Warning: Permanently added '[localhost]:20763' (ECDSA) to the list of known hosts.
2023/02/27 00:08:32 fuzzer started
2023/02/27 00:08:32 dialing manager at localhost:41417
syzkaller login: [   35.188233] cgroup: Unknown subsys name 'net'
[   35.318703] cgroup: Unknown subsys name 'rlimit'
2023/02/27 00:08:45 syscalls: 2217
2023/02/27 00:08:45 code coverage: enabled
2023/02/27 00:08:45 comparison tracing: enabled
2023/02/27 00:08:45 extra coverage: enabled
2023/02/27 00:08:45 setuid sandbox: enabled
2023/02/27 00:08:45 namespace sandbox: enabled
2023/02/27 00:08:45 Android sandbox: enabled
2023/02/27 00:08:45 fault injection: enabled
2023/02/27 00:08:45 leak checking: enabled
2023/02/27 00:08:45 net packet injection: enabled
2023/02/27 00:08:45 net device setup: enabled
2023/02/27 00:08:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2023/02/27 00:08:45 devlink PCI setup: PCI device 0000:00:10.0 is not available
2023/02/27 00:08:45 USB emulation: enabled
2023/02/27 00:08:45 hci packet injection: enabled
2023/02/27 00:08:45 wifi device emulation: enabled
2023/02/27 00:08:45 802.15.4 emulation: enabled
2023/02/27 00:08:45 fetching corpus: 50, signal 19247/21162 (executing program)
2023/02/27 00:08:46 fetching corpus: 100, signal 34246/37935 (executing program)
2023/02/27 00:08:46 fetching corpus: 150, signal 47556/52894 (executing program)
2023/02/27 00:08:46 fetching corpus: 200, signal 55563/62540 (executing program)
2023/02/27 00:08:46 fetching corpus: 250, signal 65041/73463 (executing program)
2023/02/27 00:08:46 fetching corpus: 300, signal 72789/82662 (executing program)
2023/02/27 00:08:46 fetching corpus: 350, signal 80399/91683 (executing program)
2023/02/27 00:08:46 fetching corpus: 400, signal 89276/101872 (executing program)
2023/02/27 00:08:46 fetching corpus: 450, signal 96530/110396 (executing program)
2023/02/27 00:08:47 fetching corpus: 500, signal 100139/115359 (executing program)
2023/02/27 00:08:47 fetching corpus: 550, signal 104651/121141 (executing program)
2023/02/27 00:08:47 fetching corpus: 600, signal 108151/125925 (executing program)
2023/02/27 00:08:47 fetching corpus: 650, signal 112775/131719 (executing program)
2023/02/27 00:08:47 fetching corpus: 700, signal 115898/136072 (executing program)
2023/02/27 00:08:47 fetching corpus: 750, signal 119564/140858 (executing program)
2023/02/27 00:08:47 fetching corpus: 800, signal 123440/145865 (executing program)
2023/02/27 00:08:47 fetching corpus: 850, signal 127899/151362 (executing program)
2023/02/27 00:08:48 fetching corpus: 900, signal 130118/154775 (executing program)
2023/02/27 00:08:48 fetching corpus: 950, signal 133500/159267 (executing program)
2023/02/27 00:08:48 fetching corpus: 1000, signal 137687/164401 (executing program)
2023/02/27 00:08:48 fetching corpus: 1050, signal 140808/168562 (executing program)
2023/02/27 00:08:48 fetching corpus: 1100, signal 143876/172608 (executing program)
2023/02/27 00:08:48 fetching corpus: 1150, signal 146095/175926 (executing program)
2023/02/27 00:08:48 fetching corpus: 1200, signal 147816/178752 (executing program)
2023/02/27 00:08:48 fetching corpus: 1250, signal 150105/182046 (executing program)
2023/02/27 00:08:49 fetching corpus: 1300, signal 152144/185140 (executing program)
2023/02/27 00:08:49 fetching corpus: 1350, signal 153702/187788 (executing program)
2023/02/27 00:08:49 fetching corpus: 1400, signal 155417/190513 (executing program)
2023/02/27 00:08:49 fetching corpus: 1450, signal 157568/193614 (executing program)
2023/02/27 00:08:49 fetching corpus: 1500, signal 159671/196640 (executing program)
2023/02/27 00:08:49 fetching corpus: 1550, signal 161194/199172 (executing program)
2023/02/27 00:08:49 fetching corpus: 1600, signal 162727/201691 (executing program)
2023/02/27 00:08:49 fetching corpus: 1650, signal 163833/203858 (executing program)
2023/02/27 00:08:50 fetching corpus: 1700, signal 165187/206213 (executing program)
2023/02/27 00:08:50 fetching corpus: 1750, signal 166071/208160 (executing program)
2023/02/27 00:08:50 fetching corpus: 1800, signal 168106/211054 (executing program)
2023/02/27 00:08:50 fetching corpus: 1850, signal 169740/213610 (executing program)
2023/02/27 00:08:50 fetching corpus: 1900, signal 171301/216052 (executing program)
2023/02/27 00:08:50 fetching corpus: 1950, signal 172630/218307 (executing program)
2023/02/27 00:08:50 fetching corpus: 2000, signal 174617/221042 (executing program)
2023/02/27 00:08:51 fetching corpus: 2050, signal 176900/224060 (executing program)
2023/02/27 00:08:51 fetching corpus: 2100, signal 178442/226476 (executing program)
2023/02/27 00:08:51 fetching corpus: 2150, signal 179608/228531 (executing program)
2023/02/27 00:08:51 fetching corpus: 2200, signal 181114/230868 (executing program)
2023/02/27 00:08:51 fetching corpus: 2250, signal 183075/233507 (executing program)
2023/02/27 00:08:51 fetching corpus: 2300, signal 184306/235607 (executing program)
2023/02/27 00:08:51 fetching corpus: 2350, signal 185422/237564 (executing program)
2023/02/27 00:08:52 fetching corpus: 2400, signal 186835/239767 (executing program)
2023/02/27 00:08:52 fetching corpus: 2450, signal 188532/242161 (executing program)
2023/02/27 00:08:52 fetching corpus: 2500, signal 189399/243941 (executing program)
2023/02/27 00:08:52 fetching corpus: 2550, signal 190805/246075 (executing program)
2023/02/27 00:08:52 fetching corpus: 2600, signal 191827/247926 (executing program)
2023/02/27 00:08:52 fetching corpus: 2650, signal 192858/249789 (executing program)
2023/02/27 00:08:52 fetching corpus: 2700, signal 193974/251749 (executing program)
2023/02/27 00:08:53 fetching corpus: 2750, signal 194977/253526 (executing program)
2023/02/27 00:08:53 fetching corpus: 2800, signal 196108/255431 (executing program)
2023/02/27 00:08:53 fetching corpus: 2850, signal 197236/257296 (executing program)
2023/02/27 00:08:53 fetching corpus: 2900, signal 198244/259077 (executing program)
2023/02/27 00:08:53 fetching corpus: 2950, signal 199193/260797 (executing program)
2023/02/27 00:08:53 fetching corpus: 3000, signal 200107/262513 (executing program)
2023/02/27 00:08:53 fetching corpus: 3050, signal 201132/264272 (executing program)
2023/02/27 00:08:53 fetching corpus: 3100, signal 202065/265955 (executing program)
2023/02/27 00:08:54 fetching corpus: 3150, signal 203069/267692 (executing program)
2023/02/27 00:08:54 fetching corpus: 3200, signal 203986/269356 (executing program)
2023/02/27 00:08:54 fetching corpus: 3250, signal 204700/270849 (executing program)
2023/02/27 00:08:54 fetching corpus: 3300, signal 205754/272580 (executing program)
2023/02/27 00:08:54 fetching corpus: 3350, signal 206663/274221 (executing program)
2023/02/27 00:08:54 fetching corpus: 3400, signal 207792/276010 (executing program)
2023/02/27 00:08:54 fetching corpus: 3450, signal 208834/277666 (executing program)
2023/02/27 00:08:54 fetching corpus: 3500, signal 209647/279171 (executing program)
2023/02/27 00:08:54 fetching corpus: 3550, signal 210599/280791 (executing program)
2023/02/27 00:08:55 fetching corpus: 3600, signal 211582/282411 (executing program)
2023/02/27 00:08:55 fetching corpus: 3650, signal 213301/284473 (executing program)
2023/02/27 00:08:55 fetching corpus: 3700, signal 214057/285955 (executing program)
2023/02/27 00:08:55 fetching corpus: 3750, signal 215010/287521 (executing program)
2023/02/27 00:08:55 fetching corpus: 3800, signal 215529/288857 (executing program)
2023/02/27 00:08:55 fetching corpus: 3850, signal 216395/290370 (executing program)
2023/02/27 00:08:55 fetching corpus: 3900, signal 217035/291681 (executing program)
2023/02/27 00:08:55 fetching corpus: 3950, signal 218001/293221 (executing program)
2023/02/27 00:08:56 fetching corpus: 4000, signal 218595/294542 (executing program)
2023/02/27 00:08:56 fetching corpus: 4050, signal 219541/296035 (executing program)
2023/02/27 00:08:56 fetching corpus: 4100, signal 220386/297449 (executing program)
2023/02/27 00:08:56 fetching corpus: 4150, signal 221369/298916 (executing program)
2023/02/27 00:08:56 fetching corpus: 4200, signal 222135/300292 (executing program)
2023/02/27 00:08:56 fetching corpus: 4250, signal 222867/301689 (executing program)
2023/02/27 00:08:56 fetching corpus: 4300, signal 223560/303041 (executing program)
2023/02/27 00:08:56 fetching corpus: 4350, signal 224143/304283 (executing program)
2023/02/27 00:08:56 fetching corpus: 4400, signal 225217/305799 (executing program)
2023/02/27 00:08:57 fetching corpus: 4450, signal 225941/307116 (executing program)
2023/02/27 00:08:57 fetching corpus: 4500, signal 226714/308475 (executing program)
2023/02/27 00:08:57 fetching corpus: 4550, signal 227241/309655 (executing program)
2023/02/27 00:08:57 fetching corpus: 4600, signal 227971/310981 (executing program)
2023/02/27 00:08:57 fetching corpus: 4650, signal 228662/312321 (executing program)
2023/02/27 00:08:57 fetching corpus: 4700, signal 229564/313732 (executing program)
2023/02/27 00:08:57 fetching corpus: 4750, signal 230374/315089 (executing program)
2023/02/27 00:08:57 fetching corpus: 4800, signal 231043/316373 (executing program)
2023/02/27 00:08:58 fetching corpus: 4850, signal 231698/317584 (executing program)
2023/02/27 00:08:58 fetching corpus: 4900, signal 232223/318779 (executing program)
2023/02/27 00:08:58 fetching corpus: 4950, signal 233203/320141 (executing program)
2023/02/27 00:08:58 fetching corpus: 5000, signal 234067/321505 (executing program)
2023/02/27 00:08:58 fetching corpus: 5050, signal 234804/322734 (executing program)
2023/02/27 00:08:58 fetching corpus: 5100, signal 235579/324002 (executing program)
2023/02/27 00:08:59 fetching corpus: 5150, signal 236353/325288 (executing program)
2023/02/27 00:08:59 fetching corpus: 5200, signal 237093/326503 (executing program)
2023/02/27 00:08:59 fetching corpus: 5250, signal 237936/327726 (executing program)
2023/02/27 00:08:59 fetching corpus: 5300, signal 238734/328935 (executing program)
2023/02/27 00:08:59 fetching corpus: 5350, signal 239542/330188 (executing program)
2023/02/27 00:08:59 fetching corpus: 5400, signal 240127/331296 (executing program)
2023/02/27 00:08:59 fetching corpus: 5450, signal 240792/332440 (executing program)
2023/02/27 00:08:59 fetching corpus: 5500, signal 241315/333537 (executing program)
2023/02/27 00:09:00 fetching corpus: 5550, signal 242038/334702 (executing program)
2023/02/27 00:09:00 fetching corpus: 5600, signal 242684/335833 (executing program)
2023/02/27 00:09:00 fetching corpus: 5650, signal 243278/336979 (executing program)
2023/02/27 00:09:00 fetching corpus: 5700, signal 243675/337998 (executing program)
2023/02/27 00:09:00 fetching corpus: 5750, signal 244300/339132 (executing program)
2023/02/27 00:09:00 fetching corpus: 5800, signal 245057/340306 (executing program)
2023/02/27 00:09:00 fetching corpus: 5850, signal 245917/341516 (executing program)
2023/02/27 00:09:00 fetching corpus: 5900, signal 246531/342602 (executing program)
2023/02/27 00:09:01 fetching corpus: 5950, signal 246942/343583 (executing program)
2023/02/27 00:09:01 fetching corpus: 6000, signal 247538/344622 (executing program)
2023/02/27 00:09:01 fetching corpus: 6050, signal 248002/345632 (executing program)
2023/02/27 00:09:01 fetching corpus: 6100, signal 248445/346609 (executing program)
2023/02/27 00:09:01 fetching corpus: 6150, signal 248883/347562 (executing program)
2023/02/27 00:09:01 fetching corpus: 6200, signal 249494/348587 (executing program)
2023/02/27 00:09:01 fetching corpus: 6250, signal 250318/349734 (executing program)
2023/02/27 00:09:01 fetching corpus: 6300, signal 250851/350736 (executing program)
2023/02/27 00:09:02 fetching corpus: 6350, signal 251574/351820 (executing program)
2023/02/27 00:09:02 fetching corpus: 6400, signal 252180/352788 (executing program)
2023/02/27 00:09:02 fetching corpus: 6450, signal 252669/353799 (executing program)
2023/02/27 00:09:02 fetching corpus: 6500, signal 253318/354830 (executing program)
2023/02/27 00:09:02 fetching corpus: 6550, signal 253912/355835 (executing program)
2023/02/27 00:09:02 fetching corpus: 6600, signal 254398/356797 (executing program)
2023/02/27 00:09:02 fetching corpus: 6650, signal 254962/357755 (executing program)
2023/02/27 00:09:02 fetching corpus: 6700, signal 255444/358690 (executing program)
2023/02/27 00:09:02 fetching corpus: 6750, signal 255861/359589 (executing program)
2023/02/27 00:09:02 fetching corpus: 6800, signal 256203/360491 (executing program)
2023/02/27 00:09:03 fetching corpus: 6850, signal 256755/361426 (executing program)
2023/02/27 00:09:03 fetching corpus: 6900, signal 257234/362330 (executing program)
2023/02/27 00:09:03 fetching corpus: 6950, signal 258088/363391 (executing program)
2023/02/27 00:09:03 fetching corpus: 7000, signal 258568/364275 (executing program)
2023/02/27 00:09:03 fetching corpus: 7050, signal 259132/365219 (executing program)
2023/02/27 00:09:03 fetching corpus: 7100, signal 259480/366055 (executing program)
2023/02/27 00:09:03 fetching corpus: 7150, signal 259990/366963 (executing program)
2023/02/27 00:09:03 fetching corpus: 7200, signal 260570/367878 (executing program)
2023/02/27 00:09:04 fetching corpus: 7250, signal 260914/368750 (executing program)
2023/02/27 00:09:04 fetching corpus: 7300, signal 261267/369614 (executing program)
2023/02/27 00:09:04 fetching corpus: 7350, signal 261827/370524 (executing program)
2023/02/27 00:09:04 fetching corpus: 7400, signal 262247/371388 (executing program)
2023/02/27 00:09:04 fetching corpus: 7450, signal 262868/372285 (executing program)
2023/02/27 00:09:04 fetching corpus: 7500, signal 263265/373136 (executing program)
2023/02/27 00:09:04 fetching corpus: 7550, signal 263688/373981 (executing program)
2023/02/27 00:09:04 fetching corpus: 7600, signal 264149/374784 (executing program)
2023/02/27 00:09:05 fetching corpus: 7650, signal 264592/375635 (executing program)
2023/02/27 00:09:05 fetching corpus: 7700, signal 265128/376515 (executing program)
2023/02/27 00:09:05 fetching corpus: 7750, signal 265467/377330 (executing program)
2023/02/27 00:09:05 fetching corpus: 7800, signal 265957/378214 (executing program)
2023/02/27 00:09:05 fetching corpus: 7850, signal 266315/379060 (executing program)
2023/02/27 00:09:05 fetching corpus: 7900, signal 266911/379972 (executing program)
2023/02/27 00:09:05 fetching corpus: 7950, signal 267352/380794 (executing program)
2023/02/27 00:09:05 fetching corpus: 8000, signal 267675/381612 (executing program)
2023/02/27 00:09:06 fetching corpus: 8050, signal 268005/382402 (executing program)
2023/02/27 00:09:06 fetching corpus: 8100, signal 268496/383148 (executing program)
2023/02/27 00:09:06 fetching corpus: 8150, signal 268873/383954 (executing program)
2023/02/27 00:09:06 fetching corpus: 8200, signal 269400/384801 (executing program)
2023/02/27 00:09:06 fetching corpus: 8250, signal 269728/385595 (executing program)
2023/02/27 00:09:06 fetching corpus: 8300, signal 270143/386398 (executing program)
2023/02/27 00:09:06 fetching corpus: 8350, signal 270516/387180 (executing program)
2023/02/27 00:09:06 fetching corpus: 8400, signal 270829/387895 (executing program)
2023/02/27 00:09:06 fetching corpus: 8450, signal 271264/388680 (executing program)
2023/02/27 00:09:07 fetching corpus: 8500, signal 271757/389490 (executing program)
2023/02/27 00:09:07 fetching corpus: 8550, signal 272407/390310 (executing program)
2023/02/27 00:09:07 fetching corpus: 8600, signal 272809/391084 (executing program)
2023/02/27 00:09:07 fetching corpus: 8650, signal 273178/391830 (executing program)
2023/02/27 00:09:07 fetching corpus: 8700, signal 273545/392560 (executing program)
2023/02/27 00:09:07 fetching corpus: 8750, signal 273974/393290 (executing program)
2023/02/27 00:09:07 fetching corpus: 8800, signal 274384/394015 (executing program)
2023/02/27 00:09:07 fetching corpus: 8850, signal 274931/394770 (executing program)
2023/02/27 00:09:08 fetching corpus: 8900, signal 275259/395501 (executing program)
2023/02/27 00:09:08 fetching corpus: 8950, signal 275650/396211 (executing program)
2023/02/27 00:09:08 fetching corpus: 9000, signal 275957/396936 (executing program)
2023/02/27 00:09:08 fetching corpus: 9050, signal 276288/397658 (executing program)
2023/02/27 00:09:08 fetching corpus: 9100, signal 276702/398392 (executing program)
2023/02/27 00:09:08 fetching corpus: 9150, signal 277027/399133 (executing program)
2023/02/27 00:09:08 fetching corpus: 9200, signal 277427/399830 (executing program)
2023/02/27 00:09:08 fetching corpus: 9250, signal 277778/400530 (executing program)
2023/02/27 00:09:09 fetching corpus: 9300, signal 278203/401219 (executing program)
2023/02/27 00:09:09 fetching corpus: 9350, signal 278513/401887 (executing program)
2023/02/27 00:09:09 fetching corpus: 9400, signal 278980/402573 (executing program)
2023/02/27 00:09:09 fetching corpus: 9450, signal 279527/403300 (executing program)
2023/02/27 00:09:09 fetching corpus: 9500, signal 279806/403999 (executing program)
2023/02/27 00:09:09 fetching corpus: 9550, signal 280215/404718 (executing program)
2023/02/27 00:09:09 fetching corpus: 9600, signal 280491/405392 (executing program)
2023/02/27 00:09:09 fetching corpus: 9650, signal 280830/406073 (executing program)
2023/02/27 00:09:10 fetching corpus: 9700, signal 281380/406737 (executing program)
2023/02/27 00:09:10 fetching corpus: 9750, signal 281843/407411 (executing program)
2023/02/27 00:09:10 fetching corpus: 9800, signal 282113/408065 (executing program)
2023/02/27 00:09:10 fetching corpus: 9850, signal 282687/408698 (executing program)
2023/02/27 00:09:10 fetching corpus: 9900, signal 283059/409344 (executing program)
2023/02/27 00:09:10 fetching corpus: 9950, signal 283434/409990 (executing program)
2023/02/27 00:09:10 fetching corpus: 10000, signal 283827/410652 (executing program)
2023/02/27 00:09:11 fetching corpus: 10050, signal 284112/411266 (executing program)
2023/02/27 00:09:11 fetching corpus: 10100, signal 284471/411925 (executing program)
2023/02/27 00:09:11 fetching corpus: 10150, signal 284825/412522 (executing program)
2023/02/27 00:09:11 fetching corpus: 10200, signal 285141/413179 (executing program)
2023/02/27 00:09:11 fetching corpus: 10250, signal 285517/413814 (executing program)
2023/02/27 00:09:11 fetching corpus: 10300, signal 285899/414464 (executing program)
2023/02/27 00:09:11 fetching corpus: 10350, signal 286253/415095 (executing program)
2023/02/27 00:09:12 fetching corpus: 10400, signal 286512/415596 (executing program)
2023/02/27 00:09:12 fetching corpus: 10450, signal 286868/415596 (executing program)
2023/02/27 00:09:12 fetching corpus: 10500, signal 287170/415597 (executing program)
2023/02/27 00:09:12 fetching corpus: 10550, signal 287508/415597 (executing program)
2023/02/27 00:09:12 fetching corpus: 10600, signal 287879/415597 (executing program)
2023/02/27 00:09:12 fetching corpus: 10650, signal 288147/415597 (executing program)
2023/02/27 00:09:12 fetching corpus: 10700, signal 288454/415597 (executing program)
2023/02/27 00:09:12 fetching corpus: 10750, signal 288795/415597 (executing program)
2023/02/27 00:09:13 fetching corpus: 10800, signal 289134/415597 (executing program)
2023/02/27 00:09:13 fetching corpus: 10850, signal 289438/415597 (executing program)
2023/02/27 00:09:13 fetching corpus: 10900, signal 289786/415597 (executing program)
2023/02/27 00:09:13 fetching corpus: 10950, signal 290110/415597 (executing program)
2023/02/27 00:09:13 fetching corpus: 11000, signal 290582/415597 (executing program)
2023/02/27 00:09:13 fetching corpus: 11050, signal 290811/415597 (executing program)
2023/02/27 00:09:13 fetching corpus: 11100, signal 291101/415597 (executing program)
2023/02/27 00:09:14 fetching corpus: 11150, signal 291327/415597 (executing program)
2023/02/27 00:09:14 fetching corpus: 11200, signal 291595/415597 (executing program)
2023/02/27 00:09:14 fetching corpus: 11250, signal 291891/415597 (executing program)
2023/02/27 00:09:14 fetching corpus: 11300, signal 292253/415597 (executing program)
2023/02/27 00:09:14 fetching corpus: 11350, signal 292610/415597 (executing program)
2023/02/27 00:09:14 fetching corpus: 11400, signal 293005/415597 (executing program)
2023/02/27 00:09:14 fetching corpus: 11450, signal 293276/415597 (executing program)
2023/02/27 00:09:15 fetching corpus: 11500, signal 293797/415597 (executing program)
2023/02/27 00:09:15 fetching corpus: 11550, signal 294067/415597 (executing program)
2023/02/27 00:09:15 fetching corpus: 11600, signal 294307/415597 (executing program)
2023/02/27 00:09:15 fetching corpus: 11650, signal 294568/415597 (executing program)
2023/02/27 00:09:15 fetching corpus: 11700, signal 294801/415597 (executing program)
2023/02/27 00:09:15 fetching corpus: 11750, signal 295148/415597 (executing program)
2023/02/27 00:09:15 fetching corpus: 11800, signal 295421/415597 (executing program)
2023/02/27 00:09:15 fetching corpus: 11850, signal 295773/415597 (executing program)
2023/02/27 00:09:16 fetching corpus: 11900, signal 296084/415601 (executing program)
2023/02/27 00:09:16 fetching corpus: 11950, signal 296308/415601 (executing program)
2023/02/27 00:09:16 fetching corpus: 12000, signal 296730/415601 (executing program)
2023/02/27 00:09:16 fetching corpus: 12050, signal 296950/415601 (executing program)
2023/02/27 00:09:16 fetching corpus: 12100, signal 297218/415601 (executing program)
2023/02/27 00:09:16 fetching corpus: 12150, signal 297501/415601 (executing program)
2023/02/27 00:09:16 fetching corpus: 12200, signal 298048/415601 (executing program)
2023/02/27 00:09:16 fetching corpus: 12250, signal 298375/415601 (executing program)
2023/02/27 00:09:16 fetching corpus: 12300, signal 298609/415601 (executing program)
2023/02/27 00:09:17 fetching corpus: 12350, signal 298818/415601 (executing program)
2023/02/27 00:09:17 fetching corpus: 12400, signal 299177/415601 (executing program)
2023/02/27 00:09:17 fetching corpus: 12450, signal 299385/415601 (executing program)
2023/02/27 00:09:17 fetching corpus: 12500, signal 299702/415601 (executing program)
2023/02/27 00:09:17 fetching corpus: 12550, signal 299948/415601 (executing program)
2023/02/27 00:09:17 fetching corpus: 12600, signal 300321/415601 (executing program)
2023/02/27 00:09:17 fetching corpus: 12650, signal 300599/415601 (executing program)
2023/02/27 00:09:18 fetching corpus: 12700, signal 300834/415601 (executing program)
2023/02/27 00:09:18 fetching corpus: 12750, signal 301180/415601 (executing program)
2023/02/27 00:09:18 fetching corpus: 12800, signal 301486/415601 (executing program)
2023/02/27 00:09:18 fetching corpus: 12850, signal 301734/415601 (executing program)
2023/02/27 00:09:18 fetching corpus: 12900, signal 301969/415601 (executing program)
2023/02/27 00:09:18 fetching corpus: 12950, signal 302275/415601 (executing program)
2023/02/27 00:09:18 fetching corpus: 13000, signal 302593/415601 (executing program)
2023/02/27 00:09:18 fetching corpus: 13050, signal 302940/415601 (executing program)
2023/02/27 00:09:19 fetching corpus: 13100, signal 303190/415601 (executing program)
2023/02/27 00:09:19 fetching corpus: 13150, signal 303523/415601 (executing program)
2023/02/27 00:09:19 fetching corpus: 13200, signal 303799/415601 (executing program)
2023/02/27 00:09:19 fetching corpus: 13250, signal 304071/415602 (executing program)
2023/02/27 00:09:19 fetching corpus: 13300, signal 304371/415602 (executing program)
2023/02/27 00:09:19 fetching corpus: 13350, signal 304651/415602 (executing program)
2023/02/27 00:09:19 fetching corpus: 13400, signal 304842/415602 (executing program)
2023/02/27 00:09:19 fetching corpus: 13450, signal 305094/415602 (executing program)
2023/02/27 00:09:20 fetching corpus: 13500, signal 305425/415609 (executing program)
2023/02/27 00:09:20 fetching corpus: 13550, signal 305783/415609 (executing program)
2023/02/27 00:09:20 fetching corpus: 13600, signal 306132/415609 (executing program)
2023/02/27 00:09:20 fetching corpus: 13650, signal 306419/415609 (executing program)
2023/02/27 00:09:20 fetching corpus: 13700, signal 306707/415609 (executing program)
2023/02/27 00:09:20 fetching corpus: 13750, signal 306948/415609 (executing program)
2023/02/27 00:09:20 fetching corpus: 13800, signal 307175/415609 (executing program)
2023/02/27 00:09:20 fetching corpus: 13850, signal 307383/415609 (executing program)
2023/02/27 00:09:20 fetching corpus: 13900, signal 307711/415609 (executing program)
2023/02/27 00:09:21 fetching corpus: 13950, signal 307946/415609 (executing program)
2023/02/27 00:09:21 fetching corpus: 14000, signal 308213/415609 (executing program)
2023/02/27 00:09:21 fetching corpus: 14050, signal 308444/415609 (executing program)
2023/02/27 00:09:21 fetching corpus: 14100, signal 308707/415609 (executing program)
2023/02/27 00:09:21 fetching corpus: 14150, signal 309055/415609 (executing program)
2023/02/27 00:09:21 fetching corpus: 14200, signal 309304/415611 (executing program)
2023/02/27 00:09:21 fetching corpus: 14250, signal 309511/415611 (executing program)
2023/02/27 00:09:22 fetching corpus: 14300, signal 309793/415611 (executing program)
2023/02/27 00:09:22 fetching corpus: 14350, signal 310020/415611 (executing program)
2023/02/27 00:09:22 fetching corpus: 14400, signal 310340/415611 (executing program)
2023/02/27 00:09:22 fetching corpus: 14450, signal 310485/415611 (executing program)
2023/02/27 00:09:22 fetching corpus: 14500, signal 310706/415611 (executing program)
2023/02/27 00:09:22 fetching corpus: 14550, signal 311035/415642 (executing program)
2023/02/27 00:09:22 fetching corpus: 14600, signal 311214/415642 (executing program)
2023/02/27 00:09:22 fetching corpus: 14650, signal 311400/415642 (executing program)
2023/02/27 00:09:22 fetching corpus: 14700, signal 311592/415642 (executing program)
2023/02/27 00:09:22 fetching corpus: 14750, signal 311780/415642 (executing program)
2023/02/27 00:09:23 fetching corpus: 14800, signal 312113/415642 (executing program)
2023/02/27 00:09:23 fetching corpus: 14850, signal 312427/415642 (executing program)
2023/02/27 00:09:23 fetching corpus: 14900, signal 312771/415642 (executing program)
2023/02/27 00:09:23 fetching corpus: 14950, signal 313033/415642 (executing program)
2023/02/27 00:09:23 fetching corpus: 15000, signal 313210/415642 (executing program)
2023/02/27 00:09:23 fetching corpus: 15016, signal 313315/415642 (executing program)
2023/02/27 00:09:23 fetching corpus: 15016, signal 313315/415642 (executing program)
2023/02/27 00:09:25 starting 8 fuzzer processes
00:09:25 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x4)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x4)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/loop', 0x80000, 0x8e)
ioctl$BLKIOOPT(r2, 0x1279, &(0x7f00000000c0))
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x4)
r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10, 0x0)
vmsplice(r4, &(0x7f0000000380)=[{&(0x7f00000001c0)="5026b603f645b2aabf8d1affdade7457b1b6555799d5a8a6423669bae9ad4dca", 0x20}, {&(0x7f0000000200)="e034a402148e", 0x6}, {&(0x7f0000000240)="61bd67829e7cf814e88ebefe323f8da2331efc3e4007dfc65b025cc1fbfd925a65126cda0248", 0x26}, {&(0x7f0000000280)="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", 0xfb}], 0x4, 0x4)
r5 = openat(r3, &(0x7f00000003c0)='./file0\x00', 0x20840, 0xc)
r6 = memfd_create(&(0x7f0000000400)='&+\x00', 0x4)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r6, &(0x7f0000000440)={r5, r1, 0x2})
sendfile(r6, r3, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000500)=""/8, 0x8}, {&(0x7f0000000540)=""/69, 0x45}, {&(0x7f00000005c0)=""/13, 0xd}, {&(0x7f0000000600)=""/55, 0x37}], 0x4, &(0x7f0000000680)=[@rights={{0x28, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x60}, 0x0)
ioctl$IOC_PR_RESERVE(r7, 0x401070c9, &(0x7f0000000740)={0x100})
ioctl$IOC_PR_RELEASE(r10, 0x401070ca, &(0x7f0000000780)={0xe4, 0x4, 0x1})
ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f00000007c0))
flistxattr(r9, &(0x7f0000000800)=""/41, 0x29)
ioctl$BLKALIGNOFF(r8, 0x127a, &(0x7f0000000840))
recvfrom$unix(r1, &(0x7f0000000880)=""/230, 0xe6, 0x40010162, &(0x7f0000000980)=@file={0x1, './file0/../file0\x00'}, 0x6e)
ioctl$KDGKBMODE(r11, 0x4b44, &(0x7f0000000a00))

00:09:25 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xffffffff, 0x2, 0x800, 0xeb, 0x954})
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000000c0)={0x0, 0x1b})
r2 = pidfd_getfd(r0, r1, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000010c0)=[r0, r1, r2, r0], 0x4)
r3 = openat(r2, &(0x7f0000001100)='./file0\x00', 0x1001, 0x104)
r4 = openat$cgroup_devices(r2, &(0x7f0000001140)='devices.allow\x00', 0x2, 0x0)
fcntl$setstatus(r4, 0x4, 0x8000)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001180), 0x400, 0x0)
write$P9_RLOCK(r5, &(0x7f00000011c0)={0x8, 0x35, 0x1, 0x3}, 0x8)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x377a4000)
r6 = syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x3ff, 0x2, &(0x7f0000001380)=[{&(0x7f0000001280)="e94bc7b62702f1e0e3ae47ef7578bb772ecf08f199a5561f18c2ceccfa9a6cc64656025a03ea55d640565f30198f2344de4550a218102e3357228c01d6", 0x3d, 0x81}, {&(0x7f00000012c0)="64ab4b5e22b6d3d52ff6c76f45017609dcc4ef2b3e18f2218e84e053c0bbb4605cbea9c8958120bb4e410ef3b672fd260a46bf81cc48122f55e5fc6c8727431e1c6b79528443d2bbdbc20ac84083bdfd9daba380e39896e70af56abb950434b98c02becc8c36aa38e15add8490d60df5699b6e02fd21fbfb2fece67b9b95960a80fa77cb", 0x84, 0xec3}], 0x811810, &(0x7f00000013c0)={[{@numtail}], [{@smackfstransmute}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfsdef}, {@uid_lt}, {@dont_hash}, {@hash}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/vcs\x00'}}]})
ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x2)
openat(r2, &(0x7f0000001480)='./file0\x00', 0xa08c0, 0x40)
sendto(r0, &(0x7f00000014c0)="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", 0x1000, 0x4, &(0x7f00000024c0)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002540)='/proc/sysvipc/sem\x00', 0x0, 0x0)
r7 = epoll_create1(0x80000)
preadv(r7, &(0x7f0000002580), 0x0, 0x7f, 0x10001)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f00000025c0))

00:09:25 executing program 2:
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)="8c8177b6e6855186f8364dd23cf6eb0b4c3935c65385da4ff1072a2223b1315bdc5c6dc2a69827a669f04014bfa1086e833a2a96509268f3dd45f2981cc75b96713b5c0e33a573a53ce01bdf13c1137ec2de48210bff1e3386925daa670285851976ec1ca5431dbb3a0ce33ff1eebd35e96faf6db04a384339ea7e273ef5618ddc9605cb7f82167b16ff41df427b281488560b4ef4089831344a0d1b25d324cfbf2cf9")
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x4)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000140)={0x82f, 0x1f, 0x3f, 0x4, 0x40, 0xff})
ioctl$TIOCSBRK(r0, 0x5427)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000180)})
r2 = open_tree(r0, &(0x7f00000005c0)='./file0\x00', 0x800)
ioctl$KIOCSOUND(r2, 0x4b2f, 0x46)
ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000600))
ioctl$VT_DISALLOCATE(r2, 0x5608)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/223, 0xdf}], 0x2, &(0x7f00000008c0)=[@rights={{0x28, 0x1, 0x1, [<r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/248, 0xf8}], 0x1, &(0x7f0000000b40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000000c00)=@abs, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c80)=""/183, 0xb7}], 0x1, &(0x7f0000000d80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000e00), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000e80)=""/4096, 0x1000}], 0x1, &(0x7f0000001ec0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000001fc0)=@abs, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002040)=""/93, 0x5d}, {&(0x7f00000020c0)=""/6, 0x6}, {&(0x7f0000002100)=""/33, 0x21}, {&(0x7f0000002140)=""/102, 0x66}, {&(0x7f00000021c0)=""/114, 0x72}], 0x5, &(0x7f00000022c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002800)=[{&(0x7f0000002380)=""/151, 0x97}, {&(0x7f0000002440)=""/61, 0x3d}, {&(0x7f0000002480)=""/9, 0x9}, {&(0x7f00000024c0)=""/153, 0x99}, {&(0x7f0000002580)=""/181, 0xb5}, {&(0x7f0000002640)=""/66, 0x42}, {&(0x7f00000026c0)=""/61, 0x3d}, {&(0x7f0000002700)=""/199, 0xc7}], 0x8, &(0x7f0000002880)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x178}}, {{&(0x7f0000002a00), 0x6e, &(0x7f0000002b80)=[{&(0x7f0000002a80)=""/197, 0xc5}], 0x1, &(0x7f0000002bc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{&(0x7f0000002d40), 0x6e, &(0x7f0000003080)=[{&(0x7f0000002dc0)=""/113, 0x71}, {&(0x7f0000002e40)=""/125, 0x7d}, {&(0x7f0000002ec0)=""/185, 0xb9}, {&(0x7f0000002f80)=""/226, 0xe2}], 0x4, &(0x7f00000030c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003100), 0x6e, &(0x7f0000003200)=[{&(0x7f0000003180)=""/31, 0x1f}, {&(0x7f00000031c0)=""/2, 0x2}], 0x2, &(0x7f0000003240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f00000032c0), 0x6e, &(0x7f0000004540)=[{&(0x7f0000003340)=""/220, 0xdc}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/223, 0xdf}], 0x3, &(0x7f0000004580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}], 0xa, 0x40010040, &(0x7f0000004900))
sendmsg$nl_generic(r3, &(0x7f0000004f00)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004ec0)={&(0x7f0000004980)={0x538, 0x36, 0x10, 0x70bd29, 0x25dfdbfe, {0xd}, [@nested={0xa8, 0x86, 0x0, 0x1, [@generic="b5a69fb80ba3957799a5754ff929a2d7e3c4abfef429f25ee50a889375c9c1d34933e13fe614e43b5d73066543c51d3d666119579a9fdddfaef4c672b769919c74a6330ad189782f830d558114a0436efad951de7397f3b1c691ed53e90abf46e07cccf2304821ed5a7bb4bfefa813c9d971cd0874e44d3b5800622dfb7009c74ddcde59bd807d6bbd39b209fce7c0e2d9d7b1286836758891a0cc8670740e7dda58e02d"]}, @nested={0x8, 0x29, 0x0, 0x1, [@typed={0x4, 0x4d}]}, @typed={0x8, 0x5b, 0x0, 0x0, @fd=r2}, @generic="9c74c2d5aca136202e2e82dbb669e64105f00167949229e4da86a74e015be82df906ef17", @typed={0xc, 0x56, 0x0, 0x0, @u64=0x20}, @nested={0xc8, 0x43, 0x0, 0x1, [@typed={0x28, 0x5f, 0x0, 0x0, @binary="99a944677a361048fab935c0f741855bc1b52915c055c971524bed376c1503d9dc9cc4c6"}, @typed={0xc, 0x77, 0x0, 0x0, @u64=0x200}, @typed={0x8, 0x9, 0x0, 0x0, @uid=0xee01}, @generic="084a64304986c0194cd4a04df295cf70f8ee23754a21f6ca999839058705925528e2b875186e1bfb3097135efe5a41c98d1432aa4c99c59a51930cccd6630bd7279a72fb9a309009a1ce16d40c921c88d1541a692204de01", @typed={0x14, 0x81, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0x80, 0x0, 0x0, @ipv4=@remote}, @typed={0x14, 0x62, 0x0, 0x0, @ipv6=@remote}]}, @nested={0x372, 0x7f, 0x0, 0x1, [@generic="dd36571c928234ab943726a886736a0f01daed38bc026356c3237339cbc0682fe46b025e3c17e9e0a19d4d62f2faa1b56e8df1323a37c0e833f8bfe143f92d457842024c59befb3a6e371916b094ebb4b3d4c54dbb82f8a9bcb7338c1e59654f00758ad9025cd326b80555b83441f53972725b138cf94aab8eeb98ee5e496ca7f9c77f8f99be8b58f7e8c7938e0154f915bc3c5101cba1fbacc55ffa6c30a59b7c707d443857cdf83393a800ab255c132bb3ee3b9ecb12b6df", @generic="e393e9f5ac44c991762a9de504e991453868a47a05402fdcd2eaffe996f96e6f259e08036c129671e781e2d3b2a958521467dc6d0695937336c887db5c2ac3fe7accda627d6d83f24cfc44e180bca49ea2daf92037014213", @generic="c4c587998429fc26a39abb4eea714dc4227a6097350e77619f5012998439f281cf21a78e4ec9878dcb99481399813b92a9152dffaff9650455c073ddca3273734419f130c6691faf745cabd183610747a7dad33bb4dd1297cce6f9ed3bdd26f57d6a207f8cc97d3bae6e326a9d99e7bbffd4a4acedb8d09cb89430349593729a271dbec817399de605f049d5bea5f6e0b9762c4123e8228ba4d65c4938407b4b284ff89ef697ff8d46dac97726b2ff261d0fe7222f892c19aa0ef81969de68c06c55fdd8b5bb83899a459ed968e259f0913fbfdc26e53d0d23ff9caaa9cfe5db249d3fbd", @typed={0x8, 0x7b, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="1f3b9ac6588f616a5111bf07c5dfd7221863234b1445ffd9772cba226f2f862f0ebb0eea6b28bc52633e898ae9dd2aac53d5538e39f6cb657cdcdbce603c5a3580200e4b6835caf82efa88373d1fe18b18906f4c671e077b4099b739d32fb04e49e48e85c55d0bca4d0c0774", @generic="37e8572952c606961ab78372876a32aa3b6065a4d459d0eef89385efe7e61514fb977c8d538ead095e36d478ac25529adab69691409d9f9c71a9b95f7c4d718c1a60364b9414a2042ea5b1d3378c38ffb835dc031ffdabb509a7d68178f5d412718e87b22769c1b7551d9066b6107d9f5782efdb3383559c579fb9", @generic="d989947ce1e2019dde0fb7454069b059742c56f693c76b52c40c6b7ddca8c9e20aa9af36b0b2c4633e934afb974a27ac3fe41852f5360e4afedbf948e652592b729b98c67fa38fcd3edb66abb653f06757e4c040c60c1c161552f5297a56a7a9c2b9c8b9726d0b904ab6879ccd9d62305e56e2cd2b09fa302be38f14c5c2b45f76c96c9c3456dc49e7d8"]}]}, 0x538}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000004f40))
r8 = socket$netlink(0x10, 0x3, 0x7)
sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000005040)={&(0x7f0000004f80), 0xc, &(0x7f0000005000)={&(0x7f0000004fc0)={0x2c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4e72f362}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4060000)
open_tree(r5, &(0x7f0000005080)='./file0\x00', 0x1)
ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f00000050c0)={{r7}, {@void, @max}})
ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f0000005200)={0x3, 0x2, 0xd5, &(0x7f0000005100)=""/213})

[   88.057816] audit: type=1400 audit(1677456565.892:6): avc:  denied  { execmem } for  pid=258 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
00:09:25 executing program 5:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000008, 0x10, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3fbe, &(0x7f0000000000)={0x0, 0xc96a, 0x4, 0x2, 0xbe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = dup2(r0, r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x110, r3, 0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
r5 = syz_io_uring_setup(0x68ae, &(0x7f0000000100)={0x0, 0xf533, 0x4, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x4010, r3, 0x10000000)
r9 = syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x81, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000280)="af5b4d91e4f85d0b4257fd250abfa98890c71e486e58e5a1a7edcb56120dd6a6ecf274e8ccb9def84274c14cdf2c9fc2f137f4796c48e80f499c2cef5f89fd8841ade1e2630133b6baffd27d95932065db29bff2594ac6ec872e3370cbd907b4ab59517ced0237e69481a83a2afe", 0x6e, 0x100000000}, {&(0x7f0000000300)="24c4a9c31f7e739671d5948a3b641557682ba76576d191fac6b7a57a1a899b25dbf98bd96c30b7d7344c402c5bf782f070c32fb03badd3ee770b709a2f2b14e286a5f13f1ac41a6b0cfcf077d70a52e3c5e63beec2a14898b670a441765804236741a42f54bb451a095dcc7d43384fb2f88357e0baf5e4cbb50784100aec45a413ca0d7962037a6c3e53e77d4246b22aef93147d8abefde245d9fcb19ebf96726d44dfaab501917749626a0aff1321fed17a07fc16bd21aa5ad474cdecd4afa16fa717383d", 0xc5, 0x1}, {&(0x7f0000000400)="99d30d68b6997849d9e8a032ff7bef6159f5fa0a8149c2518b774cfa31cf3dea67fd5f0122dd2f77937470d5f912f7892a2cbd624770972a19834473c207f8e4796cbf7534b9819aa0888324107c842210a4e06567cc3d07d9e8b830570b4422013fbec8eecbac38047f135f8e710ea5f58e4a27b74885fe262192eee6d3c2e445fcd1a3d05626a97ed042e67d2ffb4a6fe78b8c0a0f01c0", 0x98, 0x5}, {&(0x7f00000004c0)="9d0130d2b820aacfb807fb80e985f6b089483e7c1f1cd6220b00588c746241912aea46f4d1bfdefa2cb26fbb289e050d7f96e544c7e72045062444e36ce84f7e964c9738a6b51a1456d7803786b34b51d3b58c90e2d95a4d918ffd84a91f0e00b87b9161be", 0x65, 0x1ff}, {&(0x7f0000000540)="7f49ac934d2ca752af421d44263c0ee25ac980455252054dd847e85c4b20d48af9ed8659c0e200a810a8868aa14a17c1ec87df55e30ab5a4bb31e40946220764f9fc7151c155cebed1e670fa2a860c66bd5d668611d89620669fbb9d6c081e0c80ca367b4c05aa501cfe1c04dd87c70be7c38b93f7c630", 0x77, 0x40}], 0x400, &(0x7f0000000640)={[{@nodelalloc}, {@i_version}, {@noinit_itable}, {@noblock_validity}, {@journal_checksum}, {@init_itable}, {@data_err_ignore}, {@data_ordered}, {@discard}, {@dioread_nolock}], [{@smackfshat={'smackfshat', 0x3d, '\x00'}}]})
syz_io_uring_submit(r6, r8, &(0x7f0000000840)=@IORING_OP_STATX={0x15, 0x5, 0x0, r9, &(0x7f0000000700), &(0x7f0000000800)='./file0\x00', 0x10, 0x0, 0x1, {0x0, r4}}, 0x7)
syz_io_uring_submit(r1, r2, &(0x7f0000000900)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000880)={0x20400, 0x10, 0x1a}, &(0x7f00000008c0)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x11a1bb99)
r10 = syz_io_uring_setup(0x432, &(0x7f0000000940)={0x0, 0x53b6, 0x4, 0x2, 0x2a2}, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000009c0)=<r11=>0x0, &(0x7f0000000a00))
r12 = openat$incfs(r3, &(0x7f0000000a40)='.log\x00', 0x8000, 0x8)
syz_io_uring_submit(r11, r8, &(0x7f0000000c80)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd=r12, 0x8000, &(0x7f0000000c40)=[{&(0x7f0000000a80)="68f5afea15bacfab16772f3f34cadb8feaa6c1f5ba4e5f4a5c8346c4bc95bfe46544785de588bbfb1e6125446b189bcbf2e6356849ad7f4bc22dd742b621bd27a3fad29d5a", 0x45}, {&(0x7f0000000b00)="b358f720d9eccc1675d319afe2aa3a1c34d1b2422a9224c109da4ab712516492062037940912d388245c5f893b3b6013e72b", 0x32}, {&(0x7f0000000b40)="09519a92f55283351547b0cad82f39de9371360d5e3d816c5011beaef1d1657459fe798279da5e835a7d217476b588c9b97a2a5d970ec8419bbdc7556bb3ecee350515c38163d1ad1a3a37a0b0bc10d625e372067cbaaa535fe695aa3fe051d66408ae85693326cb147653bdf133dbd0c4f216dcf7382f061e34db8c756d61e2c6d1c205fec9d2386c506673fece29bf3c4bdf1427c7955a0fe455b77c358da6badcb4250a0d60b057bb6768680410fb38e1c58eb6617779e96643c32949e9cffe1062fbaf1e252872d391701834", 0xce}], 0x3, 0x1, 0x0, {0x1, r4}}, 0x451127d1)
r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, 0x0, &(0x7f0000000cc0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r13}}, 0x2)
syz_io_uring_setup(0x3200, &(0x7f0000000d00)={0x0, 0x6fa0, 0x0, 0x1, 0x206}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000d80)=<r14=>0x0, &(0x7f0000000dc0))
syz_io_uring_submit(r14, r7, &(0x7f0000000e00)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x4)
syz_io_uring_setup(0xa49, &(0x7f0000000e40)={0x0, 0xc69e, 0x0, 0x2, 0xb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000ec0)=<r15=>0x0, &(0x7f0000000f00))
r16 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4000030, r5, 0x10000000)
syz_io_uring_submit(r15, r16, &(0x7f0000000f40)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x0, {0x0, r13}}, 0x1)

00:09:25 executing program 3:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c4, r0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x43, 0x3, "48f040b63676a16c5f9f3925ce75f887cd06042db2363080b166c09d4705898a0217223a67e23a752a76ab651338b64250c4e62a9c815476d60302e6e8d89d"}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd760}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20200000}]}]}, @TIPC_NLA_SOCK={0xd4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc3e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40}, 0x4000100)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2f4, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x746}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa93}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffeff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d20000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "65903351c6df7af719106979d066179868262e49c9f03e524d5626c7f0a84f4d"}}, @TIPC_NLA_NODE_ID={0x5, 0x3, "cd"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xdb}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x2, 0x401, @mcast1, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa372}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfbb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x2400c080}, 0x40c0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffeffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xe1749f2344ac54b3}, 0x4a810)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/lockd', 0x40, 0x24)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000)
sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x51}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}]}, 0x30}}, 0x20004801)
r4 = dup2(r2, r2)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r2)
sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x31}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}}, 0x4000001)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x128, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe01}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x22}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x16}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc4a8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x24048810}, 0x24040005)
r6 = syz_io_uring_setup(0x6529, &(0x7f0000000dc0)={0x0, 0xfb6f, 0x1, 0x3, 0x197, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000e40), &(0x7f0000000e80))
pwritev(r6, &(0x7f0000002080)=[{&(0x7f0000000ec0)="eee2a6c1cde77d65e1e79eb5bf5b79c87da2ae36a3d78fcf300ce14b674ec4b226", 0x21}, {&(0x7f0000000f00)="43444e16654cf8bdd45b9a6c74828a45819a9936177ecfaded415afb49156d367de8fd37043f87c0e8e4a846951e2e80357216bfa21f", 0x36}, {&(0x7f0000000f40)="41c01cefd490fe150001d8e57530f0", 0xf}, {&(0x7f0000000f80)="caeb2772b7e95f3d7c20ab4768b60f02860f54230627f04291467693b8cfd65275824a6bd0d501fc7aa8a3c5f02ee1ccc2cea092c23835c8a64a938f7d1017b3a0dfe79667937f580f155d8949c59319c8846d8a41d3e17886d2ad535ce5ce60d7969c59542c26dde1a886020972de56d7ae48a31c2e628a97699cc95287f16b81695da3b013aa09f705bc347dc5092bab2c7c6d65acbf844bedb3c503dd510dc1fdf181bad082f96da4b966a757d69e7c833c0ac929fd586d133986a01c45641b3e58bca774ce6e848c66220976270bc19bacb3b9a3441182b7534bdb1fa0bd965888159939af46966724c192f8ddbdcace8558f581f0ba", 0xf8}, {&(0x7f0000001080)="9f7853dc68eb3dff5cb81b2435bc7ba414f00d4e995f67d3ec03a93d9a5c13e2e51f5e9e8dfd7cf25dc26f444f40122e5c16f2ad987f3c02269b5d5561522dc9fa29f776af3b88dc267c12d8d29e7b947d5b15e651fe8b8fb9c9d3c3aaf58c6d642e25cd7d903cbd2bbfa899a4a2cb7012ecf9336c4537b3fa5728668c687dec22d2321de721576bca6032002f283574d431f19b7595d0a0dffa9b739c78a69f466d0b90a904e412ff14698560e3ac70040cbe5a328a49c0557db10589870238af088a5a112b67ed07022615d6774e044aa38034b22058be5e4b2d1b04e4d825e61a0e559eb3e04a4a30dce5bd8287d022d9c4bcc2ab78fe49e280b715277d06d981ee72a53a6c7dbcfbcc11c0ea58176d07c6188f8fe089369ffd693b9a087461e84ba8bb0ee2f1186e9d4374b2dbe38fd260b999d612e928daab6d7c538099ee45fa9bf42e9d6b835c0e731504714679096bb8929e1019db3c7d14b0b714ab859bf40db13d26fd47a329103fcba0d3d51b3e28548de45fc353afea2bea185e29e1c24ca8ef90a284cf5824e1340c43dc50b4fedfb5c2ea2d0295fba77abbc5f2e448a43c547d67087279f382b2d530e90b0125582d716e54d2f6e10b3391ffcdeada1f32c827a21482a48fe6320e044221e6e031c0730a0a3664b1ac40131757d294ecb61c7efc6f71f637130aa10da3ac233a00cb304db0f7ef6031ab364cd3ff2ad27ebf9dfab91a657924b9e0e4ae31578dee28767746e5f8257ed324deb7894c2a33cde79c31ab6d6beec7012b7dd810566956ba95abbcb2afc62c0527beaf731e4ff15e2882628af103e378412ce622b765c3b3f660044cc9bf4b2510bfcce6d4a4d09e6cd2f660b2d02c5c289b92ea8e6d18101301f1e1c36d53ae86f334b9cb25d07f41223397ff2b3d1975741c8e5bcbe5f1b63ee125ba760efe066cd3c6633a6792e8673fda689a220e392007cb99a3c7e43731dc3524e80e1f3a5f0ed97eb594ea9d2efc6c9a84d6a3a3ecc61d4764697c21f93ce830f8641e30d7743fce01892b3e6b3d3794d9e2b4e749486d0a8186bd5df70ae492afb9a9e87aae3ccc3ee5de2f621a7c5044dd1c3b59925a5d5dc780f2776b20ef0127f290ec388b68b856167e796dfbcf9cccd86e8138beff4b8c8c46e85ec67250c7ede8458c2daf0a49a104c688a270324dfc2800836c36cac8f0a80b03199f1981ea51c21a58c8f1d24070f22d160db31762931886e575638459d40ccf5f9b4dd9a0be11e63aa59c4f0a29819f34567649363d5954ed52a238baa81ccda01352abd707ba6eb78289695174124c553abee7557710d78c59024a816d24e4538b20aecd93d515157cd6c9c52bda5bec74f089e2f4559d362d0b9af4aef0dee797859d34cc84ae13c636f40b00f15261ca6504a7fb808b731f84c37458410139de0e95a7a6cc91edaa5effeec5cf70fd674585ea92f47bd395fab054320258fc8783d5dde92534b18c26846a94751cfa06210f2c34b2d319bd282b6121b4de1ea80fb0e430411624741cc989fbb7de95d97cf2d4909469c62e7a3a9751fcb5e8d31c689ad0272b56eaf667c2aac3717d3e59f965998319a847f168498656eb5294e1d7f6191c64b118424b218a807a3b4e634e041d96213da4fb56e5b6e5344ffa827b70f4edcc723c4401603d0aa6bfa4f7caec04eedd261c453d60b1795f151485e3f81544f6ab302aa1b75363859724b77cd76826bfa38295e7dcc71cbc1f5ac89e0fd6280f695bfe8bdc16e188dd12d59e12a8e8130adfac28aa49e2160cd7d9630a14cf47efae8716acdc981c69d3001ccfc8ad982a907143361fa10495e67564bf49a0cdfa892ae54d822f6ff2805e2679c9b0437b16f5a2a664d15d4cf36b403f03a9f1a21b47536acc5eeb72f88ac3972d78af21a6fbd92780059c71459325da4e3fd1360513596af96c78052cb138a4f3628288b3b2765a3a15e3607e664b8a52d10f81609e08e7c3f351baef61b9467851da64fca5cf9109e946ec8b1551364aaac3d047ee9c5bab3e88a581477fa3707859033c0535a96c412445d925e21cae1f47a517ef86ad52df8f6cc92ce876109b296b0fb58476c322c221e4fd573be84f606540d29f105e66511295a3fedb682a16610b93b833f8e4829c2fbdaca6cc17a0969349fd9dbd963751cabf2eda1bec5ba1f2f80883d0c1eca78a81cdb0a4ddc315015a366f117b8e798570585915e7d6fb06231e933e601607781d92f3fd78c30ab10a01a397b63228b1f7133bc08f1d1026debbacabcd97c9818e316a64be66597fa5e99ff6f10203b6ca7eb8ceca136730b5678c6d51680089018e21ca27140eae381c0acf5610ea818e92803c25ebccaa8cff299ca212f9ca9f46e9888f764f80c62eca49e77f20697ee9e1cbb371f14b8285ee5861265bc1e9e14fcb9bce44f9a3c7df6dddbe639fd28b7b9fc8c78f9780380c033e31244ea1220193754c42ae5ad60ef63e5d1084330275d1098c056096b755f692b54b951013f3c9359c52a60cf4f63e9fa42694faaab094aa3dbddcd1a9af161cac4bd7aeb8431e11988ccb93b05be65658115e065836d6648145aae836fd8ccd9ae941237f2e82245132f991ff3575c63d29dc17303bdb1182a3b6d9b54b85aec30a011402270a087fcb983d8b9845c7376aca9e5df918fde9f6cac3db0940fb86e9791a8ac8599cc59c911603e9bbdc44e95eaf7b58d20da22a0450de80dc2da20355c2cd962a2dc80614fef6cc8787140a848e37736237b01c4a5aedafcfe658c4b48e5838219ce97604a4ec7e5bd067520dfa8ed5b24d2382f66ffd02f5503e3cc9ea5ddd4daf4a272d9f67fc0055f9208607e89b536eda49e77decdff83c2ae926d5694c1f95dad4f3fdf263937f37379214b3846b2338d958dbb6613763e47d4b761659d0dc5055ac627efc8ea6897677bf25c9df487da7414f09737ea9773d0eb641418637c9c1174af99564dde02f8c3fffe85998865dc6b2c5f719f7636de789bdfd527ca716ecb47673e2bc008eca30ef1d1466a972c4a0c05c59326ec2ec974e01d7db12eb500132ec84cf740c59d2739faf3097cbc0afa9424ad2e3bc07f1a279d09617543506f476370f5554fb68fd8e25473eeee5d0aaa19a1e519599b6f89b32c99130c134f9e4a0d2ea0e8e3247270334031a2c6c3059cfc3d1f0549b1c58fcc65cd2ba137acd58053ac0ca5b6b9903387bf4b32dc8039e124ec3bfccf1702bc9bd5a10164836c7775d93680fb734ff9186265678ec4ac4badaf92074637f1f3a68317d1fba233ff5c68350d7f2b621976be7d5e46f823ac0cbd7179ac1b93f2c8a2c02175effb2dcbafb70102b134b133c2a58cfa0f0271a28753fa032c91ef5eb2c69baa80497be1df767913a52a7903983e796638d8f8e08d73d82740e2eacf2750575fba7b2b243cdc945ce25655820bdd387ffbeba1fb8b630d900f6c40162905dbfe41f0987fbc0d4372c7e8a5339ce2deb517925fa1a5768fd900897a513d72b7068f068d2891c34f6af10991cbf5cf39c3e3adf27bb632918faa0c4c8d195303055ec3614ad309fd0f4ee659ff16023999456fafb09908298f295c7cb3e8ff2aaf94f8bb31dd251f74054a8dbe508b5fdc6171c1f3b1122c147d8d1e9078bcb43f7471b2b0de8f3ae4916cc43bc5fa17b22b0747d32906eadb43f656bbe98863de16fd733e051dfff361427197572aaeff7563cdcc5e0d1da5d4ba825e72f274a32336f5f51bb8af3249eec57cf4308201ce0677b3b696e7deb0a2ef7e5e5e66692f23419048097624b5356ac5433c50fe8795129ef52830a87545c2f193807cd1c639b9a4e45f62fc1598e4b5e284222b7fe166cf4e34991347ffa31692582a45e33362589e487581aa56f4017d877ecccc122d79476b382f887ebab070f5d2589c209543415359db8aad15b949144da729fbe19d1b4214249c4847df32766170fcb66505004f8802717dc06ba235f9d4b936edd49b6894a93731d390ba73caee266ea062ec9446ae84b0dd50434f8fc9cc70bed1b6283100746dd281677721b487bb6ae3dfdecd946b877e15f72c64f407f8226f7a01dd17061dee5748589f225becd99702ef0890e5ddc2f4c3ea81495f6ee4a597230ed7244d854894c63c3445bd52eff8c4060340ca199debbc955e8cdb200f01c1b581c8a80e1d8564b230f9b550b246063af1ed26798597107a7be447dc4108ee629f9e04f7977c7e3eb264ebc34635b7584e4db0f33b550bce632eec23ffdc667fc66495161b61d4d73947e7365a45dbb82a75ddf0c68db975ce443e1c20a64ee36937cab33ecf15029fa7b27bad9a5eb4dc1d318bd4c2112b89035c680a7b9028989bebdefdde693c88db366f8f97dac385a2c8fdd95ff447ae8c18ea56a58e23f0aad13de6a35654de8d2dbb81dbb3277fe6ce5ce88391007724276bf3ec096de6e0e84b671521cbf9fcc329ff949975e25183cc4ed29834f0a41de09ab93ef3762e047e4bb1781a05bb122fb324c2179043f8895b42ac78573b8d808be6e39f59f9977603265f8abc4c0019351d01b516d43a4f5538346427a4b771becf63ac0fac6f84fc880bc3adb2ea3cf7f9a820ac7e5371ebc80e8ffcb8ecaf89dd1d9608e12d3f4189bb74fd86707c7bf9529b350bcf5a6957c2d36ede5a763b8276842d6038df9446fa8b3c07fdd30080094b09021c7095c2f14072710e81c9d233720ccbc0581e3cfc671ecc75b4f642f111c2ff8ffd5c854d26089af8afa6eadffa4c046d796edf325cd3df115c2bba0f59ae9db08a76faf10d7eda6ecac6d3efe7b3c82ead9f6ef5020d2d892c7c43741bdf64b143ed9d1ef68530ea97c5682932ad14352486b29d765b6f4480dd3effdd8826fb54b19b3131d67679e3e5db65c28c0e1679e0d26460f0029671606ab4880ae177ad7d3f8b4392b47e6f8336fa18cb34b28187bdd756b0148e5e84adc80491dd7f6448d70955231c979fc42af88f54fa03ac16a1f432c5ba1bcca84de320d6c30acb1afe2f09f1c8b67f8e4daed453ed09ecefde19f3cd143f1ccc31bd686153e9ce66b4c1766f73e44eebeee298d90e09a3fd1401a3b56e3454c7812a71bfcdcf0bad29fb5f85fae065816cc2c7766805ab6f315c866defd152f572a2fa7029f523f72844f09101fb42026a9d68917950ff499bfd80a531561c652588cbf4e544036fa09a7e15599583a80c6c1ca7cb43bf1246d997c1bb906a3f903bbed566020e747afa3bf27449ab265b52e0885964d20817e01fbf0431fbbfa8f2e5b95a5b0f0d71e2db85277e8a6d79c8ab78e32ceec29efb854055de6e041cbcdc7a4f00f1541ff2c7fade051907b3914e22964bcb25b0e10f00353c4ab4963298c34d836eeeb32a4b6e533aa7b38bdd3d2a7e490df17a88eb5601d1eb8c8ff2c5a89e2c6f25143231a87495fdec3fedbd14d0d8d64662886f2959b0dc38841f9f173c8ff57bfb940e6c920dce21d5173362ecfd0095689ef8e5f6776c6ee3f7f7c345c27f032204bb54c8660cd56bf6c05ab8f9997af1a370f89ee4fbc20ba5967aade9e6c23adc7001b3c31fee98979597c53d62405c07a93a8b0e9bd6a91e2f0c27c890346f7ce232ca6b37450f9a87b332ef70dda6c7ce1b13c0755525b5018e48e3ebdcf9156eea2dcef8cfaf80a6ade7f7fa6e0283f0090e53eaddd185a8002a271a7bd18570c62afda3d62d4f69e0bf6387a3f1964e374f5ed257f78129752deb0d5656e2c7858a1922162a68cea6d9c77", 0x1000}], 0x5, 0x80000000, 0x9)
syz_open_dev$vcsn(&(0x7f0000002100), 0xf716, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000002140)={<r7=>0x0, 0x40, 0x1, [0xffffffff, 0x6, 0x3, 0x15, 0x9], [0x6, 0x6, 0x6, 0x7, 0x1ff80, 0x5, 0x9, 0x9, 0x79b, 0x85, 0x3, 0x60, 0xffff, 0x10001, 0x80000000, 0xffff, 0x76, 0x4, 0x9, 0x7, 0x1, 0xfffffffffffffff7, 0x6c00000000000000, 0x5, 0x2f12, 0x9, 0x3, 0x53, 0x8, 0x400, 0xffffffffffffd0be, 0x0, 0x1, 0x2, 0x0, 0x8, 0x5, 0x401, 0x5, 0xfffffffffffffffe, 0x401, 0x9, 0x7, 0x6, 0x100000001, 0x5, 0x1, 0x6, 0x3, 0x100000000, 0x80000001, 0x6, 0x2, 0x7d, 0x5, 0x6, 0x0, 0x40, 0xffffffff, 0x7, 0xff, 0x90f, 0x1f, 0x10001, 0xbe, 0x1f, 0x5, 0x3, 0x8000, 0x5, 0x80, 0x1, 0x3, 0x40, 0x5, 0x0, 0xf509, 0x20, 0x3, 0x4, 0x97, 0x81, 0x16c3, 0x7fff, 0x2000000000, 0x8, 0xfffffffffffffffd, 0x100, 0x100000000, 0x8, 0x6, 0x401, 0xfff, 0xfff, 0x80000000, 0x61, 0x7fffffff, 0x6f, 0x1, 0x8, 0x9, 0x2, 0x5, 0x4, 0xf14, 0x6, 0x3f, 0x2, 0x5, 0x1, 0x9f, 0x0, 0x3, 0x16c6c23f, 0x3, 0x4, 0x5, 0x4, 0x0, 0xfffffffffffffff9, 0x3]})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000002580)={r7, 0x7fff, 0x200, 0x1})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000002980)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff, {0x6}}, './file0\x00'})
ioctl$EVIOCGKEYCODE(r8, 0x80084504, &(0x7f00000029c0)=""/212)

00:09:25 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xff8d, 0xd}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "90cf7feb2af570b1f8a8ffc2babe"}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xe, 0x4, "a006e48583c398ecba16"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x10, 0x4, "27ea2391fa8fa64cdb3b3435"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8084fd53a6f26dc35db2294bd6"}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "ab2cd000af792032eab78eb8afbed8d4"}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20064000}, 0x8811)
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x4010, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x895b)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x100, 0xa}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r2}}, 0x10000)
syz_io_uring_submit(0x0, r1, &(0x7f0000000440)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000400)='./file0\x00', 0x10, 0x4900, 0x0, {0x0, r2}}, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x110, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r3, r1, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x800, 0x2, &(0x7f0000000480)="e3bf015bd47e69b0fe048618413c1b74da77c6", 0x400, 0x0, 0x1, {0x2}}, 0x7fffffff)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0x20010, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f0000000500)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2007, @fd, 0x2, 0x8001, 0x4, 0x10, 0x0, {0x1}}, 0x6)
pwritev2(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000540)="cc9400fe12251d078df9653bcf770044e7b24be4b9cdd1b66004eebd83b123408c4986f044a1f73a4cbab83bd4dab78f0c4fc730caf1bab382a731a474dad0cd9eb474e4b954e07e4da45b84ea85d6a2890d52b483828bf51804d1ac6032aa5cff5777358700f6d9f548166e3fccd036240f03e3518014227bd9ec8191640d28073d3167a4626ec7d0", 0x89}], 0x1, 0x7, 0xe339, 0x17)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000640))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x90, r0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x49, 0xc5, "2bea4750ec8af0a0ebf90ccc1ab8acadc110106ec23a279f778641f80c4df03088ce653e995280165382076383e3670bf89870ae7bd7c0e79e3604d3b5b2f11984d081bad1"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}]}, 0x90}}, 0x200000d0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x8bbd}}, './file0\x00'})
syz_io_uring_submit(r3, r1, &(0x7f0000000880)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r2}}, 0x0)
r7 = eventfd(0x6)
syz_io_uring_submit(r3, r4, &(0x7f0000000900)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, r6, &(0x7f00000008c0), r7, 0x1, 0x0, 0x1}, 0x6)
syz_io_uring_submit(r3, r4, &(0x7f0000000940)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2007, @fd=r6, 0x3, 0x0, 0x0, 0xc, 0x0, {0x2}}, 0x7)

00:09:25 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x22000040}, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000094}, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x2e0, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc6}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe04}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x29}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ed305d1e1489ed919ceee3934362562edb377e4888cb4011181a3a2aa31f94789f072a12"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "ca2a3cd4ccf15427f334a959bea9fd07ec18d05791f48e80"}}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd3c1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}]}]}, 0x2e0}}, 0xb896d9b68a4a699a)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000008c0)={{0x1, 0x1, 0x18, <r3=>r0, {0x80}}, './file0/file0\x00'})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r4, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x24004000)
r5 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x50}}, 0x20000040)
r6 = open_tree(r3, &(0x7f0000000bc0)='./file0/file1\x00', 0x100)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000b80), r6)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xcc, 0x0, 0x800, 0x70bd2b, 0x1, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1d}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xaa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}]}]}, 0xcc}}, 0x40d0)
accept(r6, &(0x7f0000000dc0)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000e40)=0x80)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000e80))
getpeername(r5, &(0x7f0000000ec0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000f40)=0x80)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, 0x1, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x78b8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}}, 0x40048c4)
socketpair(0x1, 0x2, 0xffff, &(0x7f00000010c0)={<r8=>0xffffffffffffffff})
fsync(r8)

00:09:25 executing program 7:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0xff, 0x2}, {0x5}}}}, 0xf)
syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_info_req={{0xa, 0x7, 0x2}, {0x3}}, @l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x7, 0xffc1}}]}}, 0x17)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x98}, @l2cap_cid_signaling={{0x94}, [@l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x3}}, @l2cap_conn_req={{0x2, 0xff, 0x4}, {0x1000, 0x4}}, @l2cap_conn_req={{0x2, 0x1f, 0x4}, {0x5, 0x46c1}}, @l2cap_conf_req={{0x4, 0x9, 0x3f}, {0x3f, 0x2f, [@l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x8, 0x1000, 0x0, 0x4}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x0, 0x6c6, 0x4, 0x1}}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x0, 0x2, 0x8, 0x6, 0x5}}, @l2cap_conf_flushto={0x2, 0x2, 0x70e8}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x63, 0x3f, 0x3f, 0x20, 0x3f}}, @l2cap_conf_mtu={0x1, 0x2, 0x94c}]}}, @l2cap_conn_req={{0x2, 0x2, 0x4}, {0x3, 0x81}}, @l2cap_conf_req={{0x4, 0x0, 0x1b}, {0x8, 0x6, [@l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0xfff}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0xfff}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x81, 0x2}, {0x401}}, @l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0x2, 0x3, 0x4, 0x1}}]}}, 0x9d)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x93}, "6b83c0a372dabab9d4836ac28bc057b95d926d2857927b2f3fb95234e67b14ada33a7e70ecaf87800ea755b8d9b00335255e3a2dba61b7387d38f8cbc1469dd709f653ffb8f1274ed2330c9adfcf2bf4f298db6f700b268516445ecd1b76628e226b07c54e42488db69542b497d8b4d3eaf06c44eb403db2456964ae09ba3a1b0e59cafae4203f8c0bce8c336ff81c05d87066"}, 0x97)
syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x130}}}, 0xd)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1b7}, @l2cap_cid_signaling={{0x1b3}, [@l2cap_conf_req={{0x4, 0x20, 0x46}, {0x3f, 0x9e31, [@l2cap_conf_ews={0x7, 0x2, 0xfff}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x1f, 0x3, 0xbac, 0xe3f, 0x8a6}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x4a, 0x8, 0x5, 0x6, 0x1}}, @l2cap_conf_flushto={0x2, 0x2, 0x5}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x7, 0x7f, 0xffff, 0x401, 0x8}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x10, 0x6, 0x3, 0x6, 0x3}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x0, 0x0, 0x2, 0x80}}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_disconn_req={{0x6, 0x4, 0x4}, {0xaf57, 0x49}}, @l2cap_move_chan_req={{0xe, 0x2, 0x3}, {0x200, 0x48}}, @l2cap_info_rsp={{0xb, 0x3, 0xbf}, {0x100, 0x1ff, "f027d18c4bb21f6d953ad0b0e577177f73b40c3c66e0f7c0bbab1a42701111b83a6abb820ef655058592d36a30ce85bd48e1047de2e5076807fac6e72eccdf518a6e11fe9c1dde2f70597901ac42bc4995d5d7b13e41e10e67d2c467763d88e3f8ed122aac0bf53452c04f3363239e1a85f6333bffae879fa4390b837a6f88b4cd2b1d07a8f3a51e7607aa6fa047bf2bb2978aa9dee2e3666801f24eec3b9307f780c103d9590f177e7754a667b58c800701aa1252c2efda54bf1a"}}, @l2cap_create_chan_rsp={{0xd, 0x98, 0x8}, {0xea9, 0x200, 0x4, 0x7}}, @l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x5, 0x3d}}, @l2cap_move_chan_cfm={{0x10, 0x7, 0x4}, {0xa0, 0x5}}, @l2cap_cmd_rej_unk={{0x1, 0xd1, 0x2}, {0x9}}, @l2cap_info_rsp={{0xb, 0x8, 0x6b}, {0x2, 0x2, "8a5fafb6b9e4bcd8835e677bb9cb174b69df27564d3babfce9cd88d975c0c2f5a4d69067c14fe9a5d16075ff5bb92c40fe0a56524c2ff02babc20ccdc65ec3367ed3821689d224bec0b8141ad28002ef4cd19c26f3261ea485d95371cd5aad3b52b8abb05f9014"}}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0xd4b}}]}}, 0x1bc)
syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x19}, {0x6, [{0xc9, 0x34}, {0xc8, 0xfffa}, {0xc8}, {0xc8, 0x40}, {0xc8, 0x7fff}, {0xc9, 0x7fff}]}}}, 0x1c)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x3, 0xc8, {0x9, 0x8, 0x9, 0x2, 0x7}}}}, 0x17)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x0, 0xc}, {0x0, 0x5, 0x3, 0x0, [0x2, 0x0]}}}}, 0x19)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x1f, 0xc8}}}, 0x8)
syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x2, 0x20}}, @l2cap_move_chan_req={{0xe, 0x8, 0x3}, {0x4, 0x4}}]}}, 0x18)
syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x83}, "1f0df46fa6302c9a45350e2bb3b293e6aed239e7f5eb652908c468be60ae01b5e422e778afa9d95153f877178b8ba53f599c91ee0a790c320035249713624591b2b4598643b7d7354805920424dbe55a1e52ec03eaeeefdd7ba78504e42ed9799a619516414001e29955daa00dd8147f103abadc417b9b8a997e61ec7546b39725bd10"}, 0x87)
syz_emit_vhci(&(0x7f0000000680)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0x7}}, @l2cap_conn_req={{0x2, 0x3f, 0x4}, {0x1, 0x2}}, @l2cap_move_chan_req={{0xe, 0x8e, 0x3}, {0xffff, 0x7}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x5a, 0xff}}, @l2cap_move_chan_rsp={{0xf, 0xa0, 0x4}, {0x401, 0x3}}, @l2cap_create_chan_rsp={{0xd, 0xa8, 0x8}, {0x45, 0x5, 0x8}}, @l2cap_create_chan_req={{0xc, 0x7, 0x5}, {0x5, 0x857, 0x6}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x8, 0x9}}]}}, 0x4b)
syz_emit_vhci(&(0x7f0000000740)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x92}, "7e94f6816dded7d430844753fad8406bf637b3f71929ec18b57175129b5e895838375164a14bce0c79c2d7c6575bbb4a8ab7fa3db0958e698da8e06f6ad64b175532fe7f3ee52ab64a1716670922f1629d32f6a653d7880d77aa548566f6576fae6ae99e94dc00550daadc2a19f4cd205f0c995968e47476964bf16082ff576c3ad2a573850278cfb422a111e8775194e06e"}, 0x96)
syz_emit_vhci(&(0x7f0000000800)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc9}, "e9952a3c21cd12d299302407ad75dfeeefff6ffa4243c9dd8dc2be0fba51173bb4af5c0e59cbd1872efe4d0b91cb7b6dd49307e86b4850dc7ef07e38ee8a9379957c44265fc8d9f7b525eeada4ebe918e39553efe186e80e79b6c49ae765b790ad2a4d795589dcabf86b7df42d5a7f88e7b90bbacd3f07a25527911ca12c78a0719b61f7f18bfa7c7dbaad0b25aae11b42c7f8ce8d4663051734317ddeb2aacdb1bc85c40ef2765becb14b728c75208f1943289e0fcc4a890be4258452dc0521e11555f197c2ca0909"}, 0xcd)
syz_emit_vhci(&(0x7f0000000900)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2c}, "a074416f0e7a7a371ea7f9aec71809d149c7e4107e88425e0ed82c6233a083e2f0c21572b24c9a8289096fff"}, 0x30)
syz_emit_vhci(&(0x7f0000000940)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x39}, @l2cap_cid_signaling={{0x35}, [@l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0xfffc, 0x3}}, @l2cap_conn_req={{0x2, 0xf4, 0x4}, {0x1000, 0x8}}, @l2cap_conn_req={{0x2, 0x5, 0x4}, {0xffff, 0x4}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x5, 0xc9}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0xa8, 0x5, 0x5}}]}}, 0x3e)

[   89.268744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   89.271420] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   89.272575] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   89.275154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   89.277629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   89.279155] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   89.280776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.298401] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   89.300101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   89.303563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   89.324793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   89.326077] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   89.327850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   89.329248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   89.330553] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   89.350442] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   89.352029] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   89.353414] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   89.381008] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   89.384308] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   89.385728] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   89.388361] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   89.389968] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   89.391498] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   89.451043] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   89.453618] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   89.456059] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   89.457116] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   89.463494] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   89.463597] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   89.472405] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   89.474327] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   89.476111] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   89.477539] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   89.480280] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   89.481820] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   91.351793] Bluetooth: hci3: Opcode 0x c03 failed: -110
[   91.351945] Bluetooth: hci1: command 0x0409 tx timeout
[   91.353349] Bluetooth: hci0: command 0x0409 tx timeout
[   91.354219] Bluetooth: hci2: Opcode 0x c03 failed: -110
[   91.355571] 
[   91.355736] ======================================================
[   91.356261] WARNING: possible circular locking dependency detected
[   91.356775] 6.2.0-next-20230224 #1 Not tainted
[   91.357180] ------------------------------------------------------
[   91.357701] syz-executor.6/271 is trying to acquire lock:
[   91.360498] ffff88800dda8880 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xd80
[   91.362454] 
[   91.362454] but task is already holding lock:
[   91.362996] ffff88800dda8920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250
[   91.363805] 
[   91.363805] which lock already depends on the new lock.
[   91.363805] 
[   91.364477] 
[   91.364477] the existing dependency chain (in reverse order) is:
[   91.365107] 
[   91.365107] -> #1 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}:
[   91.365724]        __mutex_lock+0x133/0x14a0
[   91.366125]        hci_cmd_sync_work+0x1e6/0x320
[   91.366544]        process_one_work+0xa0f/0x1790
[   91.366987]        worker_thread+0x63b/0x1260
[   91.367401]        kthread+0x2e9/0x3a0
[   91.367750]        ret_from_fork+0x2c/0x50
[   91.368157] 
[   91.368157] -> #0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}:
[   91.368913]        __lock_acquire+0x2d56/0x6380
[   91.369355]        lock_acquire.part.0+0xea/0x320
[   91.369821]        __flush_work+0x109/0xd80
[   91.370235]        __cancel_work_timer+0x39c/0x4e0
[   91.370687]        hci_cmd_sync_clear+0x52/0x250
[   91.371144]        hci_unregister_dev+0xf9/0x410
[   91.371596]        vhci_release+0x80/0x100
[   91.372002]        __fput+0x263/0xa40
[   91.372367]        task_work_run+0x174/0x280
[   91.372785]        do_exit+0xad8/0x2800
[   91.373159]        do_group_exit+0xd4/0x2a0
[   91.373562]        __x64_sys_exit_group+0x3e/0x50
[   91.374013]        do_syscall_64+0x3f/0x90
[   91.374406]        entry_SYSCALL_64_after_hwframe+0x72/0xdc
[   91.374948] 
[   91.374948] other info that might help us debug this:
[   91.374948] 
[   91.375671]  Possible unsafe locking scenario:
[   91.375671] 
[   91.376179]        CPU0                    CPU1
[   91.376559]        ----                    ----
[   91.376943]   lock(&hdev->cmd_sync_work_lock);
[   91.377329]                                lock((work_completion)(&hdev->cmd_sync_work));
[   91.377998]                                lock(&hdev->cmd_sync_work_lock);
[   91.378577]   lock((work_completion)(&hdev->cmd_sync_work));
[   91.379069] 
[   91.379069]  *** DEADLOCK ***
[   91.379069] 
[   91.379574] 1 lock held by syz-executor.6/271:
[   91.379953]  #0: ffff88800dda8920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250
[   91.380796] 
[   91.380796] stack backtrace:
[   91.381169] CPU: 0 PID: 271 Comm: syz-executor.6 Not tainted 6.2.0-next-20230224 #1
[   91.381809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[   91.382483] Call Trace:
[   91.382707]  <TASK>
[   91.382914]  dump_stack_lvl+0x91/0xf0
[   91.383242]  check_noncircular+0x263/0x2e0
[   91.383614]  ? __pfx_check_noncircular+0x10/0x10
[   91.384040]  __lock_acquire+0x2d56/0x6380
[   91.384411]  ? lock_is_held_type+0x9f/0x120
[   91.384790]  ? __pfx___lock_acquire+0x10/0x10
[   91.385192]  ? __pfx_register_lock_class+0x10/0x10
[   91.385622]  ? __wait_for_common+0x394/0x550
[   91.386016]  ? __pfx_lock_release+0x10/0x10
[   91.386400]  lock_acquire.part.0+0xea/0x320
[   91.386794]  ? __flush_work+0xdd/0xd80
[   91.387150]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   91.387576]  ? __flush_work+0xdd/0xd80
[   91.387922]  ? rcu_read_lock_sched_held+0x42/0x80
[   91.388342]  ? trace_lock_acquire+0x170/0x1e0
[   91.388739]  ? __flush_work+0xdd/0xd80
[   91.389085]  ? lock_acquire+0x32/0xc0
[   91.389427]  ? __flush_work+0xdd/0xd80
[   91.389779]  __flush_work+0x109/0xd80
[   91.390117]  ? __flush_work+0xdd/0xd80
[   91.390464]  ? __pfx_mark_lock.part.0+0x10/0x10
[   91.390877]  ? __pfx___flush_work+0x10/0x10
[   91.391259]  ? lock_acquire.part.0+0xea/0x320
[   91.391656]  ? hci_cmd_sync_clear+0x45/0x250
[   91.392037]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   91.392470]  ? hci_cmd_sync_clear+0x45/0x250
[   91.392855]  ? rcu_read_lock_sched_held+0x42/0x80
[   91.393277]  ? trace_lock_acquire+0x170/0x1e0
[   91.393675]  ? lock_is_held_type+0x9f/0x120
[   91.394063]  ? mark_held_locks+0x9e/0xe0
[   91.394420]  __cancel_work_timer+0x39c/0x4e0
[   91.394815]  ? __pfx___cancel_work_timer+0x10/0x10
[   91.395235]  ? __cancel_work_timer+0x2aa/0x4e0
[   91.395628]  ? __pfx___cancel_work_timer+0x10/0x10
[   91.396046]  ? lock_release+0x1e3/0x710
[   91.396394]  ? __pfx_lock_release+0x10/0x10
[   91.396777]  ? do_raw_write_lock+0x11e/0x3b0
[   91.397156]  ? __pfx_vhci_release+0x10/0x10
[   91.397531]  hci_cmd_sync_clear+0x52/0x250
[   91.397900]  ? __pfx_vhci_release+0x10/0x10
[   91.398279]  hci_unregister_dev+0xf9/0x410
[   91.398644]  vhci_release+0x80/0x100
[   91.398981]  __fput+0x263/0xa40
[   91.399280]  task_work_run+0x174/0x280
[   91.399618]  ? __pfx_task_work_run+0x10/0x10
[   91.400001]  ? do_raw_spin_unlock+0x53/0x220
[   91.400382]  do_exit+0xad8/0x2800
[   91.400685]  ? lock_release+0x1e3/0x710
[   91.401034]  ? __pfx_lock_release+0x10/0x10
[   91.401409]  ? do_raw_spin_lock+0x125/0x270
[   91.401775]  ? __pfx_do_exit+0x10/0x10
[   91.402112]  do_group_exit+0xd4/0x2a0
[   91.402441]  __x64_sys_exit_group+0x3e/0x50
[   91.402821]  do_syscall_64+0x3f/0x90
[   91.403138]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[   91.403574] RIP: 0033:0x7f01ffe79b19
[   91.403892] Code: Unable to access opcode bytes at 0x7f01ffe79aef.
[   91.404403] RSP: 002b:00007ffcfd1db438 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   91.405023] RAX: ffffffffffffffda RBX: 00007ffcfd1dbc18 RCX: 00007f01ffe79b19
[   91.405604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[   91.406181] RBP: 0000000000000000 R08: 0000000000000026 R09: 00007ffcfd1dbc18
[   91.406757] R10: 0000000000000020 R11: 0000000000000246 R12: 00007f01ffed3233
[   91.407344] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000000000f8
[   91.407923]  </TASK>
[   91.415211] Bluetooth: hci5: command 0x0409 tx timeout
[   91.415671] Bluetooth: hci4: command 0x0409 tx timeout
[   91.543251] Bluetooth: hci7: command 0x0409 tx timeout
[   91.543721] Bluetooth: hci6: command 0x0409 tx timeout
[   93.399234] Bluetooth: hci0: command 0x041b tx timeout
[   93.400616] Bluetooth: hci1: command 0x041b tx timeout
[   93.463307] Bluetooth: hci4: command 0x041b tx timeout
[   93.464018] Bluetooth: hci5: command 0x041b tx timeout
[   93.591305] Bluetooth: hci6: command 0x041b tx timeout
[   93.592018] Bluetooth: hci7: command 0x041b tx timeout
[   94.765361] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.772381] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.774143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.776913] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.784608] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   94.785834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   95.133276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   95.134414] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   95.135976] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   95.137695] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   95.138678] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   95.139703] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   95.447268] Bluetooth: hci1: command 0x040f tx timeout
[   95.447279] Bluetooth: hci0: command 0x040f tx timeout
[   95.511336] Bluetooth: hci5: command 0x040f tx timeout
[   95.511989] Bluetooth: hci4: command 0x040f tx timeout
[   95.639267] Bluetooth: hci7: command 0x040f tx timeout
[   95.639884] Bluetooth: hci6: command 0x040f tx timeout
[   96.855250] Bluetooth: hci2: command 0x0409 tx timeout
[   97.175250] Bluetooth: hci3: command 0x0409 tx timeout
[   97.495271] Bluetooth: hci0: command 0x0419 tx timeout
[   97.495675] Bluetooth: hci1: command 0x0419 tx timeout
[   97.559223] Bluetooth: hci4: command 0x0419 tx timeout
[   97.559637] Bluetooth: hci5: command 0x0419 tx timeout
[   97.687218] Bluetooth: hci6: command 0x0419 tx timeout
[   97.687628] Bluetooth: hci7: command 0x0419 tx timeout
[   98.903208] Bluetooth: hci2: command 0x041b tx timeout
[   99.223241] Bluetooth: hci3: command 0x041b tx timeout
[  100.951283] Bluetooth: hci2: command 0x040f tx timeout
[  101.271270] Bluetooth: hci3: command 0x040f tx timeout

VM DIAGNOSIS:
00:09:29  Registers:
info registers vcpu 0
RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82502865 RDI=ffffffff87f10da0 RBP=ffffffff87f10d60 RSP=ffff88801a29f190
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000079 R11=0000000000000001
R12=0000000000000079 R13=ffffffff87f10d60 R14=0000000000000010 R15=ffffffff82502850
RIP=ffffffff825028bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe55dea16000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe55dea14000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1d5f71b6f4 CR3=000000000d670000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=0000000000000000000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff8776a8d8 RBX=ffffffff8777a908 RCX=ffffffff812c0e99 RDX=ffffffff87157260
RSI=0000000000000006 RDI=0000000000000022 RBP=dffffc0000000000 RSP=ffff88800ff3fbb0
R8 =0000000000000001 R9 =000000000000ce5e R10=0000000000000000 R11=0000000000000001
R12=000000000000051f R13=ffffffff8717a908 R14=ffffffff870822bc R15=ffffffff8717a900
RIP=ffffffff812c0ca8 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe2c3d744000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe2c3d742000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005655136c8750 CR3=000000000e904000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=6c6175747269762f736563697665642f
XMM02=ffffffffffffffff00000000000000ff XMM03=696e656420737365636341002f737973
XMM04=00000003ffffffff00005655136c0b80 XMM05=00005655136c09a000005655136c0950
XMM06=00005655136bb3100000000000000000 XMM07=00000000000000000000000000000000
XMM08=7269762f736563697665642f7379732f XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000