching corpus: 3200, signal 155652/210856 (executing program)
2025/11/15 17:11:02 fetching corpus: 3250, signal 156330/212118 (executing program)
2025/11/15 17:11:02 fetching corpus: 3300, signal 157056/213412 (executing program)
2025/11/15 17:11:02 fetching corpus: 3350, signal 158236/214945 (executing program)
2025/11/15 17:11:02 fetching corpus: 3400, signal 158765/216077 (executing program)
2025/11/15 17:11:03 fetching corpus: 3450, signal 159260/217141 (executing program)
2025/11/15 17:11:03 fetching corpus: 3500, signal 159888/218225 (executing program)
2025/11/15 17:11:03 fetching corpus: 3550, signal 160495/219357 (executing program)
2025/11/15 17:11:03 fetching corpus: 3600, signal 161188/220494 (executing program)
2025/11/15 17:11:03 fetching corpus: 3650, signal 161689/221529 (executing program)
2025/11/15 17:11:03 fetching corpus: 3700, signal 162263/222620 (executing program)
2025/11/15 17:11:03 fetching corpus: 3750, signal 163257/223901 (executing program)
2025/11/15 17:11:03 fetching corpus: 3800, signal 163766/224941 (executing program)
2025/11/15 17:11:03 fetching corpus: 3850, signal 164335/225962 (executing program)
2025/11/15 17:11:03 fetching corpus: 3900, signal 164914/226982 (executing program)
2025/11/15 17:11:04 fetching corpus: 3950, signal 166225/228342 (executing program)
2025/11/15 17:11:04 fetching corpus: 4000, signal 166725/229332 (executing program)
2025/11/15 17:11:04 fetching corpus: 4050, signal 167404/230407 (executing program)
2025/11/15 17:11:04 fetching corpus: 4100, signal 168131/231414 (executing program)
2025/11/15 17:11:04 fetching corpus: 4150, signal 168570/232357 (executing program)
2025/11/15 17:11:04 fetching corpus: 4200, signal 169013/233278 (executing program)
2025/11/15 17:11:04 fetching corpus: 4250, signal 169576/234252 (executing program)
2025/11/15 17:11:04 fetching corpus: 4300, signal 170173/235239 (executing program)
2025/11/15 17:11:05 fetching corpus: 4350, signal 170539/236120 (executing program)
2025/11/15 17:11:05 fetching corpus: 4400, signal 170966/237037 (executing program)
2025/11/15 17:11:05 fetching corpus: 4450, signal 171308/237893 (executing program)
2025/11/15 17:11:05 fetching corpus: 4500, signal 171996/238832 (executing program)
2025/11/15 17:11:05 fetching corpus: 4550, signal 172333/239653 (executing program)
2025/11/15 17:11:05 fetching corpus: 4600, signal 172983/240604 (executing program)
2025/11/15 17:11:05 fetching corpus: 4650, signal 173402/241491 (executing program)
2025/11/15 17:11:05 fetching corpus: 4700, signal 174500/242573 (executing program)
2025/11/15 17:11:05 fetching corpus: 4750, signal 174822/243447 (executing program)
2025/11/15 17:11:05 fetching corpus: 4800, signal 175507/244335 (executing program)
2025/11/15 17:11:05 fetching corpus: 4850, signal 176532/245340 (executing program)
2025/11/15 17:11:06 fetching corpus: 4900, signal 176987/246166 (executing program)
2025/11/15 17:11:06 fetching corpus: 4950, signal 177942/247138 (executing program)
2025/11/15 17:11:06 fetching corpus: 5000, signal 178458/247971 (executing program)
2025/11/15 17:11:06 fetching corpus: 5050, signal 178908/248752 (executing program)
2025/11/15 17:11:06 fetching corpus: 5100, signal 179330/249540 (executing program)
2025/11/15 17:11:06 fetching corpus: 5150, signal 179751/250328 (executing program)
2025/11/15 17:11:06 fetching corpus: 5200, signal 180156/251076 (executing program)
2025/11/15 17:11:06 fetching corpus: 5250, signal 180592/251871 (executing program)
2025/11/15 17:11:06 fetching corpus: 5300, signal 181123/252675 (executing program)
2025/11/15 17:11:07 fetching corpus: 5350, signal 181700/253457 (executing program)
2025/11/15 17:11:07 fetching corpus: 5400, signal 182256/254246 (executing program)
2025/11/15 17:11:07 fetching corpus: 5450, signal 182767/254984 (executing program)
2025/11/15 17:11:07 fetching corpus: 5500, signal 183504/255755 (executing program)
2025/11/15 17:11:07 fetching corpus: 5550, signal 183867/256429 (executing program)
2025/11/15 17:11:07 fetching corpus: 5600, signal 184330/257191 (executing program)
2025/11/15 17:11:07 fetching corpus: 5650, signal 184839/257921 (executing program)
2025/11/15 17:11:07 fetching corpus: 5700, signal 185321/258655 (executing program)
2025/11/15 17:11:07 fetching corpus: 5750, signal 185834/259363 (executing program)
2025/11/15 17:11:07 fetching corpus: 5800, signal 186210/260107 (executing program)
2025/11/15 17:11:08 fetching corpus: 5850, signal 186618/260811 (executing program)
2025/11/15 17:11:08 fetching corpus: 5900, signal 187044/261465 (executing program)
2025/11/15 17:11:08 fetching corpus: 5950, signal 187303/262130 (executing program)
2025/11/15 17:11:08 fetching corpus: 6000, signal 187604/262825 (executing program)
2025/11/15 17:11:08 fetching corpus: 6050, signal 187950/263518 (executing program)
2025/11/15 17:11:08 fetching corpus: 6100, signal 188395/264178 (executing program)
2025/11/15 17:11:08 fetching corpus: 6150, signal 188870/264855 (executing program)
2025/11/15 17:11:08 fetching corpus: 6200, signal 189392/265559 (executing program)
2025/11/15 17:11:08 fetching corpus: 6250, signal 189887/266226 (executing program)
2025/11/15 17:11:08 fetching corpus: 6300, signal 190353/266932 (executing program)
2025/11/15 17:11:09 fetching corpus: 6350, signal 190807/267560 (executing program)
2025/11/15 17:11:09 fetching corpus: 6400, signal 191055/268159 (executing program)
2025/11/15 17:11:09 fetching corpus: 6450, signal 191510/268808 (executing program)
2025/11/15 17:11:09 fetching corpus: 6500, signal 192022/269436 (executing program)
2025/11/15 17:11:09 fetching corpus: 6550, signal 192433/270069 (executing program)
2025/11/15 17:11:09 fetching corpus: 6600, signal 192785/270691 (executing program)
2025/11/15 17:11:09 fetching corpus: 6650, signal 193553/271287 (executing program)
2025/11/15 17:11:09 fetching corpus: 6700, signal 194056/271882 (executing program)
2025/11/15 17:11:09 fetching corpus: 6750, signal 194399/272449 (executing program)
2025/11/15 17:11:09 fetching corpus: 6800, signal 194765/273016 (executing program)
2025/11/15 17:11:10 fetching corpus: 6850, signal 195080/273373 (executing program)
2025/11/15 17:11:10 fetching corpus: 6900, signal 195387/273373 (executing program)
2025/11/15 17:11:10 fetching corpus: 6950, signal 195676/273373 (executing program)
2025/11/15 17:11:10 fetching corpus: 7000, signal 196382/273373 (executing program)
2025/11/15 17:11:10 fetching corpus: 7050, signal 196801/273373 (executing program)
2025/11/15 17:11:10 fetching corpus: 7100, signal 197078/273373 (executing program)
2025/11/15 17:11:10 fetching corpus: 7150, signal 197507/273373 (executing program)
2025/11/15 17:11:10 fetching corpus: 7200, signal 197830/273373 (executing program)
2025/11/15 17:11:10 fetching corpus: 7250, signal 198143/273373 (executing program)
2025/11/15 17:11:10 fetching corpus: 7300, signal 198432/273373 (executing program)
2025/11/15 17:11:10 fetching corpus: 7350, signal 198920/273373 (executing program)
2025/11/15 17:11:11 fetching corpus: 7400, signal 199207/273373 (executing program)
2025/11/15 17:11:11 fetching corpus: 7450, signal 199630/273373 (executing program)
2025/11/15 17:11:11 fetching corpus: 7500, signal 199976/273373 (executing program)
2025/11/15 17:11:11 fetching corpus: 7550, signal 200313/273373 (executing program)
2025/11/15 17:11:11 fetching corpus: 7600, signal 200657/273373 (executing program)
2025/11/15 17:11:11 fetching corpus: 7650, signal 200882/273373 (executing program)
2025/11/15 17:11:11 fetching corpus: 7700, signal 201177/273373 (executing program)
2025/11/15 17:11:11 fetching corpus: 7750, signal 201453/273373 (executing program)
2025/11/15 17:11:11 fetching corpus: 7800, signal 201735/273373 (executing program)
2025/11/15 17:11:11 fetching corpus: 7850, signal 201984/273373 (executing program)
2025/11/15 17:11:11 fetching corpus: 7900, signal 202212/273373 (executing program)
2025/11/15 17:11:11 fetching corpus: 7950, signal 202533/273373 (executing program)
2025/11/15 17:11:12 fetching corpus: 8000, signal 202807/273373 (executing program)
2025/11/15 17:11:12 fetching corpus: 8050, signal 203057/273373 (executing program)
2025/11/15 17:11:12 fetching corpus: 8100, signal 203194/273373 (executing program)
2025/11/15 17:11:12 fetching corpus: 8150, signal 203520/273373 (executing program)
2025/11/15 17:11:12 fetching corpus: 8200, signal 203774/273373 (executing program)
2025/11/15 17:11:12 fetching corpus: 8250, signal 204140/273373 (executing program)
2025/11/15 17:11:12 fetching corpus: 8300, signal 204528/273373 (executing program)
2025/11/15 17:11:12 fetching corpus: 8350, signal 204773/273373 (executing program)
2025/11/15 17:11:12 fetching corpus: 8400, signal 205036/273373 (executing program)
2025/11/15 17:11:12 fetching corpus: 8450, signal 205500/273373 (executing program)
2025/11/15 17:11:12 fetching corpus: 8500, signal 205815/273373 (executing program)
2025/11/15 17:11:13 fetching corpus: 8550, signal 206072/273373 (executing program)
2025/11/15 17:11:13 fetching corpus: 8600, signal 206316/273373 (executing program)
2025/11/15 17:11:13 fetching corpus: 8650, signal 206645/273375 (executing program)
2025/11/15 17:11:13 fetching corpus: 8700, signal 206994/273375 (executing program)
2025/11/15 17:11:13 fetching corpus: 8750, signal 207287/273375 (executing program)
2025/11/15 17:11:13 fetching corpus: 8800, signal 207700/273375 (executing program)
2025/11/15 17:11:13 fetching corpus: 8850, signal 208008/273375 (executing program)
2025/11/15 17:11:13 fetching corpus: 8900, signal 208296/273375 (executing program)
2025/11/15 17:11:13 fetching corpus: 8950, signal 208510/273375 (executing program)
2025/11/15 17:11:13 fetching corpus: 9000, signal 208801/273375 (executing program)
2025/11/15 17:11:13 fetching corpus: 9050, signal 209076/273375 (executing program)
2025/11/15 17:11:14 fetching corpus: 9100, signal 209345/273375 (executing program)
2025/11/15 17:11:14 fetching corpus: 9150, signal 209619/273375 (executing program)
2025/11/15 17:11:14 fetching corpus: 9200, signal 210026/273375 (executing program)
2025/11/15 17:11:14 fetching corpus: 9250, signal 210378/273375 (executing program)
2025/11/15 17:11:14 fetching corpus: 9300, signal 210720/273375 (executing program)
2025/11/15 17:11:14 fetching corpus: 9350, signal 210944/273375 (executing program)
2025/11/15 17:11:14 fetching corpus: 9400, signal 211174/273375 (executing program)
2025/11/15 17:11:14 fetching corpus: 9450, signal 211457/273375 (executing program)
2025/11/15 17:11:14 fetching corpus: 9500, signal 211674/273375 (executing program)
2025/11/15 17:11:14 fetching corpus: 9550, signal 211914/273375 (executing program)
2025/11/15 17:11:15 fetching corpus: 9600, signal 212109/273378 (executing program)
2025/11/15 17:11:15 fetching corpus: 9650, signal 212382/273378 (executing program)
2025/11/15 17:11:15 fetching corpus: 9700, signal 212756/273378 (executing program)
2025/11/15 17:11:15 fetching corpus: 9750, signal 213047/273378 (executing program)
2025/11/15 17:11:15 fetching corpus: 9800, signal 213434/273378 (executing program)
2025/11/15 17:11:15 fetching corpus: 9850, signal 213627/273378 (executing program)
2025/11/15 17:11:15 fetching corpus: 9900, signal 213869/273378 (executing program)
2025/11/15 17:11:15 fetching corpus: 9950, signal 214098/273378 (executing program)
2025/11/15 17:11:15 fetching corpus: 10000, signal 214403/273378 (executing program)
2025/11/15 17:11:15 fetching corpus: 10050, signal 214749/273380 (executing program)
2025/11/15 17:11:16 fetching corpus: 10100, signal 215011/273380 (executing program)
2025/11/15 17:11:16 fetching corpus: 10150, signal 215139/273380 (executing program)
2025/11/15 17:11:16 fetching corpus: 10200, signal 215435/273382 (executing program)
2025/11/15 17:11:16 fetching corpus: 10250, signal 215748/273382 (executing program)
2025/11/15 17:11:16 fetching corpus: 10300, signal 215935/273382 (executing program)
2025/11/15 17:11:16 fetching corpus: 10350, signal 216162/273382 (executing program)
2025/11/15 17:11:16 fetching corpus: 10400, signal 216399/273382 (executing program)
2025/11/15 17:11:16 fetching corpus: 10450, signal 216647/273382 (executing program)
2025/11/15 17:11:16 fetching corpus: 10500, signal 216812/273382 (executing program)
2025/11/15 17:11:16 fetching corpus: 10550, signal 217016/273382 (executing program)
2025/11/15 17:11:16 fetching corpus: 10600, signal 217395/273382 (executing program)
2025/11/15 17:11:16 fetching corpus: 10650, signal 217643/273382 (executing program)
2025/11/15 17:11:17 fetching corpus: 10700, signal 217858/273382 (executing program)
2025/11/15 17:11:17 fetching corpus: 10750, signal 218122/273382 (executing program)
2025/11/15 17:11:17 fetching corpus: 10800, signal 218418/273382 (executing program)
2025/11/15 17:11:17 fetching corpus: 10850, signal 218647/273382 (executing program)
2025/11/15 17:11:17 fetching corpus: 10900, signal 218953/273382 (executing program)
2025/11/15 17:11:17 fetching corpus: 10950, signal 219203/273382 (executing program)
2025/11/15 17:11:17 fetching corpus: 11000, signal 219361/273382 (executing program)
2025/11/15 17:11:17 fetching corpus: 11050, signal 219572/273382 (executing program)
2025/11/15 17:11:17 fetching corpus: 11100, signal 219774/273382 (executing program)
2025/11/15 17:11:18 fetching corpus: 11150, signal 220078/273382 (executing program)
2025/11/15 17:11:18 fetching corpus: 11200, signal 220316/273382 (executing program)
2025/11/15 17:11:18 fetching corpus: 11250, signal 220510/273382 (executing program)
2025/11/15 17:11:18 fetching corpus: 11300, signal 220726/273382 (executing program)
2025/11/15 17:11:18 fetching corpus: 11350, signal 221028/273382 (executing program)
2025/11/15 17:11:18 fetching corpus: 11400, signal 221230/273382 (executing program)
2025/11/15 17:11:18 fetching corpus: 11450, signal 221370/273382 (executing program)
2025/11/15 17:11:18 fetching corpus: 11500, signal 221592/273382 (executing program)
2025/11/15 17:11:18 fetching corpus: 11550, signal 221814/273382 (executing program)
2025/11/15 17:11:18 fetching corpus: 11600, signal 221989/273382 (executing program)
2025/11/15 17:11:18 fetching corpus: 11650, signal 222217/273382 (executing program)
2025/11/15 17:11:19 fetching corpus: 11700, signal 222512/273382 (executing program)
2025/11/15 17:11:19 fetching corpus: 11750, signal 222736/273382 (executing program)
2025/11/15 17:11:19 fetching corpus: 11800, signal 222951/273382 (executing program)
2025/11/15 17:11:19 fetching corpus: 11850, signal 223200/273387 (executing program)
2025/11/15 17:11:19 fetching corpus: 11900, signal 223445/273387 (executing program)
2025/11/15 17:11:19 fetching corpus: 11950, signal 223660/273387 (executing program)
2025/11/15 17:11:19 fetching corpus: 12000, signal 223855/273387 (executing program)
2025/11/15 17:11:19 fetching corpus: 12050, signal 224054/273387 (executing program)
2025/11/15 17:11:19 fetching corpus: 12100, signal 224360/273387 (executing program)
2025/11/15 17:11:19 fetching corpus: 12150, signal 224598/273387 (executing program)
2025/11/15 17:11:19 fetching corpus: 12200, signal 224807/273387 (executing program)
2025/11/15 17:11:19 fetching corpus: 12250, signal 225019/273387 (executing program)
2025/11/15 17:11:19 fetching corpus: 12300, signal 225187/273387 (executing program)
2025/11/15 17:11:20 fetching corpus: 12350, signal 225341/273387 (executing program)
2025/11/15 17:11:20 fetching corpus: 12400, signal 225524/273387 (executing program)
2025/11/15 17:11:20 fetching corpus: 12450, signal 225715/273387 (executing program)
2025/11/15 17:11:20 fetching corpus: 12500, signal 226082/273387 (executing program)
2025/11/15 17:11:20 fetching corpus: 12550, signal 226312/273387 (executing program)
2025/11/15 17:11:20 fetching corpus: 12600, signal 226481/273387 (executing program)
2025/11/15 17:11:20 fetching corpus: 12650, signal 226775/273387 (executing program)
2025/11/15 17:11:20 fetching corpus: 12700, signal 226971/273387 (executing program)
2025/11/15 17:11:20 fetching corpus: 12750, signal 227135/273387 (executing program)
2025/11/15 17:11:20 fetching corpus: 12800, signal 227329/273387 (executing program)
2025/11/15 17:11:21 fetching corpus: 12850, signal 227549/273387 (executing program)
2025/11/15 17:11:21 fetching corpus: 12900, signal 227774/273387 (executing program)
2025/11/15 17:11:21 fetching corpus: 12950, signal 228054/273387 (executing program)
2025/11/15 17:11:21 fetching corpus: 13000, signal 228279/273387 (executing program)
2025/11/15 17:11:21 fetching corpus: 13050, signal 228402/273387 (executing program)
2025/11/15 17:11:21 fetching corpus: 13100, signal 228686/273387 (executing program)
2025/11/15 17:11:21 fetching corpus: 13150, signal 228900/273387 (executing program)
2025/11/15 17:11:21 fetching corpus: 13200, signal 229041/273387 (executing program)
2025/11/15 17:11:21 fetching corpus: 13250, signal 229308/273387 (executing program)
2025/11/15 17:11:21 fetching corpus: 13300, signal 229532/273387 (executing program)
2025/11/15 17:11:22 fetching corpus: 13350, signal 229758/273387 (executing program)
2025/11/15 17:11:22 fetching corpus: 13400, signal 229985/273387 (executing program)
2025/11/15 17:11:22 fetching corpus: 13450, signal 230194/273387 (executing program)
2025/11/15 17:11:22 fetching corpus: 13500, signal 230540/273387 (executing program)
2025/11/15 17:11:22 fetching corpus: 13550, signal 230697/273387 (executing program)
2025/11/15 17:11:22 fetching corpus: 13600, signal 230850/273387 (executing program)
2025/11/15 17:11:22 fetching corpus: 13650, signal 231046/273387 (executing program)
2025/11/15 17:11:22 fetching corpus: 13700, signal 231221/273387 (executing program)
2025/11/15 17:11:22 fetching corpus: 13750, signal 231429/273387 (executing program)
2025/11/15 17:11:22 fetching corpus: 13800, signal 231592/273387 (executing program)
2025/11/15 17:11:22 fetching corpus: 13850, signal 231795/273387 (executing program)
2025/11/15 17:11:23 fetching corpus: 13900, signal 231956/273387 (executing program)
2025/11/15 17:11:23 fetching corpus: 13950, signal 232136/273387 (executing program)
2025/11/15 17:11:23 fetching corpus: 14000, signal 232349/273387 (executing program)
2025/11/15 17:11:23 fetching corpus: 14050, signal 232542/273387 (executing program)
2025/11/15 17:11:23 fetching corpus: 14100, signal 232777/273387 (executing program)
2025/11/15 17:11:23 fetching corpus: 14150, signal 232977/273387 (executing program)
2025/11/15 17:11:23 fetching corpus: 14200, signal 233197/273387 (executing program)
2025/11/15 17:11:23 fetching corpus: 14250, signal 233450/273387 (executing program)
2025/11/15 17:11:23 fetching corpus: 14300, signal 233608/273387 (executing program)
2025/11/15 17:11:23 fetching corpus: 14350, signal 233800/273387 (executing program)
2025/11/15 17:11:24 fetching corpus: 14400, signal 233982/273387 (executing program)
2025/11/15 17:11:24 fetching corpus: 14450, signal 234219/273387 (executing program)
2025/11/15 17:11:24 fetching corpus: 14500, signal 234376/273387 (executing program)
2025/11/15 17:11:24 fetching corpus: 14550, signal 234519/273387 (executing program)
2025/11/15 17:11:24 fetching corpus: 14600, signal 234645/273387 (executing program)
2025/11/15 17:11:24 fetching corpus: 14650, signal 234773/273387 (executing program)
2025/11/15 17:11:24 fetching corpus: 14700, signal 234942/273387 (executing program)
2025/11/15 17:11:24 fetching corpus: 14750, signal 235188/273399 (executing program)
2025/11/15 17:11:24 fetching corpus: 14800, signal 235365/273399 (executing program)
2025/11/15 17:11:24 fetching corpus: 14850, signal 235539/273399 (executing program)
2025/11/15 17:11:24 fetching corpus: 14900, signal 235689/273399 (executing program)
2025/11/15 17:11:25 fetching corpus: 14950, signal 235849/273399 (executing program)
2025/11/15 17:11:25 fetching corpus: 15000, signal 236080/273399 (executing program)
2025/11/15 17:11:25 fetching corpus: 15050, signal 236305/273399 (executing program)
2025/11/15 17:11:25 fetching corpus: 15100, signal 236470/273399 (executing program)
2025/11/15 17:11:25 fetching corpus: 15150, signal 236664/273399 (executing program)
2025/11/15 17:11:25 fetching corpus: 15200, signal 236826/273399 (executing program)
2025/11/15 17:11:25 fetching corpus: 15250, signal 237041/273399 (executing program)
2025/11/15 17:11:25 fetching corpus: 15300, signal 237256/273399 (executing program)
2025/11/15 17:11:25 fetching corpus: 15350, signal 237483/273400 (executing program)
2025/11/15 17:11:25 fetching corpus: 15400, signal 237626/273407 (executing program)
2025/11/15 17:11:25 fetching corpus: 15450, signal 237793/273407 (executing program)
2025/11/15 17:11:25 fetching corpus: 15500, signal 237927/273407 (executing program)
2025/11/15 17:11:26 fetching corpus: 15550, signal 238118/273407 (executing program)
2025/11/15 17:11:26 fetching corpus: 15600, signal 238248/273407 (executing program)
2025/11/15 17:11:26 fetching corpus: 15650, signal 238491/273407 (executing program)
2025/11/15 17:11:26 fetching corpus: 15700, signal 238645/273407 (executing program)
2025/11/15 17:11:26 fetching corpus: 15750, signal 238862/273408 (executing program)
2025/11/15 17:11:26 fetching corpus: 15800, signal 239144/273408 (executing program)
2025/11/15 17:11:26 fetching corpus: 15850, signal 239319/273408 (executing program)
2025/11/15 17:11:26 fetching corpus: 15900, signal 239478/273408 (executing program)
2025/11/15 17:11:26 fetching corpus: 15950, signal 239622/273408 (executing program)
2025/11/15 17:11:26 fetching corpus: 16000, signal 239865/273408 (executing program)
2025/11/15 17:11:26 fetching corpus: 16050, signal 240082/273408 (executing program)
2025/11/15 17:11:26 fetching corpus: 16097, signal 240201/273408 (executing program)
2025/11/15 17:11:26 fetching corpus: 16097, signal 240201/273408 (executing program)
2025/11/15 17:11:28 starting 8 fuzzer processes
17:11:28 executing program 0:
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4000, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140), 0x4000, 0x0)
link(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00')
r0 = creat(&(0x7f0000000200)='./file1\x00', 0x81)
mount$bind(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), 0x300008, 0x0)
write(r0, &(0x7f0000000300)="aad3945fb5604761ff3e86d987915723be0e1476cbf8f0367a93b5ee54ef6919ad96546c6dff67ec953ee8e14990515c9a3d9d301135e293fd2c76462cd2eece9cf07b9139768fe6ec645ad5a6d0c159b70e2c3bbc9455868fa6de6419243bde54c0a51c3c475df93fced5e4c0c63216b5a0edc2c20edc392eb8de954acb3fbff5c4422a67ba39ca", 0x88)
r1 = open$dir(&(0x7f00000003c0)='./file0/file0\x00', 0x30442, 0x24)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
linkat(r1, &(0x7f0000000400)='./file0\x00', r2, &(0x7f0000000440)='./file1\x00', 0x400)
ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000780)={{'\x00', 0x2}, {0x81}, 0x24, 0x0, 0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)="43d1a9596bf036f95635e5d29fe77a87358d8903bacab38f704598b5d0c40e7b7341089a72349ee9fac07dc82751510841de21e1c04c087d18b3e0b01feae17e3de3ba8dc8b5828df9ca96c7050797163bb81b91ac55ae971834b18e84a088f69d6e0d33357f8742fa222689f4fd8fd203215a0152f78a68", 0x78, 0x0, &(0x7f0000000580)={0x2, 0x11e, {0x1, 0xc, 0x92, "46ab526915944fff82c1bbcededd5971efb2b59df07eb5d46fceb7cd4b862c6fe5e7172cbddc0d783bc50a925f90e3336949a7389692171275c3d35eaa2e75fac99481941d890059e8f1fb30354d62589754a92e45d4dc07272823aa32f67ca150ee1a4375bf50d0a850e3b75e3b01826480027c65d1eec09bc5ec57af3dc6c36158556becda32b791e4191fecd462e979a3", 0x7f, "97a5d9ffe69130fc77e38c02c57540a3eb5e0338298885838b0aeb3fe46a76d4057b0b523bd0c840383d807e0338c07ebf991b73dc31a2dde5d50d8b1e983dde8722aaf60a38cd5ff67d664ef915793ef5193eacd256274927597d90bf703024fc8724e8a1ef907692f7f4657b68410a3c4be249e602c707eff5f4242643d7"}, 0xaf, "42663dcd1eb2375f1853e857db171072964e772d26dde308071b82f5758ef690d70048579085b0ae9cd8402da9187c1d575849292b64c0206d3d5134f74d602967543f18ddb53e5b9c089b22ab77db5858553ebc73409b9c346f57110d9d95520d76f4cf3c9e741d210f6922e528502f8e9f2ae438699d5eec018ed311ccea6382e1b28c4f2273ab5b021e11fb0748c47b343df11c49a5b458b3f753f404dfeb67a2c684d7d46060a75a8966d851a1"}, 0x1d9})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
ioctl$RTC_PIE_ON(r3, 0x7005)
unlinkat(r2, &(0x7f0000000840)='./file1/file0\x00', 0x200)
mount$bind(&(0x7f0000000880)='./file1/file0\x00', &(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000000900), 0x10060, 0x0)
r4 = memfd_secret(0x80000)
r5 = syz_mount_image$msdos(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x9, 0x1, &(0x7f0000000b00)=[{&(0x7f0000000a00)="736109fe659164c4f33798b57a3c67af692310f7a9bcc845e59062d76b67a990121f6483c12b105e434379b60fa5ac2bab434e031ace14e2c1d393ea4880620083fc866163f47967d601d4ac941bb40df74ed849675a0e2cc50d73408c21c9a4553f29395b716086b1b9dacefe05005579b3c91ebee246a115eeb89614cbd3e7cb2355a5ea7464dcc9a3877f58c10db39973ba294c1ca1835b6515c67b9b31fa03e56d387a9e3b384b16688e329c622abf096954b77277362091fb471599c29af3f4b1b01257601b3c7c7622f0cfebe7fcc9346ed93d24", 0xd7, 0x5}], 0x5f1f4a9577f59a9b, &(0x7f0000000b40)={[{@nodots}, {@nodots}], [{@fsname={'fsname', 0x3d, '\x00'}}]})
renameat2(r4, &(0x7f0000000940)='./file0/file0\x00', r5, &(0x7f0000000b80)='./file1/file0\x00', 0x1)
setxattr$incfs_metadata(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), &(0x7f0000000c40)="0b9fe886873c5bce2b04f8abf7a2b6a97f9c4fecc2fb75173bb7abfec5e43a4f8250887f4850f80032d3f049069911a71385584065b15ec8c49a9bd93d748626c7d44f11a55ab634f5b40b0bac6e9c65d365e9bcfea8855aebea5649943d4b9acbcd1fca3272a9dd413f8a7d9add408222cc463b163a90cb415379b78208251bc271b5cf52c8a4f4a759c5daf4c9a8d645eb9582a472df3fcea5b062b00b880c1083028b8715300887b4dcab54abcc4ca531b9834612a21b58fb98a5019b506e05c19b13953912a78b9feace4bd10af8f8d07c33547161695b7e22f0ed368232b167a315f37dc27dcd2a04fb22428e9225b41c5ef4", 0xf5, 0x2)
ioctl$FIOCLEX(r4, 0x5451)
finit_module(r2, &(0x7f0000000d40)='[\x00', 0x3)

17:11:28 executing program 1:
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}]}, 0x60}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', <r0=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r1=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1f}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000004)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x1, 0x101, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004805}, 0x8000)
sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x4090)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x28002, 0x0)
sendmsg$AUDIT_GET(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x10, 0x3e8, 0x20, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0x4)
sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x1, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40810}, 0x40041)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x50, r3, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048805}, 0xc851)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), r5)
sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xbc, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x28}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000000)
sendmsg$TIPC_NL_MON_SET(r5, &(0x7f00000011c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x280341}, 0xc, &(0x7f0000001180)={&(0x7f0000000f00)={0x24c, 0x0, 0xc08, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x18c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2b, 0x3, "858f0586f737aebae44c97df558602775bf3913b0ccbc85dd6fc590b9cd3b8db91d528bd150eeb"}, @TIPC_NLA_NODE_ID={0x1a, 0x3, "0fb3c627f9b00ee5dd7d85c918eea8526ccdab728c24"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "574d8f1b1de8cd428d0270e2287eb6abef93bb498a42e21303be1c9088ab0005fe399055"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xea, 0x3, "b4126ea234490674795debc8e503018bd656aee068759121843f36bd209c77ac6d63ec3a0b17fe5ae5a3bca9624293eb5147f6c8ec45b9f89ef6cc043b7752fca377336bab155c7c6d2f1779787a110e42d6b0d23a696a141a8e673e7b960ba203dbd6559b8f9f903b0a797014940fbda770f59ab84585795b60632c737f1d0e9af0161848cd69eeb0a40556f7f2d09bb9cb18ce41a34ddf7928f098cc607ed6acb96e93a1bd1e1fc0177055c86fe318b540efa5c3e7d16c01aad383cf40fbd1c816200a1021d8210dd5b644c2f9f3dc352bfca4d8129cd4855d831f49649c3358f196d3d2e5"}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xef}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "71e981c556580a96c8614a23435a8c368feb5b51f13c80a21bffe95c361e"}}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x24000852}, 0x800)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x6c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x800)

17:11:28 executing program 2:
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000884}, 0x40040)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x118, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4)
r1 = syz_open_dev$mouse(&(0x7f0000000280), 0xfffffffffffffff3, 0x401)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x5)
r2 = fsmount(r0, 0x1, 0x184)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000400)={0x0, r2, 0x1, 0x80000000, 0x2, 0x9})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f00000004c0)={'gre0\x00', <r4=>0x0, 0x8, 0x7, 0x3f, 0x6, {{0xa, 0x4, 0x3, 0x15, 0x28, 0x64, 0x0, 0x8, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, {[@rr={0x7, 0x13, 0x20, [@multicast1, @private=0xa010100, @rand_addr=0x64010101, @loopback]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'sit0\x00', <r5=>0x0, 0x2f, 0xa5, 0x9, 0x4, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x700, 0x1, 0x4f6, 0x6}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, <r6=>0x0}, &(0x7f0000000680)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'ip6gre0\x00', <r8=>0x0, 0x2f, 0x7f, 0x2, 0x5, 0x8, @dev={0xfe, 0x80, '\x00', 0x2d}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x40, 0x20, 0x4, 0x6}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000a80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)={0x264, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x40800}, 0x20008041)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'syztnl1\x00', <r9=>r4, 0x29, 0x81, 0x66, 0x101, 0x8, @local, @remote, 0x40, 0x10, 0x3, 0xfffffff7}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xb0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20048084}, 0x2000c080)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000001040)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000d40)={0x288, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18c, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xc4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x288}}, 0x80)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wpan3\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1050008}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x4800)

[   92.514865] audit: type=1400 audit(1763226688.977:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
17:11:28 executing program 3:
msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x0, "95c15e1d338f3066598476b9d6735b5eafda788a36f375fc3535ed5b45d0f9890ca2094a34e852f9478a59b17ebe19f753c7317b3fef217f2b2e617790d780e40f22466c626673462a80f160512e1593ca32ada8613fbfa71d9953baa194e53dd38753d709e467ec1d8a8f125e899548eba85f7c1a156ba033e12b9b649b137bbc7c795d8eb3148410df52e60c77f9"}, 0x97, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f00000000c0)={0x0, ""/58}, 0x42, 0x1, 0x2000)
msgsnd(0x0, &(0x7f0000000140)={0x1, "73447b3837dcfb551d43a4869adfcd8c89aa879550d64a0afeffbd2a7b321b27d3242c275bf3278d5307534055d87b7fe7ffa0434e3af8f265e63872d6e224d3c3f83f07dcfd3071820fa0e61bb4808802235efc6ed1"}, 0x5e, 0x0)
r0 = msgget$private(0x0, 0x210)
msgsnd(r0, &(0x7f00000001c0)={0x3, "6a4b7afaba8968619294f6cf9f0650291b5ee60b9c6f0bfeec"}, 0x21, 0x0)
msgrcv(r0, &(0x7f0000000200)={0x0, ""/149}, 0x9d, 0x0, 0x0)
msgsnd(r0, &(0x7f00000002c0)={0x0, "c4adfca44a759d699fef6e0a747240ae26f719ee8fe8072ee7c033cf220d0ec4d6d930502c999ff15a892df1701579e3b0638bb479ce253888"}, 0x41, 0x800)
msgrcv(r0, &(0x7f0000000340)={0x0, ""/179}, 0xbb, 0x2, 0x800)
r1 = msgget(0x0, 0x11)
msgsnd(r1, &(0x7f0000000400)={0x1, "7b79d803c660c20c7f86dc177f1c5bf50de5fc6e131f6c5ad2b53f6d6ebf73f643ea0c3e4cecde6d7fdb613ecb1e0cbbcf374ebeb28b36a54606e3e70b133c2092b39d7d626c8cac706c81b611abe8e88f55c84a50c1f837f062041431eaab67be49ff607712de31d2eb508078ae1e1f26feee325f4d71e4844bf7cec6632013f54f9b1e59cbdea3687dc83a73921cedbe6d38aba9efe670e702d0c326b14fe3f01946abd356fb343e03fe7ee2b7712c0140892f9188993ef1e81961d6f652"}, 0xc7, 0x800)
r2 = msgget$private(0x0, 0x1)
msgrcv(r2, &(0x7f0000000500)={0x0, ""/40}, 0x30, 0x0, 0x800)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{0x7f, 0x8, 0xa7, 0x5}, {0x4, 0x7, 0x5, 0x9}]})
msgsnd(r1, &(0x7f00000005c0)={0x3, "3597e566541d595029b04e4296153712dfbfc64ef10ac33cc012b05b014b1365a99c564c062d5b8ec2022dc46e82415b012ab099d7ff5f3f2628e902dc82bb767fb5ced5641baa7d9b6e7ce9542b17f0581b842a003f39c9e65f17552d6ccadeb567b121f5014ad2b12a9e544de1b4bc7add66493cc775d89e42b8c84d7519180ce2d4af128b9deb774784f8a46e38654a468fd8359b4233b1f64d50b6bea7659012d9871033526aa58e789436aefce706f2490a6325e78851d3b0"}, 0xc3, 0x800)
r3 = msgget(0x2, 0x20)
msgsnd(r3, &(0x7f00000006c0)={0x2, "95a72ef0e24f0414dd2b06f0f46763bb5e05674fb7246ca66d301773fcf019edda0fbb41b6367119d89b6885e953c5227e5b086a6f0603d49467952d203bc055eac0250a8c58099709ab5bec4c32e2bdf7f9990b96a36544f032002d4f30fedc701451d7630587"}, 0x6f, 0x0)
msgrcv(r0, &(0x7f0000000740)={0x0, ""/23}, 0x1f, 0x3, 0x800)
r4 = msgget$private(0x0, 0x200)
msgctl$IPC_RMID(r4, 0x0)
msgrcv(0x0, &(0x7f0000000780)={0x0, ""/141}, 0x95, 0x3, 0x2800)

17:11:29 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$RTC_WIE_ON(r0, 0x700f)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x0, 0x1, {0x15, 0x2c, 0x2, 0x1f, 0x2, 0x9, 0x1, 0xef, 0xffffffffffffffff}})
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080))
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x2ad5, 0x5, 0x52f, 0x1000, 0x56d})
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000100))
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000180)={0x1, 0x1, {0xe, 0x25, 0x9, 0x1a, 0x7, 0xffffffff, 0x3, 0xda, 0x1}})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
pipe2(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80000)
ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000280))
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000002c0)={0x3e000, 0xfff, 0xffffff9a, 0x1, 0x1})
setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000300)=0x5c0, 0x4)
r5 = open(&(0x7f0000000340)='./file0\x00', 0x200000, 0x72)
ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000000380)=""/160)
creat(&(0x7f0000000440)='./file0\x00', 0xc0)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000480), 0x4)

17:11:29 executing program 4:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, @none, 0x7ff, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x6}}, './file0\x00'})
listen(r0, 0x5)
r1 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xdf0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="8ebf5a791f0210e0241c2d928f55c24f7c7f90f2edd0bad7f3932e1a195f8c956c6e9a43d62536a8e43e19eae8af5d49ebad6dfe5ddbe8f50ab81b867ac099d535a43a4497e17ab4bf6cd98ffe", 0x4d, 0x189a}], 0x8408a, &(0x7f0000000200)={[{@fat=@debug}], [{@context={'context', 0x3d, 'root'}}, {@dont_appraise}, {@appraise}, {@smackfshat={'smackfshat', 0x3d, '\xff\xff\xff\xff\xff\xff'}}]})
r2 = socket$netlink(0x10, 0x3, 0x13)
listen(r2, 0x2)
r3 = open_tree(r1, &(0x7f0000000240)='./file0\x00', 0x800)
connect$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0x80, @any, 0x8, 0x1}, 0xe)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x7fff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9, 0x1}, 0xe)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000300)=0x1, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0x0, 0x1}, 0x6)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0xb0c80, 0x0)
r5 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000400)={0x1f, 0x8000, @none, 0x800, 0x1}, 0xe)
r6 = syz_open_dev$vcsn(&(0x7f0000000440), 0x6, 0x10880)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000480)={0x400, 0x3f, 0x8, 0x4, 0x3, 0xb6, 0x400}, 0xc)
utimensat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={{0x0, 0xea60}, {0x77359400}}, 0x100)

17:11:29 executing program 7:
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]})
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080))
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000004c0)={0x0, 0x0, 0x14, 0x1a, 0x193, &(0x7f00000000c0)="31a1205e777d59a55d28542e35a552a11ff635d95cc76116b2d546522ccf73638e7a9a041c302f34e2dc308bd630d13342f2edb5fffdb2eb22e3998eb344da0238f9e6c8a893ac982cce9568b56260073d9dce346de3208850a09ae63989e14cd61d61af8f95f468305997ac70f4df92ee5c8000eeb2118e876817a4cd67e7cee702df89ec3280a55477dc5a120cf65ff49da5d8932dd6098df07f03e2bade3d8ebd7abab322af6c4d1623b5166903be37f8059cff5dd922abbca2a76bc128aa3c2184c9221f83577020dcddfe4e180bed98447f4de4ce0bad3d567f5cd3ed5a5cc2b284308f020a5aab34ed6270355fad0cc1e3818ccf15190588d904be658c2cb192be41e8f6b3da6c206277b0ccab2b694ae39b51d3b28417a783d3aa0ed01e1aac77fe266ad3856e3710c5e16a969792fbba0ab9809cc6cd863fff3f02754ce34508c7ae1961f4636f044977b34b8874a757c9b965374cc4e3106e93a31fe3d2b619949cbeba9d2af27e7133f866b759473f5ce1c48fefc6f28d7340ba2dd6dee06c6123c43a360a905ecb6bf1aa579fe21334366e8188312097b9d4936ff28390ffa15104a5f3877de796ecba2b34d3e84669838673d208e380a67e74383feabfe00e17e2620bb87714245b28ddebbce09da8a796d4ccd827dc4e224dc44e5f48211e3d4c7a15851eccf9662bd86e5c899bb5d54b84e4b8f0ee9650ea8c174f3f9c099c34971d5fdc1a09244d127e22a64248b99ada8de887c7bab24e0b6a932c119101f21be7313feefdf163f1367aa4fd42a7ab24d05e002e8962eb064a39d7d7bec72aad8e87bd195cf1f86a787e2814ae15006e4a1827f43e16b5e5eca8d21ed4225ec35fa1f319b5c134c21519ab13e0f6b3708fe37d1e4ee59786e0525d646f8b15a66c1f51c9be4473fc20c494e06a130ee61dcf9944a2a66e29a43e688aa7e1ce9b4f1e99d5f91adbd00cc1b8fee3c1d955458e6eb77077399148968378db5eebb7cc6ab5547585106294c0eaad9320a56acb235d457b0c2a0fe0cb45cdcf294ceb4ba9333ae845824161f338db4ef547da6b95880086d7a3b995e8173cbe6542999b076e0758990f22841deb3ff9e3bfdf54bf0747db31cf8a3402ebc861cc110bfb6ac58616d2be3ba3ae127af55f0ca0583eb09cc1eb4bbfb3e8ffd48c45b206cf044b629ebfc299130b1c59638edd43b31661c2d7c27e251b0a3d69fca4c9dbda6b7a9fa50ac2e14e368b6e70a8d5e3db0725c7c3c39153dcc290aa3a4ac938dfc7f443ffb97b2f19db0d681df027dc73f25f5008c0bac0e066cc5b8e8374024a8cd3e3bc56f1f69d4c9631430c181b60322e08689d39bfa2c3da4c9aa17b7780370cdfeb68ddf1eb90d6df599feedb7ebff728942fb2e741752d4bd0585adc755c8228b06cb682afc2de7a033eaad51c6b41ec0e7cb474"})
r0 = syz_open_dev$vcsu(&(0x7f0000000500), 0x9, 0x880)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000540)={0x7fff, 0x7, 0x3e, 0x6, 0x5, "0c9becd031b842da"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000580))
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f00000005c0)={0xd, 0x2})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000600))
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r2=>r0, {0x7}}, './file0\x00'})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000680)={{r1}, 0x0, 0x0, @unused=[0x6, 0x8, 0x3, 0x1], @subvolid=0xf68})
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000001680)={{r2}, "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"})
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000002680)={0x8000, 0x8, 0x2, 0x9, 0xa, "f7878000b9883d3a"})
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000026c0))
r3 = creat(&(0x7f0000002700)='./file0\x00', 0x0)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000002740)={0x7fff, 0x3, 0x0, 0x0, 0x4, "5a2daa747b8d01d4"})
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000002780)={'custom1\x00'})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000028c0)=0x1, 0x4)
read(r2, &(0x7f0000002900)=""/196, 0xc4)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002b00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8d9}}, './file0\x00'})

17:11:29 executing program 5:
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x18ad411}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1e}, @val={0x8, 0x3, r1}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0xa, 0x6, 0x0, 0x0, 0x0, {0xc, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4080)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0x1]}, 0x8)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x178, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xf2, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @rann={0x7e, 0x15, {{0x1, 0x4}, 0x1, 0xbd, @broadcast, 0x7, 0x2, 0x1}}, @supported_rates, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @mic={0x8c, 0x10, {0x20c, "f7552426d2eb", @short="ce98619f84eb0d69"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @gcr_ga={0xbd, 0x6, @device_b}, @dsss={0x3, 0x1, 0x70}, @peer_mgmt={0x75, 0x18, {0x1, 0x7f, @val=0x8f3a, @val=0x27, @val="6568ece5b5b739ea7ea158c9ff3f2e12"}}, @preq={0x82, 0x7d, @not_ext={{0x0, 0x0, 0x1}, 0x2d, 0x9, 0x8, @device_a, 0xd9d, "", 0x1ffe, 0xfffff001, 0x9, [{{}, @broadcast, 0x6}, {{0x0, 0x0, 0x1}, @broadcast, 0x8}, {{0x1}, @device_b, 0x4}, {{0x0, 0x0, 0x1}, @broadcast}, {{}, @device_b}, {{}, @device_a, 0x800}, {{0x1, 0x0, 0x1}, @device_a, 0x101}, {{0x1}, @device_b}, {{0x1, 0x0, 0x1}, @device_b, 0x80}]}}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8000000, {0x4, 0xfffa, 0x4, 0x400}}}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e628c2485a25"}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x4100400, {0x4, 0x100, 0x6, 0xe6f8}}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1, 0x0, 0x0, 0x0, {0x7ff, 0x3, 0x0, 0x3f, 0x0, 0x1, 0x0, 0x2}, 0x400, 0x1, 0x4}}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000010}, 0x20044051)
r3 = dup(r2)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r4=>r2}, './file0\x00'})
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0xfffff000, 0x8, 0x6, 0x6]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x4c}}, 0x20000041)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x3, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000840))
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000e40)={0x0, 0x0, 0x18, 0x8, 0x23, &(0x7f0000000a40)="ca447ceca2374fc75b4b04fa3026f8943cb95c1f70b568ad13d8ab38e02ec594ffc32a02be8d1dec9d977f80749037dac594d3f0cbc7890c133badad21a9910e8fc89af32ae1f344985334d19b899ece6416c8d999ea1b49d3f4e0b64423649df68941deb0b6425216a59990f5026c42023cfcd5fcb1c2eb520ff5bf8e8754ac46c6685c947b39bee510c2905656e7f40761a164acfb9a9f9c2bfbf2b5be2f3f4345043130516f718b94072cff23e945ca428d15c4d1989c6c20928bcdb9e0e28c67c39f74b723369075a9e2eb42c00dbf723aedf1d0104bc141358dbe76e11f37789ca843f4d28821617055786b461995a471c94419d4e88f4e64109a105e0c3412ed519e06294940116ad0d9f71e4b21d5cbfa94259752310e3043605b3d6223b53d7dc10d64058e7c13be954fe1f401eadb3db015cd827dd961961ff0e1663ba44619467497fba287fda80931e0700d8a5038241f65690d825ad6e39f312d0f6858e994c56317e863954636156d08c9ebd25ee45a8222db27ab9c3e9251dfd772132d29a9f24cb97dc57bb90fd98d5b585513fb5f0d1a7aab6994ddf1ba517af8e5488a3706bc0f0c50578bd49406ea6779740154a499855dedd0dac0e407fd627b614732c472f22884edce9dd9fff802d37c90d8785e12e19b866eb995c8f968eb134f15f3880fce66fa3d8b95b95b445682a6c64e814cb6c6325e061a69cdce33d0a59508af5db5ff5537ce1440cc9b5cceb79b9d4216d65e6ce74756ec64603f672d689b9729dd2c95a21412641470c0e411af806accabc54ff5c9515a967a968953692fa52f238d1d31b2334e82482fd92ac929c91556ba3a220181aab48a76f26f74e6c1b5117d8bfcdc336ee76c87c99ffc7376f0939c7575fbaa6cccf3ed91eb02461fb95aa81f2c766c1674aa62dff4b2b50587662ae6244b1d6955f64c80f4efa4a56eaf7c041e7bbf1e6743d17f33a681dab1f0c3947aef718a902b46292a43a6bb3e1feee3d34602e644f93778120a1e1681e8e71274224a1fc5615e67f7c9975e6ed572f2dc56ae9d299bcc980eeab590b30bc01cb96dcad8ff607586d31637da1554e2c556474ce4ab5ae4f7a13d3175cff040cc0f17b1a0a78f3bd085dad22db8c0b84aafa855165f9e4e31373eb45dd95e6bea0b833349dcb11803d9e338a2cc3c013eba3be3e7fe0744dba22852bff39433272e8fbe67616f99cedf53126adb7f279431414da27f80840b1807c618d0e655dee63a3e572324ea48d7030201f3035232c556efab57a8309ea7b884c4f91bf0c8100edca8babbc4a9548cae578d840e331805bb2bf4a62e719f5a58b128c98560a44fa9cf87c02d654597bd693e4736f9aae8f83b7663892b83ac6581e3e9bb2c752426da58582760210456d8934763a1214eb0a6781b745ac605e41209d76a4fe397a728"})
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ec0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f00)={0x180, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x160, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c32b4059a975a13d8f8e3233bfc927648558936e5f45d5a5b0b531d7ea70aad7"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb}, @NL802154_KEY_ATTR_ID={0x6c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c42e63f4752ecacc1fdb8b09e7a3e13b"}, @NL802154_KEY_ATTR_ID={0x6c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffff8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x89}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000841)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001100)={0x0, 0xfffffffffffffffd, 0x1, [0x2, 0x9, 0x6, 0x1, 0xfffffffc00000000], [0x5, 0x2c2, 0x400000000000, 0x4000, 0x6, 0x8000, 0x8, 0x5c4, 0xfffffffffffffff7, 0x40, 0x1ff, 0x0, 0x0, 0x8, 0x8000, 0x5, 0x0, 0x3, 0x1, 0x4, 0x1f, 0x9, 0xf0, 0xffffffffffffffff, 0x7, 0x28, 0x5, 0x81, 0xbb2, 0x3f, 0x5, 0x7, 0x1c35, 0xfffffffffffffff8, 0x7fff, 0x5, 0x5, 0x401, 0x0, 0x4, 0x1, 0x2, 0x7f, 0x1, 0x100000001, 0x7fffffff, 0xfe22, 0x5, 0x5, 0xfff, 0x0, 0x1, 0x5639, 0x8, 0x6, 0xff, 0x7, 0x10001, 0x7, 0x4, 0x44, 0x7, 0x3, 0x800, 0x1, 0x8, 0x76aa, 0x20, 0x0, 0x6, 0x2, 0x7, 0x6, 0x10001, 0xfffffffffffffffb, 0xfff, 0xaa0, 0x80000001, 0x2000000000000000, 0x9, 0x6, 0x3, 0x8000, 0x7, 0x2, 0x3f, 0x998d, 0x200, 0x4, 0xde, 0x1, 0xffff, 0x5ed8, 0x8, 0xfffffffffffffffd, 0x9, 0x100, 0x401, 0x7, 0x1, 0x7f, 0x5, 0x8, 0x5, 0xfffffffffffffffe, 0x4, 0x100000001, 0x7, 0xf15, 0xc799, 0x3, 0x9, 0x0, 0x3, 0x80000000, 0x5, 0x7, 0x2, 0x1, 0x3]})
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001580), r6)
sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, r7, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000007)

[   93.648137] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   93.650196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   93.654307] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   93.658155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   93.661422] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   93.663159] ==================================================================
[   93.664445] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0
[   93.665658] Read of size 2 at addr ffff88800c6f82b8 by task kworker/u11:1/289
[   93.670247] 
[   93.672857] CPU: 1 UID: 0 PID: 289 Comm: kworker/u11:1 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) 
[   93.672892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[   93.672908] Workqueue: hci0 hci_cmd_work
[   93.672956] Call Trace:
[   93.672965]  <TASK>
[   93.672975]  dump_stack_lvl+0xca/0x120
[   93.673007]  print_report+0xcb/0x610
[   93.673040]  ? __virt_addr_valid+0x100/0x5d0
[   93.673069]  ? hci_cmd_work+0x66d/0x6d0
[   93.673100]  ? hci_cmd_work+0x66d/0x6d0
[   93.673132]  kasan_report+0xca/0x100
[   93.673164]  ? hci_cmd_work+0x66d/0x6d0
[   93.673199]  hci_cmd_work+0x66d/0x6d0
[   93.673233]  process_one_work+0x8e1/0x19c0
[   93.673275]  ? __pfx_process_one_work+0x10/0x10
[   93.673311]  ? move_linked_works+0x172/0x270
[   93.673339]  ? assign_work+0x196/0x240
[   93.673374]  worker_thread+0x67e/0xe90
[   93.673409]  ? trace_irq_enable.constprop.0+0xc2/0x100
[   93.673439]  ? __pfx_worker_thread+0x10/0x10
[   93.673476]  kthread+0x3c8/0x740
[   93.673507]  ? __pfx_kthread+0x10/0x10
[   93.673538]  ? ret_from_fork+0x79/0x7a0
[   93.673563]  ? lock_release+0xc8/0x290
[   93.673601]  ? __pfx_kthread+0x10/0x10
[   93.673634]  ret_from_fork+0x67a/0x7a0
[   93.673658]  ? __pfx_ret_from_fork+0x10/0x10
[   93.673684]  ? __switch_to+0x759/0x1060
[   93.673718]  ? __pfx_kthread+0x10/0x10
[   93.673751]  ret_from_fork_asm+0x1a/0x30
[   93.673792]  </TASK>
[   93.673800] 
[   93.696516] Allocated by task 288:
[   93.697150]  kasan_save_stack+0x24/0x50
[   93.697856]  kasan_save_track+0x14/0x30
[   93.698551]  __kasan_slab_alloc+0x59/0x70
[   93.699285]  kmem_cache_alloc_node_noprof+0x228/0x6b0
[   93.700199]  __alloc_skb+0x2ab/0x370
[   93.700872]  hci_cmd_sync_alloc+0x34/0x300
[   93.701657]  __hci_cmd_sync_sk+0xf7/0x5c0
[   93.702395]  hci_read_current_iac_lap_sync+0x2c/0x170
[   93.703309]  hci_dev_open_sync+0x1874/0x1f60
[   93.704099]  hci_power_on+0xdb/0x5d0
[   93.704771]  process_one_work+0x8e1/0x19c0
[   93.705544]  worker_thread+0x67e/0xe90
[   93.706249]  kthread+0x3c8/0x740
[   93.706862]  ret_from_fork+0x67a/0x7a0
[   93.707565]  ret_from_fork_asm+0x1a/0x30
[   93.708280] 
[   93.708591] Freed by task 291:
[   93.709163]  kasan_save_stack+0x24/0x50
[   93.709871]  kasan_save_track+0x14/0x30
[   93.710589]  kasan_save_free_info+0x3a/0x60
[   93.711363]  __kasan_slab_free+0x43/0x70
[   93.712085]  kmem_cache_free+0x26f/0x500
[   93.712830]  kfree_skbmem+0x18a/0x1f0
[   93.713526]  sk_skb_reason_drop+0x10e/0x1b0
[   93.714295]  vhci_read+0x3d5/0x5d0
[   93.714937]  vfs_read+0x1eb/0xc70
[   93.715563]  ksys_read+0x121/0x240
[   93.716191]  do_syscall_64+0xbf/0x430
[   93.716875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.717781] 
[   93.718086] The buggy address belongs to the object at ffff88800c6f8280
[   93.718086]  which belongs to the cache skbuff_head_cache of size 232
[   93.720305] The buggy address is located 56 bytes inside of
[   93.720305]  freed 232-byte region [ffff88800c6f8280, ffff88800c6f8368)
[   93.722232] 
[   93.722487] The buggy address belongs to the physical page:
[   93.723284] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xc6f8
[   93.724391] anon flags: 0x100000000000000(node=0|zone=1)
[   93.725185] page_type: f5(slab)
[   93.725682] raw: 0100000000000000 ffff8880096c78c0 ffffea00004e0180 0000000000000005
[   93.726783] raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000
[   93.727890] page dumped because: kasan: bad access detected
[   93.728693] 
[   93.728958] Memory state around the buggy address:
[   93.729658]  ffff88800c6f8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   93.730697]  ffff88800c6f8200: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc
[   93.731745] >ffff88800c6f8280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   93.732773]                                         ^
[   93.733515]  ffff88800c6f8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc
[   93.734543]  ffff88800c6f8380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[   93.735570] ==================================================================
[   93.736725] Disabling lock debugging due to kernel taint
[   93.830444] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   93.832108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   93.834490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   93.836962] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   93.840905] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   93.899214] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   93.900613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   93.902161] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   93.904254] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   93.905864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   93.907649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   93.908992] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   93.910588] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.914811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   93.918281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   93.960217] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   93.961522] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   93.971175] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   93.972257] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   93.976786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   93.989378] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   93.990462] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   93.991676] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   93.993215] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   93.994387] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   94.000794] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   94.002492] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   94.006707] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   94.009388] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   94.011508] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   94.016934] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   94.019151] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   94.021526] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   94.023510] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   94.027883] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   95.806078] Bluetooth: hci0: command tx timeout
[   95.872143] Bluetooth: hci1: command tx timeout
[   95.934688] Bluetooth: hci2: command tx timeout
[   95.998497] Bluetooth: hci3: command tx timeout
[   96.062203] Bluetooth: hci6: command tx timeout
[   96.062938] Bluetooth: hci4: command tx timeout
[   96.063758] Bluetooth: hci5: command tx timeout
[   96.126232] Bluetooth: hci7: command tx timeout
[   97.854099] Bluetooth: hci0: command tx timeout
[   97.918465] Bluetooth: hci1: command tx timeout
[   97.982110] Bluetooth: hci2: command tx timeout
[   98.047864] Bluetooth: hci3: command tx timeout
[   98.110141] Bluetooth: hci4: command tx timeout
[   98.110751] Bluetooth: hci6: command tx timeout
[   98.111422] Bluetooth: hci5: command tx timeout
[   98.175048] Bluetooth: hci7: command tx timeout
[   99.902075] Bluetooth: hci0: command tx timeout
[   99.966254] Bluetooth: hci1: command tx timeout
[  100.031050] Bluetooth: hci2: command tx timeout
[  100.094316] Bluetooth: hci3: command tx timeout
[  100.158430] Bluetooth: hci6: command tx timeout
[  100.159813] Bluetooth: hci4: command tx timeout
[  100.160535] Bluetooth: hci5: command tx timeout
[  100.222104] Bluetooth: hci7: command tx timeout
[  101.951156] Bluetooth: hci0: command tx timeout
[  102.014109] Bluetooth: hci1: command tx timeout
[  102.078115] Bluetooth: hci2: command tx timeout
[  102.142305] Bluetooth: hci3: command tx timeout
[  102.206827] Bluetooth: hci4: command tx timeout
[  102.207707] Bluetooth: hci5: command tx timeout
[  102.208541] Bluetooth: hci6: command tx timeout
[  102.270213] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
17:11:30  Registers:
info registers vcpu 0
RAX=0000000067238a37 RBX=ffff888009548000 RCX=0000000056be259b RDX=00000000b56be259
RSI=00000000d8233461 RDI=0000000028ce4b34 RBP=ffff888009548a58 RSP=ffff888009557130
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffff888009548b20 R13=000000008d8f16ba R14=0000000000000000 R15=0000000000000005
RIP=ffffffff81528221 RFL=00000813 [-O--A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f32c91b7900 00000000 00000000
GS =0000 ffff8880e538f000 00000000 00000000
LDT=0000 fffffe6d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007faa147cc400 CR3=0000000009a28000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=484b139b07f023979f416343e33153e1
XMM02=6b1e99b806172e3b00000000000aea28 XMM03=375afdebbf381c810000000000126e70
XMM04=c767e8e3296526620000000000130740 XMM05=d3fdd5f48436fbd700000000000aead0
XMM06=3dac3841b3dfbdf400000000000ae988 XMM07=a1fcdcf819d7e1e500000000000ae728
XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000
XMM10=20200000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8293dd05 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff88800e787618
R8 =0000000000000000 R9 =ffffed1001510046 R10=0000000000000001 R11=fffffffffffc96b0
R12=000000000000000a R13=0000000000000010 R14=ffffffff88974780 R15=ffffffff8293dcf0
RIP=ffffffff8293dd5d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e548f000 00000000 00000000
LDT=0000 fffffe7400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0af6dd7580 CR3=000000000d1ce000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=ffffffffffffffff00000000000000ff XMM03=696e656420737365636341002f737973
XMM04=00000002ffffffff000055fbf21a0ed0 XMM05=000055fbf2138810000055fbf2171480
XMM06=000055fbf21a0ef0ffffffff00000003 XMM07=00000000000000000000000000000000
XMM08=7269762f736563697665642f7379732f XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000