Warning: Permanently added '[localhost]:18629' (ECDSA) to the list of known hosts.
2025/05/30 03:52:28 fuzzer started
2025/05/30 03:52:29 dialing manager at localhost:35489
syzkaller login: [  100.571990] cgroup: Unknown subsys name 'net'
[  100.716033] cgroup: Unknown subsys name 'cpuset'
[  100.760540] cgroup: Unknown subsys name 'rlimit'
2025/05/30 03:52:46 syscalls: 2214
2025/05/30 03:52:46 code coverage: enabled
2025/05/30 03:52:46 comparison tracing: enabled
2025/05/30 03:52:46 extra coverage: enabled
2025/05/30 03:52:46 setuid sandbox: enabled
2025/05/30 03:52:46 namespace sandbox: enabled
2025/05/30 03:52:46 Android sandbox: enabled
2025/05/30 03:52:46 fault injection: enabled
2025/05/30 03:52:46 leak checking: enabled
2025/05/30 03:52:46 net packet injection: enabled
2025/05/30 03:52:46 net device setup: enabled
2025/05/30 03:52:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/30 03:52:46 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/30 03:52:46 USB emulation: enabled
2025/05/30 03:52:46 hci packet injection: enabled
2025/05/30 03:52:46 wifi device emulation: enabled
2025/05/30 03:52:46 802.15.4 emulation: enabled
2025/05/30 03:52:46 fetching corpus: 0, signal 0/0 (executing program)
2025/05/30 03:52:48 starting 8 fuzzer processes
03:52:48 executing program 0:
move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10, 0x1)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x8}}, './file0\x00'})
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x40, 0x100)
accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e)
lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@sha1={0x1, "2a3716475bc0e51d765a545e5bb0f320138208b6"}, 0x15, 0x3)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000002c0))
lremovexattr(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)=@random={'system.', 'security.ima\x00'})
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x8100, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0)=r2, 0x1)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000005c0)={'wg1\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6gre0\x00', <r6=>0x0, 0x29, 0x20, 0x9, 0xffffffff, 0x4, @remote, @empty, 0x10, 0x7, 0x4, 0x8}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000780)={'syztnl2\x00', <r7=>0x0, 0x700, 0x7800, 0x9, 0x9, {{0x6, 0x4, 0x3, 0x3e, 0x18, 0x67, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010101, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'sit0\x00', <r8=>0x0, 0x4, 0xe1, 0x1, 0x100, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x700, 0x5, 0xa90f}})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000008c0)={<r9=>0x0, @multicast1, @dev}, &(0x7f0000000900)=0xc)
sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000d00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000940)={0x370, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1c}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd2}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x158, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff58}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x800, 0x4, 0x5, 0x5}, {0x1000, 0xaa, 0xff, 0x3}, {0x8, 0x9, 0x5, 0x6}, {0x8, 0x2, 0xab, 0x2}, {0x9, 0xfc, 0x0, 0xffffff00}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc4c8c2cb}}, {0x8, 0x6, r9}}}]}}]}, 0x370}, 0x1, 0x0, 0x0, 0x881}, 0x40001)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r10, 0x0, 0x2c, &(0x7f0000000d40)={0x4, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @local}}}, 0x108)

03:52:48 executing program 1:
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x50, 0xffffffffffffffff, 0x8000000)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000))
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000040))
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x0, 0xffffffffffffffff})
r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x80)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000180)={0x0, 0x6, [0xffffffffffffff74, 0x6, 0x1, 0x8, 0x3, 0x6]})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8)
fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000340)=@v3={0x3000000, [{0x2, 0xfffffffb}, {0x9, 0x3}], r2}, 0x18, 0x1)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={r1, @local, @private=0xa010100}, 0xc)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000003c0)=0x5)
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000400))
r3 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x480400, 0x8)
ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f00000004c0)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)='hsr0\x00', 0xffffffffffffcfc6, 0x61, 0x4})
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x84800)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3)
sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000c80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000600)={0x620, r6, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0xb4, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @device_a, @broadcast, @initial, {0x6, 0x8}}, 0x9626, @default, 0x200, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x1, 0x9, 0x1ff, 0x100}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x0, 0x3c, 0x8d}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x38, "fa2d5afad65654ec3215f8fcebca0f3b6825e8fd084991505e5d89098f5de63f21c4f8f8074de4f49586557de97e4cef10873d708a0213e0"}, {0xdd, 0x32, "93a05d81a49182ff3f134baa2d79df29f4c6968bf872922461c92c5fbdf8d1f075b595aaf744814be633426e2c02edbd82d2"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x37, 0x7f, [@mic={0x8c, 0x10, {0xf24, "bf0bca5b2ab3", @short="6e271150d5eb379e"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x9, 0x7f, @broadcast, 0x1, "", 0x5, 0x101, @device_b, 0x1f}}]}, @NL80211_ATTR_IE={0x77, 0x2a, [@fast_bss_trans={0x37, 0x71, {0x7, 0x1, "73bf86e82f976f9c430e870d8b22b022", "49cd648969d1b578bad9de7435e73d7c4e9dbcc6be04780cfb0b737330d5e963", "266dad17233c516a24241856090cbbe3188fb1ab183c51e769ebe5d59b9a4b80", [{0x3, 0x1d, "cc202146f769bfff445717ce077122c260c00b5c57e4904a6e73afb75a"}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x2c, 0x7f, [@chsw_timing={0x68, 0x4, {0x1d, 0x3ff}}, @ht={0x2d, 0x1a, {0x1, 0x0, 0x0, 0x0, {0x80000001, 0x7f, 0x0, 0x8, 0x0, 0x1, 0x0, 0x2}, 0x18, 0x20, 0x80}}, @challenge={0x10, 0x1, 0x72}, @challenge={0x10, 0x1, 0x4a}]}, @NL80211_ATTR_IE={0x1a5, 0x2a, [@random_vendor={0xdd, 0x27, "4703bbeb10a739c73b073791a3927310de2cec0bc0803be85015e90a563890669992e8ecfe572d"}, @ibss={0x6, 0x2, 0x752d}, @ibss={0x6, 0x2, 0x69}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0xf9, 0x3f, @device_a, 0xffff, 0x3, 0x2}}, @perr={0x84, 0xca, {0x80, 0xe, [@not_ext={{}, @device_b, 0x400, "", 0x1b}, @ext={{}, @device_a, 0x3, @device_b, 0x37}, @not_ext={{}, @broadcast, 0x101, "", 0x1f}, @not_ext={{}, @device_a, 0x3, "", 0x12}, @not_ext={{}, @device_b, 0x9, "", 0x3f}, @not_ext={{}, @device_a, 0x100, "", 0x18}, @ext={{}, @device_a, 0x9, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x7fff, "", 0x33}, @not_ext={{}, @device_a, 0x6d7a10a, "", 0x28}, @ext={{}, @device_a, 0x0, @broadcast, 0x39}, @not_ext={{}, @device_a, 0xffff, "", 0xe}, @not_ext={{}, @device_b, 0x800, "", 0x38}, @not_ext={{}, @device_a, 0x3f, "", 0x1e}, @not_ext={{}, @broadcast, 0x3e0b7cab, "", 0x30}]}}, @chsw_timing={0x68, 0x4, {0x7fff, 0x40}}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x2, 0x4, @device_b, 0x8, 0x8, 0x80}}, @random_vendor={0xdd, 0x6e, "82c278b1248e34453d7ba87945199f738b3a5d559b0ad30e866200928aa07bc66411a23f9a343d0a4506abbfad0a86d1d6f0b8b156a12fd85a05ad0f98c0825b290a442d70db3d6e034982e41a23abd3c82df063871b81077d856283798d7e5f981df9c842c2a3adac80094f2447"}]}, @NL80211_ATTR_PROBE_RESP={0x2b1, 0x91, "9ac038da801f01ae31cb0872514a1dbd986a53acb5947573b646794e91d1a6fa6ea6342b65423177022d036e10f2ef5d9b84d49ee8f0875fc6519496f3d3f3458892503b859d3d0e3e1b788902964637aa142b06d69924fb31e83838b89b116d4be9b340b2ddd2520d52d1af73def65667f3708fc43ed202794168e0f72c8f57c4333da914ade8b5baf226c3c710a98bdb4ed71d2f087ae1d809c7d4b60498bba122da7c033f0051d20257d79fecffa6d09a440975a324de9a5caeda8d212471fdcbd434822c6ce4eba1889b26de1bcad793f89627aa65112770905b2054f3ec80317b9a2ef1e0bdcfaa6c2421bc88c465cbfaa421a38ad8d24478de9b65c4e128ef544f607230bd666c9e6c94803fc5e90ff04a4fcd5ec147baf03a6f4949fcfbf1ec0970ae7229ddbf74255a011d2090c86936eed47358f20bff8fc3a3fd39f31b8553da70a60136318957c930527e4244191db0b13de0d17d85ff31a7be2cdcdc6333263dd04757d2f0fd85e0a8eca702c4badf342dabb3a61ba766c238ea36cc658b8b443b7e743a7b60d9c2f8daeed73867bd3ed68f6c32dc8e97ebadd178ed1cf6189f89d10a57434d4f6be48d9b85c19578e2710b1ec6892626bc8cb70e28cddf49040c871a8d481ae9a9fe0898bdd52be4a681c479c67c9aed8357a2947a3602d43d1d819b20f252d3d1788121c56ef642a837f95d4335a6817657929774515ca4b32e2a5398a88a81dbfff91f33355bfb1f1f3a4438428e2446d6e1f5c269f5f85f661e44a3e4fa7e9cb9243a6af4368c55c895d4b187a116be8939a29846ef98714e00d751a41c898be6bfdda1c7065c2995ee5a025104dcc82dec3e7b1e9a3db1606facdaefd6494e6457972f8919c79bb1868ed02182ce2cda1692dc2e2afd11ab30d9b7152c995620d36f0b6b4d7b12a301d008d16f33cc08816c3f13bd04fa4d14aae5bbde25"}, @NL80211_ATTR_IE_ASSOC_RESP={0xf, 0x80, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@sec_chan_ofs={0x3e, 0x1}]}]}, 0x620}}, 0x4000044)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), r5)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d40)={0x1b0, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x67}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x61d0f093}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffff80}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfd9b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf769}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd40b}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20004802}, 0x4000000)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000001040)={0x15, 0x76, &(0x7f0000000fc0)="65da05048826ac094682e05ca315e2aa088bd8e2d1931b2fc30e64d4e16deabc2183f919ba44e11d5b9c1159fbf7d310c011fc7cedb3686ea42b7f3f64e297a74236e28ac76a6225f54b7bd83cde5ef5e11df9aaad8ad39f2c258557687f0b80a99c14534ca4a2f90805f3d33d09727332f6c61a3c5c"})

03:52:48 executing program 2:
fsync(0xffffffffffffffff)
write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x8, 0x8)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x334)
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
flock(r0, 0x3)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x8479daebf01b423a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8058}, 0x4051)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r2, 0x0, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r3 = open(&(0x7f0000000380)='./file0\x00', 0x6000, 0x60)
getsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', <r4=>0x0, 0x4, 0x0, 0x3, 0x3f, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x7800, 0x80, 0x0, 0x862}})
r5 = dup2(r3, r3)
bind$packet(r5, &(0x7f0000000500)={0x11, 0x4, r4, 0x1, 0x2, 0x6, @local}, 0x14)
r6 = openat$incfs(r3, &(0x7f0000000540)='.log\x00', 0x101002, 0x8)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x7)
r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000580), 0x800, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000005c0)={0x0, 'geneve1\x00', {0x2}, 0x30})
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000740)={0x1, 0x0, 0x1000, 0xef, &(0x7f0000000600)="1a85b731d7059283bb4978865fc39f59f8fce5ee5a7b71392ee1ac8bdf375357471e79458ccc67ad9816dc30c1ce5f4528864f79d7a0df98b479e3ac227d3799912b771d9f65947839ec2350977fcb280b674233be20ad900e7abbb1d496428fa5a11061db0bf5c5ecce04f969efbc893bab2adfd98e90a619e2b0936eda19099036efb4d0201d78f1607ef371ff5b2664372051f1e2afaf98e85826f7b9cb157ef4488f81c00abbbea7f94550b7f8d72cc3aaab839e9e24b652a1f9dd3cb04ee82c74966c63efa5efc3a8b3d0083670d47374df34c1024816190856198cf9b2e95e7c4ae7c636d8444c4050d05dbd", 0x14, 0x0, &(0x7f0000000700)="5095d0c240f4d61b9f7abb166fad24f8fae93453"})
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x74}, 0x1, 0x0, 0x0, 0x45}, 0x20000080)

[  120.011225] audit: type=1400 audit(1748577168.985:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:52:48 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NET_DM_CMD_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xbc, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67c21acf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61b8f839}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6401fa61}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6de3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7768530e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3792}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x66c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x707361cf}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb39}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x760d43c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7eb81f89}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x796be73c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a380756}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79b4e32f}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24001800}, 0x40)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x10100, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x78, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xeb1}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x4840)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r4=>r3, {0x8000, 0x6}}, './file0\x00'})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000005c0), r5)
lgetxattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00', &(0x7f0000000680)=""/15, 0xf)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}]}, 0x1c}}, 0x4000010)
r6 = accept(r4, &(0x7f00000007c0)=@un=@abs, &(0x7f0000000840)=0x80)
sendmsg$OSF_MSG_REMOVE(r6, &(0x7f0000001280)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001240)={&(0x7f00000008c0)={0x964, 0x1, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [{{0x254, 0x1, {{0x3, 0x1f}, 0xf8, 0x7, 0x512, 0x4, 0x19, 'syz0\x00', "ae80a588fb257495f6d0d8980fce1073f1cbdab83e0a668f07936da7e1073de4", "333f21f67395938b61cb47bbd9801531766b2dfed1e01fc501c97eeb6178b6c0", [{0x1f, 0x6, {0x1, 0x7}}, {0x401, 0x8, {0x0, 0x6b0}}, {0xfff8, 0x3, {0x0, 0x8001}}, {0x6, 0x6, {0x2, 0x8}}, {0x7ff, 0x8000, {0x2, 0x5}}, {0x6, 0x0, {0x2, 0x6}}, {0x7fff, 0x1ef1, {0x0, 0x7}}, {0xfffc, 0xdd, {0x1, 0x15}}, {0x1, 0x6, {0x3, 0xcdb}}, {0x9, 0xff8d, {0x0, 0x6}}, {0x66, 0x6, {0x0, 0x8}}, {0x7, 0x8, {0x2, 0xc9}}, {0x4, 0x5164, {0x0, 0x2}}, {0x2, 0x1, {0x2, 0x32}}, {0x3, 0xaa21, {0x1, 0x1ff}}, {0x7fff, 0x5e9, {0x0, 0x6}}, {0x5, 0x8cc, {0x84f9c7e23331f6a7, 0x7}}, {0x14a2, 0x3, {0x3, 0x4}}, {0x5, 0x7, {0x1, 0x61}}, {0x2, 0xf24b, {0x1, 0x2}}, {0x1, 0x4, {0x2, 0x3}}, {0xd1, 0x8001, {0x3, 0x3ff}}, {0xfffa, 0x340d, {0x3}}, {0x3, 0xffff, {0x2, 0x5}}, {0x6, 0x7e3, {0x1, 0xfffffffd}}, {0x0, 0x4, {0x1, 0x7}}, {0x0, 0x30f, {0xfb58f74c77965635, 0x7fff}}, {0x1, 0x100, {0x3, 0x7ff}}, {0xfff7, 0x1200, {0x2, 0x3ff}}, {0x1, 0x45, {0x1, 0x6}}, {0x1, 0xfffe, {0x2, 0x7}}, {0x1f, 0xffff, {0x0, 0x9}}, {0x2, 0x10, {0x1, 0xf0}}, {0x4, 0xff, {0x2, 0x4}}, {0x21, 0x1, {0x0, 0x2}}, {0x20, 0x88, {0x1}}, {0x89, 0x100, {0x2, 0x80000000}}, {0xff, 0x5, {0x0, 0x6}}, {0x1, 0x5, {0x1, 0x40}}, {0x0, 0x38, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x5e, 0x20, 0x5, 0x2, 0x5, 'syz1\x00', "9c69fbe13733053ac51b65cb2165f504723cec86d7eb10e5070a4469018811ec", "9fc1aa49bfbd7346d56f58c6be438eb31d67030d95ed502a36581873ae74a4ee", [{0x7, 0x1, {0x1}}, {0x6}, {0x4, 0xa42, {0x1, 0x4699}}, {0x1, 0x4, {0x0, 0x6}}, {0x2, 0x4, {0x3, 0x4}}, {0x2000, 0x20, {0x2, 0x9}}, {0x4, 0x2b2c, {0x2, 0x80}}, {0x81, 0x5, {0x1, 0x1f}}, {0x7, 0x8, {0x1, 0x800}}, {0x1000, 0x3, {0x2, 0x3f}}, {0x5, 0xff, {0x0, 0x5}}, {0x800, 0x3, {0x0, 0x6}}, {0x4, 0x6, {0x2, 0x9}}, {0x38, 0x81, {0x0, 0x1ff}}, {0x1, 0x8, {0x2, 0xfffffff7}}, {0x2, 0x2, {0x3, 0x5}}, {0x32ce, 0x200}, {0x3, 0xd4, {0x1, 0xfffffe00}}, {0x1, 0x9, {0x0, 0x3}}, {0x3, 0x8001, {0x0, 0x10000}}, {0xc063, 0xee1, {0x0, 0x5}}, {0x0, 0x0, {0x3, 0xfd6c}}, {0x2, 0x3f, {0x2, 0x2}}, {0x0, 0x7, {0x2, 0x6}}, {0x1000, 0xfffe, {0x0, 0x3}}, {0x2, 0x7, {0x2, 0x6}}, {0x3f, 0x9a, {0x0, 0x2}}, {0x81, 0x8, {0x3, 0x7f}}, {0x8000, 0x0, {0x1, 0x3856d607}}, {0xe90, 0xcdda, {0xf7d1cce01d7a0a9f, 0xfffffe00}}, {0xfd6, 0x50, {0x1, 0x8}}, {0x8000, 0x6, {0x2, 0x5}}, {0x100, 0x5, {0x2, 0x4}}, {0x2, 0x2, {0x2}}, {0x1, 0x6, {0x1}}, {0x7, 0x80, {0x3, 0x8}}, {0x0, 0x3, {0x1, 0x7f}}, {0x4, 0x5, {0x1, 0x3ff}}, {0xeabc, 0x2cf0, {0x2, 0x8}}, {0xfff, 0x3, {0x1, 0xf87}}]}}}, {{0x254, 0x1, {{0x0, 0x490a}, 0xff, 0x1, 0x7f, 0x0, 0x1c, 'syz0\x00', "be8dba55003e8d03377d271e114625e1f6b4fd7072b936033d5fa34be19e6eab", "4df832391b86a88f9219a146bbc406892c09da8948847bb9129918d551e765d3", [{0xffff, 0x48, {0x3, 0x101}}, {0x7fff, 0xa740, {0x2, 0x6adcc28e}}, {0x1, 0x3ff, {0x2, 0x1}}, {0x1, 0xff, {0x1, 0xb9}}, {0x3, 0x0, {0x2, 0x300}}, {0x9, 0xfffb, {0x3, 0x7ff}}, {0x5, 0x4, {0x2, 0x6e03}}, {0x4, 0x7}, {0x7, 0x6, {0x0, 0x4}}, {0x27, 0x101, {0x2, 0x2}}, {0x3f, 0x100, {0x1, 0x3f}}, {0x2, 0x20, {0x1, 0x10001}}, {0x5, 0x6, {0x3, 0x5}}, {0x7fff, 0x8, {0x3, 0x6}}, {0x0, 0x400, {0x2, 0xfffffff7}}, {0x3, 0xfff, {0x3, 0xfffffffb}}, {0x647, 0x3, {0x2, 0x5}}, {0x200, 0x2, {0x3, 0xfc6}}, {0x6, 0x2, {0x2, 0x7}}, {0x9, 0x6, {0x0, 0xffff7fff}}, {0x40, 0x5, {0x3, 0x2679}}, {0x5, 0x81, {0x0, 0x6}}, {0x8, 0x1, {0x0, 0x80000001}}, {0x9, 0x1000, {0x2, 0x2}}, {0x2, 0x7fff, {0x0, 0x4}}, {0x0, 0x0, {0x1, 0x80000000}}, {0x2, 0x6, {0x2, 0x2c6}}, {0xffff, 0x3, {0x0, 0x4}}, {0x0, 0x7ff, {0x0, 0x6}}, {0x1000, 0xffff, {0x2, 0x4479}}, {0x9, 0x80, {0x2, 0x80000001}}, {0x20, 0x30, {0x1, 0x9}}, {0xb6a, 0x40, {0x327d6e6fff8234d5, 0x2}}, {0x800, 0x200, {0x3, 0x8000}}, {0x0, 0x1, {0x0, 0x80000000}}, {0x2, 0x3, {0x1, 0x6}}, {0x9, 0x1ff, {0x2, 0x2}}, {0x5, 0x1, {0x3, 0xfff}}, {0x8001, 0x4cb, {0x1, 0x4}}, {0x7, 0x4, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x3, 0x0, 0x2, 0xfff9, 0x23, 'syz1\x00', "daeaf4e60c740677c3aa60775cb60ff440e1e993ad18e743000b5ec7f6d2d2da", "f5f0b49eb621b4e176f32f9a23519d124e124f3a135173f3e032ac674fec6473", [{0x6, 0x2, {0x0, 0x68}}, {0x7, 0x6, {0x2, 0x800}}, {0x1, 0x2, {0x1, 0x80000001}}, {0x4, 0x3ff, {0x3, 0x1c}}, {0x9, 0x0, {0x0, 0xd72}}, {0x2, 0xff, {0x3, 0x10001}}, {0x3f, 0x0, {0x2}}, {0xffff, 0x20, {0x0, 0xfff}}, {0xb3, 0x1, {0x0, 0x101}}, {0x8, 0x8, {0x2, 0x6}}, {0x1000, 0x7f, {0x1, 0x1}}, {0x8, 0x8000, {0x3, 0x80}}, {0x5, 0x1, {0x1, 0x8}}, {0x3, 0x64, {0x1, 0x200}}, {0x2, 0x8, {0x3, 0x7}}, {0x5, 0x5, {0x2, 0xfff}}, {0x2, 0x9, {0x1, 0xffffff01}}, {0x1ff, 0x9, {0x1, 0x3ff}}, {0x8, 0xc5, {0x1, 0x1}}, {0x7, 0x5, {0x2, 0xc1}}, {0x0, 0xffff, {0x1, 0xffff8000}}, {0x80, 0x5, {0x1}}, {0x8, 0x81, {0x2}}, {0xfff8, 0x888, {0x1, 0x6}}, {0x4, 0x7, {0x2, 0x2}}, {0x6, 0xfff, {0x3, 0x40}}, {0x6, 0x3, {0x1, 0x1}}, {0xfffe, 0x1, {0x3, 0x2}}, {0x1, 0x3f, {0x0, 0x2}}, {0x3, 0x5, {0x3, 0xff}}, {0x800, 0x7, {0x1, 0xfffffffb}}, {0xdd, 0x0, {0x534014c5d7ac1084, 0x2}}, {0x4, 0x34b4, {0x3, 0x8}}, {0x7ff, 0x3, {0x1, 0x3}}, {0xb4ea, 0x7, {0x2, 0x100}}, {0xfc01, 0x0, {0x0, 0x1}}, {0x8, 0x803, {0x0, 0x4}}, {0x8000, 0x6, {0x3, 0x9}}, {0x4, 0x4, {0x3, 0xb697}}, {0x7f, 0xfffc, {0x2, 0x4}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x81}, 0x48000)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xc8, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:xserver_misc_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000014c0)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x34, 0x0, 0x514, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040095}, 0x4000000)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), r0)

03:52:49 executing program 4:
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x40}, 0x4)
r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg0\x00'})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x200801, 0x0)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmmsg$unix(r0, &(0x7f0000001600)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000400)=""/160, 0xa0}, {&(0x7f00000004c0)=""/51, 0x33}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000600)=""/208, 0xd0}], 0x4, &(0x7f0000000740)=[@rights={{0x2c, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r11=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r12=>0x0}}}], 0xd0}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000c40)=[{&(0x7f00000008c0)=""/81, 0x51}, {&(0x7f0000000940)=""/28, 0x1c}, {&(0x7f0000000980)=""/19, 0x13}, {&(0x7f00000009c0)=""/234, 0xea}, {&(0x7f0000000ac0)=""/17, 0x11}, {&(0x7f0000000b00)=""/63, 0x3f}, {&(0x7f0000000b40)=""/238, 0xee}], 0x7, &(0x7f0000000cc0)=[@rights={{0x20, 0x1, 0x1, [<r13=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [<r14=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000000d80), 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000e00)=""/195, 0xc3}, {&(0x7f0000000f00)=""/34, 0x22}], 0x2}}, {{&(0x7f0000000f80)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001000)=""/127, 0x7f}, {&(0x7f0000001080)=""/196, 0xc4}, {&(0x7f0000001180)=""/194, 0xc2}, {&(0x7f0000001280)=""/198, 0xc6}, {&(0x7f0000001380)=""/37, 0x25}, {&(0x7f00000013c0)=""/245, 0xf5}, {&(0x7f00000014c0)=""/80, 0x50}, {&(0x7f0000001540)=""/46, 0x2e}], 0x8}}], 0x4, 0x2100, &(0x7f0000001700)={0x0, 0x3938700})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f00000001c0), 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0xb8, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x62f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x207}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x24000000)
openat(r6, &(0x7f0000001880)='./file0\x00', 0x8400, 0x40)
fsetxattr$trusted_overlay_origin(r7, &(0x7f00000018c0), &(0x7f0000001900), 0x2, 0x2)
r15 = perf_event_open$cgroup(&(0x7f0000001940)={0x4, 0x80, 0x7, 0x1, 0x80, 0x3, 0x0, 0x1, 0x40, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xa45, 0x2, @perf_config_ext={0x0, 0xfffffffffffffff7}, 0x100, 0xff, 0xf838, 0x5, 0x6c, 0xfa35, 0x5, 0x0, 0xfff, 0x0, 0x3ff}, r8, 0x3, 0xffffffffffffffff, 0x3)
ftruncate(r15, 0x220)
pipe2(&(0x7f00000019c0)={<r16=>0xffffffffffffffff}, 0x0)
r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a40), r13)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001a80)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000001b80)=0xe8)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r16, &(0x7f0000001c80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x60, r17, 0x2, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffffa}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x3a7e}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x24}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xfffffff7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x8}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4090}, 0x40)
getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000001cc0)={{{@in, @in=@empty}}, {{@in6=@private1}}}, &(0x7f0000001dc0)=0xe8)
fchown(r10, r11, r12)
ioctl$CDROMREADALL(r3, 0x5318, &(0x7f0000001e00))

03:52:49 executing program 5:
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r0 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@qipcrtr, &(0x7f0000000280)=0x80, 0x80000)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4c980)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x8280, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x6d9da9453fee5d88}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4c000)
syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x8e36}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', <r4=>0x0, 0x29, 0x8, 0x6, 0x2, 0xc9, @private1, @loopback, 0x7, 0x80, 0x3}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000700)={'wg0\x00', <r5=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000800)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000900)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'ip6_vti0\x00', <r7=>0x0, 0x29, 0x1c, 0x8, 0x10000, 0x4c, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x10, 0x1, 0x8}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000c00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x188, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x40005)
faccessat(r3, &(0x7f0000000c40)='./file0\x00', 0x20)
r8 = openat$incfs(r3, &(0x7f0000000c80)='.log\x00', 0x2, 0x4)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000d40)={{{@in=@initdev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000e40)=0xe8)
getsockname$packet(r3, &(0x7f0000000e80)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000ec0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000f80)={'syztnl2\x00', &(0x7f0000000f00)={'syztnl0\x00', <r12=>r5, 0x2f, 0x1f, 0x60, 0x63b5, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, 0x8, 0x80, 0xfffffffa, 0x4}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r8, &(0x7f0000001180)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000fc0)={0x170, r9, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x24000800}, 0x22045800)

03:52:49 executing program 6:
r0 = dup(0xffffffffffffffff)
r1 = pidfd_getfd(r0, r0, 0x0)
fchdir(r1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8}, 0x40)
ioctl$TIOCEXCL(r1, 0x540c)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4008000)
r3 = dup3(0xffffffffffffffff, r0, 0x80000)
ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000240)="99c6bc5cd2d07875dacb5e4a22fb52705489d19038a79f0c6ad8e6a27a552e55fb8c324b65d50af70a657d3e68f39140975c3e5aca8482919a973775730e5c7e3931f4b93b29fd2702eac7bc1faac7dfec3b95c90868914f2ff39ac092adb5e6c070c997797404d9a4544418ca552a97aa5e5790fbaff7a859f4402f")
r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x101080, 0x0)
syz_open_pts(r4, 0x0)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000300), 0x2)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{}]})
r5 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x8, 0x400)
getsockopt$netlink(r5, 0x10e, 0x6, &(0x7f0000000400)=""/114, &(0x7f0000000480)=0x72)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={<r6=>0x0})
r7 = openat$cgroup(r3, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000580)={r6, 0x0, r7, 0xc34})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'})

03:52:49 executing program 7:
ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000000)={0x1f, 0xff, 0x5, 0x56, 0xb7})
syz_open_pts(0xffffffffffffffff, 0x80000)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000a80)={0x0, 0x4, 0x7, 0x7ff, 0x9, "2ebfd2c3f9749088033e2f982abcaca735aec7"})
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000ac0)='./file0\x00', 0x800)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x7c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8d4}, 0x800)
r2 = syz_open_dev$rtc(&(0x7f0000000c40), 0x5, 0x202000)
ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000000e80)={0x3, &(0x7f0000000e00)=[{0x1, 0x43, &(0x7f0000000c80)="e5b03295e8cf30609fe8315167eb4e9f4fd8f5bb5b427255f349dc087137e0aa79a76bce088bd5871e8753024b577665909ba2d79dd063e01963d202818cf0955a1074"}, {0x20, 0x8f, &(0x7f0000000d00)="1e22307d1b25202b610318acba77c2b44112ee725c2b60e6bfefdd813c1a7a4232c86b2e87f7452b848932d47b8eb49c349f5aa2892a104b913cb67fce033bbefb768d5377327e598d267b7903c43aea026f388171fa33fce9b6e983aa937a3b9b84af3dbf7171d25cbbb6fef9bb26794cf6886e9d8f68a38e90d375a36cd5e355e85f18c62da09bfc2e7dd475cbee", 0x1}, {0x1000, 0x22, &(0x7f0000000dc0)="fa2870f77a774d09c35b653c3e96e45900417c5f479aeb4969198d38ae46ece5eab5", 0x1}]})
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000ec0)={'veth0_virt_wifi\x00', {0x2, 0x0, @local}})
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000f00)=0x400000)
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x240080c4)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001040)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x1f}}, './file0\x00'})
write$tun(r3, &(0x7f0000001080)={@void, @void, @x25={0x0, 0x4, 0xb, "94a44ca85135dd6a5685e577ef342d7c96f8c9ab2aa92550504cb13b6318873a1c4c84578d9a9aacbc95a30ea64ddf0d4f91a83eddc8e789ff59e0ebaf3b1acf668b696fa71d78e87d709afb4605a7a97443c7"}}, 0x56)
ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000001100)={0x5, 0xe7a, 0xfffffffffffffff9, 0x8, 0xfffffffffffffff7})
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000001140)={0xffffffffffffffff, 0x401, "b8ace1", 0xff, 0x2})
fcntl$setown(r3, 0x8, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2b}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1039}]}, 0x28}, 0x1, 0x0, 0x0, 0x44084}, 0x800)
sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000001380)={&(0x7f0000001280), 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x58, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8198d6856484"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="eae733500837"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$CDROMEJECT(r1, 0x5309)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000001400)={0x81, 0xf9, 0x0, 0x8, 0x4, 0x80})

[  121.558857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  121.561409] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  121.569213] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  121.578307] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  121.584036] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  121.610540] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  121.614215] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  121.617391] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  121.642460] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  121.647623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  121.652852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  121.661371] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  121.670539] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  121.673068] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  121.675971] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  121.678534] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  121.683882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  121.685848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  121.689396] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  121.689893] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  121.694955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  121.695723] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  121.698945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  121.703164] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  121.715869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  121.722375] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  121.724772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  121.728066] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  121.730779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  121.732342] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  121.738231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  121.740430] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  121.761747] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  121.765546] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  121.780924] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  121.786493] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  121.787929] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  121.803738] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  121.808907] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  121.813457] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  123.643651] Bluetooth: hci0: command tx timeout
[  123.771207] Bluetooth: hci1: command tx timeout
[  123.771770] Bluetooth: hci3: command tx timeout
[  123.836492] Bluetooth: hci2: command tx timeout
[  123.837158] Bluetooth: hci5: command tx timeout
[  123.900157] Bluetooth: hci7: command tx timeout
[  123.900739] Bluetooth: hci6: command tx timeout
[  123.901273] Bluetooth: hci4: command tx timeout
[  125.691637] Bluetooth: hci0: command tx timeout
[  125.820519] Bluetooth: hci1: command tx timeout
[  125.820988] Bluetooth: hci3: command tx timeout
[  125.883580] Bluetooth: hci2: command tx timeout
[  125.883608] Bluetooth: hci5: command tx timeout
[  125.948151] Bluetooth: hci7: command tx timeout
[  125.948593] Bluetooth: hci4: command tx timeout
[  125.949010] Bluetooth: hci6: command tx timeout
[  127.740129] Bluetooth: hci0: command tx timeout
[  127.867230] Bluetooth: hci1: command tx timeout
[  127.867700] Bluetooth: hci3: command tx timeout
[  127.931151] Bluetooth: hci5: command tx timeout
[  127.931888] Bluetooth: hci2: command tx timeout
[  127.995231] Bluetooth: hci4: command tx timeout
[  127.995675] Bluetooth: hci6: command tx timeout
[  127.996266] Bluetooth: hci7: command tx timeout
[  129.788171] Bluetooth: hci0: command tx timeout
[  129.915179] Bluetooth: hci3: command tx timeout
[  129.916179] Bluetooth: hci1: command tx timeout
[  129.980343] Bluetooth: hci2: command tx timeout
[  129.980785] Bluetooth: hci5: command tx timeout
[  130.043284] Bluetooth: hci7: command tx timeout
[  130.043734] Bluetooth: hci6: command tx timeout
[  130.043765] Bluetooth: hci4: command tx timeout
[  183.703634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  183.712622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  183.718653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  183.730222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  183.739891] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  183.790514] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  183.799710] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  183.802932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  183.811698] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  183.812807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  183.829343] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  183.831604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  183.833308] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  183.834778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  183.837300] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  183.838004] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  183.842353] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  183.848784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  183.854507] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  183.858734] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  183.863945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  183.866478] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  183.876730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  183.879171] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  183.884312] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  183.885908] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  183.893575] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  183.897705] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  183.913589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  183.932492] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  183.946537] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  183.949320] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  183.962240] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  184.001613] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  184.007655] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  184.009960] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  184.014573] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  184.020500] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  184.021939] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  184.025594] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  185.787390] Bluetooth: hci0: command tx timeout
[  185.979311] Bluetooth: hci4: command tx timeout
[  185.980294] Bluetooth: hci1: command tx timeout
[  186.043530] Bluetooth: hci3: command tx timeout
[  186.043553] Bluetooth: hci2: command tx timeout
[  186.044170] Bluetooth: hci5: command tx timeout
[  186.107376] Bluetooth: hci6: command tx timeout
[  186.107596] Bluetooth: hci7: command tx timeout
[  187.835686] Bluetooth: hci0: command tx timeout
[  188.027455] Bluetooth: hci1: command tx timeout
[  188.027525] Bluetooth: hci4: command tx timeout
[  188.091205] Bluetooth: hci5: command tx timeout
[  188.091680] Bluetooth: hci3: command tx timeout
[  188.092151] Bluetooth: hci2: command tx timeout
[  188.156135] Bluetooth: hci6: command tx timeout
[  188.156164] Bluetooth: hci7: command tx timeout
[  189.884421] Bluetooth: hci0: command tx timeout
[  190.075466] Bluetooth: hci4: command tx timeout
[  190.078369] Bluetooth: hci1: command tx timeout
[  190.139553] Bluetooth: hci2: command tx timeout
[  190.139723] Bluetooth: hci5: command tx timeout
[  190.140543] Bluetooth: hci3: command tx timeout
[  190.203557] Bluetooth: hci7: command tx timeout
[  190.203657] Bluetooth: hci6: command tx timeout
[  191.932642] Bluetooth: hci0: command tx timeout
[  192.124200] Bluetooth: hci1: command tx timeout
[  192.124263] Bluetooth: hci4: command tx timeout
[  192.187215] Bluetooth: hci5: command tx timeout
[  192.187247] Bluetooth: hci3: command tx timeout
[  192.187675] Bluetooth: hci2: command tx timeout
[  192.252140] Bluetooth: hci6: command tx timeout
[  192.252623] Bluetooth: hci7: command tx timeout
[  245.966006] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  245.971851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  245.974664] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  245.978454] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  245.983038] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  245.984710] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  245.989496] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  245.990167] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  245.996844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  246.006439] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  246.036374] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  246.045514] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  246.050346] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  246.056845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  246.061221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  246.121822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  246.128396] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  246.129983] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  246.153548] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  246.155609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  246.159575] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  246.164344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  246.174323] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  246.176995] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  246.179811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  246.187493] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  246.191238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  246.194049] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  246.199596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  246.202066] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  246.203979] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  246.216695] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  246.221710] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  246.223279] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  246.226638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  246.226696] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  246.231112] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  246.248200] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  246.255361] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  246.265947] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  248.059249] Bluetooth: hci0: command tx timeout
[  248.060210] Bluetooth: hci1: command tx timeout
[  248.123416] Bluetooth: hci2: command tx timeout
[  248.252157] Bluetooth: hci3: command tx timeout
[  248.252226] Bluetooth: hci5: command tx timeout
[  248.315221] Bluetooth: hci7: command tx timeout
[  248.315252] Bluetooth: hci4: command tx timeout
[  248.316036] Bluetooth: hci6: command tx timeout
[  250.107271] Bluetooth: hci1: command tx timeout
[  250.107343] Bluetooth: hci0: command tx timeout
[  250.171525] Bluetooth: hci2: command tx timeout
[  250.299169] Bluetooth: hci3: command tx timeout
[  250.299235] Bluetooth: hci5: command tx timeout
[  250.363187] Bluetooth: hci6: command tx timeout
[  250.364761] Bluetooth: hci4: command tx timeout
[  250.364776] Bluetooth: hci7: command tx timeout
[  252.157165] Bluetooth: hci1: command tx timeout
[  252.157665] Bluetooth: hci0: command tx timeout
[  252.219521] Bluetooth: hci2: command tx timeout
[  252.349101] Bluetooth: hci5: command tx timeout
[  252.349202] Bluetooth: hci3: command tx timeout
[  252.411332] Bluetooth: hci7: command tx timeout
[  252.411355] Bluetooth: hci4: command tx timeout
[  252.411840] Bluetooth: hci6: command tx timeout
[  254.203306] Bluetooth: hci0: command tx timeout
[  254.206153] Bluetooth: hci1: command tx timeout
[  254.268159] Bluetooth: hci2: command tx timeout
[  254.395296] Bluetooth: hci3: command tx timeout
[  254.396349] Bluetooth: hci5: command tx timeout
[  254.459234] Bluetooth: hci6: command tx timeout
[  254.461315] Bluetooth: hci4: command tx timeout
[  254.461731] Bluetooth: hci7: command tx timeout
[  306.012711] syz-executor.1 (5553) used greatest stack depth: 24336 bytes left
[  308.241591] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  308.245820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  308.251369] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  308.257355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  308.262849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  308.378473] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  308.389585] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  308.392029] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  308.400917] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  308.408781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  308.515154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  308.525895] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  308.538529] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  308.547040] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  308.548438] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  308.553686] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  308.559927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  308.562440] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  308.568803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  308.570828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  308.659065] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  308.705854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  308.722404] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  308.738555] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  308.749531] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  308.751022] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  308.792540] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  308.794876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  308.796682] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  308.804595] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  308.808311] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  308.830954] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  308.860647] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  308.871745] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  308.892928] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  308.908326] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  308.916244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  308.930844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  309.009147] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  309.015533] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  310.334314] Bluetooth: hci0: command tx timeout
[  310.460263] Bluetooth: hci1: command tx timeout
[  310.652408] Bluetooth: hci2: command tx timeout
[  310.652578] Bluetooth: hci3: command tx timeout
[  310.907164] Bluetooth: hci6: command tx timeout
[  310.971196] Bluetooth: hci4: command tx timeout
[  311.099203] Bluetooth: hci7: command tx timeout
[  311.099816] Bluetooth: hci5: command tx timeout
[  312.379338] Bluetooth: hci0: command tx timeout
[  312.507483] Bluetooth: hci1: command tx timeout
[  312.699182] Bluetooth: hci3: command tx timeout
[  312.699670] Bluetooth: hci2: command tx timeout
[  312.955180] Bluetooth: hci6: command tx timeout
[  313.021107] Bluetooth: hci4: command tx timeout
[  313.147491] Bluetooth: hci7: command tx timeout
[  313.147973] Bluetooth: hci5: command tx timeout
[  314.427552] Bluetooth: hci0: command tx timeout
[  314.555406] Bluetooth: hci1: command tx timeout
[  314.747204] Bluetooth: hci3: command tx timeout
[  314.747692] Bluetooth: hci2: command tx timeout
[  315.003177] Bluetooth: hci6: command tx timeout
[  315.067144] Bluetooth: hci4: command tx timeout
[  315.196436] Bluetooth: hci5: command tx timeout
[  315.196904] Bluetooth: hci7: command tx timeout
[  316.476330] Bluetooth: hci0: command tx timeout
[  316.603250] Bluetooth: hci1: command tx timeout
[  316.796532] Bluetooth: hci3: command tx timeout
[  316.797013] Bluetooth: hci2: command tx timeout
[  317.051165] Bluetooth: hci6: command tx timeout
[  317.117453] Bluetooth: hci4: command tx timeout
[  317.243411] Bluetooth: hci7: command tx timeout
[  317.243904] Bluetooth: hci5: command tx timeout
[  370.580840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  370.586913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  370.590892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  370.597873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  370.603588] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  370.656486] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  370.660343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  370.665111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  370.670400] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  370.678179] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  370.906372] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  370.912859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  370.920355] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  370.931410] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  370.938840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  370.999378] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  371.014949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  371.019678] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  371.031046] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  371.047263] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  371.052472] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  371.063795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  371.072732] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  371.092916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  371.096749] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  371.099836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  371.108208] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  371.111127] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  371.119397] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  371.119800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  371.128899] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  371.132918] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  371.149713] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  371.157673] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  371.183200] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  371.209992] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  371.295633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  371.301675] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  371.329192] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  371.329670] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  372.668166] Bluetooth: hci0: command tx timeout
[  372.731180] Bluetooth: hci1: command tx timeout
[  372.987499] Bluetooth: hci2: command tx timeout
[  373.115325] Bluetooth: hci4: command tx timeout
[  373.179238] Bluetooth: hci5: command tx timeout
[  373.307966] Bluetooth: hci3: command tx timeout
[  373.499189] Bluetooth: hci6: command tx timeout
[  373.884136] Bluetooth: hci7: command tx timeout
[  374.715184] Bluetooth: hci0: command tx timeout
[  374.779148] Bluetooth: hci1: command tx timeout
[  375.035234] Bluetooth: hci2: command tx timeout
[  375.163718] Bluetooth: hci4: command tx timeout
[  375.228126] Bluetooth: hci5: command tx timeout
[  375.358667] Bluetooth: hci3: command tx timeout
[  375.547148] Bluetooth: hci6: command tx timeout
[  375.931913] Bluetooth: hci7: command tx timeout
[  376.765318] Bluetooth: hci0: command tx timeout
[  376.827500] Bluetooth: hci1: command tx timeout
[  377.083196] Bluetooth: hci2: command tx timeout
[  377.211644] Bluetooth: hci4: command tx timeout
[  377.275410] Bluetooth: hci5: command tx timeout
[  377.405161] Bluetooth: hci3: command tx timeout
[  377.595157] Bluetooth: hci6: command tx timeout
[  377.979188] Bluetooth: hci7: command tx timeout
[  378.811177] Bluetooth: hci0: command tx timeout
[  378.875428] Bluetooth: hci1: command tx timeout
[  379.131334] Bluetooth: hci2: command tx timeout
[  379.259342] Bluetooth: hci4: command tx timeout
[  379.323663] Bluetooth: hci5: command tx timeout
[  379.451150] Bluetooth: hci3: command tx timeout
[  379.643140] Bluetooth: hci6: command tx timeout
[  380.028162] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
03:57:57  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffff8880370278e0 RCX=ffff88803702776c RDX=1ffff11006e04f1c
RSI=ffffffff813afd73 RDI=ffff8880370278ec RBP=0000000000000007 RSP=ffff8880370277f8
R8 =0000000000000001 R9 =ffff888037027858 R10=000000000003b6bd R11=00000000000083eb
R12=ffff8880370278e0 R13=0000000000000000 R14=ffff888027e4d280 R15=ffff88803504d780
RIP=ffffffff8160483f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe4900000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005637807cf080 CR3=0000000019ee2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f93b253147000007f93b2530f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff81b21984 RDX=000000000000b21a
RSI=000000000000b219 RDI=ffffffff86c9f70c RBP=ffff888037467650 RSP=ffff888037467588
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b6bd R11=0000000000025b16
R12=ffff888037467658 R13=ffff888037467640 R14=ffff888037467639 R15=ffff8880374675f8
RIP=ffffffff81353dfb RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fadcf87d6f4 CR3=000000001d309000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fadcf88c47000007fadcf88bf20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000