Warning: Permanently added '[localhost]:17150' (ECDSA) to the list of known hosts.
2023/08/16 19:46:40 fuzzer started
2023/08/16 19:46:40 dialing manager at localhost:43643
syzkaller login: [  123.262128] cgroup: Unknown subsys name 'net'
[  123.471976] cgroup: Unknown subsys name 'rlimit'
[  132.793641] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2023/08/16 19:46:54 syscalls: 203
2023/08/16 19:46:54 code coverage: enabled
2023/08/16 19:46:54 comparison tracing: enabled
2023/08/16 19:46:54 extra coverage: enabled
2023/08/16 19:46:54 setuid sandbox: enabled
2023/08/16 19:46:54 namespace sandbox: enabled
2023/08/16 19:46:54 Android sandbox: enabled
2023/08/16 19:46:54 fault injection: enabled
2023/08/16 19:46:54 leak checking: enabled
2023/08/16 19:46:54 net packet injection: enabled
2023/08/16 19:46:54 net device setup: enabled
2023/08/16 19:46:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2023/08/16 19:46:54 devlink PCI setup: PCI device 0000:00:10.0 is not available
2023/08/16 19:46:54 USB emulation: enabled
2023/08/16 19:46:54 hci packet injection: enabled
2023/08/16 19:46:54 wifi device emulation: enabled
2023/08/16 19:46:54 802.15.4 emulation: enabled
2023/08/16 19:46:54 fetching corpus: 0, signal 0/0 (executing program)
2023/08/16 19:46:55 starting 8 fuzzer processes
19:46:55 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = memfd_secret(0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfe7}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x100}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xb8}}, 0x4000000)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000200))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0xe2, 0xd7, 0xa8, 0x5}, {0x1, 0x1f, 0x4, 0xff}, {0x8, 0x7, 0x1, 0x6}]})
ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f00000002c0))
r4 = syz_open_dev$hiddev(&(0x7f0000000300), 0x3, 0x404000)
ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f0000000340)=0x3)
r5 = fsmount(r1, 0x0, 0xe61e8135ca5f9379)
ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f0000000380)={0x3, 0x1, 0xd0ff})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0x406, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xdea}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x4c}}, 0x4080)
r6 = memfd_secret(0x80000)
ioctl$HIDIOCINITREPORT(r6, 0x4805, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r8, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xed3b}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000)
fsmount(r6, 0x0, 0x7a)
sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r8, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048041}, 0x4000)

19:46:55 executing program 1:
r0 = syz_io_uring_setup(0x78b7, &(0x7f0000000000)={0x0, 0x43ff, 0x4, 0x0, 0x222}, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4045}, 0x4008004)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x45c4110}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd8, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x210}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffa8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffc0}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x20000002)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa8, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x16}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa0, r1, 0x812, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x8801)
shmget(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3c}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd0}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc804}, 0x4000)
io_uring_setup(0x2e7, &(0x7f0000000980)={0x0, 0xf47d, 0x4, 0x1, 0x37a, 0x0, r0})
syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3)
r4 = fsmount(0xffffffffffffffff, 0x1, 0x184)
syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r4)
munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r5 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$clear(0x7, r5)
syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r4)

[  136.470362] audit: type=1400 audit(1692215215.092:6): avc:  denied  { execmem } for  pid=278 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
19:46:55 executing program 2:
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={""/10, ""/2, @private}, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xec, r0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe9a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x44040}, 0x8040)
r1 = fsopen(&(0x7f0000000340)='qnx6\x00', 0x1)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000380))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan4\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x32}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040050}, 0x21)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r5 = memfd_secret(0x80000)
fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000680)=')@\x00', &(0x7f00000006c0)='./file0\x00', r5)
ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f0000000700)={0x2, 0x100, 0x2})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r2)
sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008854}, 0x8000)
syz_io_uring_setup(0x6a0f, &(0x7f0000000880)={0x0, 0x414b, 0x4, 0x1, 0xc0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940))
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000980)=0x7fffffff, 0x7, 0x2)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x70, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004081}, 0x4000)

19:46:55 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42400, 0x0)
write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @ipv6=@tipc_packet={0x7, 0x6, "bf532a", 0xae, 0x6, 0xff, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x2f, 0x5, '\x00', [@ra={0x5, 0x2, 0x800}, @enc_lim={0x4, 0x1, 0x1f}, @ra={0x5, 0x2, 0x5}, @pad1, @jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @pad1]}, @routing={0x94, 0x8, 0x1, 0x81, 0x0, [@loopback, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], @payload_mcast={{{{{{0x2e, 0x0, 0x0, 0x1, 0x0, 0xb, 0x3, 0x2, 0x3, 0x0, 0x3, 0x0, 0x3, 0x1, 0x5, 0x7c, 0x4, 0x4e23, 0x4e20}, 0x2, 0x1}, 0x2, 0x3}, 0x4}}, [0x0, 0x0]}}}}, 0xda)
r1 = fsmount(0xffffffffffffffff, 0x1, 0x85)
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)={'rose0\x00'})
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000180))
write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c044}, 0x40000)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000300)=0x1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44004801}, 0x20000080)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000440))
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x4, &(0x7f0000000480)=[{0x6, 0x6, 0x5, 0x8}, {0x1ff, 0x8, 0x9, 0x1}, {0x3, 0x1, 0x0, 0x1f}, {0x8, 0x3f, 0xff}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000500)={0x0, 0x7, 0x1})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x313)
sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008080}, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x48a0}, 0x20000001)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r2)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r5, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20008041)
keyctl$negate(0xd, 0x0, 0x0, 0x0)

19:46:55 executing program 4:
read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/128, 0x80)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000000c0)={0x1, 0x1, 0x7f})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)=0x1)
r1 = inotify_init1(0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={0x0, 0x3, r1, 0x81})
r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000200)=0x81, 0x4)
bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x3, r3, 0x1, 0x2}, 0x14)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000280))
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x10400)
ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f0000000340)={0x3, 0x100, 0x7343})
socket$packet(0x11, 0x2, 0x300)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000380)={'veth0_to_hsr\x00'})
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xc)
r5 = syz_open_dev$hiddev(&(0x7f00000003c0), 0x4, 0x0)
ioctl$HIDIOCSUSAGES(r5, 0x501c4814, &(0x7f0000000400)={{0x3, 0x1, 0x3, 0x400, 0x5, 0x4}, 0x234, [0x5, 0x31, 0x9, 0x4, 0x1, 0x7, 0x9bd, 0x2, 0x8, 0x8, 0xfffeffff, 0x80000001, 0x40, 0x43, 0x6, 0xc609, 0x55b7da80, 0x80, 0x3, 0xa06, 0xfffffffa, 0x7, 0x4, 0xef, 0x7, 0x3, 0x400, 0x8d68, 0x8, 0x0, 0x74, 0x9, 0x3f, 0xda7, 0x8, 0x7, 0x7921, 0x8, 0x3, 0x8, 0x1, 0x7ff, 0x401, 0xfffffff9, 0x46, 0x5, 0x5, 0x5, 0x3cd2e90, 0x5, 0x3, 0x9a, 0x80000001, 0xffffffff, 0x7, 0x6840, 0x3, 0x5, 0x0, 0x69f9, 0xff, 0x2, 0x3, 0x7f, 0x3, 0x80000000, 0x82, 0x9, 0x6, 0x8000, 0x8, 0xa, 0x4, 0x2, 0x1000, 0x4, 0xee, 0x8, 0x4b, 0x9, 0x0, 0x1, 0x5, 0x1, 0x0, 0xffff0001, 0x8, 0x8, 0x5, 0x3, 0x3ff, 0xffff, 0x800, 0x7fff, 0x93, 0x7ff, 0x1, 0x1000, 0x8, 0x7, 0xffc8, 0x208, 0x10000, 0x7fffffff, 0x2, 0x3, 0x10001, 0x25, 0x5, 0x1, 0x9, 0xb12e, 0x3, 0x9, 0x1ff, 0x5, 0x9, 0x3, 0xffff, 0x1ff, 0xfffffffc, 0x7, 0x5, 0x1, 0x6da, 0x200, 0xc5b, 0x0, 0x3f, 0x101, 0x7, 0x200, 0x4, 0xba, 0x7f, 0x8, 0x400, 0x7f, 0x80, 0x2, 0x6, 0x78c, 0x350c, 0xfffffffa, 0x6, 0x4, 0x10000, 0xbf57, 0x7fff, 0x6ad6446b, 0x2, 0x3, 0x401, 0x9, 0xe0000000, 0xfffffce9, 0x81, 0x3, 0x1, 0x3ff, 0x2, 0x4, 0x8, 0x3f, 0x80000001, 0x800, 0x9, 0x2, 0x2cd, 0x8, 0x7fff, 0x5, 0x4, 0x9, 0x7, 0x96f, 0xf4, 0x2e0, 0x4, 0x1, 0x23, 0xfce, 0x6c3, 0x5, 0x3, 0x8, 0x7fff, 0x3, 0x2, 0x7, 0x8000, 0x8, 0x6, 0x7f, 0x5, 0x400, 0x10001, 0x3, 0x1f0, 0x7f, 0x1ff, 0x6, 0x8001, 0x7fffffff, 0x4, 0x1ff, 0xfffffff7, 0xfae, 0x0, 0x1, 0x8, 0x3f, 0x3, 0x80000000, 0x5, 0x2fdf, 0xfff, 0x80000000, 0x4, 0x9, 0xfffffff9, 0x6, 0xc604, 0x4, 0x2, 0x6, 0x100, 0x5, 0xd8, 0x240, 0xfff, 0x1ff, 0x5f6d, 0x4, 0x1, 0x7, 0x7, 0x6, 0x80000000, 0xffff0d6c, 0x9, 0x81, 0x5, 0x1, 0x5, 0x8001, 0xca1, 0x2, 0xfffffffb, 0x1, 0x80000001, 0xeb, 0xe13, 0x7, 0xffffffff, 0x0, 0x1, 0x400, 0x0, 0x3, 0xfffffff9, 0x2, 0x7fff, 0x20, 0x80000001, 0x6, 0xfffff801, 0x3e5, 0x0, 0x8, 0xdfbc, 0x4, 0x3f, 0x7, 0xb51, 0x8000, 0x3a, 0x5, 0x8, 0xfff, 0x10001, 0xffffffff, 0x4dc8, 0x6, 0x2, 0xffffffff, 0x4, 0x7, 0x3f, 0x7, 0x4, 0x1, 0x80, 0x3, 0x80000000, 0x80, 0x2, 0x3, 0x7fffffff, 0xb65, 0x8, 0x3, 0x3f, 0x3f, 0x0, 0xdb, 0xfffffff7, 0x5, 0xfffffffa, 0xffffffff, 0xe6, 0x10000, 0x1, 0x6, 0x9, 0x3635, 0x1, 0x0, 0xff, 0x4, 0x7, 0x3ff, 0x0, 0x4, 0x2, 0x7fff, 0x100, 0xbb, 0x7fffffff, 0x7, 0x1, 0x2, 0x4, 0x41d23c77, 0xb4, 0x9, 0x4de, 0x80000000, 0xfffffffb, 0x4, 0x5, 0x20, 0x3, 0x7e13, 0x34b0, 0x9, 0xfffff800, 0x74, 0x0, 0x1, 0xffffad24, 0x0, 0x8, 0xffff367e, 0x19b8, 0x9, 0x200, 0x2, 0x7, 0x1, 0x3, 0x5, 0x2, 0x9, 0x1c6, 0x3e, 0x0, 0x3ff, 0x1, 0x5, 0xc82, 0x1, 0x0, 0x6, 0x3, 0xff, 0x9, 0x8a26, 0xea8d, 0x6, 0x5, 0x80000001, 0x9, 0xffffffff, 0x7fffffff, 0x7f, 0x9, 0xfffffffa, 0x6, 0x9, 0x2, 0x6, 0x8, 0x6, 0x6, 0x8, 0x4, 0x0, 0xfef, 0x2, 0x0, 0x1, 0x8, 0x6, 0x2, 0x0, 0x8, 0x2, 0xb09, 0x6, 0x4, 0x1, 0x8000, 0x3dac, 0x8000, 0x40, 0x0, 0x7fff, 0x9, 0x7, 0x8, 0x7, 0x20, 0x4, 0x100, 0x79b, 0x100, 0x3, 0x8001, 0x3, 0xfff, 0x401, 0x7fff, 0xffffffff, 0x6, 0x1, 0x8001, 0x1f, 0x639, 0x6d7a, 0x5, 0x0, 0x5, 0x70ce, 0x10001, 0x7, 0x20, 0x80000000, 0x2, 0x2, 0x280000, 0x5, 0x200, 0x7, 0x8000, 0x4, 0x4, 0x9, 0x9, 0x200, 0x7, 0x7ff, 0x6, 0x0, 0xbe9, 0x2, 0x9, 0x40, 0x1f, 0x9, 0x7, 0x4, 0x9, 0x1, 0x200, 0x6, 0x5, 0x9, 0x530, 0x3, 0x1, 0x1, 0xff, 0x1000, 0x5, 0x7, 0x2, 0xe59, 0x2, 0x7, 0x2f60c, 0x9, 0x9, 0x9, 0xfffffff9, 0x800, 0x3, 0x0, 0xffffffff, 0x30000, 0xe8, 0x1000, 0x4, 0x8, 0x80, 0x4, 0x9f, 0x0, 0x8, 0xd8f2, 0x2, 0x9a, 0x5, 0x8a, 0x62a4000, 0x7fff, 0xd534, 0x7, 0x6, 0x1, 0x7, 0x1, 0xa, 0x1000, 0x5, 0x4224, 0x1f, 0xa1, 0x498343e0, 0x5, 0x5, 0x4, 0x3, 0x4, 0x4, 0x1, 0xe, 0x0, 0x2, 0x6, 0xffffff81, 0x4, 0x39, 0x2, 0xe67a, 0xfffffffe, 0x1, 0xffffffff, 0x3f, 0x8001, 0x8, 0xffffffff, 0x1f, 0x400, 0x1dcc, 0x1e, 0x8, 0x9, 0x7fff, 0xdb70, 0x0, 0x8, 0x80000001, 0x4c6, 0xffffffff, 0x8, 0x8001, 0x7, 0x671, 0x7f, 0x1000, 0x10000, 0xfffffffe, 0x0, 0x9, 0x45, 0x1, 0x8001, 0x9, 0x2, 0x9, 0x5, 0x7, 0x5, 0x1, 0x4, 0x8000, 0x8, 0xffff, 0x7, 0x0, 0x44d, 0x80000001, 0x4, 0x401, 0x3, 0x7fffffff, 0x800, 0xffff0001, 0xb8d1, 0x20, 0x2da, 0x3, 0xbfb9, 0x7, 0x11e0, 0x5, 0xf7, 0x3, 0x9, 0xf3c, 0xa, 0x100, 0x0, 0x401, 0x10000, 0x1, 0x5, 0x43, 0x81, 0x9, 0x7fff, 0xe81, 0x5, 0xff, 0x7, 0xa30e, 0x80000000, 0x401, 0x9ad, 0x7, 0x4, 0x8, 0xf11b, 0x101, 0xf4, 0x9b5d, 0x257, 0x8001, 0x3, 0x2, 0x6, 0xff, 0xff, 0x4, 0x10000, 0xffff, 0x8000, 0x267, 0x3, 0x6, 0x10000, 0x80000001, 0x4, 0xb3c, 0x833e, 0x3, 0xd5, 0x893c, 0x80000000, 0x8, 0x8001, 0x45c, 0x8000, 0x2318, 0x0, 0x40, 0x1, 0x8, 0x4, 0x255, 0x80f, 0x7, 0x9, 0x4, 0x6, 0x100, 0x9, 0x6, 0x0, 0xfffffff8, 0x1, 0x20de, 0x812, 0x4, 0x3ff, 0x1, 0x9, 0x2, 0x8, 0x89, 0x1, 0x341e8f5d, 0x6, 0x6, 0x9, 0x8000, 0x5, 0xffffe9a0, 0x9, 0x5, 0x8, 0x4, 0xffff, 0x101, 0x80, 0x7, 0x100, 0x8, 0x81, 0x0, 0x2ae56443, 0x0, 0x0, 0x4, 0xd33e, 0x9, 0x9, 0x1, 0x3, 0x8000, 0x401, 0x8000, 0x5, 0x7f, 0x3, 0x5, 0xa7, 0x0, 0x9, 0x4, 0xfffffffd, 0xfcf, 0x8, 0x3, 0xd1, 0x6, 0xff, 0x10001, 0x6, 0x3, 0x1c, 0x2, 0x4, 0x2, 0x0, 0x5, 0xff, 0x3f, 0x1001, 0x5, 0x3ff, 0x1, 0x1, 0x53de64b5, 0x3, 0x101, 0x6, 0xfffc0000, 0x6, 0x7, 0x5, 0x8, 0x3, 0x3, 0x1, 0x4, 0x4, 0x6000000, 0x99, 0x10001, 0xffff, 0x40, 0x80000001, 0x5, 0x809, 0x1, 0x3, 0x4, 0x9, 0x2, 0x4, 0x7, 0x6, 0xfffff001, 0x4ded615a, 0x5, 0x1, 0xfffffff9, 0x1000, 0x3, 0x5, 0x0, 0x4, 0x1, 0xfd00, 0x4, 0x7, 0xc8, 0x8, 0x3, 0x3, 0x5, 0x20000000, 0x0, 0x9, 0x4, 0x157, 0x7fff, 0x2, 0x1, 0xffff, 0x401, 0x6, 0x8, 0x8, 0x52, 0xd46, 0x6, 0x100, 0x7, 0xb92f, 0x60, 0x40, 0x6702, 0x95a, 0x1, 0x5, 0x1, 0x1, 0x4, 0x7f, 0x3, 0x0, 0x5, 0x0, 0x40, 0x5, 0x5, 0x3, 0xffffffff, 0x10000, 0x23e0, 0x4, 0x4, 0x4, 0x1, 0x3, 0x1000, 0x5, 0x10000, 0xffffb003, 0x9, 0x41, 0xff, 0x0, 0x0, 0x310800, 0xfffffffe, 0x1, 0x7ff, 0x80000000, 0x5, 0x7fff, 0x3ff, 0x81, 0x100, 0x3, 0x807, 0x9, 0x1eb, 0x6, 0x1f, 0x8, 0x0, 0x3, 0x4, 0xfff, 0xffffffff, 0x4, 0xfffffff7, 0x144, 0x1, 0x9aaa, 0x6, 0x7, 0x545, 0xd2d, 0x6, 0x1, 0x3, 0x7, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4, 0x6, 0x20, 0x9, 0x7, 0x8, 0x0, 0xfffffff7, 0xfd, 0x3f800000, 0x1, 0x6, 0x9, 0x800, 0x5, 0x8, 0x1ad, 0x6, 0x3, 0x6, 0x4, 0x4, 0x5, 0x1ff, 0xcc3, 0x800, 0x3, 0x6, 0x6, 0x8, 0x1, 0x1, 0x0, 0x2, 0x5, 0x4, 0xeb, 0x4, 0x7, 0x100, 0x1, 0x9, 0x0, 0x3f, 0x7, 0x7, 0xaf, 0x5, 0x5, 0xfffffffb, 0x0, 0x80000001, 0x7, 0x3, 0x3, 0x8001, 0x1, 0x5, 0x7fffffff, 0x1f, 0x80, 0x3, 0x79f4dbb4, 0x6, 0x0, 0x10000, 0x2, 0xab, 0x200, 0x8, 0x0, 0x80000001, 0x5, 0x2, 0x6, 0xd413, 0x7, 0x9, 0x7, 0x6376, 0x1, 0x3, 0x19d1, 0x1f, 0x4, 0x1401, 0x2, 0x6, 0x58, 0xe95f, 0x0, 0xffff, 0x81, 0x6, 0x9c6, 0x3, 0x20, 0x800, 0x0, 0xffffffff, 0x0, 0x8000, 0xfffffffe, 0x2, 0x9, 0x7f75, 0x9, 0x3, 0x7f, 0x8001, 0x5, 0xf3ad0f2, 0x4, 0x0, 0x3, 0x3f, 0x200, 0x919, 0x0, 0x4, 0x80000000, 0x8, 0x2, 0x101, 0xf8fa, 0x0, 0x9]})

19:46:55 executing program 5:
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xd}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8889}, 0x80)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x3)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe0, 0x0, 0x823, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6f2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb265}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x9}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4004)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r0)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4e3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x4000011)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000540)='(\x00', 0x0, r2)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xcc, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0xa4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xbde}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7f}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xc1a554b4d0fb7a82}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008800}, 0x1)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r0)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040010}, 0x8001)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8100)
sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x810)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x98, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x8044}, 0x40001)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r5)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'wpan3\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000d80)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, r6, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x8885}, 0x44)

19:46:55 executing program 6:
keyctl$search(0xa, 0x0, &(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0)
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0}, &(0x7f00000000c0)=0x14)
r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
r3 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="0014768a308e0b8250879366e049f7d92f6aa54b51cc3a3eaa34b0d7cd3f1f28b923236c7afd5ee87038176aea5e1045e29dcf6ccdf7efa958119e10c88950fb1778cba01f2a2b95f3c5e1d437a05255512c54ac83432a5fe782d13aa7b398111da9f395d75aeba8f3ae80322e0c3e405a905dd82cc212e809786431f9f5645b1f5bb573087926207cb40acf9a0f95cccb9815bd32dd56f04a679394de010db96c8b2988d220345fc1408076112afee1fdd09352d7da79d2ec51b407132009c8872c292f92e17ca8d68e00c2ad7f64fc36730841faf4a8", 0xd7, r2)
r4 = fsmount(0xffffffffffffffff, 0x0, 0xf)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000300)='user\x00', &(0x7f0000000340)='./file0\x00', r4)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000380)={r3, 0x91, 0x1000}, 0x0, &(0x7f00000003c0)="d9cc604ce53d396f55447b2a2bdfb0c9291fafff242f56e02e3c3825e8ac91b3a41fd4915cc143aea39f4e17298783a782f12e4da39b588a8eff344410dbf710a5973bdc63b6aabd471f452c1604dd3f8b3010d05552d3ca86ca08bbbc55c9f34baa64e29c2df17ec896f2d4dd50b2f4555a62d313307572e2b45db950f3794089550ed2a3690681f1ccc137c4231833a4", &(0x7f0000000480)=""/4096)
add_key$keyring(&(0x7f0000001480), &(0x7f00000014c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r5 = syz_open_dev$hidraw(&(0x7f0000001500), 0x1, 0x20000)
ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000001540))
sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x50, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000041)
ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000016c0)={0x19e, "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"})
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000001880)=<r6=>0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000018c0)=r6)
write$hidraw(r0, &(0x7f0000001900)="c1fb2825d888099822ed86e2057330b13cdeb3f34c41f5dffa0fe3964b0afd32223f637e80df5c135e22623e25ebd264b2af64a2f34f79a69a26d53cd8d7f7f91295de29ab138b0fe682bbf584074aa04cd8a6226fb7d7344c3274d0de68dbf7efe59fe50f589e79f5ef6cb600c125d4c443699b408da3b0db69daa1527e1b353746664a2131e93fc86a99ea69d786f45ee4d3c45096a356df7deef71a6ca955e54812598cbdd796cf4e660854754c94db2dcf303def8bbc67f9d6ee247705bc35247fef8c1df2cc18489ed731c7d6b21c7916b5d409cdc89de84c99ab27", 0xde)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000001b80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x100410}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a40)={0xd8, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x13}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20004804}, 0x840)
r7 = request_key(&(0x7f0000001bc0)='logon\x00', &(0x7f0000001c00)={'syz', 0x0}, &(0x7f0000001c40)='@%\'\x00', r2)
keyctl$clear(0x7, r7)
recvfrom$packet(r0, &(0x7f0000001c80)=""/145, 0x91, 0x10000, &(0x7f0000001d40)={0x11, 0xf6, r1, 0x1, 0x1c, 0x6, @remote}, 0x14)
socket$packet(0x11, 0x0, 0x300)

19:46:55 executing program 7:
r0 = fsmount(0xffffffffffffffff, 0x0, 0x75)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='&}\\#\x00', 0x0, r0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0)
write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x9)
write$cgroup_type(r0, &(0x7f0000000100), 0x9)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'vlan0\x00', @remote})
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=@newae={0x204, 0x1e, 0x100, 0x70bd26, 0x25dfdbff, {{@in6=@loopback, 0x4d6, 0x2, 0x6c}, @in=@rand_addr=0x64010100, 0xb6, 0x3507}, [@algo_auth={0x98, 0x1, {{'sm3-ce\x00'}, 0x280, "ca4afe714c1451fc6054534a3de489374641fd909fd3d392078763198d19bbece4adfefd3e66567061eedb007efd1b95b4bfacafaa5968583dc08fe4b535fbc5b19a99bbbf39f94fb8a06457995490c6"}}, @coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @replay_thresh={0x8, 0xb, 0x1}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @algo_comp={0xe3, 0x3, {{'lzjh\x00'}, 0x4d8, "a0b389153ebe51846890c249cc49fbbed3d9f54e2a7a10365b3f6bea79d7240480fbd3859bac6269fca0eaa92a9dafd240abf00f501d085826beaf63a90c3be6df00f7b22f19ba2c234439ddd24a5d1bb168f81d39cde533ea4369dbe18be1afcc34e42cb85f5dca60db853e9260eae5b4eb995435a560603080ecf76a6f5decd3db84e3287c9ed21d283586eee528f15a13ccfd5ba5798e600474"}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e23, @in=@empty}}]}, 0x204}, 0x1, 0x0, 0x0, 0x24040004}, 0x800)
r1 = memfd_secret(0x0)
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000480)={'bond0\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000010}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x164, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x78, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}]}, @NL802154_ATTR_SEC_KEY={0x8c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "833206d8bf280f7686fd2431c4515ef3"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "11a5e00954ea58e5692ce5af4324aa88"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "797535f69054fb7e43e425693de67dd2"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "baf1b0ebf80c63d8c7fb0577bebffa83"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e36abc9d4307fa56c4c802ffbeb53b9d"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "de82b3d66ac706182b403931da6fd6c5"}]}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0f43a7e6d6469cdb369e15e3a0828e2e"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x164}, 0x1, 0x0, 0x0, 0x8004}, 0x4000)
openat$cgroup_type(r1, &(0x7f0000000740), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb0, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x1c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xfff}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x81}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xff}]}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x64d}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0x300}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0x200}}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4094)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x42002, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000940)={'macvtap0\x00'})
r5 = fsmount(0xffffffffffffffff, 0x0, 0x3e)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000980)={'ip6erspan0\x00'})
bind$packet(r5, &(0x7f00000009c0)={0x11, 0xf6, 0x0, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)

[  137.752400] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  137.755496] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  137.757982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  137.767188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  137.772393] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  137.774913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  137.911338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  137.915865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  137.919837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  137.953810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  137.957643] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  137.991172] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  138.034781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  138.040594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  138.042777] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  138.058483] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  138.062997] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  138.082710] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  138.093731] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  138.097739] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  138.100109] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  138.102015] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  138.107731] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  138.109934] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  138.112461] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  138.114085] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  138.115957] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  138.124538] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  138.162911] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  138.168358] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  139.833189] Bluetooth: hci0: command 0x0409 tx timeout
[  139.895108] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  139.959093] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  140.087081] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  140.088465] Bluetooth: hci2: command 0x0409 tx timeout
[  140.151112] Bluetooth: hci6: command 0x0409 tx timeout
[  140.215878] Bluetooth: hci5: command 0x0409 tx timeout
[  140.279358] Bluetooth: hci3: command 0x0409 tx timeout
[  141.880301] Bluetooth: hci0: command 0x041b tx timeout
[  142.135096] Bluetooth: hci2: command 0x041b tx timeout
[  142.199098] Bluetooth: hci6: command 0x041b tx timeout
[  142.265239] Bluetooth: hci5: command 0x041b tx timeout
[  142.327099] Bluetooth: hci3: command 0x041b tx timeout
[  142.935833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  142.938643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  142.945613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  142.948842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  142.960770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  142.961721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  143.017856] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  143.025515] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  143.030442] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  143.052178] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  143.060323] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  143.062410] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  143.929082] Bluetooth: hci0: command 0x040f tx timeout
[  144.183086] Bluetooth: hci2: command 0x040f tx timeout
[  144.247365] Bluetooth: hci6: command 0x040f tx timeout
[  144.311402] Bluetooth: hci5: command 0x040f tx timeout
[  144.375254] Bluetooth: hci3: command 0x040f tx timeout
[  145.016135] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  145.079123] Bluetooth: hci1: command 0x0409 tx timeout
[  145.143130] Bluetooth: hci7: command 0x0409 tx timeout
[  145.975081] Bluetooth: hci0: command 0x0419 tx timeout
[  146.231084] Bluetooth: hci2: command 0x0419 tx timeout
[  146.295076] Bluetooth: hci6: command 0x0419 tx timeout
[  146.359778] Bluetooth: hci5: command 0x0419 tx timeout
[  146.425384] Bluetooth: hci3: command 0x0419 tx timeout
[  147.127097] Bluetooth: hci1: command 0x041b tx timeout
[  147.191328] Bluetooth: hci7: command 0x041b tx timeout
[  149.176096] Bluetooth: hci1: command 0x040f tx timeout
[  149.239229] Bluetooth: hci7: command 0x040f tx timeout
[  149.943103] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  151.223303] Bluetooth: hci1: command 0x0419 tx timeout
[  151.288062] Bluetooth: hci7: command 0x0419 tx timeout
[  154.745366] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  157.614616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  157.627317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  157.635659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  157.647867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  157.678675] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  157.681795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  159.799458] Bluetooth: hci4: command 0x0409 tx timeout
[  161.849072] Bluetooth: hci4: command 0x041b tx timeout
[  163.895248] Bluetooth: hci4: command 0x040f tx timeout
[  165.943276] Bluetooth: hci4: command 0x0419 tx timeout
[  202.743143] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  202.935107] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  203.063120] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  203.064447] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  203.065400] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  204.134030] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  204.143241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  204.145585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  204.188838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  204.202797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  204.209906] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  204.261020] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  204.263314] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  204.265269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  204.270570] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  204.274403] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  204.278514] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  205.847111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  205.851523] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  205.874849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  205.882204] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  205.890906] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  205.893016] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  206.263167] Bluetooth: hci0: command 0x0409 tx timeout
[  206.327120] Bluetooth: hci1: command 0x0409 tx timeout
[  206.580548] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  206.582801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  206.584545] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  206.587193] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  206.590946] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  206.591956] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  207.735435] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  207.928116] Bluetooth: hci3: command 0x0409 tx timeout
[  208.311127] Bluetooth: hci0: command 0x041b tx timeout
[  208.375136] Bluetooth: hci1: command 0x041b tx timeout
[  208.567405] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  208.631397] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  208.695344] Bluetooth: hci5: command 0x0409 tx timeout
[  209.977217] Bluetooth: hci3: command 0x041b tx timeout
[  210.256531] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  210.270820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  210.271773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  210.277272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  210.280297] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  210.283649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  210.359093] Bluetooth: hci0: command 0x040f tx timeout
[  210.423086] Bluetooth: hci1: command 0x040f tx timeout
[  210.743086] Bluetooth: hci5: command 0x041b tx timeout
[  211.239152] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  211.241734] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  211.247390] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  211.259176] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  211.283734] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  211.288946] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  212.025172] Bluetooth: hci3: command 0x040f tx timeout
[  212.345366] Bluetooth: hci2: command 0x0409 tx timeout
[  212.407343] Bluetooth: hci0: command 0x0419 tx timeout
[  212.472466] Bluetooth: hci1: command 0x0419 tx timeout
[  212.792163] Bluetooth: hci5: command 0x040f tx timeout
[  213.367386] Bluetooth: hci6: command 0x0409 tx timeout
[  213.560216] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  214.071122] Bluetooth: hci3: command 0x0419 tx timeout
[  214.391096] Bluetooth: hci2: command 0x041b tx timeout
[  214.839107] Bluetooth: hci5: command 0x0419 tx timeout
[  215.415093] Bluetooth: hci6: command 0x041b tx timeout
[  216.390628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  216.397425] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  216.405291] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  216.422500] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  216.424755] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  216.426736] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  216.439121] Bluetooth: hci2: command 0x040f tx timeout
[  217.463387] Bluetooth: hci6: command 0x040f tx timeout
[  218.488078] Bluetooth: hci2: command 0x0419 tx timeout
[  218.552137] Bluetooth: hci7: command 0x0409 tx timeout
[  219.427968] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  219.429647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  219.438296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  219.459505] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  219.463072] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  219.470607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  219.512083] Bluetooth: hci6: command 0x0419 tx timeout
[  220.599407] Bluetooth: hci7: command 0x041b tx timeout
[  221.560420] Bluetooth: hci4: command 0x0409 tx timeout
[  222.647527] Bluetooth: hci7: command 0x040f tx timeout
[  223.607264] Bluetooth: hci4: command 0x041b tx timeout
[  224.696170] Bluetooth: hci7: command 0x0419 tx timeout
[  225.658073] Bluetooth: hci4: command 0x040f tx timeout
[  227.703103] Bluetooth: hci4: command 0x0419 tx timeout
[  266.388613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  266.392304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  266.393306] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  266.414307] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  266.419445] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  266.420530] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  267.929646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  267.936958] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  267.938028] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  267.984855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  267.989787] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  267.994482] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  268.471152] Bluetooth: hci0: command 0x0409 tx timeout
[  268.535459] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  269.175137] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  270.071377] Bluetooth: hci5: command 0x0409 tx timeout
[  270.519586] Bluetooth: hci0: command 0x041b tx timeout
[  272.119208] Bluetooth: hci5: command 0x041b tx timeout
[  272.567236] Bluetooth: hci0: command 0x040f tx timeout
[  272.872881] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  272.878627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  272.879654] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  272.886862] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  272.900321] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  272.903184] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  273.399127] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  274.103689] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  274.167767] Bluetooth: hci5: command 0x040f tx timeout
[  274.231391] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  274.615362] Bluetooth: hci0: command 0x0419 tx timeout
[  274.999321] Bluetooth: hci6: command 0x0409 tx timeout
[  276.215390] Bluetooth: hci5: command 0x0419 tx timeout
[  277.047257] Bluetooth: hci6: command 0x041b tx timeout
[  277.146858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  277.152864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  277.155738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  277.183677] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  277.190479] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  277.202332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  277.922735] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  277.927387] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  277.934351] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  277.942556] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  277.945543] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  277.949265] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  278.327106] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  279.095232] Bluetooth: hci6: command 0x040f tx timeout
[  279.287113] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  279.288237] Bluetooth: hci2: command 0x0409 tx timeout
[  280.056345] Bluetooth: hci7: command 0x0409 tx timeout
[  281.144108] Bluetooth: hci6: command 0x0419 tx timeout
[  281.335115] Bluetooth: hci2: command 0x041b tx timeout
[  281.366861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  281.385352] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  281.393936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  281.441295] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  281.445001] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  281.452484] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  281.820611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  281.827552] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  281.831595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  281.843020] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  281.857377] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  281.860312] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  282.103084] Bluetooth: hci7: command 0x041b tx timeout
[  283.383278] Bluetooth: hci2: command 0x040f tx timeout
[  283.447102] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  283.575593] Bluetooth: hci1: command 0x0409 tx timeout
[  283.959111] Bluetooth: hci4: command 0x0409 tx timeout
[  284.153086] Bluetooth: hci7: command 0x040f tx timeout
[  285.431085] Bluetooth: hci2: command 0x0419 tx timeout
[  285.625076] Bluetooth: hci1: command 0x041b tx timeout
[  286.008074] Bluetooth: hci4: command 0x041b tx timeout
[  286.199493] Bluetooth: hci7: command 0x0419 tx timeout
[  287.673072] Bluetooth: hci1: command 0x040f tx timeout
[  288.055297] Bluetooth: hci4: command 0x040f tx timeout
[  288.439115] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  289.719092] Bluetooth: hci1: command 0x0419 tx timeout
[  290.103113] Bluetooth: hci4: command 0x0419 tx timeout
[  293.367661] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  298.487123] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  303.351097] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  308.408478] Bluetooth: hci3: Opcode 0x c03 failed: -110
2023/08/16 19:49:47 executor 4 failed 11 times:
executor 4: exit status 67
SYZFAIL: wrong response packet
 (errno 2: No such file or directory)
loop exited with status 67

VM DIAGNOSIS:
19:49:47  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88806ce09a90 RCX=ffffffff8113c809 RDX=1ffff1100d9c1352
RSI=0000000000000002 RDI=0000000000000002 RBP=0000000000000002 RSP=ffff88806ce09a08
R8 =0000000000000001 R9 =0000000000000004 R10=0000000000000000 R11=0000000000000001
R12=0000000000000002 R13=ffff88806ce09df8 R14=ffff88806ce09df0 R15=0000000000000000
RIP=ffffffff814d9768 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff18085fe8 CR3=000000002575a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000080000102 RBX=ffffffff85e16540 RCX=0000000000000100 RDX=ffff88802b03d1c0
RSI=ffffffff8113ab50 RDI=0000000000000006 RBP=ffffffff85e1653c RSP=ffff88806cf099b8
R8 =0000000000000006 R9 =ffffffff81832369 R10=ffffffff8183228d R11=0000000000000001
R12=ffffffff81832369 R13=ffffffff8183228d R14=dffffc0000000000 R15=ffffffff85e1653c
RIP=ffffffff814d9c8b RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f85ee8df540 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f85eea7a4a1 CR3=000000002a7b6000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000ff0000000000000000
XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=65006463682d69636865203a65727020
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000