Warning: Permanently added '[localhost]:54652' (ECDSA) to the list of known hosts.
2023/08/23 06:17:37 fuzzer started
2023/08/23 06:17:38 dialing manager at localhost:33549
syzkaller login: [   98.491468] cgroup: Unknown subsys name 'net'
[   98.656096] cgroup: Unknown subsys name 'rlimit'
[  111.417960] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2023/08/23 06:17:52 syscalls: 201
2023/08/23 06:17:52 code coverage: enabled
2023/08/23 06:17:52 comparison tracing: enabled
2023/08/23 06:17:52 extra coverage: enabled
2023/08/23 06:17:52 setuid sandbox: enabled
2023/08/23 06:17:52 namespace sandbox: enabled
2023/08/23 06:17:52 Android sandbox: enabled
2023/08/23 06:17:52 fault injection: enabled
2023/08/23 06:17:52 leak checking: enabled
2023/08/23 06:17:52 net packet injection: enabled
2023/08/23 06:17:52 net device setup: enabled
2023/08/23 06:17:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2023/08/23 06:17:52 devlink PCI setup: PCI device 0000:00:10.0 is not available
2023/08/23 06:17:52 USB emulation: enabled
2023/08/23 06:17:52 hci packet injection: enabled
2023/08/23 06:17:52 wifi device emulation: enabled
2023/08/23 06:17:52 802.15.4 emulation: enabled
2023/08/23 06:17:52 fetching corpus: 0, signal 0/0 (executing program)
2023/08/23 06:17:53 starting 8 fuzzer processes
06:17:53 executing program 0:
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffb)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0x19, 0x3, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in=@loopback, @in=@rand_addr=0x64010100, 0x4e22, 0x1, 0x4e24, 0x0, 0x2, 0x60, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8, 0xe1, 0x100, 0x80, 0x800, 0x80, 0x7b9, 0xf63d}, {0x101, 0x3f0, 0x9, 0x1fb3}, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2}, {{@in=@multicast1, 0x4d4, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x34ff, 0x1, 0x3, 0x6, 0x3, 0x6, 0x48292804}}, 0xe8)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1)
setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000200)=0x4, 0x4)
r3 = socket$inet(0x2, 0x5, 0x7)
setsockopt$inet_buf(r3, 0x0, 0x9, &(0x7f0000000240)="4565f24beb48280342cdf3201e649d7a0609790b7bf52093b2a42fa8b70404ac6e9de5ebac5a9a", 0x27)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="96847150b9992d97b591361d84a925a7b656a1fca2148edfe431eb30c135f673266036373db4bed3b31a59027ae5a546ca2df053685fd3c667fa87e45967f4dfdeccf3ff8c2149d3325a7044db012106565425ee759c7ea452a255622912a74863a40ba9124cc99ff09aac326e048768fcb2104c00d6335d21347b70a05b10ac60d984808d65e682fe14f0926b0c4344783d77b83789714c3f704519a33c89f97c941eba0915f1c881c643abf4b2bc66f5ac499bb9c9a8e079473fb6d0ee5298cc5162f1", 0xc4}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="7496e3cfb516958c902f1e1f3322da1759de1a605081c51983c2bd073f28c8da57e1338d1f3c248844ccdee2ae84d6efd7fa7b4ac401cf0ea9766e50f47d92dbc9cc819095c1f11c0692cfd85adf741176be9ff00984c12bfbf159ae3da9d5", 0x5f}, {&(0x7f0000000440)="8d9d3ce52807fc", 0x7}, {&(0x7f0000000480)="4c8e513a980da87de4d874e56e6bf7b788fe8e7a2b0835426236770a4007b91c93679621059610a64344c2db84f8112095fbf8c594c42a071f102638dbbf28289802620cf1ec7b88c3dc25a80c555456af2fc7e26a", 0x55}, {&(0x7f0000000500)="27b358de046da6ac7a97bd35495cd26bf5a28b1ea423171bd2fe49ba9f41534b0e562af99ee750b9273054d39fde48d388b84c493e2314bbfcaf2d093ece26950e3b041db5542857c48496c574bbb5ef9c40c69c94d2e1f251a4e233", 0x5c}], 0x6, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010101, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0xd0}, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000780)=0x7fffffff, 0x4)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x959}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x80)
socket(0x9, 0x5, 0xffffffff)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000900), &(0x7f0000000940)=0x4)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000980)={{0x1, 0x1, 0x18, <r6=>r0, {0x0, 0xee01}}, './file0\x00'})
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r1)
sendmsg$FOU_CMD_GET(r6, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1a7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048024}, 0x40)

06:17:53 executing program 1:
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x3, 0x60000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, r1, 0x202, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6a}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}]}]}, 0xac}, 0x1, 0x0, 0x0, 0xc}, 0x20000804)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x40000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0))
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2040001}, 0x8080)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r4, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r6, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x9}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x4000841)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x34}}, 0x800)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x80, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "c2a9482eaf95c9e430bac46a9b5c9b02"}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x80}}, 0x1)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b40), 0x10100, 0x0)
setsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f0000000b80), 0x4)

06:17:53 executing program 2:
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf826}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040104}, 0x4000000)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x50}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x98d8704c753691fb)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x814beb2b27beaff8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'})
sendmsg$FOU_CMD_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x84)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r2=>r1, {0x1}}, './file0\x00'})
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xcdd}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x4000090)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000009c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x3b25}}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000a40)={{0x1, 0x1, 0x18, <r5=>r1, {0xff}}, './file1\x00'})
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$MON_IOCQ_URB_LEN(r1, 0x9201)
ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, <r6=>r2, {0x200}}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001240)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000001300)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4)

06:17:53 executing program 4:
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xe69cd0f580d7ec84, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x84)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000024}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4041)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x5}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x20000001)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r0)
r5 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r4, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x8010)
listen(r2, 0xc64f)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008850}, 0x0)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r3)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r6, 0x10, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x4045)
sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8040000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r6, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x8000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r6, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000)

[  112.574858] audit: type=1400 audit(1692771473.161:6): avc:  denied  { execmem } for  pid=270 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
06:17:53 executing program 3:
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0x20, 0x10001, 0x9, 0x7, 0x5]}, &(0x7f0000000080)=0x78)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@empty, @in6=@private0, 0x4e23, 0xa56, 0x4e23, 0xac, 0x2, 0x20, 0x20, 0x2c, 0x0, r1}, {0x4, 0x9, 0x1, 0x8001, 0x4db, 0x1, 0x5, 0x401}, {0xafe2, 0x7, 0x8}, 0x9, 0x6e6bbe, 0x2, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0xff}, 0xa, @in=@local, 0x3505, 0x4, 0x0, 0x7, 0x0, 0x200, 0x80}}, 0xe8)
msgctl$IPC_RMID(0x0, 0x0)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={0x0, @isdn={0x22, 0xe8, 0x4, 0x8, 0x8}, @l2tp={0x2, 0x0, @empty, 0x4}, @ethernet={0x1, @local}, 0x7a, 0x0, 0x0, 0x0, 0x3a4e, &(0x7f0000000300)='veth0_to_bond\x00', 0x1eb, 0x5, 0x6})
r2 = msgget$private(0x0, 0x84)
msgctl$MSG_STAT(r2, 0xb, &(0x7f00000003c0)=""/176)
r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @dev}, &(0x7f00000004c0)=0x10)
getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000500)={@initdev, @dev}, &(0x7f0000000540)=0x8)
ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000580)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x6, @broadcast}, 0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, 'xfrm0\x00'})
msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000600)=""/104)
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000680)={0xe5b079a257d3ddd3, @multicast1, 0x4e21, 0x1, 'sh\x00', 0x3, 0x101, 0x5b}, 0x2c)
r4 = socket$inet(0x2, 0x2, 0x0)
getpeername$inet(r4, &(0x7f00000006c0), &(0x7f0000000700)=0x10)
msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f0000000740)=""/140)
msgrcv(r2, &(0x7f0000000800)={0x0, ""/252}, 0x104, 0x0, 0x1000)
r5 = accept4$inet(r3, 0x0, &(0x7f0000000940), 0x1800)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000980)={'filter\x00', 0x4}, 0x68)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000a40)={0x0, @l2={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, @qipcrtr={0x2a, 0x1, 0x4000}, @can={0x1d, <r6=>r0}, 0xe8, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000a00)='ipvlan1\x00', 0x2, 0x7, 0x3})
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000ac0)={@rand_addr=0x80000001, @remote, r6}, 0xc)

06:17:53 executing program 5:
r0 = socket(0x11, 0x6, 0x8)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000404}, 0x48000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0, {<r2=>0xffffffffffffffff, <r3=>0x0}}, './file0\x00'})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000600)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
pipe2(&(0x7f0000000640)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80800)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20005}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xeb7d}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r4}, {0x8, 0x1, r0}, {0x8, 0x1, r6}, {0x8, 0x1, r0}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r7=>r1, {<r8=>r2, <r9=>r3}}, '\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r10=>r0, {0x6}}, './file0\x00'})
ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000800)={'\x00', 0x80, 0x101, 0x81, 0x100000000, 0x9})
r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880), 0x300, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r11, 0xc018937b, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r1, {r8, r9}}, './file0\x00'})
r12 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000900)={{0x1, 0x1, 0x18, r12}, './file0\x00'})
r13 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x400001, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r13}, './file0\x00'})
clock_getres(0x7, &(0x7f0000000a80))
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000880}, 0x80)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000c00), 0xffffffffffffffff)

06:17:53 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040))
ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0}, './file0/file0\x00'})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x422000, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x400040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r5=>r4, {0x3}}, './file0/file0\x00'})
r6 = accept(r0, &(0x7f0000000240)=@xdp, &(0x7f00000002c0)=0x80)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@private0, @in6=@local}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8)
recvmsg(r5, &(0x7f0000000dc0)={&(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f00000007c0)=""/132, 0x84}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000000940)=""/253, 0xfd}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000000b40)=""/222, 0xde}, {&(0x7f0000000c40)=""/180, 0xb4}], 0x6, &(0x7f0000000d80)=""/61, 0x3d}, 0x40000042)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000e40), r0)
sendmsg$FOU_CMD_GET(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r8, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8843)
getpeername(0xffffffffffffffff, &(0x7f0000000f40)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000fc0)=0x80)
r9 = accept(r1, 0x0, &(0x7f0000001000))
getsockopt$WPAN_WANTACK(r9, 0x0, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x4)
getpeername(r4, &(0x7f00000010c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r10=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001140)=0x80)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r10, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3fe0}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1044}, 0x20000000)
syz_genetlink_get_family_id$fou(&(0x7f0000001280), 0xffffffffffffffff)

06:17:53 executing program 7:
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000140)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/236, 0xec})
getpeername$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @empty}, &(0x7f00000001c0)=0x10)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'})
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000280)={{0x2, 0x4e23, @local}, {0x1}, 0x74, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 'veth1_vlan\x00'})
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x30}}, 0x10)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x4)
r2 = syz_open_dev$vcsn(&(0x7f0000000480), 0x5, 0x331500)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000500), &(0x7f0000000540)=0x4)
getsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000580)=""/76, &(0x7f0000000600)=0x4c)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000780)={&(0x7f0000000680), &(0x7f00000006c0)=""/145, 0x91})
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000001)
r5 = socket$nl_route(0x10, 0x3, 0x0)
accept(r5, &(0x7f00000008c0)=@ieee802154={0x24, @long}, &(0x7f0000000940)=0x80)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000980)={{0x1, 0x1, 0x18, <r6=>r0, {0x3}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000009c0)={{0x1, 0x1, 0x18, <r7=>r2, {0x2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r7, {0x4}}, './file0\x00'})

[  113.891806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  113.894347] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  113.898145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  113.903895] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  113.907254] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  113.910969] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  114.000643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  114.010292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  114.016989] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  114.055244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  114.061030] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  114.064204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  114.093303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  114.095992] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  114.110157] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  114.123148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  114.125105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  114.127396] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  114.142241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  114.148892] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  114.169109] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  114.169293] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  114.173877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  114.176648] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  114.181029] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  114.187003] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  114.188868] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  114.193398] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  114.197903] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  114.202165] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  114.203814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  114.205837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  114.212259] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  114.223864] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  114.230728] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  114.236973] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  115.978898] Bluetooth: hci0: command 0x0409 tx timeout
[  115.979029] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  116.042582] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  116.169753] Bluetooth: hci2: command 0x0409 tx timeout
[  116.297539] Bluetooth: hci3: command 0x0409 tx timeout
[  116.297560] Bluetooth: hci7: command 0x0409 tx timeout
[  116.298134] Bluetooth: hci5: command 0x0409 tx timeout
[  116.362532] Bluetooth: hci6: command 0x0409 tx timeout
[  118.025821] Bluetooth: hci0: command 0x041b tx timeout
[  118.217994] Bluetooth: hci2: command 0x041b tx timeout
[  118.345623] Bluetooth: hci7: command 0x041b tx timeout
[  118.346372] Bluetooth: hci3: command 0x041b tx timeout
[  118.347111] Bluetooth: hci5: command 0x041b tx timeout
[  118.409618] Bluetooth: hci6: command 0x041b tx timeout
[  119.456695] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  119.461789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  119.468550] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  119.526093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  119.559686] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  119.571816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  120.074694] Bluetooth: hci0: command 0x040f tx timeout
[  120.265811] Bluetooth: hci2: command 0x040f tx timeout
[  120.394571] Bluetooth: hci7: command 0x040f tx timeout
[  120.394970] Bluetooth: hci3: command 0x040f tx timeout
[  120.395340] Bluetooth: hci5: command 0x040f tx timeout
[  120.458171] Bluetooth: hci6: command 0x040f tx timeout
[  121.417792] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  121.674521] Bluetooth: hci4: command 0x0409 tx timeout
[  122.122538] Bluetooth: hci0: command 0x0419 tx timeout
[  122.316576] Bluetooth: hci2: command 0x0419 tx timeout
[  122.441694] Bluetooth: hci5: command 0x0419 tx timeout
[  122.442088] Bluetooth: hci3: command 0x0419 tx timeout
[  122.442931] Bluetooth: hci7: command 0x0419 tx timeout
[  122.505642] Bluetooth: hci6: command 0x0419 tx timeout
[  123.723022] Bluetooth: hci4: command 0x041b tx timeout
[  125.769902] Bluetooth: hci4: command 0x040f tx timeout
[  126.410045] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  127.819446] Bluetooth: hci4: command 0x0419 tx timeout
[  131.338484] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  134.277398] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  134.282658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  134.288859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  134.295678] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  134.300981] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  134.303004] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  136.330769] Bluetooth: hci1: command 0x0409 tx timeout
[  138.378486] Bluetooth: hci1: command 0x041b tx timeout
[  140.425942] Bluetooth: hci1: command 0x040f tx timeout
[  142.473922] Bluetooth: hci1: command 0x0419 tx timeout
[  176.219320] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  176.226629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  176.229049] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  176.236582] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  176.247034] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  176.254947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  176.635897] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  176.643320] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  176.648704] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  176.671687] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  176.703788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  176.710697] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  178.313541] Bluetooth: hci0: command 0x0409 tx timeout
[  178.633684] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  178.697467] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  178.762848] Bluetooth: hci2: command 0x0409 tx timeout
[  178.825944] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  178.890543] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  180.362500] Bluetooth: hci0: command 0x041b tx timeout
[  180.591263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  180.608824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  180.621873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  180.650870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  180.662762] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  180.666933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  180.809656] Bluetooth: hci2: command 0x041b tx timeout
[  181.281133] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  181.287404] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  181.288660] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  181.314985] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  181.355787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  181.358075] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  181.721961] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  181.727115] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  181.732865] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  181.751994] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  181.755239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  181.758122] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  181.981309] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  181.995735] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  182.009788] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  182.058093] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  182.066232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  182.071838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  182.409530] Bluetooth: hci0: command 0x040f tx timeout
[  182.729843] Bluetooth: hci3: command 0x0409 tx timeout
[  182.857495] Bluetooth: hci2: command 0x040f tx timeout
[  183.306481] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  183.434482] Bluetooth: hci4: command 0x0409 tx timeout
[  183.882510] Bluetooth: hci6: command 0x0409 tx timeout
[  184.201545] Bluetooth: hci7: command 0x0409 tx timeout
[  184.459454] Bluetooth: hci0: command 0x0419 tx timeout
[  184.778787] Bluetooth: hci3: command 0x041b tx timeout
[  184.905611] Bluetooth: hci2: command 0x0419 tx timeout
[  185.482467] Bluetooth: hci4: command 0x041b tx timeout
[  185.930572] Bluetooth: hci6: command 0x041b tx timeout
[  186.229957] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  186.236663] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  186.238680] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  186.249637] Bluetooth: hci7: command 0x041b tx timeout
[  186.301694] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  186.305789] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  186.314835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  186.827766] Bluetooth: hci3: command 0x040f tx timeout
[  187.529506] Bluetooth: hci4: command 0x040f tx timeout
[  187.977655] Bluetooth: hci6: command 0x040f tx timeout
[  188.297487] Bluetooth: hci7: command 0x040f tx timeout
[  188.426581] Bluetooth: hci5: command 0x0409 tx timeout
[  188.873490] Bluetooth: hci3: command 0x0419 tx timeout
[  189.578461] Bluetooth: hci4: command 0x0419 tx timeout
[  190.025503] Bluetooth: hci6: command 0x0419 tx timeout
[  190.345665] Bluetooth: hci7: command 0x0419 tx timeout
[  190.473507] Bluetooth: hci5: command 0x041b tx timeout
[  192.521531] Bluetooth: hci5: command 0x040f tx timeout
[  194.569727] Bluetooth: hci5: command 0x0419 tx timeout
[  197.961803] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  202.825653] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  205.802698] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  205.811762] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  205.833724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  205.883936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  205.913916] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  205.919700] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  208.009556] Bluetooth: hci1: command 0x0409 tx timeout
[  210.058483] Bluetooth: hci1: command 0x041b tx timeout
[  212.106179] Bluetooth: hci1: command 0x040f tx timeout
[  214.154541] Bluetooth: hci1: command 0x0419 tx timeout
[  237.726140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  237.729686] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.732739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.739862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.741213] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  237.742698] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  239.818767] Bluetooth: hci0: command 0x0409 tx timeout
[  240.073596] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  241.868094] Bluetooth: hci0: command 0x041b tx timeout
[  242.156140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  242.162958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  242.176082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  242.184956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  242.186565] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  242.189161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  242.595404] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  242.597285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  242.598381] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  242.618869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  242.632901] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  242.634128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  243.450138] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  243.452834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  243.453825] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  243.468434] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  243.476675] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  243.485667] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  243.913468] Bluetooth: hci0: command 0x040f tx timeout
[  244.234519] Bluetooth: hci2: command 0x0409 tx timeout
[  244.681513] Bluetooth: hci3: command 0x0409 tx timeout
[  244.809492] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  245.577914] Bluetooth: hci6: command 0x0409 tx timeout
[  245.578670] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  245.961941] Bluetooth: hci0: command 0x0419 tx timeout
[  246.281666] Bluetooth: hci2: command 0x041b tx timeout
[  246.730763] Bluetooth: hci3: command 0x041b tx timeout
[  247.587879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  247.589155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  247.596748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  247.611878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  247.616168] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  247.626557] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  247.627050] Bluetooth: hci6: command 0x041b tx timeout
[  248.330482] Bluetooth: hci2: command 0x040f tx timeout
[  248.777806] Bluetooth: hci3: command 0x040f tx timeout
[  249.673607] Bluetooth: hci4: command 0x0409 tx timeout
[  249.674157] Bluetooth: hci6: command 0x040f tx timeout
[  249.801485] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  250.122684] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  250.377473] Bluetooth: hci2: command 0x0419 tx timeout
[  250.826680] Bluetooth: hci3: command 0x0419 tx timeout
[  251.721506] Bluetooth: hci6: command 0x0419 tx timeout
[  251.721524] Bluetooth: hci4: command 0x041b tx timeout
[  252.934887] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  252.943862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  252.948072] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  252.998834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  253.012221] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  253.026162] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  253.769617] Bluetooth: hci4: command 0x040f tx timeout
[  254.666169] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  255.113550] Bluetooth: hci7: command 0x0409 tx timeout
[  255.818639] Bluetooth: hci4: command 0x0419 tx timeout
[  257.163117] Bluetooth: hci7: command 0x041b tx timeout
[  257.589683] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  257.592702] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  257.594264] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  257.621306] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  257.623249] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  257.646566] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  259.211414] Bluetooth: hci7: command 0x040f tx timeout
[  259.721524] Bluetooth: hci5: command 0x0409 tx timeout
[  261.257884] Bluetooth: hci7: command 0x0419 tx timeout
[  261.769481] Bluetooth: hci5: command 0x041b tx timeout
[  263.817619] Bluetooth: hci5: command 0x040f tx timeout
[  265.865717] Bluetooth: hci5: command 0x0419 tx timeout
[  267.708015] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  267.719970] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  267.768958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  267.778802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  267.785974] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  267.788996] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  269.833516] Bluetooth: hci1: command 0x0409 tx timeout
[  271.883457] Bluetooth: hci1: command 0x041b tx timeout
[  273.930469] Bluetooth: hci1: command 0x040f tx timeout
[  275.978291] Bluetooth: hci1: command 0x0419 tx timeout
[  301.834504] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  303.664765] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  303.674682] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  303.677695] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  303.688810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  303.710665] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  303.711625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  304.111952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  304.115706] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  304.128177] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  304.138569] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  304.141457] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  304.143833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  304.500816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  304.516654] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  304.517585] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  304.554047] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  304.575780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  304.577267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  305.151672] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  305.160900] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  305.161845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  305.167183] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  305.168789] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  305.169767] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  305.740489] Bluetooth: hci0: command 0x0409 tx timeout
[  306.185721] Bluetooth: hci2: command 0x0409 tx timeout
[  306.633539] Bluetooth: hci3: command 0x0409 tx timeout
[  307.273699] Bluetooth: hci6: command 0x0409 tx timeout
[  307.785751] Bluetooth: hci0: command 0x041b tx timeout
[  308.233466] Bluetooth: hci2: command 0x041b tx timeout
[  308.681507] Bluetooth: hci3: command 0x041b tx timeout
[  309.321493] Bluetooth: hci6: command 0x041b tx timeout
[  309.833499] Bluetooth: hci0: command 0x040f tx timeout
[  310.281819] Bluetooth: hci2: command 0x040f tx timeout
[  310.729484] Bluetooth: hci3: command 0x040f tx timeout
[  311.369651] Bluetooth: hci6: command 0x040f tx timeout
[  311.370110] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  311.881490] Bluetooth: hci0: command 0x0419 tx timeout
[  312.330710] Bluetooth: hci2: command 0x0419 tx timeout
[  312.778664] Bluetooth: hci3: command 0x0419 tx timeout
[  313.417626] Bluetooth: hci6: command 0x0419 tx timeout
[  316.233889] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  316.553511] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  319.213247] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  319.219082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  319.225735] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  319.250700] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  319.266903] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  319.268877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  319.771171] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  319.772638] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  319.773847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  319.783864] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  319.797517] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  319.808756] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  321.354551] Bluetooth: hci4: command 0x0409 tx timeout
[  321.675704] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  321.929551] Bluetooth: hci7: command 0x0409 tx timeout
[  323.402745] Bluetooth: hci4: command 0x041b tx timeout
[  323.978503] Bluetooth: hci7: command 0x041b tx timeout
[  324.538946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  324.543657] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  324.544717] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  324.571642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  324.589692] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  324.637951] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  325.449641] Bluetooth: hci4: command 0x040f tx timeout
[  326.027453] Bluetooth: hci7: command 0x040f tx timeout
[  326.730489] Bluetooth: hci5: command 0x0409 tx timeout
[  327.498467] Bluetooth: hci4: command 0x0419 tx timeout
[  328.074654] Bluetooth: hci7: command 0x0419 tx timeout
[  328.778967] Bluetooth: hci5: command 0x041b tx timeout
[  329.260756] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  329.264948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  329.285815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  329.288810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  329.292268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  329.293324] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  330.825772] Bluetooth: hci5: command 0x040f tx timeout
[  331.404472] Bluetooth: hci1: command 0x0409 tx timeout
[  332.873555] Bluetooth: hci5: command 0x0419 tx timeout
[  333.452451] Bluetooth: hci1: command 0x041b tx timeout
[  335.499491] Bluetooth: hci1: command 0x040f tx timeout
[  337.546614] Bluetooth: hci1: command 0x0419 tx timeout
[  365.877125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  365.886607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  365.891169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  365.924704] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  365.932144] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  365.942720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  366.519671] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  366.525977] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  366.531917] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  366.539741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  366.554862] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  366.560605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  366.759924] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  366.761227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  366.762229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  366.764794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  366.767163] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  366.768149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  367.164650] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  367.169700] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  367.171151] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  367.230957] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  367.248559] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  367.287783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  368.010504] Bluetooth: hci0: command 0x0409 tx timeout
[  368.650474] Bluetooth: hci2: command 0x0409 tx timeout
[  368.841511] Bluetooth: hci3: command 0x0409 tx timeout
[  369.353481] Bluetooth: hci6: command 0x0409 tx timeout
[  370.057459] Bluetooth: hci0: command 0x041b tx timeout
[  370.698663] Bluetooth: hci2: command 0x041b tx timeout
[  370.891586] Bluetooth: hci3: command 0x041b tx timeout
[  371.401900] Bluetooth: hci6: command 0x041b tx timeout
[  372.106618] Bluetooth: hci0: command 0x040f tx timeout
[  372.745695] Bluetooth: hci2: command 0x040f tx timeout
[  372.939821] Bluetooth: hci3: command 0x040f tx timeout
[  373.449489] Bluetooth: hci6: command 0x040f tx timeout
[  374.153635] Bluetooth: hci0: command 0x0419 tx timeout
[  374.793662] Bluetooth: hci2: command 0x0419 tx timeout
[  374.985799] Bluetooth: hci3: command 0x0419 tx timeout
[  375.497683] Bluetooth: hci6: command 0x0419 tx timeout
[  381.169032] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  381.191886] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  381.192924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  381.203466] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  381.207751] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  381.210707] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  381.604117] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  381.611699] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  381.612870] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  381.618242] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  381.620121] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  381.621644] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  383.305510] Bluetooth: hci4: command 0x0409 tx timeout
[  383.754502] Bluetooth: hci7: command 0x0409 tx timeout
[  385.354716] Bluetooth: hci4: command 0x041b tx timeout
[  385.802475] Bluetooth: hci7: command 0x041b tx timeout
[  387.403268] Bluetooth: hci4: command 0x040f tx timeout
[  387.850490] Bluetooth: hci7: command 0x040f tx timeout
[  388.042566] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  389.449486] Bluetooth: hci4: command 0x0419 tx timeout
[  389.899090] Bluetooth: hci7: command 0x0419 tx timeout
[  393.097501] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  393.163188] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  396.142997] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  396.147722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  396.160201] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  396.175389] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  396.202581] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  396.205213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  398.281713] Bluetooth: hci1: command 0x0409 tx timeout
[  398.348488] Bluetooth: hci5: Opcode 0x c03 failed: -110
2023/08/23 06:22:39 executor 3 failed 11 times:
executor 3: exit status 67
SYZFAIL: wrong response packet
 (errno 2: No such file or directory)
loop exited with status 67
[  399.389830] syz-executor.1 (12133) used greatest stack depth: 24112 bytes left

VM DIAGNOSIS:
06:22:39  Registers:
info registers vcpu 0
RAX=0000000080000101 RBX=ffff88806ce09a90 RCX=0000000000000100 RDX=1ffff1100d9c1354
RSI=ffffffff8113d343 RDI=ffff88806ce09aa0 RBP=ffff88802c4afd60 RSP=ffff88806ce09a08
R8 =0000000000000004 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001
R12=ffff88802c4a8000 R13=ffff88802c4b0000 R14=ffff88802c4afd58 R15=0000000000000001
RIP=ffffffff814d908b RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f556a4428e0 CR3=000000002e6c8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000080000000 RBX=ffffffff813c0da0 RCX=ffffffff810c5f97 RDX=ffff88801642d1c0
RSI=0000000000000000 RDI=0000000000000005 RBP=ffff8880248efb30 RSP=ffff8880248efa88
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000001 R13=ffff8880248efb60 R14=ffff88801642d1c0 R15=ffff8880248efb30
RIP=ffffffff814d8a81 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0010303540 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffed43bf48 CR3=0000000022252000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000