Warning: Permanently added '[localhost]:8073' (ECDSA) to the list of known hosts.
2025/11/16 23:35:26 fuzzer started
2025/11/16 23:35:26 dialing manager at localhost:37161
syzkaller login: [   49.506081] cgroup: Unknown subsys name 'net'
[   49.558908] cgroup: Unknown subsys name 'cpuset'
[   49.575112] cgroup: Unknown subsys name 'rlimit'
2025/11/16 23:35:36 syscalls: 2214
2025/11/16 23:35:36 code coverage: enabled
2025/11/16 23:35:36 comparison tracing: enabled
2025/11/16 23:35:36 extra coverage: enabled
2025/11/16 23:35:36 setuid sandbox: enabled
2025/11/16 23:35:36 namespace sandbox: enabled
2025/11/16 23:35:36 Android sandbox: enabled
2025/11/16 23:35:36 fault injection: enabled
2025/11/16 23:35:36 leak checking: enabled
2025/11/16 23:35:36 net packet injection: enabled
2025/11/16 23:35:36 net device setup: enabled
2025/11/16 23:35:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/11/16 23:35:36 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/11/16 23:35:36 USB emulation: enabled
2025/11/16 23:35:36 hci packet injection: enabled
2025/11/16 23:35:36 wifi device emulation: enabled
2025/11/16 23:35:36 802.15.4 emulation: enabled
2025/11/16 23:35:36 fetching corpus: 50, signal 19822/21668 (executing program)
2025/11/16 23:35:36 fetching corpus: 100, signal 34694/38208 (executing program)
2025/11/16 23:35:36 fetching corpus: 150, signal 40114/45265 (executing program)
2025/11/16 23:35:36 fetching corpus: 200, signal 48188/54848 (executing program)
2025/11/16 23:35:36 fetching corpus: 250, signal 55820/63884 (executing program)
2025/11/16 23:35:36 fetching corpus: 300, signal 60227/69729 (executing program)
2025/11/16 23:35:36 fetching corpus: 350, signal 65198/76045 (executing program)
2025/11/16 23:35:36 fetching corpus: 400, signal 68668/80893 (executing program)
2025/11/16 23:35:36 fetching corpus: 450, signal 71706/85260 (executing program)
2025/11/16 23:35:36 fetching corpus: 500, signal 75903/90686 (executing program)
2025/11/16 23:35:37 fetching corpus: 550, signal 80461/96393 (executing program)
2025/11/16 23:35:37 fetching corpus: 600, signal 83072/100256 (executing program)
2025/11/16 23:35:37 fetching corpus: 650, signal 85571/103944 (executing program)
2025/11/16 23:35:37 fetching corpus: 700, signal 88070/107596 (executing program)
2025/11/16 23:35:37 fetching corpus: 750, signal 90820/111422 (executing program)
2025/11/16 23:35:37 fetching corpus: 800, signal 92328/114154 (executing program)
2025/11/16 23:35:37 fetching corpus: 850, signal 93536/116554 (executing program)
2025/11/16 23:35:37 fetching corpus: 900, signal 96093/120182 (executing program)
2025/11/16 23:35:37 fetching corpus: 950, signal 98193/123369 (executing program)
2025/11/16 23:35:37 fetching corpus: 1000, signal 100076/126332 (executing program)
2025/11/16 23:35:37 fetching corpus: 1050, signal 102019/129302 (executing program)
2025/11/16 23:35:38 fetching corpus: 1100, signal 103324/131714 (executing program)
2025/11/16 23:35:38 fetching corpus: 1150, signal 105063/134433 (executing program)
2025/11/16 23:35:38 fetching corpus: 1200, signal 107092/137401 (executing program)
2025/11/16 23:35:38 fetching corpus: 1250, signal 108115/139573 (executing program)
2025/11/16 23:35:38 fetching corpus: 1300, signal 110776/143033 (executing program)
2025/11/16 23:35:38 fetching corpus: 1350, signal 111765/145068 (executing program)
2025/11/16 23:35:38 fetching corpus: 1400, signal 112956/147269 (executing program)
2025/11/16 23:35:38 fetching corpus: 1450, signal 114995/150118 (executing program)
2025/11/16 23:35:38 fetching corpus: 1500, signal 116751/152748 (executing program)
2025/11/16 23:35:38 fetching corpus: 1550, signal 118449/155278 (executing program)
2025/11/16 23:35:39 fetching corpus: 1600, signal 119740/157449 (executing program)
2025/11/16 23:35:39 fetching corpus: 1650, signal 120869/159456 (executing program)
2025/11/16 23:35:39 fetching corpus: 1700, signal 121951/161481 (executing program)
2025/11/16 23:35:39 fetching corpus: 1750, signal 122998/163463 (executing program)
2025/11/16 23:35:39 fetching corpus: 1800, signal 124258/165555 (executing program)
2025/11/16 23:35:39 fetching corpus: 1850, signal 125652/167728 (executing program)
2025/11/16 23:35:39 fetching corpus: 1900, signal 126453/169456 (executing program)
2025/11/16 23:35:39 fetching corpus: 1950, signal 127838/171604 (executing program)
2025/11/16 23:35:39 fetching corpus: 2000, signal 128945/173528 (executing program)
2025/11/16 23:35:39 fetching corpus: 2050, signal 129933/175328 (executing program)
2025/11/16 23:35:39 fetching corpus: 2100, signal 130660/176912 (executing program)
2025/11/16 23:35:40 fetching corpus: 2150, signal 133681/180082 (executing program)
2025/11/16 23:35:40 fetching corpus: 2200, signal 135075/182163 (executing program)
2025/11/16 23:35:40 fetching corpus: 2250, signal 136001/183874 (executing program)
2025/11/16 23:35:40 fetching corpus: 2300, signal 136964/185612 (executing program)
2025/11/16 23:35:40 fetching corpus: 2350, signal 138029/187420 (executing program)
2025/11/16 23:35:40 fetching corpus: 2400, signal 138973/189105 (executing program)
2025/11/16 23:35:40 fetching corpus: 2450, signal 140214/190979 (executing program)
2025/11/16 23:35:40 fetching corpus: 2500, signal 141058/192571 (executing program)
2025/11/16 23:35:40 fetching corpus: 2550, signal 142442/194505 (executing program)
2025/11/16 23:35:40 fetching corpus: 2600, signal 143202/196022 (executing program)
2025/11/16 23:35:41 fetching corpus: 2650, signal 144442/197807 (executing program)
2025/11/16 23:35:41 fetching corpus: 2700, signal 145181/199272 (executing program)
2025/11/16 23:35:41 fetching corpus: 2750, signal 145899/200718 (executing program)
2025/11/16 23:35:41 fetching corpus: 2800, signal 146623/202164 (executing program)
2025/11/16 23:35:41 fetching corpus: 2850, signal 147424/203628 (executing program)
2025/11/16 23:35:41 fetching corpus: 2900, signal 148248/205104 (executing program)
2025/11/16 23:35:41 fetching corpus: 2950, signal 149004/206536 (executing program)
2025/11/16 23:35:41 fetching corpus: 3000, signal 149725/207890 (executing program)
2025/11/16 23:35:41 fetching corpus: 3050, signal 150122/209096 (executing program)
2025/11/16 23:35:42 fetching corpus: 3100, signal 150811/210441 (executing program)
2025/11/16 23:35:42 fetching corpus: 3150, signal 151459/211739 (executing program)
2025/11/16 23:35:42 fetching corpus: 3200, signal 152139/213047 (executing program)
2025/11/16 23:35:42 fetching corpus: 3250, signal 152858/214391 (executing program)
2025/11/16 23:35:42 fetching corpus: 3300, signal 153470/215716 (executing program)
2025/11/16 23:35:42 fetching corpus: 3350, signal 154170/217041 (executing program)
2025/11/16 23:35:42 fetching corpus: 3400, signal 154940/218429 (executing program)
2025/11/16 23:35:42 fetching corpus: 3450, signal 155619/219709 (executing program)
2025/11/16 23:35:42 fetching corpus: 3500, signal 156274/220948 (executing program)
2025/11/16 23:35:42 fetching corpus: 3550, signal 156901/222171 (executing program)
2025/11/16 23:35:42 fetching corpus: 3600, signal 158170/223691 (executing program)
2025/11/16 23:35:43 fetching corpus: 3650, signal 159092/225066 (executing program)
2025/11/16 23:35:43 fetching corpus: 3700, signal 159711/226295 (executing program)
2025/11/16 23:35:43 fetching corpus: 3750, signal 160519/227637 (executing program)
2025/11/16 23:35:43 fetching corpus: 3800, signal 161147/228814 (executing program)
2025/11/16 23:35:43 fetching corpus: 3850, signal 161926/230059 (executing program)
2025/11/16 23:35:43 fetching corpus: 3900, signal 162880/231398 (executing program)
2025/11/16 23:35:43 fetching corpus: 3950, signal 163352/232500 (executing program)
2025/11/16 23:35:43 fetching corpus: 4000, signal 163917/233628 (executing program)
2025/11/16 23:35:43 fetching corpus: 4050, signal 164674/234807 (executing program)
2025/11/16 23:35:44 fetching corpus: 4100, signal 165171/235872 (executing program)
2025/11/16 23:35:44 fetching corpus: 4150, signal 165694/236983 (executing program)
2025/11/16 23:35:44 fetching corpus: 4200, signal 167005/238382 (executing program)
2025/11/16 23:35:44 fetching corpus: 4250, signal 167537/239404 (executing program)
2025/11/16 23:35:44 fetching corpus: 4300, signal 168148/240504 (executing program)
2025/11/16 23:35:44 fetching corpus: 4350, signal 168704/241543 (executing program)
2025/11/16 23:35:44 fetching corpus: 4400, signal 169165/242598 (executing program)
2025/11/16 23:35:44 fetching corpus: 4450, signal 169536/243529 (executing program)
2025/11/16 23:35:44 fetching corpus: 4500, signal 170061/244494 (executing program)
2025/11/16 23:35:44 fetching corpus: 4550, signal 171026/245622 (executing program)
2025/11/16 23:35:45 fetching corpus: 4600, signal 171575/246601 (executing program)
2025/11/16 23:35:45 fetching corpus: 4650, signal 172112/247583 (executing program)
2025/11/16 23:35:45 fetching corpus: 4700, signal 172739/248620 (executing program)
2025/11/16 23:35:45 fetching corpus: 4750, signal 173218/249558 (executing program)
2025/11/16 23:35:45 fetching corpus: 4800, signal 173741/250565 (executing program)
2025/11/16 23:35:45 fetching corpus: 4850, signal 174639/251673 (executing program)
2025/11/16 23:35:45 fetching corpus: 4900, signal 175454/252683 (executing program)
2025/11/16 23:35:45 fetching corpus: 4950, signal 175774/253523 (executing program)
2025/11/16 23:35:45 fetching corpus: 5000, signal 176366/254506 (executing program)
2025/11/16 23:35:46 fetching corpus: 5050, signal 176812/255446 (executing program)
2025/11/16 23:35:46 fetching corpus: 5100, signal 177615/256474 (executing program)
2025/11/16 23:35:46 fetching corpus: 5150, signal 178142/257378 (executing program)
2025/11/16 23:35:46 fetching corpus: 5200, signal 178811/258384 (executing program)
2025/11/16 23:35:46 fetching corpus: 5250, signal 179618/259386 (executing program)
2025/11/16 23:35:46 fetching corpus: 5300, signal 180093/260315 (executing program)
2025/11/16 23:35:46 fetching corpus: 5350, signal 180557/261190 (executing program)
2025/11/16 23:35:46 fetching corpus: 5400, signal 181036/262045 (executing program)
2025/11/16 23:35:46 fetching corpus: 5450, signal 181637/262951 (executing program)
2025/11/16 23:35:46 fetching corpus: 5500, signal 182184/263831 (executing program)
2025/11/16 23:35:46 fetching corpus: 5550, signal 182806/264706 (executing program)
2025/11/16 23:35:47 fetching corpus: 5600, signal 183249/265545 (executing program)
2025/11/16 23:35:47 fetching corpus: 5650, signal 183686/266376 (executing program)
2025/11/16 23:35:47 fetching corpus: 5700, signal 184074/267199 (executing program)
2025/11/16 23:35:47 fetching corpus: 5750, signal 184442/267930 (executing program)
2025/11/16 23:35:47 fetching corpus: 5800, signal 185077/268781 (executing program)
2025/11/16 23:35:47 fetching corpus: 5850, signal 185459/269546 (executing program)
2025/11/16 23:35:47 fetching corpus: 5900, signal 185849/270364 (executing program)
2025/11/16 23:35:47 fetching corpus: 5950, signal 186084/271125 (executing program)
2025/11/16 23:35:47 fetching corpus: 6000, signal 186425/271873 (executing program)
2025/11/16 23:35:47 fetching corpus: 6050, signal 186763/272637 (executing program)
2025/11/16 23:35:47 fetching corpus: 6100, signal 187279/273439 (executing program)
2025/11/16 23:35:47 fetching corpus: 6150, signal 187576/274196 (executing program)
2025/11/16 23:35:48 fetching corpus: 6200, signal 188024/274939 (executing program)
2025/11/16 23:35:48 fetching corpus: 6250, signal 188417/275661 (executing program)
2025/11/16 23:35:48 fetching corpus: 6300, signal 188745/276412 (executing program)
2025/11/16 23:35:48 fetching corpus: 6350, signal 189065/277144 (executing program)
2025/11/16 23:35:48 fetching corpus: 6400, signal 189415/277863 (executing program)
2025/11/16 23:35:48 fetching corpus: 6450, signal 189772/278607 (executing program)
2025/11/16 23:35:48 fetching corpus: 6500, signal 190169/279362 (executing program)
2025/11/16 23:35:48 fetching corpus: 6550, signal 190523/280043 (executing program)
2025/11/16 23:35:48 fetching corpus: 6600, signal 190843/280734 (executing program)
2025/11/16 23:35:48 fetching corpus: 6650, signal 191316/281468 (executing program)
2025/11/16 23:35:48 fetching corpus: 6700, signal 191664/282173 (executing program)
2025/11/16 23:35:49 fetching corpus: 6750, signal 192075/282857 (executing program)
2025/11/16 23:35:49 fetching corpus: 6800, signal 192522/283553 (executing program)
2025/11/16 23:35:49 fetching corpus: 6850, signal 192963/284270 (executing program)
2025/11/16 23:35:49 fetching corpus: 6900, signal 193416/284951 (executing program)
2025/11/16 23:35:49 fetching corpus: 6950, signal 193811/285613 (executing program)
2025/11/16 23:35:49 fetching corpus: 7000, signal 194194/286265 (executing program)
2025/11/16 23:35:49 fetching corpus: 7050, signal 194477/286934 (executing program)
2025/11/16 23:35:49 fetching corpus: 7100, signal 194930/287580 (executing program)
2025/11/16 23:35:49 fetching corpus: 7150, signal 195243/288238 (executing program)
2025/11/16 23:35:49 fetching corpus: 7200, signal 195689/288852 (executing program)
2025/11/16 23:35:50 fetching corpus: 7250, signal 196028/289190 (executing program)
2025/11/16 23:35:50 fetching corpus: 7300, signal 196344/289190 (executing program)
2025/11/16 23:35:50 fetching corpus: 7350, signal 196753/289190 (executing program)
2025/11/16 23:35:50 fetching corpus: 7400, signal 197055/289191 (executing program)
2025/11/16 23:35:50 fetching corpus: 7450, signal 197317/289191 (executing program)
2025/11/16 23:35:50 fetching corpus: 7500, signal 197688/289191 (executing program)
2025/11/16 23:35:50 fetching corpus: 7550, signal 198023/289191 (executing program)
2025/11/16 23:35:50 fetching corpus: 7600, signal 198342/289191 (executing program)
2025/11/16 23:35:50 fetching corpus: 7650, signal 198682/289191 (executing program)
2025/11/16 23:35:50 fetching corpus: 7700, signal 198940/289191 (executing program)
2025/11/16 23:35:51 fetching corpus: 7750, signal 199281/289191 (executing program)
2025/11/16 23:35:51 fetching corpus: 7800, signal 199541/289191 (executing program)
2025/11/16 23:35:51 fetching corpus: 7850, signal 199914/289191 (executing program)
2025/11/16 23:35:51 fetching corpus: 7900, signal 200380/289191 (executing program)
2025/11/16 23:35:51 fetching corpus: 7950, signal 200923/289191 (executing program)
2025/11/16 23:35:51 fetching corpus: 8000, signal 201379/289191 (executing program)
2025/11/16 23:35:51 fetching corpus: 8050, signal 201784/289191 (executing program)
2025/11/16 23:35:51 fetching corpus: 8100, signal 202009/289191 (executing program)
2025/11/16 23:35:51 fetching corpus: 8150, signal 202346/289191 (executing program)
2025/11/16 23:35:51 fetching corpus: 8200, signal 202563/289193 (executing program)
2025/11/16 23:35:51 fetching corpus: 8250, signal 202881/289193 (executing program)
2025/11/16 23:35:51 fetching corpus: 8300, signal 203175/289193 (executing program)
2025/11/16 23:35:52 fetching corpus: 8350, signal 203469/289193 (executing program)
2025/11/16 23:35:52 fetching corpus: 8400, signal 203771/289193 (executing program)
2025/11/16 23:35:52 fetching corpus: 8450, signal 204043/289193 (executing program)
2025/11/16 23:35:52 fetching corpus: 8500, signal 204461/289193 (executing program)
2025/11/16 23:35:52 fetching corpus: 8550, signal 204666/289193 (executing program)
2025/11/16 23:35:52 fetching corpus: 8600, signal 204938/289193 (executing program)
2025/11/16 23:35:52 fetching corpus: 8650, signal 205166/289193 (executing program)
2025/11/16 23:35:52 fetching corpus: 8700, signal 205330/289193 (executing program)
2025/11/16 23:35:52 fetching corpus: 8750, signal 205605/289193 (executing program)
2025/11/16 23:35:52 fetching corpus: 8800, signal 205903/289194 (executing program)
2025/11/16 23:35:53 fetching corpus: 8850, signal 206246/289194 (executing program)
2025/11/16 23:35:53 fetching corpus: 8900, signal 206473/289194 (executing program)
2025/11/16 23:35:53 fetching corpus: 8950, signal 206745/289194 (executing program)
2025/11/16 23:35:53 fetching corpus: 9000, signal 206987/289194 (executing program)
2025/11/16 23:35:53 fetching corpus: 9050, signal 207332/289194 (executing program)
2025/11/16 23:35:53 fetching corpus: 9100, signal 207619/289194 (executing program)
2025/11/16 23:35:53 fetching corpus: 9150, signal 207819/289194 (executing program)
2025/11/16 23:35:53 fetching corpus: 9200, signal 208013/289194 (executing program)
2025/11/16 23:35:53 fetching corpus: 9250, signal 208382/289194 (executing program)
2025/11/16 23:35:53 fetching corpus: 9300, signal 208628/289194 (executing program)
2025/11/16 23:35:53 fetching corpus: 9350, signal 208950/289194 (executing program)
2025/11/16 23:35:53 fetching corpus: 9400, signal 209292/289194 (executing program)
2025/11/16 23:35:54 fetching corpus: 9450, signal 209613/289194 (executing program)
2025/11/16 23:35:54 fetching corpus: 9500, signal 209989/289194 (executing program)
2025/11/16 23:35:54 fetching corpus: 9550, signal 210277/289194 (executing program)
2025/11/16 23:35:54 fetching corpus: 9600, signal 210495/289194 (executing program)
2025/11/16 23:35:54 fetching corpus: 9650, signal 210770/289194 (executing program)
2025/11/16 23:35:54 fetching corpus: 9700, signal 211003/289194 (executing program)
2025/11/16 23:35:54 fetching corpus: 9750, signal 211313/289194 (executing program)
2025/11/16 23:35:54 fetching corpus: 9800, signal 211557/289194 (executing program)
2025/11/16 23:35:54 fetching corpus: 9850, signal 211739/289196 (executing program)
2025/11/16 23:35:54 fetching corpus: 9900, signal 211973/289197 (executing program)
2025/11/16 23:35:55 fetching corpus: 9950, signal 212942/289197 (executing program)
2025/11/16 23:35:55 fetching corpus: 10000, signal 213288/289197 (executing program)
2025/11/16 23:35:55 fetching corpus: 10050, signal 213474/289197 (executing program)
2025/11/16 23:35:55 fetching corpus: 10100, signal 213852/289197 (executing program)
2025/11/16 23:35:55 fetching corpus: 10150, signal 214129/289197 (executing program)
2025/11/16 23:35:55 fetching corpus: 10200, signal 214359/289197 (executing program)
2025/11/16 23:35:55 fetching corpus: 10250, signal 214580/289197 (executing program)
2025/11/16 23:35:55 fetching corpus: 10300, signal 214895/289197 (executing program)
2025/11/16 23:35:55 fetching corpus: 10350, signal 215197/289197 (executing program)
2025/11/16 23:35:55 fetching corpus: 10400, signal 215399/289197 (executing program)
2025/11/16 23:35:55 fetching corpus: 10450, signal 215704/289197 (executing program)
2025/11/16 23:35:56 fetching corpus: 10500, signal 215982/289197 (executing program)
2025/11/16 23:35:56 fetching corpus: 10550, signal 216302/289197 (executing program)
2025/11/16 23:35:56 fetching corpus: 10600, signal 216525/289197 (executing program)
2025/11/16 23:35:56 fetching corpus: 10650, signal 216890/289197 (executing program)
2025/11/16 23:35:56 fetching corpus: 10700, signal 217095/289197 (executing program)
2025/11/16 23:35:56 fetching corpus: 10750, signal 217339/289197 (executing program)
2025/11/16 23:35:56 fetching corpus: 10800, signal 217627/289197 (executing program)
2025/11/16 23:35:56 fetching corpus: 10850, signal 217832/289197 (executing program)
2025/11/16 23:35:56 fetching corpus: 10900, signal 218115/289197 (executing program)
2025/11/16 23:35:56 fetching corpus: 10950, signal 218538/289211 (executing program)
2025/11/16 23:35:57 fetching corpus: 11000, signal 218800/289211 (executing program)
2025/11/16 23:35:57 fetching corpus: 11050, signal 219020/289211 (executing program)
2025/11/16 23:35:57 fetching corpus: 11100, signal 219194/289211 (executing program)
2025/11/16 23:35:57 fetching corpus: 11150, signal 219390/289211 (executing program)
2025/11/16 23:35:57 fetching corpus: 11200, signal 219701/289211 (executing program)
2025/11/16 23:35:57 fetching corpus: 11250, signal 219938/289213 (executing program)
2025/11/16 23:35:57 fetching corpus: 11300, signal 220166/289215 (executing program)
2025/11/16 23:35:57 fetching corpus: 11350, signal 220367/289215 (executing program)
2025/11/16 23:35:57 fetching corpus: 11400, signal 220658/289215 (executing program)
2025/11/16 23:35:57 fetching corpus: 11450, signal 220906/289215 (executing program)
2025/11/16 23:35:58 fetching corpus: 11500, signal 221106/289215 (executing program)
2025/11/16 23:35:58 fetching corpus: 11550, signal 221336/289215 (executing program)
2025/11/16 23:35:58 fetching corpus: 11600, signal 221626/289215 (executing program)
2025/11/16 23:35:58 fetching corpus: 11650, signal 221924/289215 (executing program)
2025/11/16 23:35:58 fetching corpus: 11700, signal 222201/289215 (executing program)
2025/11/16 23:35:58 fetching corpus: 11750, signal 222368/289215 (executing program)
2025/11/16 23:35:58 fetching corpus: 11800, signal 222587/289215 (executing program)
2025/11/16 23:35:58 fetching corpus: 11850, signal 222835/289215 (executing program)
2025/11/16 23:35:58 fetching corpus: 11900, signal 223029/289215 (executing program)
2025/11/16 23:35:58 fetching corpus: 11950, signal 223346/289215 (executing program)
2025/11/16 23:35:59 fetching corpus: 12000, signal 223560/289215 (executing program)
2025/11/16 23:35:59 fetching corpus: 12050, signal 223788/289215 (executing program)
2025/11/16 23:35:59 fetching corpus: 12100, signal 223958/289215 (executing program)
2025/11/16 23:35:59 fetching corpus: 12150, signal 224130/289215 (executing program)
2025/11/16 23:35:59 fetching corpus: 12200, signal 224331/289215 (executing program)
2025/11/16 23:35:59 fetching corpus: 12250, signal 224629/289215 (executing program)
2025/11/16 23:35:59 fetching corpus: 12300, signal 224815/289215 (executing program)
2025/11/16 23:35:59 fetching corpus: 12350, signal 225050/289215 (executing program)
2025/11/16 23:35:59 fetching corpus: 12400, signal 225215/289215 (executing program)
2025/11/16 23:35:59 fetching corpus: 12450, signal 225424/289215 (executing program)
2025/11/16 23:35:59 fetching corpus: 12500, signal 225600/289215 (executing program)
2025/11/16 23:36:00 fetching corpus: 12550, signal 225815/289215 (executing program)
2025/11/16 23:36:00 fetching corpus: 12600, signal 226043/289215 (executing program)
2025/11/16 23:36:00 fetching corpus: 12650, signal 226278/289215 (executing program)
2025/11/16 23:36:00 fetching corpus: 12700, signal 226561/289215 (executing program)
2025/11/16 23:36:00 fetching corpus: 12750, signal 226875/289215 (executing program)
2025/11/16 23:36:00 fetching corpus: 12800, signal 227413/289215 (executing program)
2025/11/16 23:36:00 fetching corpus: 12850, signal 227622/289215 (executing program)
2025/11/16 23:36:00 fetching corpus: 12900, signal 227815/289215 (executing program)
2025/11/16 23:36:00 fetching corpus: 12950, signal 228054/289215 (executing program)
2025/11/16 23:36:00 fetching corpus: 13000, signal 228225/289215 (executing program)
2025/11/16 23:36:01 fetching corpus: 13050, signal 228403/289224 (executing program)
2025/11/16 23:36:01 fetching corpus: 13100, signal 228602/289224 (executing program)
2025/11/16 23:36:01 fetching corpus: 13150, signal 228793/289226 (executing program)
2025/11/16 23:36:01 fetching corpus: 13200, signal 228927/289226 (executing program)
2025/11/16 23:36:01 fetching corpus: 13250, signal 229084/289226 (executing program)
2025/11/16 23:36:01 fetching corpus: 13300, signal 229261/289226 (executing program)
2025/11/16 23:36:01 fetching corpus: 13350, signal 229478/289226 (executing program)
2025/11/16 23:36:01 fetching corpus: 13400, signal 229733/289226 (executing program)
2025/11/16 23:36:01 fetching corpus: 13450, signal 229970/289226 (executing program)
2025/11/16 23:36:01 fetching corpus: 13500, signal 230236/289226 (executing program)
2025/11/16 23:36:01 fetching corpus: 13550, signal 230487/289226 (executing program)
2025/11/16 23:36:02 fetching corpus: 13600, signal 230672/289229 (executing program)
2025/11/16 23:36:02 fetching corpus: 13650, signal 230908/289229 (executing program)
2025/11/16 23:36:02 fetching corpus: 13700, signal 231150/289229 (executing program)
2025/11/16 23:36:02 fetching corpus: 13750, signal 231361/289229 (executing program)
2025/11/16 23:36:02 fetching corpus: 13800, signal 231578/289229 (executing program)
2025/11/16 23:36:02 fetching corpus: 13850, signal 231720/289229 (executing program)
2025/11/16 23:36:02 fetching corpus: 13900, signal 231896/289229 (executing program)
2025/11/16 23:36:02 fetching corpus: 13950, signal 232081/289229 (executing program)
2025/11/16 23:36:02 fetching corpus: 14000, signal 232263/289229 (executing program)
2025/11/16 23:36:03 fetching corpus: 14050, signal 232495/289229 (executing program)
2025/11/16 23:36:03 fetching corpus: 14100, signal 232778/289229 (executing program)
2025/11/16 23:36:03 fetching corpus: 14150, signal 233021/289229 (executing program)
2025/11/16 23:36:03 fetching corpus: 14200, signal 233223/289229 (executing program)
2025/11/16 23:36:03 fetching corpus: 14250, signal 233397/289229 (executing program)
2025/11/16 23:36:03 fetching corpus: 14300, signal 233623/289229 (executing program)
2025/11/16 23:36:03 fetching corpus: 14350, signal 233752/289229 (executing program)
2025/11/16 23:36:03 fetching corpus: 14400, signal 234030/289229 (executing program)
2025/11/16 23:36:03 fetching corpus: 14450, signal 234227/289229 (executing program)
2025/11/16 23:36:03 fetching corpus: 14500, signal 234530/289229 (executing program)
2025/11/16 23:36:04 fetching corpus: 14550, signal 234735/289229 (executing program)
2025/11/16 23:36:04 fetching corpus: 14600, signal 234893/289229 (executing program)
2025/11/16 23:36:04 fetching corpus: 14650, signal 235043/289229 (executing program)
2025/11/16 23:36:04 fetching corpus: 14700, signal 235243/289229 (executing program)
2025/11/16 23:36:04 fetching corpus: 14750, signal 235412/289229 (executing program)
2025/11/16 23:36:04 fetching corpus: 14800, signal 235815/289229 (executing program)
2025/11/16 23:36:04 fetching corpus: 14850, signal 236007/289229 (executing program)
2025/11/16 23:36:04 fetching corpus: 14900, signal 236181/289229 (executing program)
2025/11/16 23:36:04 fetching corpus: 14950, signal 236368/289229 (executing program)
2025/11/16 23:36:04 fetching corpus: 15000, signal 236589/289229 (executing program)
2025/11/16 23:36:04 fetching corpus: 15050, signal 236763/289229 (executing program)
2025/11/16 23:36:05 fetching corpus: 15100, signal 236911/289229 (executing program)
2025/11/16 23:36:05 fetching corpus: 15150, signal 237042/289229 (executing program)
2025/11/16 23:36:05 fetching corpus: 15200, signal 237234/289229 (executing program)
2025/11/16 23:36:05 fetching corpus: 15250, signal 237447/289229 (executing program)
2025/11/16 23:36:05 fetching corpus: 15300, signal 237692/289229 (executing program)
2025/11/16 23:36:05 fetching corpus: 15350, signal 237837/289229 (executing program)
2025/11/16 23:36:05 fetching corpus: 15400, signal 237958/289229 (executing program)
2025/11/16 23:36:05 fetching corpus: 15450, signal 238131/289229 (executing program)
2025/11/16 23:36:05 fetching corpus: 15500, signal 238309/289229 (executing program)
2025/11/16 23:36:06 fetching corpus: 15550, signal 238471/289229 (executing program)
2025/11/16 23:36:06 fetching corpus: 15600, signal 238615/289229 (executing program)
2025/11/16 23:36:06 fetching corpus: 15650, signal 238758/289229 (executing program)
2025/11/16 23:36:06 fetching corpus: 15700, signal 239097/289229 (executing program)
2025/11/16 23:36:06 fetching corpus: 15750, signal 239292/289229 (executing program)
2025/11/16 23:36:06 fetching corpus: 15800, signal 239451/289229 (executing program)
2025/11/16 23:36:06 fetching corpus: 15850, signal 239606/289229 (executing program)
2025/11/16 23:36:06 fetching corpus: 15900, signal 239884/289229 (executing program)
2025/11/16 23:36:06 fetching corpus: 15950, signal 240026/289229 (executing program)
2025/11/16 23:36:06 fetching corpus: 16000, signal 240186/289230 (executing program)
2025/11/16 23:36:06 fetching corpus: 16050, signal 240353/289230 (executing program)
2025/11/16 23:36:07 fetching corpus: 16100, signal 240511/289230 (executing program)
2025/11/16 23:36:07 fetching corpus: 16150, signal 240714/289233 (executing program)
2025/11/16 23:36:07 fetching corpus: 16200, signal 240849/289233 (executing program)
2025/11/16 23:36:07 fetching corpus: 16250, signal 241043/289233 (executing program)
2025/11/16 23:36:07 fetching corpus: 16300, signal 241202/289233 (executing program)
2025/11/16 23:36:07 fetching corpus: 16350, signal 241360/289233 (executing program)
2025/11/16 23:36:07 fetching corpus: 16400, signal 241485/289233 (executing program)
2025/11/16 23:36:07 fetching corpus: 16450, signal 241683/289233 (executing program)
2025/11/16 23:36:07 fetching corpus: 16500, signal 241879/289233 (executing program)
2025/11/16 23:36:07 fetching corpus: 16550, signal 242031/289233 (executing program)
2025/11/16 23:36:07 fetching corpus: 16600, signal 242142/289233 (executing program)
2025/11/16 23:36:08 fetching corpus: 16650, signal 242247/289233 (executing program)
2025/11/16 23:36:08 fetching corpus: 16700, signal 242386/289233 (executing program)
2025/11/16 23:36:08 fetching corpus: 16750, signal 242509/289233 (executing program)
2025/11/16 23:36:08 fetching corpus: 16768, signal 242601/289233 (executing program)
2025/11/16 23:36:08 fetching corpus: 16768, signal 242601/289233 (executing program)
2025/11/16 23:36:10 starting 8 fuzzer processes
23:36:10 executing program 7:
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4040880)
sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x1f1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000080}, 0x44810)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xfffffffe, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20044091}, 0x48004)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe8, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xd3, 0xc5, "a337c1d74c3dcba1eba05036cc841869a3c0f457575dc4ac517b02dd11486a90c1c3c3dc56e7299122d3fc436cc52856c5076124aa2866dd2f956e28da97547ad8d44dbcee83296a96dfec2c741dad685a1c3ff46d9dcced2e92fb262a3949d42e72f7e19a4454864112fe0ac3c41da1433853c7a06e7817f223399199e489c473561fa93002ff862de1d1e3f5d8340d1dac8806ca1d96ef918750ac3b9e13b4c70d01c1cabf6a26ce4e939a4bbf667b98385192268219976c5aa1b36d5ebd6a5713c29b76575e3f752457b0ab5ba3"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1d9}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11ad}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44004}, 0x24000850)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x92bd, 0x3c}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000851}, 0x40008081)
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x101000, 0x100, 0x10}, 0x18)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x70, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40010)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x9, @media='eth\x00'}}}, [""]}, 0x68}}, 0x8040)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8090}, 0x4008090)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x40, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8021)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000004)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x20, 0x0, 0x200, 0x40, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb8a, 0x61}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x48, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x43}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x40)
mount_setattr(0xffffffffffffff9c, &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000001280)={0xf0, 0x100069, 0x240000, {r0}}, 0x20)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4044)

23:36:10 executing program 3:
mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x8)
r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x78, 0x1, 0x1, 0x5, 0x0, 0x10000, 0x40, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0xa880, 0x2, 0x3f, 0x5, 0x80000000000000, 0x0, 0x7, 0x0, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1)
r1 = getpgid(0xffffffffffffffff)
r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x3, 0x48801)
r3 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x8, 0x1f, 0x1, 0x0, 0xffffffffffffff02, 0x40201, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x2, 0xfff}, 0x4001, 0x6, 0x2ee, 0x1, 0xcb8, 0xc0000000, 0x7fff, 0x0, 0x2973, 0x0, 0x9}, r1, 0xb, r2, 0x1)
poll(&(0x7f00000001c0)=[{r3, 0x8}], 0x1, 0x5)
ioprio_get$pid(0x3, r1)
r4 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0)
r5 = dup2(r2, r0)
io_submit(0x0, 0x2, &(0x7f0000000440)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000200)="5b51391ae8290c5b3d087558fcf434d652da452b29d9ffa8a3a30648ce7fe40e2034c0650339ae2f43a32b87410b24f6994f6dcde4620a5a2604fe2638c4c517c58aa2d33b8a03d978b4583fa573903d975035ecd2770b2b8151f2aa743564fccde06ae4a36ac4666a62baff7396c7426bfefb4de6508add51b34453cd18b2b77c4f5f6fcc3fae00b0d203c1423be0fc39134a043b932adf4b516801d0", 0x9d, 0x800, 0x0, 0x2, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x7ff, r4, &(0x7f0000000340)="0944052216d8eb1231487a46308f7ffddbbc0b7a3144d4941de01f855b47b8315da68081d43c71d6ab0a57a225315a903e6594bcc4b05c782182adedb70c2e01f4530d9cfce02d1a9c392da3277dc4d9a5c23f41b515fa84c92cec3044f95e517d574f5e9899872015700f814cb98dfd3df8cbe701b6e5b9df5e64fbbde6163f18bbd7799da0126bd9694c20e4882a5690", 0x91, 0x8, 0x0, 0x1, r5}])
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)="179e62367a1b9af400723a348471f370b3d1fe921d60a2d89b7a2e6ced6a6beee1288ba529fc822383e6fba3687a2e9b1eabb19792540dcf0a8028e81389d9f785fdc8e126b56ccc73bb4550cc4d456de51b64bdd934b6b9823ff3e4b3288aa3e8aaea6f1ff332d995b1279e08f0307affa83f204bcbb46c04475b623a212dea37a5e1e8bd2695d26c1dd2e6b8")
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000540)=<r6=>0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000580)={{r3}, r6, 0x8, @unused=[0xffffffffffffffff, 0x3, 0x9, 0x80000000], @subvolid=0xacd})
clock_gettime(0x0, &(0x7f00000015c0)={<r7=>0x0, <r8=>0x0})
ppoll(&(0x7f0000001580)=[{r3, 0x3289}, {0xffffffffffffffff, 0x9280}], 0x2, &(0x7f0000001600)={r7, r8+10000000}, &(0x7f0000001640)={[0x9]}, 0x8)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000001680))
getpgid(r1)
pread64(r2, &(0x7f00000016c0)=""/166, 0xa6, 0x3)
r9 = semget(0x1, 0x1, 0x200)
semtimedop(r9, &(0x7f0000001780)=[{0x5, 0x1, 0x400}, {0x4, 0x3, 0x1800}, {0x1, 0x1, 0x1800}, {0x1, 0x9, 0x1800}, {0xeb389598af72aac1, 0x81, 0x1800}, {0x3, 0x9, 0x800}, {0x1, 0x5, 0x1000}], 0x7, &(0x7f00000017c0)={0x77359400})

23:36:10 executing program 4:
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'ip_vti0\x00'})
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80580, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x81)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@local, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8)
syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x1000, 0x3}}, './file0\x00'})
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x1)
ppoll(&(0x7f0000000540), 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0)={[0xffffffff]}, 0x8)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x900, 0x0)
recvfrom$packet(r4, &(0x7f0000000640)=""/44, 0x2c, 0x100, 0x0, 0x0)
r5 = syz_open_dev$vcsu(&(0x7f0000000680), 0xdf, 0x108480)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x34}}, 0x800)
r6 = syz_open_dev$ttys(0xc, 0x2, 0x1)
preadv2(r6, &(0x7f0000000c40)=[{&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/216, 0xd8}, {&(0x7f00000009c0)=""/239, 0xef}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000bc0)=""/105, 0x69}], 0x5, 0x5, 0x6, 0x6)
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80002, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r7, 0x4010942a, &(0x7f0000000d00)={0x1, 0x40})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000002340)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x20000000)

23:36:10 executing program 0:
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010894}, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r2=>0x0, 0x29, 0x0, 0xff, 0x1, 0x8, @mcast2, @private2, 0x8, 0x7, 0x2, 0x264abfc6}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r3=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000000540)=0xe8)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={<r6=>0x0, @rand_addr, @initdev}, &(0x7f00000005c0)=0xc)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xbc, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x763972cdd3342218}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r7=>r0, {0x4000000}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f00000007c0)={'erspan0\x00', <r8=>r2, 0x80, 0x1, 0xffff, 0x200, {{0x16, 0x4, 0x1, 0x11, 0x58, 0x64, 0x0, 0x81, 0x2f, 0x0, @broadcast, @multicast1, {[@generic={0x7, 0xb, "7d6f5fa339c84c3a5c"}, @generic={0x44, 0xc, "3fa5b3cbe7bd26e4de07"}, @ssrr={0x89, 0xf, 0xd3, [@remote, @private=0xa010100, @empty]}, @end, @timestamp={0x44, 0xc, 0x47, 0x0, 0xf, [0xffffffe9, 0xff]}, @generic={0x89, 0x11, "a3c6702f2abfd2e38f266e7c4cfa63"}]}}}}})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000880)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000980)=0xe8)
getresuid(&(0x7f00000009c0)=<r10=>0x0, &(0x7f0000000a00)=<r11=>0x0, &(0x7f0000000a40))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'lo\x00', <r12=>0x0})
sendmsg$nl_xfrm(r7, &(0x7f0000000f00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000ac0)=@acquire={0x3f0, 0x17, 0x200, 0x70bd26, 0x25dfdbfd, {{@in=@local, 0x4d6, 0xff}, @in=@multicast1, {@in6=@private1, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x4e22, 0x401, 0x4e22, 0xff, 0x2, 0x20, 0x0, 0x89, r8, r5}, {{@in=@multicast2, @in6=@empty, 0x4e22, 0x0, 0x4e20, 0x6bd, 0x2, 0x80, 0x0, 0x67, r9, r10}, {0x1, 0x2d76, 0xffffffff7fffffff, 0x3, 0xfffffffffffffffc, 0x1abc, 0x1, 0x81}, {0x7d, 0x6, 0x2, 0x5000000}, 0xffff, 0x6e6bbd, 0x2, 0x0, 0x0, 0x1}, 0x2, 0x8, 0xc6f, 0x70bd28}, [@algo_aead={0x91, 0x12, {{'rfc4106-gcm-aesni\x00'}, 0x228, 0x60, "50f56ba969f4503cb2e66980f941baae5237aae943a50a0197ec95fb8286f4931385d0d97c719363c9cfdfaf8d50c6ec65b1ce585077c3c13e52606bca4fd7d8e625778b41"}}, @encap={0x1c, 0x4, {0x0, 0x4e20, 0x4e24, @in6=@local}}, @replay_thresh={0x8, 0xb, 0x1}, @lifetime_val={0x24, 0x9, {0x800, 0x3ff, 0x4}}, @address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0xa, 0x1, 0xe3}}, @algo_crypt={0xc8, 0x2, {{'ecb(arc4)-generic\x00'}, 0x400, "38228fb9b144661624fe6ce1127f31291244782aa1d3615b76b69b10b51bf91e111a62d85e88229896fe9e0fdb7bce36ac32a4c093464ebc6ec429905920a340574aa62fc7a1d13bef91fc995f15ea61cb9955af5d267081dea280cd073d77e39aeb53dffa5cc2bf550fe232408a98f88883905275fc2091dc5db42b6231e676"}}, @replay_esn_val={0x44, 0x17, {0xa, 0x70bd2d, 0x70bd2b, 0x6, 0x70bd2d, 0x1, [0x9, 0xfe, 0xffff, 0xffffffff, 0x8, 0x3, 0xd6c5, 0xffffffac, 0x7, 0x8001]}}, @policy={0xac, 0x7, {{@in6=@local, @in=@broadcast, 0x4e20, 0xe00, 0x4e24, 0x1000, 0x2, 0xa0, 0x20, 0x11, r3, r5}, {0x0, 0x1f, 0x1, 0x9, 0x6, 0x9, 0x7, 0x8000}, {0x800, 0x6, 0x5, 0x2}, 0x800, 0x6e6bb8, 0x1, 0x0, 0x1}}, @offload={0xc, 0x1c, {r12, 0x2}}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x400c010}, 0x14)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000011c0)=<r13=>0x0)
syz_mount_image$tmpfs(&(0x7f0000000f40), &(0x7f0000000f80)='./file0\x00', 0x1, 0x4, &(0x7f0000001140)=[{&(0x7f0000000fc0)="0a22c3294406c11f2c701c2c338a37e3083ee2992eab77811ae1b36ee0b6733ed2fc88b0e3c123ab350b9c6958860abb10215808684e2a08cd85749c06230c5fd03d848eb1dcd784467f8017efd88a056bbac27e184ace0a08e84ef2712f68e2bdf74a3102d4906e51d00369c42f042d0d146bcd7bdada51ea95bdcf25e3ad558bd346e8e7a7b35ae76ff1beab749b8db28a03938c1476facd9cc72ea46305fdcae1c81b61fa5755d962230a7da402d4b9a41b1fea97978475c6f4", 0xbb, 0x4}, {&(0x7f0000001080)="eb7a34943cdfc5a0bbaf9f9bac39535caad4e598f7f5cf739797baba7224a692b452648a6cbeba95ef012e32318d4d0dadb62b", 0x33, 0x4}, {&(0x7f00000010c0)="3874aa0c4b7324ed1cdf77aa50b3c194dc90eda8ba454ccd0ec8c1a2e8031687b26a15af4e5fe88cc205d55b6e5877373c17e98a", 0x34, 0x2}, {&(0x7f0000001100), 0x0, 0xffffffff}], 0x2108000, &(0x7f0000001200)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x31, 0x6b, 0x33, 0x38]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x25, 0x36, 0x70, 0x34, 0x34]}}, {@gid={'gid', 0x3d, 0xee00}}, {@size={'size', 0x3d, [0x67, 0x78]}}, {@mpol={'mpol', 0x3d, {'prefer', '=relative', @void}}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}], [{@seclabel}, {@fowner_gt={'fowner>', r13}}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syz1\x00'}}, {@obj_type={'obj_type', 0x3d, 'lo\x00'}}, {@uid_lt={'uid<', r11}}, {@fsname}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x0, 0x31, 0x39, 0x36, 0x1, 0x34, 0x37], 0x2d, [0x35, 0x58, 0x63, 0x34], 0x2d, [0x64, 0x37, 0x39, 0x62], 0x2d, [0x65, 0x64, 0x32, 0x63], 0x2d, [0x66, 0x5d, 0x36, 0x35, 0x30, 0x37, 0x35, 0x66]}}}, {@hash}, {@fsname={'fsname', 0x3d, '$\x10'}}]})
sendmsg(r7, &(0x7f0000001d80)={&(0x7f0000001340)=@hci={0x1f, 0x1, 0x1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000013c0)="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", 0xfb}, {&(0x7f00000014c0)="96c82cbfe1", 0x5}, {&(0x7f0000001500)="d61ac7231dace1e4a90dceed7b7e12d845005a05b89661f794ee816fde1832daac6a92cd8e06195ad3871dc469c5acc1a47ac9be68fa552fe883b44e1c0ef3b1b0ee13d7551301b4bd5bab3e7f08a0db05d15eb2605023594baff7ed75e7f33ae12a4ccece26753164aed03181b37fb559c43ed2c016d9327835bf5532884ef861a940683e", 0x85}, {&(0x7f00000015c0)="e42c7eea78930e93197a9c5f1194554369d74d532e1582112b1bebd70627dc2656c7ceeb715d39c1e13a2e1e1883e453983adfc48d62d074a20a15a98b3d6dc53e3fe70cf3c665e017320798315b48b31b70c458b9", 0x55}, {&(0x7f0000001640)="367d501fc8325f8c8b341d7f8bfcbc54527d33eb50e7810a41549b594aa28e4484e107f80734a94a641cfb1b6a752c844f644fa451", 0x35}, {&(0x7f0000001680)="69df36b68581799b5dd6f08ecd9f34cbe8da2176b4eea0f51584a90355c2dad46bee2086329e4cd2b0ff481a5e68bbc3ec4fed1db08afb849cb901d52fcce84bb076a74503107e069ebeafa99010c24f48a4564e35cfc5401e4ecb85ee380ad402e6159aee37066a11115c2332b2b1d530d2c3972c380226d3906c3f43a334de04c87297304bf12300f892c9818452e458acf87a05e5594aa9673009c4ea50a3ace283070ad16a22ded221f3ca56a9748a09d81da28d52ad0062e6abe3a08f242e4ca94b0a480fdbbc224db838b26c94928c0d79c087d5ab490887f6e9c2e5da1315f2e16cbf9e9bc058e3a5b568dabb7355", 0xf2}, {&(0x7f0000001780)="31509e8b0fb9ee06b83ee2f07d381e0d433be9f865003139aa2673f67e534cd355fb20312eda03afb1664be02ad21600d58e15610aa13443edbe7032640dcf77543de8a7eeb8fef7c16d528b190ecebd50", 0x51}, {&(0x7f0000001800)="63dd1e8210b092587f6323c315e8c406f9c36840f108573dc914346767aa72aab11b598c0893dd5b20aa7e609bf9aae4dbd0c41e88e19a59e420e0a520eab215e768c2534458f23ab007f19fd027f7f55faaf319a5dd9d94509a6d61f91f3a75f635ff2f3a1cb4517d1305ba8a87c3e71da5e109a38921aa495f0ba6f186b45640cb25a6a7f57351ad3621df19dc295558825e4c8ef5d66bdfdf3c8f4398", 0x9e}, {&(0x7f00000018c0)="e08d1dc6e83ca1e201643ea68180d6ef76fb299abc72f5531a14d421a6f3a9a1b8442b747d7c22d78a2ce47223521c00fe328c82", 0x34}, {&(0x7f0000001900)="bbd60da7a58b319d814ea3360f3ef27ffda95e12bd29e09295f5f21bc4f7ffc5cebd58720698c2c9afe7bf32a10cd16e87357844ead55f36ee082e265c031a718e35e9a43db1469bf687910875bcf1315f40c922075cc0f654b5711c66dcfecc7ca7dd1dad6daaa92cf52e2dd94bcee94602d16aa0a4876c16bc978e3c8f0968e2f50b021ed6c5b5a5093b03dbf42542ea9ecf3d273a3e89407c2438390e1f9a6718023dc1f498d54340d894bb79b9f46ee08c43a8175945c2800ec9db85f93cc344666dd13cdd21e82103e39f734e826359e521e98e4268f73da5786d69951e25e90b", 0xe3}], 0xa, &(0x7f0000001ac0)=[{0x88, 0x112, 0x81, "bca226cea655904c9ce4ba98acc8cb239575f44edf7569b836e4f916efcef03497947d50d43a247837651be9510771df151db158ea38763aab5af67f6b554c3f0e89c3a524d1829ded787083fd4fa7a642bc7fd4cdc5371f41d84dcff998c5db093e9f5ee37575fa36436fc09d1b047641"}, {0xf0, 0x3a, 0x7, "d60f63da4c1f315b951598622aecf09a2cd7e7f815c0227b7243ea49353fa83fcee888cc05b920ebe3ddbe790e492c0c3331ee571f0536e79ae5f0a59a082ccb17693f45e6789d366bd974a5085e607656d29e154e86ac2e5b2d40ad84d35322cdc0a943b5e43794c8323cccdb3ba9c03c079e1cd1bbdf402404389df66ddf9422bb13322ba496bc6caf7cf8d8ece4dbf4b990dcda17ae28da25e720b5f343d92eea5afeed02ae511da438f7c804c4dacf82cfae2cc4db2d7e17081bb295fe4e578b3309d61ebb9f312fdaaf726345166975bf6f6013302fb64e"}, {0xa0, 0x109, 0x2000000, "b5dfd2f0cdc369abc3368fb2b46ed283aec9d1fb65c318304681613f9ac46388fec891af54c18aa5bc56d99cdd2032be25ca1d5ec57f225d8dfd6c9a5f1d7159aaf7dba931f3785b9bab593f77beb5aaf7d2317ed4460b17bee8fd64912f20410d93a89039a516b66e09cae4e6e72203250be0150669d43538ab454018a0e6b92751b5c844fd45130fe32b"}, {0x58, 0x1, 0xfffffffa, "07df179de57ff23deb0ee3197fad44b5c12ea6edb3bc232b3568658b5542f2bdd06da85d95e82771681ec0c5821fe7672f7fcec9d36aae9e655ad3eb2f3f8c5afbaba33729"}, {0x20, 0x105, 0x5, "46c02a0367e476b01d150bc783fe"}], 0x290}, 0x4040040)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000020c0)={{0x1, 0x1, 0x18, <r14=>r7, {0x2}}, './file1\x00'})
getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f0000002100)={{{@in=@loopback, @in=@multicast1}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000002200)=0xe8)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0xdd223000)

23:36:10 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r0, r0, 0x0)
r1 = signalfd4(r0, &(0x7f0000000080)={[0x5]}, 0x8, 0x0)
ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @local}, 0x122, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8001, 0x1, 0x3})
r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000180)='cgroup.stat\x00', &(0x7f00000001c0)="e8f64a1ae9c67d60c30974df616dc42317aa8da1fb0cb8789a717098aca66ba8940f9efb24b162bf50772dd815dce42c48fb20a9b6289dea29a6f6cc4719c404a8d2162527c2c2050f1cf5951f3950c96b124d1c14fe353c6be9e96a614b197d402cf76c671b7e79d56b79f5253fad5cfef2c1ec5a0f407b588ee4bc5c08102496d8147587446907c663fa3b3dfbd95f", 0x90)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @multicast1}, 0x200, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)='macvlan1\x00', 0x74b, 0x0, 0x9})
r3 = memfd_create(&(0x7f0000000340)='$%\xf8$\x00', 0x5)
splice(r3, &(0x7f0000000380)=0x308a, r1, &(0x7f00000003c0)=0x8, 0x8, 0x4)
ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x8d, 0x10001, 0x3})
getsockopt$inet_opts(r2, 0x0, 0x9788d8d1c3a3da9d, &(0x7f0000000480)=""/74, &(0x7f0000000500)=0x4a)
pipe(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendto$inet(r5, &(0x7f0000000580)="8b081adcd43e147d42c9cb5e96b80262ac797d7b9e57ba59afbc9079c2e50d42c376340038bf0eb131b12a1eba880740c1c21cfcb3a3e991fc4bf62f08a792a2c1fd9ecff095b2f5ac099808d0fa9834f02ac103df39e40c811ad3f80d8a4874d5e84e9bef8c0bd0e0f0c015c059f11d953b88ac69356888f86502154d9c4efeb763af10e92623ea0950f5279f9b4c06582a69ef3b519e2d302cece071ea85d1b67f37b92573f587b579be15cf2f963cdd7d99826d848464b04a6f29f962ce6ee0e7658f8f6ff4f322976e38e526e3cacc55223699892aeb62a46e84ec5ba8081d7f52875a579b1eeb88ebe6e2b8c2b346b1d4ac0b7ff4fef181fac15cd3ecf142360b45b5e80c3eec4ce20d5a62ef0a91641ef7c100870f9deb7ff4fc80e1a85978c19640a3ff8d70d5e3533bc7f52a3858956e50022a20fe4dc62954f7f4f02a2b24671630e3158868b212ad817cfe1bb723de7c4d94a4b69864a7494c532719ad87c91404d0bc21f7a217621451ab6f102649744f08c3ef37a62ef2b23b965c77b1e71490f8243f71c173adcd0eed4ca505ad60b8e6b73cbd373ce8cacf8caeff0a9d82f22f6b4433f9a8df19261d5abbdf31b19ca48cd2dcf305376d768eb7b2c29942f1187d2f50a4a4ce9f8c3c14c07138a81a343a3f02a3755f7d46639e9b2d0a063448b6ce381e5ce1ea4cc836f2c838bda217ab4ea772ea115f11f802d15a8a8f1a84bee9392985d3cb3ff97ad0352c14efa1e0d4b5ec2658fc5a0b5eac91506d98611f3307d6c7f93544f8527bc9884a68436e8e913a3b52e59ac69d779ff14ba4660a1fb3f1217bd4c8924fc87564df457f35d4e46055b140e508063594f71d91cad66e82f7fb604caeffa097282620ce5e8078b27164fc6f571421a4115f08820039741a5660b6f9f3fc587874648afd21f47036a0c91a406fd0ebeb75f64212ad93c0d4c6073780ffc0b76f02e9d766ffb186172c0733288dfc05a856cebdbc6c857c92f2b35f298b0cca3f5e2cceab7911e23265f2411c9e43a0c4d05b5ecb043e8b35294211ab849e8d078a695ba56179e2ba18904766bb02486eaceeacb329cc240cbc421aa79cef769c54c70e147e3509586223e7a1391fe1df5fc49b09e3c37742eed14c3bc6266081e22bd99884c3c4a28cc222a23e6277a50224e0e6872ff679781df41598e0777223aa7140a2578b19744ef567c50bc85a0e2b4ceb836b82b7f2bbb8a14a766c252d56f8a5a067c2ee76f47c42f50877612d68c9205ccf555b06ac2cf199906db712626132a3ff873b43aa57aae91d277cdf8a956e13a95d22484e4b973e8a880fcaf244d6b7642c257c10538aa7196d3e3817eea82220a8282f8e1b84d3fc0d2bf2ca1dc6805cbd22c0e4669abfe7837b2772bcc7d0b882a4a513bf4f0aeae9a6713113448240fcc271120ce038329d98a40c5c8b10a6acdc63f8a96e8416bd279f5d8b503ffca91711f4af913653a1383597b82791ae85adfd30c273de4ddf521707ded04322c51ab84d4f939e65c18e8be95f224e52fbe3ff6dac6e6b755440dec0c7f791d5d66964897d060d9bb2d2fcb3c5f6fe8b91b59e4719346140dbfd87231beecc57216edd4ab812aca923fe759bef59c4d46f98b6702ac03a488441ea78d10d8eea6090975992c6b836070ca85e06c73dc2b2795dbf7f203d39e69de1bfcf15a3e78ebe78fa8e30a045c01c07e7830ead25e62320dc5c028948b0956559e64c289bd3198c2bfe7398f5a01e8afa4d1e00f476148376dd59961760f7e0b270ddbc40ee226ec0542e20f5d55e9db443c1d84315c2c9a9920ca0efa2a0817c725b3c96bdd9e39620376a89bf14f65d1af8d6bc8e9bcb701d3a9e0193ff650442323974e1eba03e4d60b77f11b0ae76d3e30ece57ef5dcaf9d3322c6c4bf7e78ec19b310d137347d46771b3e3012f8a73f1c4b6e293ac7f3119f58337069a0bc8442b07e4f3d886e9535442203ac2222cfeb1449a0f402a867f390c2a06294f33731c8977fb5ad8136822b2ed8766ca5e593c8563d9ae8c6e2ba730a82bb71a9ea91fc9dc27c75227452b0593f5c92eab5281259e817a309bd8a70c6bed73ff8c23766f135d189c1f520b01aadefe2e79421b7ef7d9c6b91d970306acb380ec2df01d8730babfdb21c777be9440827620838719623770b95893b9a8059f51e18bfa26046991d31d333a250d2edab87024957be4beec68ff1af43477b4b1de14249a5494df4e7f310bdd22217dba7221cc12ebbb1887ff5f8e584aa12583e1c1bb56240a90c9016aaa3106d0c4115853739f67480d700c1db5587d2eda835ebadbb2ed6dcef3885c10676d97bc6d9e533359f3b0b5e2249afac8a133953842a1f36f21775f535d90bd24e4fb9ab6ef897181c6176c766906477ede77f3cb472ec2f02f13efc8622b937cc65903a5df7d109d35b07e7a6fe186888507031a18e41c77aaa2947ccb32424782ca0be089625851f8e507c9cd425d599a8f439456d03c082c7c0f8f33587fd6ce0b13551187b46ab3cf018d793efb5e005e5c76ff518bc46a16d8da31ffeaf8d979c50c87d4f0381f0c27896e301fbd83d5a394349ebd4d304efe4b186673b3e9d5963fab2b33248fcba862c55d8ba1f482195e6ce2ff8853d9de8647548eae4d2000c2372483939939cd5a7293764b21a871468dcbafaf352521f1062d551fe13d42d1e079b3b16f7b089a64a596ae6901962172e0856ccdd49c562072fab247b3e443ae1684013e7966bc1d5663ef515147929e7e4b0db3d32be0be3d6eb831c1782255ba1f86a711a79b47934589fffe609db1a7c13ca41aa456015834dbcba642c63d45e3cebc45b1d5a652b17c54add03530bcd675da6fe161a2e0ab800c8716aa5fb429788d9055bd1ba18426067736ca6faf30d4348ff6c8e0a1842764945325a4aaa40de90997520bcdd891054467390b14f867a7336940268d822abe2db3a2c2ade0d8cc2828c40436fd77b99688172bd81c50acc086673ee724026089c29cd48d6587a1b5114f40a0e7485752c051a4c21fa99703caa077a6ce9b59508329b6b1602a94f4128af12121899796ee21e5041307454eca88cb6f82b9d0e6bc08423ef37028e65c9bb5aeca45536c36c505696ca80bcf436726c88869c015629fe6111db255c04438fe7396ebe70c44d7dd316d0cf475052ff757fbb320bc6bfef1e501b4ed5afcc8f1fb20d50f60de846730b404451b980e6564769677ef64c0bfa13e9c8c47e64a68ea5e89f700535dd821a5588c7c58b8e8af1d4b80091d1648804d6684b20a65aa6629092e67af6b0ac0224faf7e8562854e145a5b1125f09b6465f04daefd378284e71cba02c20a72ffb60d55dbb75c1d840ccb82cceb9a9ee043cf20ad4d00a639452460bdffc2ed6051d09d7a90434e2a99c1c21c5f472695fa3fb6bf8c39d097635171fde4b7c773fe9179923f2af064d40a5e2ed6994d1928a2d3eeb190e55711773bea4429eb42c6474a066da3ef445d1765532f6eea88fc06e2d929b5fb9c13aa11315cf06a95c152d877b24a65539378282add255090e2dc88fd106ad58e0664b4b7dddddf7652cf8989b01c3bebad6788f3a48d9aeb32f37eabd7b565c854c8e7be81023e0aaef170b828a488d6a28f4a7023a918f7a74c6933189f4c2e381d49e1a7cebd09bdf18029090bbede42f4b0702eecb1ed8fde9461532cb437ca69072c4655ad72d9405f2e109f182e04f4a3d0ac22be9b77439dab98d3fda1aa1343b9975b4acfb4775e17762da12a61a9b8b4e2a46d926e3bda34cc9c1026bb9e0529556a5b1efca2731fffb3c653c2227f249fa765a74ccab9a2564460eddb8da0e74502726969d5625956ef780a597201fe8619b651c968fc5c56ad44d78cb46a25a5d4300a329409ad79a15cc9386dfa945a12a1cbc05546ea01a36b86dd2a0e174cc3296498282a5385dcda5847d74b70c0201bd3e77ab5e52466cb053101d4bfb9a9f607943ec2c112fd7eee3214dd4a5e68145bbd04b2b4f027171ec28a9c8f4801da85049bc26f620ff748e159d9b5e098b3bebeaa4c7cf2fa07dfb451558ef5951d65f2d4f92c70b9902bcd41586bec05f7eb0e66884679788a76b7fcf4f72e844364f304c0f66381821bed2b1d60cfdfdc9735392a697d2094ca348f116720ec658fe11db95f9752ea258117af2b1af1cec10f495070578237ad6f7c24422e11a61bb5a2a671fe74c86db95d5a8c81e4e2b6388a82b059fd28bd2eba2f01c0747a082166e28d9fa4d8dd984ed1c96dcb692b49e85396e64a39bf1ba96adf4b2186a05d3ae78614f10740913b58e4b199dc52076c17dbe46b33ebd083c18f9aab62e21a3281238914ab291d9655042da432f30d7617ec770d9a919843453a3ac8fed5ad957c64ff557bab96ebb579b49891bd628d99d2d9389dfdac9511b793bf0f068d4833fd982de6b5473d44f91b90815059707fd1e2d582e4f4b5ffda6e2a0fa6dd7f1eb1ea014e2c06026c17a0467cebb05d38d896afafbb39360cc42e8ce99989b56233753bffd6bfe4003f54d1daf46e757f0d8b4c89b48e8944f680c863a8016f7761106fb03ba2134dd064edac1e5f524d3f44fc157380fc17f2e7cbb3962d97a1f9defb278a67e76e12a62d06e844fc9aaf29b0cb947b9e782734c9ea65cebc085249ac9dfbe29bce0986b1c9d36b17dc3ecb75dfe3ce32239ee7230246286ac56dcb5c758c5ed18148a950fd2c4a178ed7d1cdeb38de87bcfad95eae65871623918ed3d7d2fe93d89f4cdc94be2bf47f7e076bdc58d5a502013ddefc2ae68de01eaeb390e5d4f806d1d7af93f680432d5863643217b61cfcfea31297158e1b3192cf60c4b4f8d2ff5d428386cdab8f340fd8022010b7a292b4187acc808773cc9be88df7911413ecec5de24ba843d532552d7d1ab3281473f6d57236ccc868a2efc61c7857f5e7f530fb78b4720e8ab5f1d99ae56838960a7b55a852a0221f49b0c0c717039e9d5ce6d2c363e9cf57011e1973c65c1a794f8eff0bbde706fe5c310113d64dab2bc99319038af9af1f2d5fd5815a0d7806ddfd1a2ccc7e751288dbb293e3994028bea482c9d93bd0aa1a1f6af31aa4478ed342bc23591f922ca52e7ca9ab8487af5129c6428af84ddaac0adcc793f37c697224c0d37df2f9137b94700fab6d942e8ab39b19310396fd69c48ae19f60689688a07d3a91ae290166b76d0f8d4fae0b202aa2d506a58ca508a8a069f25cf83d0c3a264159336227f4346453adb7fb6d1c464daa382e0e2045a5d3858ba42625ca80ac6ce8d8f077d3cb82143262f16c0d8f8756c2903c483985c548006c0df5c1645b0b1e91f22c3b9ff328c7ec6ba4adabc2d29303fe5af8df6070825039ab628b73bc5cec9f328a765a184985401ab9a35fd9002c5d850be87d8bc865d7ef214a5b7dab8c6826803ece85bdfc20c5d742ebc74a2bd1c251cdd7c8076396581ba570356007d371a3f91b927e818bb5a1796fc30c9d1b2ddccfde483d2722ffd786f2b0a858b5552df6b77ac3758e4b72f8d58aa6e909d551460a4ff2799fb7cc71d69d60596e5c6b3421ff6efd31e9de31f17a66dcc5b7d9378559476bd76a06f988513a8dbbb037967b783cf1efd0dd5816bbff8428e1a5fb9f40ac835dfe6e59254ad51ebbee3ff459636a609d2df7a22f4063691b1ecf372fb42be97eed6bb0a11e6c50ac6eda09e689fdf93e0c5303e7e1d8c921263b13a213397f8ffd59c6258f521a76cbf5e06c580197642698c0", 0x1000, 0x24048001, 0x0, 0x0)
write(r5, &(0x7f0000001580)="d8b4eef5932b412dea3d686d4b1a731294efcba501f33fed69d31f305ed490bd6ce1ee98fbda43a0852daa129b775fdde3b596e952eb93f0897ca95777e2b5027712873b7c6c488d24a2081cfb92b104daede933a25e5c4e3b", 0x59)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000001600)={{0x1, 0x1, 0x18, <r6=>r0, {0x1}}, './file0\x00'})
r7 = dup2(r6, r0)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000001640)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x306, @local}, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}})
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000016c0)={0x2, {{0x2, 0x4e21, @empty}}}, 0x88)
fcntl$setownex(r7, 0xf, &(0x7f0000001780)={0x2})

23:36:10 executing program 1:
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000040)={<r2=>0x0, 0xf38, 0x7})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={r2, 0x200, 0x1, [0x6, 0x6, 0x9, 0x2, 0x1], [0x7f, 0xffffffffffffff7f, 0x9, 0x80, 0x9, 0x1, 0x7, 0x1, 0x101, 0xe0, 0x401, 0x8, 0x80000001, 0x4, 0x7ff, 0x3, 0x3, 0x8000, 0x7, 0x40, 0x3ff, 0x1, 0x1, 0x3ff, 0x8, 0x6, 0x6, 0xffff, 0x6a5, 0x0, 0x7, 0x3, 0x2, 0x4, 0x800, 0x7fff, 0x9, 0x7, 0x7, 0x7, 0xfffffffffffffffa, 0x8d, 0x40, 0x3b2, 0x75bf, 0xfffffffffffffff8, 0xffffffffffffffdf, 0x7, 0x9e57, 0x2, 0x76, 0x1, 0x80, 0x7, 0x1000, 0xfffffffffffffffd, 0x5, 0x6, 0x5, 0x1b, 0x3f, 0x7, 0x8, 0x1, 0x66, 0x1388, 0x1, 0x1, 0x7, 0x8, 0x9, 0x2, 0x8, 0x1, 0x3f, 0x8, 0x2, 0x100000001, 0x8, 0x8, 0x7fffffff, 0x800, 0x9, 0x20, 0x200, 0x30ae, 0xfffffffffffffff9, 0x1, 0xffffffff, 0x707d, 0x390, 0x4, 0x4, 0x3f, 0x8, 0x5, 0x6e5, 0x0, 0x8, 0x3, 0x3, 0x401, 0x3f, 0x8, 0x3, 0x4, 0x20, 0x20000000000000, 0x400, 0xccc, 0x7, 0xfffffffffffffffa, 0x48, 0x100000000, 0x3, 0x2, 0x0, 0x400, 0xffffffffffffffc1, 0x1000, 0x9]})
r3 = syz_open_dev$usbmon(&(0x7f0000000880), 0x6000, 0x800)
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000008c0)={r2, 0x800, 0x0, [0xf2f1, 0x4, 0x1, 0x1f, 0x95c], [0x7, 0x85, 0x1, 0x0, 0x100000000, 0x2, 0x2, 0x80000000, 0xfff, 0x200, 0x7ff, 0xffffffff, 0x6, 0x2, 0x8, 0x8001, 0x7f, 0x100, 0xfffffffffffffffa, 0x80000001, 0x3c3, 0x5, 0x401, 0x0, 0x0, 0x3, 0x0, 0x80000001, 0x5, 0x2, 0x7, 0x7f, 0x401, 0x56c, 0x4, 0x3, 0x8, 0x2, 0x258, 0xfffffffffffffffd, 0x5, 0x6, 0x5, 0x0, 0x8, 0x5, 0x8, 0x6, 0x1, 0x97, 0x10000, 0x6, 0x7, 0x7ff, 0xffff, 0x5, 0x1, 0x3, 0x200, 0x1, 0x146, 0x2, 0x40, 0x8, 0xe7d00, 0x8, 0x6, 0xfffffffffffffa33, 0xb3a, 0x4, 0x3, 0x5, 0xb969, 0x4e, 0x7, 0x101, 0x8, 0x7ff, 0x8, 0x400, 0x0, 0x2, 0x8, 0x7fffffff, 0x987, 0x1ff, 0x6, 0x4, 0x4, 0x5, 0x7fff, 0xfffffffffffffffa, 0xbdb0, 0x3, 0x100, 0x0, 0xde, 0xca, 0x9, 0xde, 0xfd9, 0x3, 0x0, 0x2, 0xfff, 0x401, 0x5, 0x8, 0x0, 0x20, 0x5, 0x65c3, 0x5, 0x7, 0x8, 0x4, 0xfffffffffffffffb, 0xd78d, 0x2313, 0x7fffffff, 0x8]})
syz_mount_image$nfs4(&(0x7f0000000d00), &(0x7f0000000d40)='./file0\x00', 0xbfc, 0x3, &(0x7f0000000f40)=[{&(0x7f0000000d80)="415b5b31be5d6c6138a4bd799fdf85b1cd56c9578ce3a04c4b3aeeb3a39922785d52cb79c77464e0259cd61096572b189327ad9c6943af76aead55fa86e19241de47938cc0658214990ee63c999d89a2d5316bb3479ac82b601a88fc118aad4ee4", 0x61, 0x7fffffff}, {&(0x7f0000000e00)="f867c0d58168efd179f3c05abad69a41ce2c674d17218c724845296028a5c50f", 0x20, 0x6}, {&(0x7f0000000e40)="f3c508cafe46aee6622a6bc5509f2bdda046c6f804e8a80b29bd011ee5e40c6a3e52e1ae0cc9f6ddff85c558181fb82eb0cdc9a7c999d2bd6690e1fc0c2979afa0d76fbc68d723e8a2be1a8d2f52f186bf2c69ad9bcfecdcf00a9bab0b16d1bd08ad012ac1df93942d86abba14448dac806f356689a9ce6d98c15584d1dbaed6925cbfb0e83e413299b29202ff46523c4b4bd1252600e80a540dd2d9714888a1955335dda9a8b5b8c2842b6a47b3f17430483e2da5ca0404bc97417868fd44ff6fde40d8f75f519d03f7d7b88a10aa7274530c75ea60ff8556cd47d1fddee37bc48db540776041ee2ec71d5c", 0xec, 0xd3}], 0x22004, &(0x7f0000000fc0)={[{'/dev/usbmon#\x00'}, {'/'}, {'\x00'}, {'-$!,\\'}], [{@fsname={'fsname', 0x3d, ':@'}}]})
r4 = syz_open_dev$mouse(&(0x7f0000001000), 0xaf, 0x80180)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000001040), &(0x7f0000001080)=0x6)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000010c0)={{0x1, 0x1, 0x18, <r5=>r3, @in_args={0x4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001100)={{0x1, 0x1, 0x18, <r6=>r5}, './file0\x00'})
sendfile(r3, r3, &(0x7f0000001140)=0x7, 0x80)
close_range(r6, r4, 0x2)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000001180))
write$binfmt_script(0xffffffffffffffff, &(0x7f00000011c0)={'#! ', './file0/file0', [{0x20, 'fsname'}], 0xa, "e9cc791a25aa165c30c136594a84f9a60b6a817c5402ca3f9f5aa09d9d445998f65b7c97b73e3bdd013bcbe0ef1536ac39730a70e0f4753b35473d552aa55785dec43e5d7487c20b0193c59cc454fe161c6e4603db90fd361d0b386a6677f45d82aaafca5d11e30107cb3f49a8272101003a2039998ddbf7e5641b6aa3a845bc749023511870a3d886eca6a424c8dab35afd368a8b10ffeb3ac27ad37b9a12387d34860526f7753ff9dfcdf7268cc34b8eb358ae29bccf7d65e333eb20a40b45dd19024c127e93728eec92840f604f5b485e2c84e580098e03f9e654040b955165b8bca83146c269d65febf6865bcc0a28f78bb2cafd98f82e"}, 0x111)
writev(r6, &(0x7f0000002380)=[{&(0x7f0000001300)="f63083c2f5982d91d3f17e276f77342f6937c3dda0f79de3f452673eccbf054e30b1a0d1fc1a5185dc868b32a8ee7e96fd9178284c0df106f0fd41014746e3e2297d17d0897c", 0x46}, {&(0x7f0000001380)="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", 0x1000}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000002400)=[{&(0x7f00000023c0)=""/1, 0x1}], 0x1)
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000002440), 0x2080, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000002480), &(0x7f00000024c0)=0x4)
creat(&(0x7f0000002500)='./file0\x00', 0x0)

23:36:10 executing program 6:
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000280), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000340), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000380), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f00000003c0), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000400), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000440), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000480), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f00000004c0), 0x1, 0x0)

23:36:10 executing program 2:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x15, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000d1}, 0x5)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {<r2=>r0}}, './file0\x00'})
sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000001}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4005b)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20005040)
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x37}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
r4 = openat2(r2, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x4080, 0x10, 0x1c}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r3, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x19}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x28}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x48004)
r6 = openat2(r2, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x191100, 0xc, 0x5}, 0x18)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1)
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r7, 0x2, 0x70bd2a, 0x7fff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfa, 0x7}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x212}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x11, 0x13, [{0x4}, {0x5}, {0x1b, 0x1}, {0xc1, 0x1}, {0x3}, {0x6c}, {0x12, 0x1}, {0xc, 0x1}, {0x48, 0x1}, {0x6f, 0x1}, {0x12}, {0x30}, {0x1, 0x1}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf423}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000940)={0x6, &(0x7f0000000900)=[{0xffff, 0xfe, 0x6, 0xeafc}, {0xba91, 0x81, 0x4, 0x411}, {0xd4, 0x7f, 0x7f}, {0x4, 0x0, 0x7, 0xeb3}, {0x80, 0x80, 0x2}, {0x8001, 0x8, 0x0, 0x80000001}]}, 0x10)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/block/sda', 0x20040, 0x1e0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r10, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10, {0x3, 0x8, 0x7, 0xb66}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x78d2c56bc839373e)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
ppoll(&(0x7f0000000b00)=[{r2, 0x160}, {r11, 0x280}, {r1, 0x2010}, {r6}, {0xffffffffffffffff, 0x2041}], 0x5, &(0x7f0000000b40)={0x77359400}, &(0x7f0000000b80)={[0xc68]}, 0x8)

[   93.333986] audit: type=1400 audit(1763336170.484:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   94.566352] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   94.576272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.580228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.583167] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   94.584502] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.585045] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   94.586420] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   94.589200] ==================================================================
[   94.590477] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0
[   94.591685] Read of size 2 at addr ffff88801e34b178 by task kworker/u11:9/310
[   94.599225] 
[   94.599802] CPU: 0 UID: 0 PID: 310 Comm: kworker/u11:9 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) 
[   94.599836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[   94.599854] Workqueue: hci2 hci_cmd_work
[   94.599889] Call Trace:
[   94.599899]  <TASK>
[   94.599909]  dump_stack_lvl+0xca/0x120
[   94.599942]  print_report+0xcb/0x610
[   94.599976]  ? __virt_addr_valid+0x100/0x5d0
[   94.600006]  ? hci_cmd_work+0x66d/0x6d0
[   94.600038]  ? hci_cmd_work+0x66d/0x6d0
[   94.600071]  kasan_report+0xca/0x100
[   94.600103]  ? hci_cmd_work+0x66d/0x6d0
[   94.600139]  hci_cmd_work+0x66d/0x6d0
[   94.600173]  process_one_work+0x8e1/0x19c0
[   94.600217]  ? __pfx_process_one_work+0x10/0x10
[   94.600253]  ? move_linked_works+0x172/0x270
[   94.600282]  ? assign_work+0x196/0x240
[   94.600318]  worker_thread+0x67e/0xe90
[   94.600354]  ? trace_irq_enable.constprop.0+0xc2/0x100
[   94.600385]  ? __pfx_worker_thread+0x10/0x10
[   94.600422]  kthread+0x3c8/0x740
[   94.600455]  ? __pfx_kthread+0x10/0x10
[   94.600486]  ? ret_from_fork+0x79/0x7a0
[   94.600512]  ? lock_release+0xc8/0x290
[   94.600552]  ? __pfx_kthread+0x10/0x10
[   94.600584]  ret_from_fork+0x67a/0x7a0
[   94.600609]  ? __pfx_ret_from_fork+0x10/0x10
[   94.600636]  ? __switch_to+0x759/0x1060
[   94.600671]  ? __pfx_kthread+0x10/0x10
[   94.600704]  ret_from_fork_asm+0x1a/0x30
[   94.600746]  </TASK>
[   94.600754] 
[   94.623343] Allocated by task 304:
[   94.623975]  kasan_save_stack+0x24/0x50
[   94.624683]  kasan_save_track+0x14/0x30
[   94.625393]  __kasan_slab_alloc+0x59/0x70
[   94.626126]  kmem_cache_alloc_node_noprof+0x228/0x6b0
[   94.627030]  __alloc_skb+0x2ab/0x370
[   94.627713]  hci_cmd_sync_alloc+0x34/0x300
[   94.628471]  __hci_cmd_sync_sk+0xf7/0x5c0
[   94.629214]  hci_read_dev_class_sync+0x2c/0x170
[   94.630043]  hci_dev_open_sync+0x1874/0x1f60
[   94.630811]  hci_power_on+0xdb/0x5d0
[   94.631490]  process_one_work+0x8e1/0x19c0
[   94.632231]  worker_thread+0x67e/0xe90
[   94.632805]  kthread+0x3c8/0x740
[   94.633313]  ret_from_fork+0x67a/0x7a0
[   94.633883]  ret_from_fork_asm+0x1a/0x30
[   94.634485] 
[   94.634737] Freed by task 305:
[   94.635206]  kasan_save_stack+0x24/0x50
[   94.635803]  kasan_save_track+0x14/0x30
[   94.636380]  kasan_save_free_info+0x3a/0x60
[   94.637011]  __kasan_slab_free+0x43/0x70
[   94.637600]  kmem_cache_free+0x26f/0x500
[   94.638203]  kfree_skbmem+0x18a/0x1f0
[   94.638776]  sk_skb_reason_drop+0x10e/0x1b0
[   94.639411]  vhci_read+0x3d5/0x5d0
[   94.639951]  vfs_read+0x1eb/0xc70
[   94.640464]  ksys_read+0x121/0x240
[   94.640987]  do_syscall_64+0xbf/0x430
[   94.641545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.642293] 
[   94.642552] The buggy address belongs to the object at ffff88801e34b140
[   94.642552]  which belongs to the cache skbuff_head_cache of size 232
[   94.644384] The buggy address is located 56 bytes inside of
[   94.644384]  freed 232-byte region [ffff88801e34b140, ffff88801e34b228)
[   94.646094] 
[   94.646345] The buggy address belongs to the physical page:
[   94.647151] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e34b
[   94.648292] anon flags: 0x100000000000000(node=0|zone=1)
[   94.649068] page_type: f5(slab)
[   94.649555] raw: 0100000000000000 ffff8880096c78c0 ffffea00007ba000 dead000000000003
[   94.650662] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000
[   94.651780] page dumped because: kasan: bad access detected
[   94.652588] 
[   94.652845] Memory state around the buggy address:
[   94.653550]  ffff88801e34b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   94.654581]  ffff88801e34b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc
[   94.655624] >ffff88801e34b100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[   94.656658]                                                                 ^
[   94.657686]  ffff88801e34b180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   94.658717]  ffff88801e34b200: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc
[   94.659764] ==================================================================
[   94.660916] Disabling lock debugging due to kernel taint
[   94.665624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.666789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   94.667926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   94.668169] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   94.669172] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   94.669439] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   94.670434] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   94.671860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   94.673105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   94.674077] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   94.674200] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   94.677353] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.677397] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   94.679386] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   94.680476] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   94.680885] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   94.683639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   94.684235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   94.685059] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   94.686094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   94.687383] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   94.689368] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   94.690015] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   94.691835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   94.696702] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   94.699490] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   94.700860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   94.704556] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   94.706044] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   94.720313] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   94.723859] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   94.735902] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   94.742851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   96.717670] Bluetooth: hci1: command tx timeout
[   96.719266] Bluetooth: hci3: command tx timeout
[   96.719283] Bluetooth: hci2: command tx timeout
[   96.781696] Bluetooth: hci6: command tx timeout
[   96.781707] Bluetooth: hci4: command tx timeout
[   96.782111] Bluetooth: hci0: command tx timeout
[   96.782469] Bluetooth: hci5: command tx timeout
[   96.845639] Bluetooth: hci7: command tx timeout
[   98.765649] Bluetooth: hci2: command tx timeout
[   98.765733] Bluetooth: hci3: command tx timeout
[   98.766139] Bluetooth: hci1: command tx timeout
[   98.829658] Bluetooth: hci4: command tx timeout
[   98.829684] Bluetooth: hci5: command tx timeout
[   98.830077] Bluetooth: hci0: command tx timeout
[   98.830558] Bluetooth: hci6: command tx timeout
[   98.893687] Bluetooth: hci7: command tx timeout
[  100.813659] Bluetooth: hci3: command tx timeout
[  100.814147] Bluetooth: hci2: command tx timeout
[  100.814571] Bluetooth: hci1: command tx timeout
[  100.877690] Bluetooth: hci0: command tx timeout
[  100.878140] Bluetooth: hci4: command tx timeout
[  100.878567] Bluetooth: hci5: command tx timeout
[  100.879022] Bluetooth: hci6: command tx timeout
[  100.942656] Bluetooth: hci7: command tx timeout
[  102.861676] Bluetooth: hci1: command tx timeout
[  102.862132] Bluetooth: hci2: command tx timeout
[  102.862508] Bluetooth: hci3: command tx timeout
[  102.926659] Bluetooth: hci6: command tx timeout
[  102.927072] Bluetooth: hci5: command tx timeout
[  102.927443] Bluetooth: hci4: command tx timeout
[  102.928429] Bluetooth: hci0: command tx timeout
[  102.989703] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
23:36:11  Registers:
info registers vcpu 0
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff8293dc70 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff8880168375c0
R8 =0000000000000000 R9 =ffffed1001662046 R10=00000000000fe503 R11=6531303838386652
R12=0000000000000823 R13=0000000000000020 R14=fffffbfff112e94a R15=dffffc0000000000
RIP=ffffffff8293dcc5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e538f000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f45c9336070 CR3=000000000cfb8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f45c93f97c000007f45c93f97c8
XMM02=00007f45c93f97e000007f45c93f97c0 XMM03=00007f45c93f97c800007f45c93f97c0
XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88806ce3e9e0 RCX=ffffffff8169b13c RDX=ffff888009548000
RSI=ffffffff8169b116 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff8880095576e8
R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=1ffff1100d9e6c41
R12=ffffed100d9c7d3d R13=ffff88806ce3e9e8 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff8169b118 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f734be2f900 00000000 00000000
GS =0000 ffff8880e548f000 00000000 00000000
LDT=0000 fffffe0e00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f734b505cec CR3=000000000c45e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fb550e657c000007fb550e657c8
XMM02=00007fb550e657e000007fb550e657c0 XMM03=00007fb550e657c800007fb550e657c0
XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000