Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:59936' (ECDSA) to the list of known hosts.
2025/04/29 13:23:46 fuzzer started
2025/04/29 13:23:46 dialing manager at localhost:36753
syzkaller login: [   98.809546] cgroup: Unknown subsys name 'net'
[   98.940288] cgroup: Unknown subsys name 'cpuset'
[   99.008683] cgroup: Unknown subsys name 'rlimit'
2025/04/29 13:24:08 syscalls: 207
2025/04/29 13:24:08 code coverage: enabled
2025/04/29 13:24:08 comparison tracing: enabled
2025/04/29 13:24:08 extra coverage: enabled
2025/04/29 13:24:08 setuid sandbox: enabled
2025/04/29 13:24:08 namespace sandbox: enabled
2025/04/29 13:24:08 Android sandbox: enabled
2025/04/29 13:24:08 fault injection: enabled
2025/04/29 13:24:08 leak checking: enabled
2025/04/29 13:24:08 net packet injection: enabled
2025/04/29 13:24:08 net device setup: enabled
2025/04/29 13:24:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/29 13:24:08 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/29 13:24:08 USB emulation: enabled
2025/04/29 13:24:08 hci packet injection: enabled
2025/04/29 13:24:08 wifi device emulation: enabled
2025/04/29 13:24:08 802.15.4 emulation: enabled
2025/04/29 13:24:08 fetching corpus: 0, signal 0/0 (executing program)
2025/04/29 13:24:09 starting 8 fuzzer processes
13:24:09 executing program 0:
pidfd_open(0x0, 0x0)
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r1)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:hugetlbfs_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc0}, 0x4080)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x210, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x10008000)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r3)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x78, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'macvtap0\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x13}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan3\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1209800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan1\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000ac0), r5)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r9, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x16}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240400c0)

13:24:09 executing program 1:
r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2c}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x48090}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x804)
sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfff}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x24040080)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r1)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc081}, 0x41)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080000}, 0x800)
syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r5)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008804}, 0x4048000)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1e0, 0x0, 0x200, 0x70bd25, 0x3, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x3e, 0x4, "a001f21901e33061c28c2a73faf3f8a99810af2315e5eb6ec63639a58d8f9e6489d986a597b9158db40bd18f4aa4c02a83401efb957d2fd0fc0e"}, @ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "83a8cfbef7f31b2ee2a10274683a534dc615358de39494e246f68078c7c530e1094e7c0c89265acf85bc2a3a6a84a108df594e1cbeec333baf551bb2fd2407626110ea522a419390d1ec06f6fff0d3a6287486dfeb918990dc88c643576aff68fdf18fb81eeceaa2acaa692274614943bb116cabc0c54c216f0f40b4c24d52f4888910dacf6ebaa632c374faa0e650830f316dcaa2374cae1016c92d2c0f761256c5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff9}, @ETHTOOL_A_BITSET_VALUE={0xd8, 0x4, "df5e9f8678e1022fe62fe2d32f430984e362975ea0e22f285141929219abf214648ea6726a9d084d5252ac2c27a4eefd5ff3c35511739fbf659836098e61abfed5db6c72315850992b59a33047024192d366c1d5e276cfba8621f93e12dfe42e7342b64e7fb06b3d34546a29036619daeabbda1cb81e967914ad94dd5048bdaf81093df13f05589fdcb1987fbed354d1070680104136b135d1f22d5e79b2e0a3a696e910120c7731a73c87e9a16909c11a916cb6c74f98db2b20cc0d739ed6572cd352a44a44bf395fd8611fa5955b2bf9e47d2b"}]}]}, 0x1e0}}, 0x20040800)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b40), r1)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x84, r7, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x40800)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, '[^\xfd\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '*\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x4c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x8881)

13:24:09 executing program 2:
r0 = inotify_init1(0x180000)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x3ff}}, './file0\x00'})
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x2, [0x9, 0x6], 0xc15}, 0x10)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x3, 0x2)
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x400, r0, &(0x7f00000000c0)="59c005a408e5e8bd473d91d270", 0xd, 0x7, 0x0, 0x1, r1}])
r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000200)=0xfff, &(0x7f0000000240)=0x2)
r4 = memfd_secret(0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x128, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0xf801}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xc4af}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1b6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x7e1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xacd}, {0x6, 0x11, 0x63}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1)
getpeername(r4, &(0x7f0000000600)=@ll={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x80)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000b00)={'syztnl2\x00', <r7=>0x0, 0x2f, 0x81, 0xbe, 0x8, 0x10, @dev={0xfe, 0x80, '\x00', 0x41}, @loopback, 0x7, 0x700, 0x9e, 0x8f}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000dc0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x1a0, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4010}, 0x48011)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000e00)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
io_cancel(0x0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x6, 0x6, r4, &(0x7f0000000e40)='\":[', 0x3, 0x6, 0x0, 0x2}, &(0x7f0000000ec0))
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x12c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x118, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x12c}}, 0x40000100)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), r2)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000001200)={'syztnl2\x00', &(0x7f0000001180)={'sit0\x00', <r10=>r7, 0x2f, 0x10, 0x7, 0x0, 0x25, @mcast1, @mcast1, 0x20, 0x8, 0x6, 0x56e}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000001c00)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0xf4, r9, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8005)

13:24:09 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'ip6_vti0\x00', <r2=>0x0, 0x29, 0x1, 0x7c, 0x1000, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7800, 0x7800, 0x5, 0x100}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', <r3=>0x0, 0x4, 0x81, 0x81, 0x9, 0x50, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x29, 0x8, 0x80000000}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'syztnl1\x00', <r4=>0x0, 0x2f, 0x9, 0x33, 0x5, 0x8, @loopback, @local, 0x80, 0x8, 0x2, 0x65}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x17c, r1, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008080)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000009c0)={0xf9, 0x7}, 0x2)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000a00)=0x80000001, &(0x7f0000000a40)=0x4)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, <r6=>r0, {0x10000}}, './file0\x00'})
setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000ac0)=0x3, 0x2)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000b00)={0x0, 0x3, r5, 0x80, 0x80000})
getpeername(r5, &(0x7f0000000b40)=@isdn, &(0x7f0000000bc0)=0x80)
r7 = memfd_secret(0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = openat$cgroup_pressure(r0, &(0x7f0000000c40)='cpu.pressure\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r8, {<r10=>r9}}, './file0\x00'})
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r10, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d40)={0x184, r11, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x1000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x6}}]}, 0x184}, 0x1, 0x0, 0x0, 0x40000814}, 0x8000)
sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000001240)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x7c, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

[  121.485813] audit: type=1400 audit(1745933049.783:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:24:09 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x84)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'sit0\x00', <r1=>0x0, 0x29, 0x3, 0x7, 0x8, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0xc}, 0x40, 0x8, 0x2, 0x7fff}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x174, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9b, 0x5, "b03d5ef8d327dd53a9a15714ba68ef445b025d7c8b8f23afcb0cbb8fb73e18e52f08347b6881911d36b651cf51649aac2eea7547d54742a05dbc74fafa749771dd8c676119e93168a67ecbbdeb15e60959b020749ff4172b4822e293496984b3df4624a537be4af172aad6e328d7c57ac83d4e234b00cf275c9842ad90880bfa7d2fcfbe62460fa50628f3f9daa69f1a2404983aaa5a3d"}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '*!}%(+!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4004042}, 0x20000004)
r2 = openat$cgroup_ro(r0, &(0x7f0000000940)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000980), 0xc0002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000009c0)={{0x1, 0x1, 0x18, <r4=>r0, {0x1}}, './file1\x00'})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000e40)={'ip6gre0\x00', &(0x7f0000000dc0)={'ip6_vti0\x00', <r5=>0x0, 0x4, 0x7, 0xe0, 0x400, 0x12, @rand_addr=' \x01\x00', @mcast2, 0x10, 0x700, 0x101, 0x29}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000f40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x58, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x28}}, 0x4048800)
r6 = openat$cgroup_ro(r2, &(0x7f0000001080)='cpuacct.stat\x00', 0x0, 0x0)
getpeername(r6, &(0x7f00000010c0)=@generic, &(0x7f0000001140)=0x80)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000001180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file1\x00'})
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000011c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, 0x0, 0x306, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c085}, 0x90)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000001300)={{0x1, 0x1, 0x18, <r8=>r7}, './file1\x00'})
sendmsg$DEVLINK_CMD_PORT_SPLIT(r8, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0xb933658f201a655)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xd}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4404a011)

13:24:09 executing program 5:
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4840)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x80}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x81}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7a}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r1 = perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x80, 0x80, 0x5, 0x2, 0xa, 0x0, 0x9, 0x2080, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x88, 0x3}, 0x80, 0x3f, 0x7, 0x9, 0x1d92, 0x3, 0x33, 0x0, 0x100, 0x0, 0x6}, r0, 0x4, r0, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x9, 0x5, 0x81, 0xff, 0x0, 0x81, 0x1000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xbc80, 0x2, @perf_bp={&(0x7f0000000240), 0x9}, 0x22, 0x8000, 0x5, 0x3, 0x5, 0x1, 0xda2, 0x0, 0x80, 0x0, 0x8000}, 0xffffffffffffffff, 0xf, r1, 0x9)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', <r2=>0x0, 0x0, 0x80, 0x5, 0xfe1, 0x30, @remote, @private0, 0x20, 0x8000, 0x51de, 0x1}})
timer_getoverrun(0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000440))
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r3, 0x320, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x81}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xff}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000001a80)={'ip6_vti0\x00', &(0x7f0000001a00)={'syztnl0\x00', <r5=>0x0, 0x4, 0x4, 0xd, 0x4d7, 0x2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x700, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000001b40)={'ip6gre0\x00', &(0x7f0000001ac0)={'syztnl2\x00', <r6=>r2, 0x4, 0x3, 0x5, 0x3, 0x30, @mcast1, @private0, 0x8, 0x7, 0x2, 0x314}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000001d80)={'syztnl0\x00', &(0x7f0000001d00)={'syztnl2\x00', <r7=>r2, 0x2f, 0x9, 0x6, 0x1, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x80a0, 0x700, 0x9, 0x266c664f}})
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001f40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x140, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8008800}, 0x0)
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000001f80)=0x9)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000002000), 0xffffffffffffffff)
sendmsg$NET_DM_CMD_STOP(r8, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x14, r9, 0x8, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80)
io_pgetevents(0x0, 0x16, 0x2, &(0x7f0000002140)=[{}, {}], &(0x7f0000002180), &(0x7f0000002200)={&(0x7f00000021c0)={[0x1]}, 0x8})

13:24:09 executing program 6:
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000000)=0xbfa2)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x8000)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffc000}}, './file0\x00'})
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100))
inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x8, 0x1)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000200))
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x10081, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r3=>r1, {<r4=>r2}}, './file0\x00'})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000003c0)=0x5, &(0x7f0000000400)=0x4)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r6=>r4, {0x9}}, './file0\x00'})
r7 = openat$cgroup_int(r4, &(0x7f0000000480)='cpu.max.burst\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r8=>r1, {0x7}}, './file0\x00'})
r9 = openat$cgroup_ro(r3, &(0x7f0000000700)='blkio.bfq.io_queued\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={<r10=>0xffffffffffffffff})
io_submit(0x0, 0x6, &(0x7f0000000b40)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x92f2, r7, &(0x7f00000004c0)="49f0a9e05cb85ac04b55ab47d5cc151c895f5386b855419e61f5023da8e6", 0x1e, 0xfffffffffffff64a, 0x0, 0x1, r8}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x3ff, r6, &(0x7f0000000580)="c17e14d9526be57aca1519ae639889c8b1bf69de3ffb65371f157351ebc207d0de50f86fdc2f2d2960a4cf49a3cd598bca7080bc2d91b7f1ec8c21b66f0ca51d6def64195a4db729972dbb33834d9aae0a7b225ac9650b", 0x57, 0x40, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x1ff, 0xffffffffffffffff, &(0x7f0000000640)="f2681e64042cd5aba35c5ea80d74a84be56e6d630fe6a9fa578fb7e804d31aa67d3962b18fcc311c87bbddfd9048d8363a688adeb8d6dff514111507429455a52cfa42c97044c9b41fc9d6297bc4c9911f149db944104d5801babbae2944aca1fae645532cdb7863a6942b3d8f0d39fcc43e4d673bd165579a9709c3f8a4a608b0bcaf18a510c4ad224b1e56fa7b51b944b5ab7c0d07dea1120c1d072ca9987bbfcb833188c0001178", 0xa9, 0xf9fa, 0x0, 0x1, r9}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x1, r10, &(0x7f00000007c0)="41944666e832479064d913a338d5b4ca4936", 0x12, 0x3ff, 0x0, 0x2, r0}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x3, 0x2, r5, &(0x7f0000000840)="871b746743c4d90eb7aa379593b8564beab3ba115f5950f04550cb899bc9f2d02b6c57d53467fdf42b4c1eef469ca0962861c8ba547b41f32275e8ddd3970d988fbf6c1ebcb990780c60f3500bbfec5a8b2a8962e58812e6ba7cc950615830f2bfba874c6ec581c30a1bb9753b8bf074499208f9c3e3556e1d23897dabcf699ee6c359b45702a8d7b1bbc7a6658c8b789129903df498c57249cb0a8e7efc7469554d5bd8c9b41b061ced19e1d4f98e8c77dab54bcd47ee934db7", 0xba, 0x7fffffff, 0x0, 0x0, r0}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f0000000ac0)="50e2d60be738f3bfc24658849174a5ba56a94129cff858df6ea59be33572b8702876201988e8d319ecd6b120b4129c7fb7", 0x31, 0x5, 0x0, 0x1}])

13:24:09 executing program 7:
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000124}, 0x20040001)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000000000000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x322}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9f}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r1)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000410}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc}, @GTPA_I_TEI={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r2)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xac, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x28}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x40091)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000780), r1)
sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000840}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x158, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x134, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d2325cf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a2c1e4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c878eb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b28177d}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24c24f04}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23ad7ba2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3209bb0e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cc3a3fc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24efd422}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f804b0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x137a891f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdbd84b3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56ecc306}]}, {0x4}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3da0e1bd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c3d377f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e1a20df}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}}, 0x81)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r1)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x5ad78246d2ce700c}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x18044090}, 0x20000000)

[  122.909693] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  122.911419] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  122.916594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  122.917533] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  122.924137] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  122.946791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  122.957727] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  122.959466] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  122.967639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  122.969224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  122.970464] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  122.971930] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  122.973420] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  122.975022] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  122.976675] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  122.977819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  122.993331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  122.994362] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  122.995965] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  123.002540] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  123.003656] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  123.021087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  123.023719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  123.025672] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  123.037920] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  123.041472] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  123.043490] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  123.045162] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  123.049217] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  123.051321] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  123.100521] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  123.111338] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  123.125026] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  123.129244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  123.139699] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  123.141730] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  123.142625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  123.144495] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  123.150964] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  123.165045] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  125.104513] Bluetooth: hci4: command tx timeout
[  125.105306] Bluetooth: hci3: command tx timeout
[  125.106036] Bluetooth: hci0: command tx timeout
[  125.106136] Bluetooth: hci5: command tx timeout
[  125.106662] Bluetooth: hci1: command tx timeout
[  125.168310] Bluetooth: hci2: command tx timeout
[  125.232140] Bluetooth: hci7: command tx timeout
[  125.232933] Bluetooth: hci6: command tx timeout
[  127.152374] Bluetooth: hci5: command tx timeout
[  127.154267] Bluetooth: hci3: command tx timeout
[  127.154790] Bluetooth: hci0: command tx timeout
[  127.155641] Bluetooth: hci1: command tx timeout
[  127.155772] Bluetooth: hci4: command tx timeout
[  127.215994] Bluetooth: hci2: command tx timeout
[  127.280452] Bluetooth: hci7: command tx timeout
[  127.280470] Bluetooth: hci6: command tx timeout
[  129.200888] Bluetooth: hci1: command tx timeout
[  129.201452] Bluetooth: hci4: command tx timeout
[  129.202513] Bluetooth: hci5: command tx timeout
[  129.202558] Bluetooth: hci0: command tx timeout
[  129.202996] Bluetooth: hci3: command tx timeout
[  129.264919] Bluetooth: hci2: command tx timeout
[  129.327966] Bluetooth: hci6: command tx timeout
[  129.328548] Bluetooth: hci7: command tx timeout
[  131.248954] Bluetooth: hci5: command tx timeout
[  131.249486] Bluetooth: hci0: command tx timeout
[  131.250277] Bluetooth: hci3: command tx timeout
[  131.250319] Bluetooth: hci4: command tx timeout
[  131.250711] Bluetooth: hci1: command tx timeout
[  131.311906] Bluetooth: hci2: command tx timeout
[  131.377055] Bluetooth: hci6: command tx timeout
[  131.377547] Bluetooth: hci7: command tx timeout
[  183.395150] syz-executor.7 (288) used greatest stack depth: 24744 bytes left
[  185.475548] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  185.482667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  185.485904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  185.491811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  185.496190] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  185.724311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  185.731161] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  185.736692] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  185.740378] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  185.741502] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  185.743391] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  185.747693] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  185.750364] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  185.751885] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  185.755192] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  185.757982] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  185.763203] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  185.766754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  185.769286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  185.774290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  185.800674] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  185.805150] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  185.808338] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  185.812127] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  185.818787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  185.820705] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  185.823562] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  185.833390] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  185.837994] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  185.845207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  185.877505] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  185.893956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  185.896275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  185.908052] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  185.913436] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  185.917380] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  185.923781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  185.935074] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  185.949981] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  185.956357] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  187.568950] Bluetooth: hci0: command tx timeout
[  187.828952] Bluetooth: hci2: command tx timeout
[  187.887916] Bluetooth: hci1: command tx timeout
[  187.889509] Bluetooth: hci3: command tx timeout
[  187.889890] Bluetooth: hci6: command tx timeout
[  188.016382] Bluetooth: hci5: command tx timeout
[  188.016396] Bluetooth: hci4: command tx timeout
[  188.016583] Bluetooth: hci7: command tx timeout
[  189.616042] Bluetooth: hci0: command tx timeout
[  189.872911] Bluetooth: hci2: command tx timeout
[  189.936280] Bluetooth: hci3: command tx timeout
[  189.936766] Bluetooth: hci6: command tx timeout
[  189.936854] Bluetooth: hci1: command tx timeout
[  190.064039] Bluetooth: hci5: command tx timeout
[  190.064069] Bluetooth: hci4: command tx timeout
[  190.065176] Bluetooth: hci7: command tx timeout
[  191.665251] Bluetooth: hci0: command tx timeout
[  191.921598] Bluetooth: hci2: command tx timeout
[  191.985009] Bluetooth: hci3: command tx timeout
[  191.985171] Bluetooth: hci6: command tx timeout
[  191.985481] Bluetooth: hci1: command tx timeout
[  192.111932] Bluetooth: hci7: command tx timeout
[  192.112424] Bluetooth: hci4: command tx timeout
[  192.113258] Bluetooth: hci5: command tx timeout
[  193.714865] Bluetooth: hci0: command tx timeout
[  193.967994] Bluetooth: hci2: command tx timeout
[  194.032136] Bluetooth: hci1: command tx timeout
[  194.032659] Bluetooth: hci6: command tx timeout
[  194.032761] Bluetooth: hci3: command tx timeout
[  194.161361] Bluetooth: hci4: command tx timeout
[  194.162347] Bluetooth: hci5: command tx timeout
[  194.162800] Bluetooth: hci7: command tx timeout
[  248.027561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  248.032790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  248.036946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  248.044182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  248.055360] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  248.123710] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  248.127576] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  248.131560] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  248.145237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  248.151162] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  248.233599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  248.244918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  248.249736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  248.269966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  248.274579] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  248.350221] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  248.353137] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  248.372188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  248.379281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  248.389208] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  248.391120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  248.403122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  248.407622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  248.410605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  248.438070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  248.441135] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  248.449981] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  248.452526] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  248.455313] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  248.472175] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  248.501701] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  248.504803] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  248.508081] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  248.509999] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  248.514104] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  248.518656] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  248.521263] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  248.526519] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  248.557560] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  248.590261] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  250.096288] Bluetooth: hci0: command tx timeout
[  250.225370] Bluetooth: hci1: command tx timeout
[  250.351978] Bluetooth: hci2: command tx timeout
[  250.550155] Bluetooth: hci3: command tx timeout
[  250.550982] Bluetooth: hci4: command tx timeout
[  250.671940] Bluetooth: hci6: command tx timeout
[  250.697892] Bluetooth: hci5: command tx timeout
[  250.735989] Bluetooth: hci7: command tx timeout
[  252.144094] Bluetooth: hci0: command tx timeout
[  252.273141] Bluetooth: hci1: command tx timeout
[  252.401143] Bluetooth: hci2: command tx timeout
[  252.593955] Bluetooth: hci4: command tx timeout
[  252.594476] Bluetooth: hci3: command tx timeout
[  252.720098] Bluetooth: hci5: command tx timeout
[  252.720220] Bluetooth: hci6: command tx timeout
[  252.784343] Bluetooth: hci7: command tx timeout
[  254.192084] Bluetooth: hci0: command tx timeout
[  254.320002] Bluetooth: hci1: command tx timeout
[  254.448150] Bluetooth: hci2: command tx timeout
[  254.640224] Bluetooth: hci3: command tx timeout
[  254.640734] Bluetooth: hci4: command tx timeout
[  254.767951] Bluetooth: hci6: command tx timeout
[  254.768918] Bluetooth: hci5: command tx timeout
[  254.831901] Bluetooth: hci7: command tx timeout
[  256.240108] Bluetooth: hci0: command tx timeout
[  256.367908] Bluetooth: hci1: command tx timeout
[  256.496158] Bluetooth: hci2: command tx timeout
[  256.688250] Bluetooth: hci4: command tx timeout
[  256.688957] Bluetooth: hci3: command tx timeout
[  256.817093] Bluetooth: hci5: command tx timeout
[  256.817373] Bluetooth: hci6: command tx timeout
[  256.880976] Bluetooth: hci7: command tx timeout
[  308.309452] syz-executor.0 (4815) used greatest stack depth: 24648 bytes left
[  310.718224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  310.719884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  310.722139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  310.725219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  310.727678] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  310.850714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  310.855530] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  310.858102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  310.862468] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  310.870295] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  310.873642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  310.887281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  310.894174] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  310.910021] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  310.919730] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  310.930098] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  310.932294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  310.934444] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  310.935134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  310.946312] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  310.956327] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  310.968582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  310.970078] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  310.986202] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  311.000577] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  311.004308] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  311.005174] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  311.009419] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  311.021004] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  311.027539] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  311.032292] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  311.036176] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  311.038265] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  311.042218] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  311.045406] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  311.050899] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  311.054860] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  311.058131] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  311.075235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  311.082562] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  312.751940] Bluetooth: hci0: command tx timeout
[  312.943964] Bluetooth: hci1: command tx timeout
[  313.007954] Bluetooth: hci2: command tx timeout
[  313.136129] Bluetooth: hci4: command tx timeout
[  313.199988] Bluetooth: hci5: command tx timeout
[  313.200891] Bluetooth: hci3: command tx timeout
[  313.263968] Bluetooth: hci6: command tx timeout
[  313.459958] Bluetooth: hci7: command tx timeout
[  314.800895] Bluetooth: hci0: command tx timeout
[  314.993943] Bluetooth: hci1: command tx timeout
[  315.056296] Bluetooth: hci2: command tx timeout
[  315.184300] Bluetooth: hci4: command tx timeout
[  315.248889] Bluetooth: hci3: command tx timeout
[  315.248912] Bluetooth: hci5: command tx timeout
[  315.315025] Bluetooth: hci6: command tx timeout
[  315.504342] Bluetooth: hci7: command tx timeout
[  316.849332] Bluetooth: hci0: command tx timeout
[  317.040906] Bluetooth: hci1: command tx timeout
[  317.105075] Bluetooth: hci2: command tx timeout
[  317.232499] Bluetooth: hci4: command tx timeout
[  317.296012] Bluetooth: hci3: command tx timeout
[  317.296085] Bluetooth: hci5: command tx timeout
[  317.359940] Bluetooth: hci6: command tx timeout
[  317.551953] Bluetooth: hci7: command tx timeout
[  318.898256] Bluetooth: hci0: command tx timeout
[  319.087947] Bluetooth: hci1: command tx timeout
[  319.151995] Bluetooth: hci2: command tx timeout
[  319.282206] Bluetooth: hci4: command tx timeout
[  319.343941] Bluetooth: hci3: command tx timeout
[  319.344999] Bluetooth: hci5: command tx timeout
[  319.408952] Bluetooth: hci6: command tx timeout
[  319.600926] Bluetooth: hci7: command tx timeout
[  372.736752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  372.742492] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  372.745479] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  372.756305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  372.766500] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  372.885099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  372.892072] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  372.894758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  372.903635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  372.907344] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  373.006580] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  373.017358] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  373.022356] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  373.035375] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  373.040626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  373.083264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  373.103332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  373.115140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  373.156003] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  373.165385] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  373.168023] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  373.170056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  373.172675] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  373.186047] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  373.187250] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  373.197110] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  373.201810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  373.205331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  373.211478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  373.215338] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  373.218479] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  373.287427] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  373.294305] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  373.303627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  373.312202] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  373.312367] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  373.333356] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  373.370812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  373.408360] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  373.413677] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  374.833191] Bluetooth: hci0: command tx timeout
[  374.959967] Bluetooth: hci1: command tx timeout
[  375.152923] Bluetooth: hci2: command tx timeout
[  375.343918] Bluetooth: hci4: command tx timeout
[  375.344996] Bluetooth: hci3: command tx timeout
[  375.409022] Bluetooth: hci5: command tx timeout
[  375.409765] Bluetooth: hci6: command tx timeout
[  375.473310] Bluetooth: hci7: command tx timeout
[  376.880190] Bluetooth: hci0: command tx timeout
[  377.008087] Bluetooth: hci1: command tx timeout
[  377.200035] Bluetooth: hci2: command tx timeout
[  377.391996] Bluetooth: hci3: command tx timeout
[  377.392490] Bluetooth: hci4: command tx timeout
[  377.456260] Bluetooth: hci6: command tx timeout
[  377.456749] Bluetooth: hci5: command tx timeout
[  377.520191] Bluetooth: hci7: command tx timeout
[  378.928902] Bluetooth: hci0: command tx timeout
[  379.056262] Bluetooth: hci1: command tx timeout
[  379.248045] Bluetooth: hci2: command tx timeout
[  379.439989] Bluetooth: hci3: command tx timeout
[  379.440478] Bluetooth: hci4: command tx timeout
[  379.503953] Bluetooth: hci5: command tx timeout
[  379.504434] Bluetooth: hci6: command tx timeout
[  379.568999] Bluetooth: hci7: command tx timeout
[  380.975954] Bluetooth: hci0: command tx timeout
[  381.104202] Bluetooth: hci1: command tx timeout
[  381.296920] Bluetooth: hci2: command tx timeout
[  381.488052] Bluetooth: hci3: command tx timeout
[  381.488544] Bluetooth: hci4: command tx timeout
[  381.551989] Bluetooth: hci6: command tx timeout
[  381.552502] Bluetooth: hci5: command tx timeout
[  381.616313] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
13:29:16  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff888036643780 RCX=0000000000000200 RDX=0000000000000008
RSI=ffff888036644200 RDI=ffff888036643780 RBP=0000000000000000 RSP=ffff888030697228
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000000 R11=00000000ffffffff
R12=ffff888036644200 R13=0000000000000001 R14=0000000000000004 R15=ffff8880366441d8
RIP=ffffffff8151672d RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5648000 00000000 00000000
LDT=0000 fffffe5800000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7eb40fd260 CR3=00000000072a3000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff8880310c9bc0 RCX=ffff88806cf09000 RDX=ffff88806cf01000
RSI=ffff8880310c9bc0 RDI=ffff88806cf089b0 RBP=ffff88806cf08a20 RSP=ffff88806cf08990
R8 =0000000000000001 R9 =0000000000000000 R10=ffff88806cf08a00 R11=ffffffff85c27500
R12=ffff88806cf08a00 R13=ffff88806cf08a28 R14=ffff88806cf08a48 R15=ffff88806cf08a00
RIP=ffffffff812a0bc0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5748000 00000000 00000000
LDT=0000 fffffe6b00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fda568a41f0 CR3=00000000289ee000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000