Warning: Permanently added '[localhost]:40609' (ECDSA) to the list of known hosts.
2025/06/06 22:11:40 fuzzer started
2025/06/06 22:11:41 dialing manager at localhost:40003
syzkaller login: [  108.681981] cgroup: Unknown subsys name 'net'
[  108.835006] cgroup: Unknown subsys name 'cpuset'
[  108.874820] cgroup: Unknown subsys name 'rlimit'
2025/06/06 22:12:00 syscalls: 2214
2025/06/06 22:12:00 code coverage: enabled
2025/06/06 22:12:00 comparison tracing: enabled
2025/06/06 22:12:00 extra coverage: enabled
2025/06/06 22:12:00 setuid sandbox: enabled
2025/06/06 22:12:00 namespace sandbox: enabled
2025/06/06 22:12:00 Android sandbox: enabled
2025/06/06 22:12:00 fault injection: enabled
2025/06/06 22:12:00 leak checking: enabled
2025/06/06 22:12:00 net packet injection: enabled
2025/06/06 22:12:00 net device setup: enabled
2025/06/06 22:12:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/06 22:12:00 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/06 22:12:00 USB emulation: enabled
2025/06/06 22:12:00 hci packet injection: enabled
2025/06/06 22:12:00 wifi device emulation: enabled
2025/06/06 22:12:00 802.15.4 emulation: enabled
2025/06/06 22:12:00 fetching corpus: 0, signal 0/0 (executing program)
2025/06/06 22:12:01 starting 8 fuzzer processes
22:12:01 executing program 0:
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0x0, @empty}})
syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)={0x21, 0x1b, '\x00', [@ra={0x5, 0x2, 0x1}, @generic={0x0, 0xd3, "26611a3ff7dfda46f15eba029dfe347093aa9b98b5856660ae91133967a4d8196b23c1dddc1a296f7b7907ab724d012d8bb452a000f7f8f0609a3f2f47af072cf8d1fba7d7c9b17282c26f65a60381d3116e5a46e0d2c81fe8530187b55d2381fc0f6da6afc8106b361fe1a586c3e3bdd8d236bf6086317e0b472d443e94afa1909105678dcbb947ba79245435b3e973f6adc68db6dc5a3035b85e444f6914b0cad5390a8937e9b4b609d8bdf5721ed526c8a91a959d3af3feb929768bb605100fbd7d3ac9af0442acd52049a57855e26fd6b0"}]}, 0xe8)
fchmod(r0, 0x26b)
setuid(0xee00)
r1 = open(&(0x7f0000000240)='./file0\x00', 0x121100, 0x43d199cc55ce945f)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000280))
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x121100, 0x0)
getsockopt$inet6_buf(r2, 0x29, 0x2d, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001400)={{0x1, 0x1, 0x18, r2, {<r3=>0xee00, 0xee01}}, './file0\x00'})
mount$9p_tcp(&(0x7f0000001340), &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0), 0x200c000, &(0x7f0000001440)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@debug={'debug', 0x3d, 0x2}}, {@access_uid={'access', 0x3d, r3}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffffa}}, {@smackfsdef}, {@fsmagic={'fsmagic', 0x3d, 0x3}}]}})
r4 = fcntl$getown(r0, 0x9)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000001500)={0x2, r4})
r5 = accept$inet(r1, 0x0, &(0x7f0000001540))
setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000001580)={0x1d, @remote, 0x4e23, 0x3, 'none\x00', 0x18, 0x8000, 0x6}, 0x2c)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000015c0), 0x42100, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x80, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x14}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:checkpolicy_exec_t:s0\x00'}]}, 0x80}}, 0x4000010)

22:12:01 executing program 1:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x424, r0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20f3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x22e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_NODE={0x13c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "73f5bf3ef7324371c2bf2ff7bd4029093802f2df13"}}, @TIPC_NLA_NODE_ID={0xed, 0x3, "97753f6cec76b9c26fc34fccade8339786b49c96f1e48efca4af4d9c4b382e7abe07169644d6dcc0ced30b80bb19c636f1e333ebdedd4b9437c59ca869143d4f17cfab43856c953806dfb0e9e6c4f4029b1f8f94ccb8e7d00783b21cec1e13c693456e3c9cded3b2ed7ff6213cd692f860b93af8a05132c02e0096429a416795dc43be83f6345a199cdee7ec4a886d97cd53ef3865d218812634c3ea0c0fc0df04b695b67891553f3b37cc4dc6c4d03133c7033fa0264c35a08021a35cca0062162bb3f74c64de47c969feafcf78f280f3b2f5edfeb80ec11f853496f052be422a6b105177a737f287"}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffffffff, @private0, 0x1ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @remote, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan0\x00'}}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd680}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcacf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x504}]}]}, 0x424}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x67}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8819}, 0x4000000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000006c0)={0x2e4, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x8e, 0x3, "428e5c8c403116564ee8737d5f2629eb3ef2bfeffe8e65a929ae3710ec3d76537891110b38f1b2aa3db7be40a71ad2716255c935d564feb2132d6c73a1b2028ae979b75bee81f3111f7460ef9c3a18a55ae20c5aee6e7c7f02fb0fa3213b9fe9ef65795536bf6ecdd31673a39c2a78c25d8a7000e7d4e8d7d2a31d3b3cfa7ea689c6a84c719ef5655361"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeab}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8001, @private0, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @private0, 0x7fff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_virt_wifi\x00'}}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x6, 0x9e, @local, 0xb13d}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64b74f63}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x64bb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x20008800}, 0x80c0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x260, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x260}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r3, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x71}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000)
r4 = msgget$private(0x0, 0x421)
msgrcv(r4, &(0x7f0000000f00)={0x0, ""/226}, 0xea, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'batadv_slave_1\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'ip6tnl0\x00', <r6=>0x0, 0x4, 0x40, 0x40, 0x2, 0x5d, @loopback, @private1, 0x700, 0x8000, 0x2, 0x20}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'batadv0\x00', <r7=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000001240)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001280)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001340)={'syztnl0\x00', &(0x7f00000012c0)={'syztnl0\x00', <r9=>0x0, 0x29, 0x1, 0x1, 0x6, 0x20, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x10, 0xae, 0x4}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'vxcan1\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000015c0)={'syztnl1\x00', &(0x7f0000001540)={'syztnl0\x00', <r11=>0x0, 0x29, 0x0, 0x4, 0x7, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x1, 0x20, 0x81, 0x1}})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001980)={&(0x7f0000001600)={0x378, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x378}, 0x1, 0x0, 0x0, 0x20048001}, 0x4)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001a40)={0x0, @qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, @ethernet={0x1, @random="29205b2519ea"}, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001a00)='batadv0\x00', 0x6bd, 0x2, 0x9})

22:12:01 executing program 2:
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x810, 0xffffffffffffffff, 0x42abc000)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x2, 0x1000, 0x8f, &(0x7f0000000000)="8b1561e17d5faa017443d62007cec2979789c7c07fd8ec266fa84d41049eb4d0b26be1142e364bc4dbb7b2567c2b390ddf23932938651e78ff692c8a1042f7ac38c945b0ad524b798c6a74ac577f75a03465710cead2c3a843c73de9866ee2b9c92f92c65705a7b0866611866c5fe665d12be282db562d993eb65050c9ebf8a26a0ab652b3f615723903db9273334b", 0x1e, 0x0, &(0x7f00000000c0)="037543168536af6c6f3392704026a80f28c3819bcc584f5cb48e2016c53c"})
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000180)=0x4, 0x4)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x8)
ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000001c0))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r0, {<r3=>r1}}, './file0\x00'})
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000240)={0x7, 0x4, 0x0, 0xff, 0x12, "3bf14935a8af809c"})
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x80800, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8)
lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fchown(r1, r5, r6)
ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000004c0))
acct(&(0x7f0000000500)='./file0\x00')
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000540)={0x0, 0x3})
fcntl$getown(r0, 0x9)
chroot(&(0x7f0000000580)='./file0\x00')
r7 = openat$cgroup_ro(r3, &(0x7f00000005c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
fcntl$setpipe(r7, 0x407, 0x7)
copy_file_range(r3, &(0x7f0000000600)=0x10000, r1, &(0x7f0000000640)=0x1ff, 0xa, 0x0)

[  129.005674] audit: type=1400 audit(1749247921.960:7): avc:  denied  { execmem } for  pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
22:12:01 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4404c1, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2cc, 0x11, 0xb, 0x401, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x7}, [@nested={0x9a, 0x3b, 0x0, 0x1, [@generic="c5216fcc302da9394d9fc9cd836d1e89a3ce4e32c855c140aee43df1e9b896d67c85fda448f6210e9ed0b3e39664f92993dc4183bcf845539b395140f2a789105daeeb085ea26a3b9ff5992ee5b6bbaed51312625ec4e500f95388db913184fa636a31840b46612c5f7211ee6ee021ec33390072d1ba619d12d41153531568276a9fb356807d57cc92cd0a2f060d8212b2ae21492962"]}, @nested={0x203, 0x91, 0x0, 0x1, [@generic="2ca37e64534e019a11e697b2688f66603b628f64a464b7e3d6458fcffaaca811cf594ca884107173683c88ff6412bf0d11f69b82febac4ce55ea9bc174ad93341746346ebe2ffa4457676fc8be29415f58362907ad46632d672084432678a7f869d71dc578fc5cbbe02443547dc479c94fb291f851ff812d68ffcb75e939708e7f50a8c7e2864107571a812daf8a5963343e637d3d68a638e4342fc774b59c3bc5161de4fb8bf238b54a78", @generic="9b7baaaff055010a1711cda2699a717b36aef6379734bcf5e03b176ed7daab2536cab9e5a0c76b13331ee59bfc52c042593c082d4f4b224a041da6d8b959f804da37c2afff4c0d6e9e5efe3205e024992285bb477d4130ecf422eda3c662113d366f1c0fde", @generic="1539f655691b360af34999185c868d969b8f5885265e3fd25b5b1015e305beec3ba1a59eeab97f5a97c902f39cb7119bf338e83fbb0438d740905fe2dfbba9145c4d0ef2f582125fe27e27e9bac40d5c1b6f9f15040d14f96a0056b83534f482773a8ee92b1b79e3803ada481fe41b402748eb45d59edda67fd7b09b2daec7fafdd83eabfde2dec6b4c6d7672e8ca2b3f096600809b509f2ab6c5027cb57e08d456f4be7e13e9f4131cca853e93df4cbd79b7feb2b0c69bfaeff04b8784618f9e6c9f4ae445360a8c97fc0dbf43e981ff6ca82dec58f2e01c515344e80ea84738bf7c42fe91607e30c39da2dea9f42"]}, @typed={0xc, 0x29, 0x0, 0x0, @u64=0x400}, @typed={0xc, 0x47, 0x0, 0x0, @u64=0x6}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004002)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan4\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r2, 0x600, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1000}, 0x881)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
write$binfmt_aout(r0, &(0x7f0000000640)={{0x108, 0x2, 0x29, 0xba, 0x388, 0x1000, 0x346, 0x80000001}, "aebb7ca35fb6e8cb83eca959b96a257e5552572ae5f3b8e1d5046b75f4e0f32c4d4950030e7b275645a75112f1c320166b02dfae7385f35346d9b95fbc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x95d)
writev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000fc0)="3589276009a8f87c8380885ee5391919bf8a079f7b124a09231fe5a5c39dc1db6906c359373d3cdaf6c4539777db8d23d216181b4f3da81ea680079b7d61d068eac602f384ce2ddcb99218f7bced8a40218c023979fda1b3ff39104e473631871bee9e4df6b7c47c38ee75816dbbf3602997b141cd79a3e1c6ca76d70ebfaab4428354e5ca9e1e687b64bee48670e93fbac5b1ffc97d5a4755cb323fe9e157b9bb9280e365ecb0fbe597d4b8e30866b02cf0388eb2f7a91309bae6f728237b4efdae6f080ad20877b881f53856518bbe12052ae9", 0xd4}, {&(0x7f00000010c0)="eefe523ee88e3880adf21982ce561c94ddc648dc73a2e5a59a04a5c4a8d3733ecb4d455780c1b074", 0x28}, {&(0x7f0000001100)="1004197577f59780f43dd55690fc0b32097101521f8d354b06dcd08363e65d81cdbe1db75128dc01a4ffbd053b1612e6cbc754eeac9779e0b2f758256b8a16fbf1f08232b37be7c2c3b6c32efd37098f872daad065ba422ad58baec470ded8a4f83617c130ab5eada744f4eb944301db0c7e044317ed4178e02ab052baad1d35d10be42e33e846bcaaedeef74fd8ed3314865b95bdbd488ae1f06b8dba35b0955c", 0xa1}, {&(0x7f00000011c0)="69370a951f72ed5e9d63d9e19f7de4d5c88202c7ef8b9d3038946117057bfc9f3bfd4f52e0798563827e68082fee42560d45edb1c19084b765d29861337a952b8bf548ff90225e692d5d67fe1840f2af4e3a1c1d23db25481fea654230f0fb06f0b342f8869abe6f6bf1c5e857f9d09c62214f50eb19bb2aa9e727f025c153d7568b03292bf9081dcdb3e96bfcf414635ea33bcdc5c41528081ac5866bbf1a9ac765f736727a5573caff6240e77cc9362297ec0edd386bcc0232c131ef91d6a24ce83aca88bac5c7de3069e044744961ca54", 0xd2}, {&(0x7f00000012c0)="6be2b6c7fd4ac43544bc401e0db1941058053e758cc4355021488c4cda694d57284ebe5f3a9eef2799548872775061829edef5cddbc1b3cfd6cb868568711ae367a81fe5b952772e9635a852017077485c4690", 0x53}, {&(0x7f0000001340)="1259d3f5a08001c8c62aef393017c502bdeefa8d61bf89aaab9647006df620984960fcf8f073e1c07b3f7904", 0x2c}], 0x6)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000001400))
write$binfmt_script(r0, &(0x7f0000001440)={'#! ', './file0', [{0x20, '/dev/null\x00'}, {0x20, 'nl802154\x00'}, {0x20, 'wpan4\x00'}, {0x20, 'nl802154\x00'}], 0xa, "689f35f162ccd8141aa24489416a47e9bcec51dad1f27bc555dd4112ba3288cbbfcd6c3a5311a84024ec174167a9bbc20dbf892e3f33586514ab4eb6332aca9553a0734501f2412cba18e04bb28ffbc80e65caa2f1e4f630813440a7593e29ad3bb1379e612b9a8aa7556f4310701dccd9e3168b893268d898ee648b697d71c88c88b626d353fc07349c2c041b564bf669c9261dd169b942b4a125ec30624ed4a67fb9e9e698fc31e416195ed8523d62e6955ff632d94c96937951a2f9ae"}, 0xef)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001580), r1)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x80)
write$binfmt_script(r0, &(0x7f0000001680)={'#! ', './file0', [], 0xa, "e633bde5ad2c025fe25d420ff267b0c8a5284ff0792945230ca80d31e975a396bb5a3cf86d159e54637b0b03fa07dd39e2f0fe8a8cf6c83b8233ab603ab0760cdc97a7ae2cb2c5893ec5751b335839783792604fd5a624f9cecfce60dee1dc"}, 0x6a)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001700)={{0x1, 0x1, 0x18, <r5=>r0}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000001740), &(0x7f0000001780)=0x4)
mknodat(0xffffffffffffffff, &(0x7f00000017c0)='./file0\x00', 0x200, 0x6)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000001800)={0x81, 0x8})
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000001b80)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001880)={0x284, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x184, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "9b6ea5f79524431ec304c87e4e6cbdb40f6d03236a30773e"}}, @TIPC_NLA_NODE_ID={0xe7, 0x3, "5fc9b1957862c9ae61abd57beff1b2ca7e1dc560715f328994e868264748d71ba063dacfad93b54e1717d5f4a81480c71fd460ce5f1d7bd0fde0a7ae61fe5a902d5b39eeb36f06c09444644fc6f5cf41d95c7f728e906075bd1a6d3942cbaa03e1013d5a05ae2addb683dc13fc85f71b8e8e08ff890e791e859409ab719b119e127025323630acd38d2cf56cb167e3813daa9ceaa437d6be27831fdba57d3075252559cdd20aa76b6a7bf45d5bf41fc23753d51a4c9049acb3f32619ffb016b90bbc7463d183a01e1931f14ecdaf8cce11f21a5115b7639655c78dc9cb49151e446b64"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fbb638f6cae1dde4902564af2fffd127a95afcb48077"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x94}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x8000}, 0x40011)
syz_genetlink_get_family_id$nbd(&(0x7f0000001bc0), r1)

22:12:02 executing program 4:
r0 = eventfd2(0x7, 0x1)
write(r0, &(0x7f0000000000)="2e771103c9184a683a1816e4ec4a7a6c6b8f9be39c79aafcd19ead0abe0a3544baabcfb0a0fbef8af8f12c7f12a56df6c7a704668af3079eb05293ee063faa428e4291b6f05c5846666592da09a47bb341cdf8600d5fb898c527655900a2aaa1ceb93e88ba262469e12dd91f759b3bc85fef3151d6a1bc5e3876e7962c2979b96e294b4e8338f83ca467f84a5d58067f235008498035ff14295c755e0eafde8086e80b29bb214e8f2255fc10114632d5ba426dcf9780844369bd334440", 0xbd)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x157420, 0x0)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000100))
fsetxattr$security_selinux(r1, &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:smartcard_device_t:s0\x00', 0x28, 0x7771dff86b2c9c33)
fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000240), &(0x7f0000000280)={'L+', 0x8001}, 0x16, 0x2)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r2)
ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000740)={0x1bd, 0xb, &(0x7f0000000340)="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"})
getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x0, [0x691, 0x100, 0x7]}, &(0x7f0000000800)=0x44)
ioctl$HIDIOCGRAWINFO(r2, 0x80084803, &(0x7f0000000840)=""/4096)
r3 = open(&(0x7f0000001840)='./file0\x00', 0x34002, 0x0)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x28000}, 0xc, &(0x7f0000001a80)={&(0x7f00000018c0)={0x1ac, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x198, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "14cdaced1ce8952b0ccf8651fcf46c6be54f51811be7ad350620050e0bfd4893fe"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xac, 0x3, "f70d5806859e1b2a7aa27f58ba789e0990883af09cf6b22d0f2e4bb26ccc3d77c8526d715498e51b213611636928884f33193f9c533a2df956b7a7aa718638684bcbdf2aecf3166a0779904170d2c274db02dcd26a6e18697dd256468847ef6548368368ce4c545efbe0501446af40af52d175f689736edc1ded9febe6a872bc9bb781f26ca06baaaec50bd956f472eff7f895a6ba053295e2bcd5bc65f6ba4167ea9f046de8551b"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "23070a4ce870a9ff01c5178c264a16657d68366209"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "61f22eed8a0cc688f6e938710af72bd049ecd9e0c9d56ecef83c8a1f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x1ac}}, 0x8004)
write$P9_RFLUSH(r1, &(0x7f0000001b00)={0x7, 0x6d, 0x1}, 0x7)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b80), r2)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000001c40)={&(0x7f0000001b40), 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000001c80))
pipe(&(0x7f0000001cc0)={<r5=>0xffffffffffffffff})
sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}]}, 0x64}}, 0x841)

22:12:02 executing program 5:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x3)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x20}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffa4}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x20044804)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x4)
r2 = eventfd(0xfffffbff)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f00000003c0))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x5a}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x14000000}, 0x200040c5)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000540))
write$binfmt_aout(r2, &(0x7f0000000580)={{0x107, 0x7, 0x81, 0x99, 0x232, 0xc, 0x207, 0x9}, "361e927a85f2efd3010242bf19327502fa02b002759afdd82b6599fd5cb51acbc7d2b1563d61a29bc71b841c13582e98660b473ff270b8294c262ce09d6d5eeeef2aa67a1d5f0d0366f415cb933bc76a690d110a85fe912af9f3374fe33595171b31cded920bf720239d7d9a28a572cf35d6b2ec3293341a0566e6fbf638ef5f52a87e80e2c92f118f00c6bf68502689007149de9d97d0a1eed90daae8d4cf5d3865c95012881636567fce5c3188b0807ecf23da97c29fd174f732272a74", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5de)
r4 = getpid()
r5 = socket$inet6(0xa, 0x6, 0x6)
kcmp(0xffffffffffffffff, r4, 0x6, r5, r2)
ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xb9e8a)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000b80)={0x400, 0x1ff, 0xd22, 0x2, 0x8d}, 0x14)

22:12:02 executing program 6:
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @broadcast}, 0xc)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0x7, 0x3, 0x10000]}, &(0x7f00000000c0)=0x44)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x7}}, './file0\x00'})
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x87, 0x6, 0x0, 0x0, [{{}, 0x9}, {{}, 0x2c53}, {{}, 0x2}, {{}, 0x2}, {{r1}, 0x7ff}, {{}, 0x7f29b9ae}]})
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000240)={0x3, 0x9, 0x85cc}, 0xc)
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x174, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x77}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0xa0, 0x5b, "8c9679c63d796109adbc92559c24bca68f6531abfc4079123d3dd9f842b14c870290d1a0f75dd377c2359e6bc04950af8b8c623b40dfc5b281199290359e32c82190f671dbe6c15349308073052f6637d4063407c33da1dba2794effca10df5c9fbc7fe4f325a3d7d5b46b5b17d1dea7ba3e153242dcc78870bf02221564a5dd0220cbf1f71f55506936300afbdf0034743a1fa59dd8821090cf323f"}, @NL80211_ATTR_FRAME_MATCH={0x49, 0x5b, "9efeb706d90302047de8b605aad43383681ff1fe53af515d0fb19513067dc4bd940e9246c6c89bd0d057069d2c86f3ad3baf1e983bce0ed314863822a3a4757371ad9b6113"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x35, 0x5b, "288358808f09c674e03f0dd6002ff6cb22db0d7c2ed6bd81445b0ee295f1e4747059c3a917bab666c7db9161b834b80292"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x14}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xa0}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x24000000)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x801)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000005c0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x5756283cef82fd3f, {0x2, 0x4e24, @multicast2}, 'bridge0\x00'})
r2 = memfd_secret(0x0)
ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000640)=""/233)
stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e24, 0x5, 0x4e22, 0x0, 0x2, 0x80, 0x80, 0x6c, 0x0, r3}, {0x1, 0x7, 0x386f, 0x59e, 0xffff, 0x7fff, 0x7f, 0x8}, {0x8, 0x4, 0xff, 0xd32}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x6c}, 0xa, @in=@multicast1, 0x0, 0x0, 0x3, 0x8, 0x8, 0x9, 0x1}}, 0xe8)
ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x65}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000a00)=0x4)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000a40)={0x0, {}, 0x0, {}, 0xffffffff, 0x9, 0x14, 0x9, "00bd6e11e05afc4b9813a8985ed65cf18a14bc99d778b2266ba06fb5d776241b19f60df108deacb1925d604ec1fec18721dd0655b00bc20f13c6a4e6cf4b2efc", "70e520f5c2bfeb76690075146e4c9c7b1a12f8d442fc9405ef2ee12b14a05479", [0x7ff, 0xc8]})
ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000b00)=0xfff)
sendmsg$nl_xfrm(r2, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b80)=@delsa={0x1f8, 0x11, 0x800, 0x70bd2a, 0x25dfdbfb, {@in6=@mcast1, 0x4d4, 0xa, 0x32}, [@algo_comp={0xc4, 0x3, {{'deflate\x00'}, 0x3e0, "c0c3a4d71a4445d89a4e9a34b2363a90090e0327cc336b84ea199069636886e91ccd4f424811a3c3a79e833c1ff976ec30d8c46573264bf70859bbf571ac6d6a1705ac2f08b988748a6bd1ef54ade97c45ed0124aca89edb5e587dfcd83fff1f39127bacfbfbed7a9fcc5e01aed0c20eb795c0b99e0da8cd25aacf7f"}}, @algo_comp={0xea, 0x3, {{'deflate\x00'}, 0x510, "df735fd83c9ae8d5619e819c18eceb3336853d8b1addd4760eec0520e780dce941c98ef42f0e418f947b6b63de635de7d6d9e2a04c0cb30f81582ff3ddbe67a4e43dae468df2940ac54c77fdc7177c63ea6b97bedbe4c2866633a5557631f09ded4adcc591d1e306208fc4cc0a58dd4b81945d539625f12797803e9eca7a3d452eb1fa5410000372c6c286287b7a5395298d3a0cda9be3568b386c42e1480ffc6e26"}}, @srcaddr={0x14, 0xd, @in=@loopback}, @mark={0xc, 0x15, {0x35075a, 0xffffffe1}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800)
fchmod(0xffffffffffffffff, 0x108)

22:12:02 executing program 7:
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xd8, 0x29, 0x2, {0x437, [{{0x1, 0x0, 0x4}, 0x7, 0x0, 0x1, '.'}, {{0x7ebeda1ac7ad1f03, 0x4, 0x4}, 0xfffffffffffffffb, 0xe1, 0x1, '.'}, {{0x4, 0x1, 0x7}, 0xae, 0x1, 0x7, './file0'}, {{0x40, 0x2, 0x2}, 0x4, 0x2f, 0x7, './file0'}, {{0x1, 0x3, 0x9}, 0x1, 0x8, 0x7, './file0'}, {{0x20, 0x4, 0x6}, 0x8001, 0x3f, 0x7, './file0'}, {{0x1, 0x0, 0x3}, 0x20, 0x3, 0x7, './file0'}]}}, 0xd8)
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000100))
r0 = fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0)
write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file1', [{}], 0xa, "b770eed4149e0f65d3a64c9c523b0724ca1827ae79b0e9fb30fc19e0e44ac8513cd20c3384446ea281203a9c4d1116ce59c1de61170ead0c60e2fa89c31a62a974d711fd60e6632cb68d9f0ae7e62ae374515f81fa75fe880f56f1470c159610252547f36f8c219a21d86dd696a9d826bc8de44fd3d9"}, 0x82)
r1 = syz_open_dev$vcsu(&(0x7f0000000240), 0x6, 0x0)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000280)=0x1)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000300)=0xfffffffffffffff8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2000, @fd_index=0x8, 0x81, 0x401, 0x6, 0x8, 0x1, {0x1}}, 0x55)
fcntl$getownex(r3, 0x10, &(0x7f0000000380))
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000003c0)="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")
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000004c0)={r1, 0x6, 0xdb9b, 0x3})
pipe2(&(0x7f0000000500)={<r5=>0xffffffffffffffff}, 0x40000)
sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6ed5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x90fc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x64d8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffff9}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x4044040}, 0x8)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0)
sendmsg$AUDIT_ADD_RULE(r6, &(0x7f0000000bc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000740)={0x43c, 0x3f3, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x2, 0x0, [0x3, 0x400, 0x6, 0x8, 0x87ec, 0x7ff, 0x6, 0x0, 0x7, 0x1, 0x0, 0x0, 0x7fff, 0x0, 0xffffffff, 0x8, 0x5, 0x1, 0x3, 0xa9fe, 0x2451, 0x6b, 0xffffffff, 0xe74, 0xdec0, 0x81, 0x5, 0x7fffffff, 0x10e3d89c, 0x100, 0x54bc, 0x10000, 0x2, 0x9, 0x400, 0x800, 0x2, 0x1, 0xfffff022, 0x0, 0x3, 0xc02, 0xb90f, 0x6, 0x6e, 0x1ff, 0x2, 0x8, 0x7, 0x2, 0x6577, 0x2, 0xffffffff, 0x7fffffff, 0x60000000, 0x8001, 0xf09, 0x80, 0x4, 0x1, 0xffffffff, 0x1, 0x6, 0x10001], [0xef0, 0x80000001, 0x80000001, 0x80, 0x6, 0x664, 0x3, 0x81, 0x7fffffff, 0x1, 0x9, 0x200, 0x7f, 0x2, 0x5, 0xff, 0x8000, 0x7f, 0x5, 0xc7, 0x3, 0xfffffff9, 0x200, 0x2, 0x7, 0x0, 0x83f9, 0x0, 0x3, 0x1, 0x62, 0x7, 0x3, 0x3, 0xfffffffa, 0x0, 0x96b9, 0x8, 0x8, 0x8, 0x2, 0x1, 0xfffffffd, 0x401, 0x6, 0x3, 0xffffffff, 0x100, 0xfff, 0x3, 0xf41b, 0x5, 0x7, 0x6, 0x4000000, 0x81, 0xdd3, 0x8000, 0xaf, 0x20, 0x4, 0x8, 0x7ff, 0x10000], [0x4, 0xfb5, 0x2, 0x1, 0x9b02, 0x3, 0x9, 0x2, 0x1f, 0x1f, 0x10001, 0x2, 0x5476, 0x80000001, 0x3ff, 0x4, 0x1, 0x1, 0xbb4, 0x3, 0x9, 0x1ff, 0x1, 0x100, 0x1, 0xfffffffc, 0x0, 0x7, 0x0, 0x3, 0x236, 0x9, 0x0, 0x10000, 0x401, 0x44, 0xcd, 0x4, 0x800, 0x0, 0xfffffffa, 0x3, 0x1ff, 0x9, 0x7ff, 0x5, 0xe8f3, 0x64, 0x7f, 0x40, 0xc98, 0x1, 0x1, 0x7f, 0x252, 0x478, 0x7fffffff, 0x6, 0x1000000, 0x7fffffff, 0xfc, 0xec, 0xdd, 0x5], [0x1, 0x9, 0xa9, 0x6, 0x0, 0x43, 0x6, 0x2, 0x4, 0x4, 0x7fffffff, 0xde, 0x2, 0x101, 0x7, 0x8, 0x70b, 0x1f, 0x1ff, 0x1, 0x7f, 0xfffffffd, 0x7, 0x1, 0x2, 0x0, 0x4, 0x4, 0x3, 0x7fffffff, 0x3f, 0x8001, 0x1, 0x2, 0x8, 0x10001, 0x400, 0x7, 0x1, 0x81, 0x2, 0xffff, 0x5c, 0x8, 0x8, 0xffffffe0, 0x3, 0x4, 0x8, 0x6, 0x9, 0x5, 0x7f, 0x7fff, 0xdcb5, 0x1ff, 0x800, 0x6, 0x5, 0x10001, 0x3, 0x6, 0x5, 0x8], 0x1c, ['\x00', '\x00', '#! ', '[,.@[[@+]&{\x00', '#! ', '@\xec$)&{}\x00']}, ["", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000c00))
r7 = accept4$inet6(r6, &(0x7f0000000c40)={0xa, 0x0, 0x0, @local}, &(0x7f0000000c80)=0x1c, 0x80000)
ioctl$FIONCLEX(r7, 0x5450)

[  130.324387] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  130.331383] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  130.336436] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  130.345200] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  130.352886] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  130.381387] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  130.387090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  130.406807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  130.421230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  130.434028] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  130.434933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  130.443771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  130.452145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  130.474090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  130.481099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  130.543005] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  130.561845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  130.564414] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  130.577776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  130.583159] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  130.583341] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  130.587314] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  130.588389] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  130.594227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  130.597863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  130.602040] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  130.615177] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  130.636759] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  130.648050] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  130.649681] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  130.659919] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  130.668758] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  130.684474] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  130.685068] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  130.700684] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  130.704111] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  130.713177] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  130.718089] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  130.726875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  130.762039] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  132.401239] Bluetooth: hci0: command tx timeout
[  132.464389] Bluetooth: hci1: command tx timeout
[  132.528640] Bluetooth: hci2: command tx timeout
[  132.719688] Bluetooth: hci5: command tx timeout
[  132.720474] Bluetooth: hci3: command tx timeout
[  132.784849] Bluetooth: hci7: command tx timeout
[  132.785069] Bluetooth: hci4: command tx timeout
[  132.848643] Bluetooth: hci6: command tx timeout
[  134.447720] Bluetooth: hci0: command tx timeout
[  134.512710] Bluetooth: hci1: command tx timeout
[  134.576699] Bluetooth: hci2: command tx timeout
[  134.768307] Bluetooth: hci3: command tx timeout
[  134.768441] Bluetooth: hci5: command tx timeout
[  134.831663] Bluetooth: hci7: command tx timeout
[  134.831744] Bluetooth: hci4: command tx timeout
[  134.895709] Bluetooth: hci6: command tx timeout
[  136.496825] Bluetooth: hci0: command tx timeout
[  136.561597] Bluetooth: hci1: command tx timeout
[  136.624794] Bluetooth: hci2: command tx timeout
[  136.817764] Bluetooth: hci5: command tx timeout
[  136.818240] Bluetooth: hci3: command tx timeout
[  136.879692] Bluetooth: hci4: command tx timeout
[  136.880143] Bluetooth: hci7: command tx timeout
[  136.947612] Bluetooth: hci6: command tx timeout
[  138.544751] Bluetooth: hci0: command tx timeout
[  138.607997] Bluetooth: hci1: command tx timeout
[  138.672623] Bluetooth: hci2: command tx timeout
[  138.863881] Bluetooth: hci5: command tx timeout
[  138.865173] Bluetooth: hci3: command tx timeout
[  138.928714] Bluetooth: hci7: command tx timeout
[  138.929167] Bluetooth: hci4: command tx timeout
[  138.991699] Bluetooth: hci6: command tx timeout
[  193.031528] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  193.038161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  193.041170] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  193.051415] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  193.055316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  193.219537] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  193.226973] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  193.228345] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  193.230411] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  193.232864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  193.240788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  193.242870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  193.247273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  193.279105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  193.316311] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  193.319822] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  193.321433] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  193.329818] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  193.330480] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  193.334262] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  193.343261] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  193.348961] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  193.366854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  193.384448] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  193.389006] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  193.397308] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  193.413495] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  193.418292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  193.421166] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  193.437145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  193.440384] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  193.452089] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  193.459783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  193.462540] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  193.466452] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  193.487047] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  193.487234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  193.503267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  193.505030] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  193.518366] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  195.119807] Bluetooth: hci0: command tx timeout
[  195.312066] Bluetooth: hci1: command tx timeout
[  195.439770] Bluetooth: hci2: command tx timeout
[  195.503643] Bluetooth: hci6: command tx timeout
[  195.567984] Bluetooth: hci5: command tx timeout
[  195.568927] Bluetooth: hci7: command tx timeout
[  195.633206] Bluetooth: hci4: command tx timeout
[  195.634980] Bluetooth: hci3: command tx timeout
[  197.167633] Bluetooth: hci0: command tx timeout
[  197.359681] Bluetooth: hci1: command tx timeout
[  197.487819] Bluetooth: hci2: command tx timeout
[  197.551833] Bluetooth: hci6: command tx timeout
[  197.615830] Bluetooth: hci5: command tx timeout
[  197.616288] Bluetooth: hci7: command tx timeout
[  197.679825] Bluetooth: hci3: command tx timeout
[  197.680442] Bluetooth: hci4: command tx timeout
[  199.216620] Bluetooth: hci0: command tx timeout
[  199.407823] Bluetooth: hci1: command tx timeout
[  199.535648] Bluetooth: hci2: command tx timeout
[  199.599779] Bluetooth: hci6: command tx timeout
[  199.663714] Bluetooth: hci5: command tx timeout
[  199.664261] Bluetooth: hci7: command tx timeout
[  199.727658] Bluetooth: hci3: command tx timeout
[  199.728204] Bluetooth: hci4: command tx timeout
[  201.263679] Bluetooth: hci0: command tx timeout
[  201.456980] Bluetooth: hci1: command tx timeout
[  201.583688] Bluetooth: hci2: command tx timeout
[  201.647644] Bluetooth: hci6: command tx timeout
[  201.712124] Bluetooth: hci5: command tx timeout
[  201.713689] Bluetooth: hci7: command tx timeout
[  201.775650] Bluetooth: hci4: command tx timeout
[  201.776127] Bluetooth: hci3: command tx timeout
[  255.235958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  255.239293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  255.244182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  255.256957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  255.261264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  255.499441] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  255.504925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  255.511767] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  255.523232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  255.531159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  255.538733] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  255.543724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  255.547812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  255.586928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  255.590093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  255.594234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  255.597014] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  255.602494] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  255.631187] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  255.651494] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  255.659104] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  255.661696] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  255.680020] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  255.682990] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  255.697437] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  255.700525] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  255.708988] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  255.715480] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  255.727833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  255.734149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  255.739209] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  255.745954] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  255.751740] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  255.758837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  255.772090] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  255.786054] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  255.800993] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  255.836263] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  255.866825] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  255.868141] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  257.327929] Bluetooth: hci0: command tx timeout
[  257.584647] Bluetooth: hci1: command tx timeout
[  257.712032] Bluetooth: hci2: command tx timeout
[  257.776245] Bluetooth: hci3: command tx timeout
[  257.840230] Bluetooth: hci5: command tx timeout
[  257.904102] Bluetooth: hci4: command tx timeout
[  257.968650] Bluetooth: hci7: command tx timeout
[  257.969351] Bluetooth: hci6: command tx timeout
[  259.377788] Bluetooth: hci0: command tx timeout
[  259.631708] Bluetooth: hci1: command tx timeout
[  259.761710] Bluetooth: hci2: command tx timeout
[  259.823664] Bluetooth: hci3: command tx timeout
[  259.887785] Bluetooth: hci5: command tx timeout
[  259.951857] Bluetooth: hci4: command tx timeout
[  260.015878] Bluetooth: hci7: command tx timeout
[  260.015906] Bluetooth: hci6: command tx timeout
[  261.423676] Bluetooth: hci0: command tx timeout
[  261.679658] Bluetooth: hci1: command tx timeout
[  261.807808] Bluetooth: hci2: command tx timeout
[  261.871644] Bluetooth: hci3: command tx timeout
[  261.937642] Bluetooth: hci5: command tx timeout
[  261.999912] Bluetooth: hci4: command tx timeout
[  262.063664] Bluetooth: hci6: command tx timeout
[  262.063955] Bluetooth: hci7: command tx timeout
[  263.471908] Bluetooth: hci0: command tx timeout
[  263.727649] Bluetooth: hci1: command tx timeout
[  263.855802] Bluetooth: hci2: command tx timeout
[  263.919690] Bluetooth: hci3: command tx timeout
[  263.984647] Bluetooth: hci5: command tx timeout
[  264.047806] Bluetooth: hci4: command tx timeout
[  264.111723] Bluetooth: hci7: command tx timeout
[  264.111859] Bluetooth: hci6: command tx timeout
[  318.094705] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  318.098658] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  318.101491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  318.116874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  318.123253] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  318.172326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  318.181139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  318.183920] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  318.199844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  318.217771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  318.292225] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  318.299129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  318.314196] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  318.338604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  318.343287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  318.348187] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  318.354162] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  318.356484] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  318.393177] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  318.400336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  318.476420] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  318.482707] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  318.485470] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  318.487588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  318.496389] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  318.514864] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  318.522279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  318.552860] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  318.564361] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  318.592896] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  318.844236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  318.879142] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  318.894283] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  318.900344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  318.920979] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  318.920987] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  318.951354] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  318.988347] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  318.990497] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  319.010173] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  320.175723] Bluetooth: hci0: command tx timeout
[  320.303892] Bluetooth: hci1: command tx timeout
[  320.559942] Bluetooth: hci3: command tx timeout
[  320.559978] Bluetooth: hci2: command tx timeout
[  320.624841] Bluetooth: hci4: command tx timeout
[  320.687728] Bluetooth: hci6: command tx timeout
[  321.073160] Bluetooth: hci5: command tx timeout
[  321.135701] Bluetooth: hci7: command tx timeout
[  322.223937] Bluetooth: hci0: command tx timeout
[  322.351676] Bluetooth: hci1: command tx timeout
[  322.607764] Bluetooth: hci2: command tx timeout
[  322.607846] Bluetooth: hci3: command tx timeout
[  322.671928] Bluetooth: hci4: command tx timeout
[  322.735667] Bluetooth: hci6: command tx timeout
[  323.119932] Bluetooth: hci5: command tx timeout
[  323.183655] Bluetooth: hci7: command tx timeout
[  324.271648] Bluetooth: hci0: command tx timeout
[  324.399838] Bluetooth: hci1: command tx timeout
[  324.655657] Bluetooth: hci3: command tx timeout
[  324.655714] Bluetooth: hci2: command tx timeout
[  324.721908] Bluetooth: hci4: command tx timeout
[  324.785612] Bluetooth: hci6: command tx timeout
[  325.168805] Bluetooth: hci5: command tx timeout
[  325.231811] Bluetooth: hci7: command tx timeout
[  326.320987] Bluetooth: hci0: command tx timeout
[  326.448729] Bluetooth: hci1: command tx timeout
[  326.703725] Bluetooth: hci2: command tx timeout
[  326.704648] Bluetooth: hci3: command tx timeout
[  326.768923] Bluetooth: hci4: command tx timeout
[  326.832617] Bluetooth: hci6: command tx timeout
[  327.216009] Bluetooth: hci5: command tx timeout
[  327.280183] Bluetooth: hci7: command tx timeout
[  380.744347] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  380.751613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  380.759239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  380.768300] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  380.776655] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  381.058826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  381.066169] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  381.068532] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  381.079863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  381.083337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  381.130284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  381.134199] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  381.143957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  381.156163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  381.160001] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  381.172843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  381.176039] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  381.178083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  381.194131] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  381.202428] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  381.223009] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  381.249430] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  381.253299] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  381.257646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  381.263610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  381.274511] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  381.282785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  381.299996] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  381.327358] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  381.331005] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  381.340724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  381.340914] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  381.346227] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  381.359828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  381.365959] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  381.534867] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  381.576180] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  381.587335] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  381.622110] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  381.642135] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  382.832790] Bluetooth: hci0: command tx timeout
[  383.151833] Bluetooth: hci1: command tx timeout
[  383.279943] Bluetooth: hci3: command tx timeout
[  383.343657] Bluetooth: hci5: command tx timeout
[  383.408816] Bluetooth: hci6: command tx timeout
[  383.408961] Bluetooth: hci4: command tx timeout
[  383.535896] Bluetooth: hci2: command tx timeout
[  383.727640] Bluetooth: hci7: command tx timeout
[  384.879708] Bluetooth: hci0: command tx timeout
[  385.201634] Bluetooth: hci1: command tx timeout
[  385.327677] Bluetooth: hci3: command tx timeout
[  385.392638] Bluetooth: hci5: command tx timeout
[  385.456634] Bluetooth: hci6: command tx timeout
[  385.457399] Bluetooth: hci4: command tx timeout
[  385.583669] Bluetooth: hci2: command tx timeout
[  385.775695] Bluetooth: hci7: command tx timeout
[  386.927719] Bluetooth: hci0: command tx timeout
[  387.248112] Bluetooth: hci1: command tx timeout
[  387.376639] Bluetooth: hci3: command tx timeout
[  387.439809] Bluetooth: hci5: command tx timeout
[  387.504235] Bluetooth: hci6: command tx timeout
[  387.504321] Bluetooth: hci4: command tx timeout
[  387.632011] Bluetooth: hci2: command tx timeout
[  387.823801] Bluetooth: hci7: command tx timeout
[  388.976628] Bluetooth: hci0: command tx timeout
[  389.295926] Bluetooth: hci1: command tx timeout
[  389.424883] Bluetooth: hci3: command tx timeout
[  389.488609] Bluetooth: hci5: command tx timeout
[  389.551900] Bluetooth: hci6: command tx timeout
[  389.552031] Bluetooth: hci4: command tx timeout
[  389.681649] Bluetooth: hci2: command tx timeout
[  389.871878] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
22:17:09  Registers:
info registers vcpu 0
RAX=1ffffffff0cf959c RBX=0000000000000001 RCX=ffffffff867cace0 RDX=0000000000000000
RSI=dffffc0000000000 RDI=ffff888031eef950 RBP=ffff888031eef940 RSP=ffff888031eef878
R8 =ffffffff867cace4 R9 =ffff888031eef928 R10=000000000003b6cd R11=00000000000083e9
R12=ffff888031eef948 R13=ffff888031eef930 R14=ffff888031eeff28 R15=ffff888031eef8e8
RIP=ffffffff813549e4 RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe5800000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbc9640a8e0 CR3=000000002e619000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff
XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f
XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=00000000ffffffff RBX=0000000000000000 RCX=bb78a0a99f9f6285 RDX=000000003eaa577b
RSI=0000000051ddd71a RDI=0000000008e55218 RBP=ffffffff85c1cbc0 RSP=ffff8880385ffdf8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200
RIP=ffffffff8151b247 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f1c6aac3540 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe0e00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1c6aafd0dc CR3=0000000035dbf000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000000000000000ff000000 XMM01=00000000000000000000000000ffffff
XMM02=00362e322e325f4342494c4700352e32 XMM03=00000000000000000000004700352e32
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000