Warning: Permanently added '[localhost]:21395' (ECDSA) to the list of known hosts.
2025/06/02 15:45:02 fuzzer started
2025/06/02 15:45:02 dialing manager at localhost:34361
syzkaller login: [   93.509691] cgroup: Unknown subsys name 'net'
[   93.633664] cgroup: Unknown subsys name 'cpuset'
[   93.670512] cgroup: Unknown subsys name 'rlimit'
2025/06/02 15:45:26 syscalls: 2214
2025/06/02 15:45:26 code coverage: enabled
2025/06/02 15:45:26 comparison tracing: enabled
2025/06/02 15:45:26 extra coverage: enabled
2025/06/02 15:45:26 setuid sandbox: enabled
2025/06/02 15:45:26 namespace sandbox: enabled
2025/06/02 15:45:26 Android sandbox: enabled
2025/06/02 15:45:26 fault injection: enabled
2025/06/02 15:45:26 leak checking: enabled
2025/06/02 15:45:26 net packet injection: enabled
2025/06/02 15:45:26 net device setup: enabled
2025/06/02 15:45:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/02 15:45:26 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/02 15:45:26 USB emulation: enabled
2025/06/02 15:45:26 hci packet injection: enabled
2025/06/02 15:45:26 wifi device emulation: enabled
2025/06/02 15:45:26 802.15.4 emulation: enabled
2025/06/02 15:45:26 fetching corpus: 0, signal 0/0 (executing program)
2025/06/02 15:45:27 starting 8 fuzzer processes
15:45:27 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000080)=""/47, 0x2f}, {&(0x7f00000000c0)=""/226, 0xe2}, {&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000000200)=""/245, 0xf5}], 0x5)
r1 = fcntl$dupfd(r0, 0x406, r0)
name_to_handle_at(r1, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@OVL_FILEID_V0={0x42, 0xfb, {0x0, 0xfb, 0x42, 0x2, 0x9, "4e1da4a6668cad1ae6c7dee82a7d5ea0", "1cc80ac9b71dd9bf1bc1467cd54709857ff9936d2dc3350da22f2db4ffc577377ba41f83d6bd7451e325cef8ca"}}, &(0x7f0000000440), 0x1400)
r2 = creat(&(0x7f0000000480)='./file0\x00', 0x1f0)
ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000004c0))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000500)={0x1, 0x10000, 0x10000})
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x90)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000680)={0x1, 0xdb})
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
readv(r0, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/197, 0xc5}, {&(0x7f00000008c0)=""/235, 0xeb}, {&(0x7f00000009c0)=""/66, 0x42}, {&(0x7f0000000a40)=""/150, 0x96}], 0x4)
ioctl$CDROMSETSPINDOWN(r1, 0x531e, &(0x7f0000000b40))
openat$full(0xffffffffffffff9c, &(0x7f0000000b80), 0x361802, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0xffffffffffffb367, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000c00)={0x81, 0x2, 'client0\x00', 0x2, "1b64c1e7cfc9eaf7", "0c1fea68cb88db20e13a6b747ba477e61cff60b501a8b7fc04fc7b6f2bd97a11", 0x7, 0xffffff63})
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8000, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
r5 = open_tree(r2, &(0x7f0000000d00)='./file0\x00', 0x8000)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000d80)={0x9})

15:45:27 executing program 1:
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000000)={0x2, 0x960b, 0x5, 0xfff})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x208, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0xef61}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x5e2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7ff}, {0x8, 0x15, 0xffffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x20}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x74}, {0x6, 0x11, 0xb1}, {0x8, 0x15, 0xa7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x35513b61}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x401}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xd3}, {0x8, 0x15, 0x1}}]}, 0x208}}, 0x4000)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000340)={0x40, 0x2, 0x0, 0xffffffff, 0x1f, "7220c654a631cd9a980a81f81f0f5b0162ab99", 0x10000, 0x3ff})
connect(0xffffffffffffffff, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x1, @mcast2, 0x7fff}, 0x80)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x17)
ioctl$TCXONC(r1, 0x540a, 0x2)
r2 = syz_open_dev$vcsa(&(0x7f0000000400), 0x10000, 0x424300)
mq_getsetattr(r2, &(0x7f0000000440)={0x1f, 0x1, 0x6, 0x38a0}, 0x0)
r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder-control\x00', 0x800, 0x0)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f00000004c0)={0x0, 0x8000, 0xcb28})
fstat(r3, &(0x7f0000000500))
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x78, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x44880}, 0x40)
r4 = memfd_secret(0x80000)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f00000006c0))
fsetxattr$security_ima(r4, &(0x7f0000000740), &(0x7f0000000780)=@ng={0x4, 0x11, "66a165f540793f547734cd2638fb268f93876973"}, 0x16, 0x1)
r5 = openat$cgroup_ro(r2, &(0x7f00000007c0)='io.stat\x00', 0x0, 0x0)
sendmsg$AUDIT_TRIM(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x10, 0x3f6, 0x200, 0x70bd2d, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000090}, 0x80)
ioctl$KDSKBLED(r4, 0x4b65, 0x4)
getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000900)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x9, 0x0, 0x4075, 0xa15, 0x77f]}, &(0x7f0000000980)=0x78)

15:45:27 executing program 2:
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)=0x7, 0x4)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040000)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000280)={0x9, 0x81, 0x2232, 0xfffff4ed, 0x1})
r0 = socket(0x1f, 0x0, 0xd2ca)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x254, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x238, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "473f194afe91cae1ccc1ec387db37e2a381eca6d774a58fa917944812321582eccdd0ba95f3ad256d0d29acce25002a2afe5ced5c7f86d968c926214df923868a8e50e179d8d27156a26bce9c94b08260f0711a09be54de2d451136dda472ba1918536d60853d75368b852796ef9ec3111094a772e35a5455cf5cf26f32e2a5e221c2416a127c065ccadbec711005676734199c93c325ada3a6ca3"}, @ETHTOOL_A_BITSET_MASK={0x75, 0x5, "4d9141961ce3ada70d49eee6f3e4ee0b55ff040a5cdcc0029b065e4b61145bfa5cf18b360a079d599febb1ddedc90cc1f68ef473f2700c5f7c3356cc4a4f8bbc930040aae12fdf5bc0879bcb45655007c05ea1c3c0ba02bbc52d5de652a9d3b2facbe74dade05044d32417c385b995e42a"}, @ETHTOOL_A_BITSET_VALUE={0xdf, 0x4, "8c106bfa5030a260a694719a289fd0b3219c5cbba1128b4d8a043464a7748f1ea9ce4d037d053dc72e577a395e55d3e8d3accfc48c8b42f9db0e51cb14f87b1dc6899e681bb4c77c06599b21b2fba9d1610b1b5bdcedf0aee5e83c9aff4f01ed34c5affef6356f2d4f86ded83043d7f150b87662eaef4082fc1f650d830681b0e5bdc9a16e945d700a16d2872364b25c2b5cc4f8eb600e8677e575106bb7f2477fd91e4e37104f792e7e9dbc1830bb1acb44c190c457de343faa6850fa6951b8ccfdec530a31d46a8104371a1a927db4c56f2c3eec4b64983ee643"}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ')+^#\'^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x254}, 0x1, 0x0, 0x0, 0x14}, 0x46805)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000600))
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000080)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x13d, 0x4a}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x40)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r3=>r1, {0x3}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'syztnl0\x00', <r4=>0x0, 0xff47, 0x40, 0x10001, 0x8000, {{0xc, 0x4, 0x1, 0x28, 0x30, 0x66, 0x0, 0x0, 0x4, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x1a, 0x3, [{0x2, 0x10, "327b43f5d22089dc0b492f2f2d11"}, {0x6, 0x4, "ffe0"}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a40)={'sit0\x00', &(0x7f00000009c0)={'syztnl2\x00', <r5=>0x0, 0x4, 0x8, 0x6, 0x5c, 0x8, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x7800, 0xff, 0x2}})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a80)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000b80)=0xe8)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000e00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x200, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x8000}, 0x20000100)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000e40)={0x7, 'wlan1\x00', {0x101}, 0x2})
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000e80)={{r0}, "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"})
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c0)

[  118.329183] audit: type=1400 audit(1748879127.921:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
15:45:27 executing program 3:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0, 0x4, 0x0, 0x0, 0x11, 0x4, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x1, 0x0, 0x9}})
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xcc, r0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000004}, 0x1a1c8260ff3c84a3)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f00000002c0))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x28)
ioctl$VT_ACTIVATE(r3, 0x5606, 0x63c00)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r4=>r3, @in_args={0x2}}, './file0\x00'})
ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000380)={0x3, 0x2, 0x1f})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008805)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000004c0)=0x8000)
ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000740), 0x4)
read(r2, &(0x7f0000000780)=""/4096, 0x1000)
r5 = epoll_create1(0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000001780)={0x0, r5, 0x3, 0x2, 0x10001, 0x8d0})
pipe2(&(0x7f00000017c0), 0x800)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001840)=0x5dd8)

15:45:27 executing program 4:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r0=>0x0, 0x29, 0x1, 0x3f, 0x99, 0x2, @local, @loopback, 0x8000, 0x700, 0xfffffd07, 0x5}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x900}, 0x4)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280))
sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000900}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}]}, 0x64}}, 0x20004001)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000400)=0x2)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x22200, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5380ecda1b99"}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000600), r1)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r4, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800)
r5 = syz_open_dev$mouse(&(0x7f0000000700), 0xc0, 0x210800)
sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000)
mknodat$loop(r1, &(0x7f0000000840)='./file0\x00', 0x10, 0x1)
getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000880)=0x9, &(0x7f00000008c0)=0x4)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000900)=0x3)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44001}, 0x0)
ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f0000000a80))
r6 = syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000b00)='./file0\x00', 0x800, 0x3, &(0x7f0000000cc0)=[{&(0x7f0000000b40)="1d885ed486300731f38d37423579c1d6df8704d980ff1bfdaae211d35e92131dce7d4432bcfc013ca11c167eec0dfbd1c53060575a677d312bae4cc6f126822d1fdffd5d6df7b1c6cfbfaaf96ea8b1d8c5421c", 0x53, 0xda4e}, {&(0x7f0000000bc0)="07647c25b6de139d1962828c3b4bd4870872f97fb0c0b0bd8b969c41aaffe9194785134e6f6c6dc1783bf338703bfa91d4bc06ac0906c9f2a37521e02af27ec1e231aaecd249dbd2ffedb747a6460769bdede872877e04fd6b3756aea130c0397b1b9db24cdd8ba81ce1526a37ad2cf7ef28aa968954c048055a969f3d6c8d35356d653aafb7d960247c99eeed3c128c12e15ef360418390e7d6f707ba6ebfa7a3e99815a847a39f99c38950153505287544", 0xb2, 0x1}, {&(0x7f0000000c80)="1a41493146095a736a6124acb245ecfde8c81d18c7a21bcb1b4e50579c821615ca", 0x21, 0x7fff}], 0x2000020, &(0x7f0000000d40)={[{@noload}, {@resgid}, {@nodelalloc}, {@nobarrier}, {@oldalloc}], [{@measure}, {@uid_gt={'uid>', 0xee00}}]})
faccessat2(r6, &(0x7f0000000dc0)='./file0\x00', 0x91, 0x800)

15:45:28 executing program 5:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4000c0, 0x2)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7e}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x80000000}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x80}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040014}, 0x10000)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
setxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@md5={0x1, "d1d4f61e37f3cb482c5b7e5804314a3b"}, 0x11, 0x3)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000340)={0x3b, @loopback, 0x4e22, 0x0, 'sh\x00', 0x20, 0x1, 0x68}, 0x2c)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = open(&(0x7f0000000380)='./file0\x00', 0x109000, 0x14)
ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f00000003c0)={0x1, 0x9})
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000400), &(0x7f0000000440)={'U-', 0x8}, 0x16, 0x2)
r3 = dup2(r1, r1)
setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000480)={0x1, {{0x2, 0x4e21, @multicast2}}}, 0x88)
r4 = openat$cgroup_pressure(r0, &(0x7f0000000540)='cpu.pressure\x00', 0x2, 0x0)
ioctl$FITHAW(r4, 0xc0045878)
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x7fff, 0x9, &(0x7f0000000ac0)=[{&(0x7f0000000600)="fdab4f1170593bc2cdec487a00296bf85121aaec620764a952586eabe794", 0x1e, 0x7}, {&(0x7f0000000640)="05e10591bdb7687831a57b69850fd800583b2c8f3728631665f1495410d3fac63caf9d8ea4a5e264b5ed54149891af", 0x2f, 0x8}, {&(0x7f0000000680)="d2bafe3040cbc013a90befdb836b3ced101f85854440adf29e4472c0c9aa71ce4f4feb82c5fc56cbb11a7bb86d51560f7012c653b3832f48a26795777a25877216055fbbabc7ffdadcd9ae0281ae4833015e628bfff395d71a835ceec80b05641dc9a1e89e566accab3f9f9ad52d0423ce88f874ad934676e7ad4b3046c36cf76edbac37fd677792dc307c4116e9c363aedc7dd32c4a8f3c55468f046e4a7b", 0x9f, 0x2}, {&(0x7f0000000740)="61020ea87a2f8858c83b1155bebc6688ef4dae7c60ffb228973a3e109117fb76e339e7c0d5831f4551ce2474f9df8fcd9080857a80ced2175cb2f1f90578605f35f1d57ac09c67f84a699e61b38f3be8f0090ab59732dd2e77f43a1386b3227fb59288efdcad8d19feb3ef0e5f014e6eafdd56e5bc4f9298e30ec2073e", 0x7d, 0xffffffff80000001}, {&(0x7f00000007c0), 0x0, 0xfffffffffffffa4c}, {&(0x7f0000000800)="e9b316dfcbc56268bb682286ba", 0xd, 0x20000}, {&(0x7f0000000840)="5d6eeac31f9bb21e632fa510169e0caa053a54f64e8e1b904b3784aa6289e5459732d1a8d6b239ff1a79ce3f639067b9e3f9aebb1124b88c60e9741f1b70870dec40cb21097b133fdb9a26ac987a97692f2e2626fe3df4cef67b547243f4e6c69ec5f555c322a3a38960daa3407058ee0c7a2ad84d64d6341229d727f15d8fe0fcbf54bcb7b6ec1778f4ef8f854f71b48d52c02d173e1201e94d4444a3bd9467030fa1838a724fe2d643df3101495d743a6e6e5132d28ce737027964f059ffca76f1f5637f7f044329", 0xc9, 0x6}, {&(0x7f0000000940)="88aa9a8450aab0de7ef20d5cc7c2e04f4f4c87f3acb926fe1f61daa658c906283c4972373ffa44befafad42562b46e706a45cc7056779b52bf09a7db91c5471a683029e8f35f6773310d3b94eb9a0a48981559d97b93cfc882ea7cf66a2c345614e782bd2a9baf8fcacb944af8d0e2bec9540b750ec5a8e7d502510a9795950e7f02452addb542131ab774d5ae1a28e09c308d88b2fd3189a610feb1600cffeb2bbc8f963e61780e70349f7a3e159d5d11da03224dfbf81dabfad623573720fbd76a9b00f3b41d63aa54246cd09b3934173b2e3d014489a13d3f93d348110710e20b5bdefb", 0xe5, 0x5}, {&(0x7f0000000a40)="608aa126b04cc42c0d985a7c35e57eda63a3829704b502877b7bf6e87d1062ca1373cb50b4ac1e9463df78415e036c8d2a99d93c0141458d6c0c185beff5dc9a43bfc25092daaa26c77be335c804b06b5740e3e565a5595324", 0x59, 0x1}], 0x8, &(0x7f0000000bc0)={[{@utf8}, {@shortname_lower}, {@utf8}, {@nonumtail}, {@numtail}], [{@measure}]})
r5 = syz_open_dev$ptys(0xc, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000c00)={0x40000000})
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, 0x7, 0x1, 0x600, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_io_uring_setup(0x6b60, &(0x7f0000000d40)={0x0, 0x7d09, 0x20, 0x3, 0x81, 0x0, r2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000dc0), &(0x7f0000000e00)=<r6=>0x0)
syz_io_uring_submit(0x0, r6, &(0x7f0000000f80)=@IORING_OP_STATX={0x15, 0x6abf29cd3e7548cf, 0x0, r3, &(0x7f0000000e40), &(0x7f0000000f40)='./file0\x00', 0x10, 0x2000, 0x1}, 0x6)

15:45:28 executing program 6:
r0 = fsmount(0xffffffffffffffff, 0x0, 0x8)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x5, 0x4}}, './file0\x00'})
ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0x6)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/8139too', 0x40000, 0x80)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)="1c627670e4b0a10bad867214c5d6633ca3e58c1cca7125f4c0fe6f385743ad538ba92bdf67bad793223700021e38d839ad317f44", 0x34, r2}, 0x68)
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000001c0))
ioctl$TCSBRKP(r2, 0x5425, 0x9288)
r3 = fsmount(r0, 0x1, 0x88)
ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000200))
ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000000240)=0xf9)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000280)={{r1}, "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"})
write$cgroup_pid(r2, &(0x7f0000001280)=0xffffffffffffffff, 0x12)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x802, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001300), 0x101000, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000001340)={r5, 0x3, 0x3f, 0xb9c})
socketpair(0x22, 0x4, 0x101, &(0x7f0000001380)={<r6=>0xffffffffffffffff})
signalfd(r6, &(0x7f00000013c0)={[0x7]}, 0x8)
r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000001400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001440)=0x14, 0x800)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000001480)={0x3, 0x4, 0x1, 0x0, 0x0, [{{r7}, 0xffffffffffff7fff}]})

15:45:28 executing program 7:
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0xe, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc000)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000002}, 0x80)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x3, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x1f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24040050)
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000000480)={0x8, 0x8a, 0x5, 0x56, 0xc6, 0xff})
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x118, 0x17, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xd8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x118}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000040)
r2 = openat(r0, &(0x7f0000001100)='./file0\x00', 0x1, 0x190)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000001140)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14)
read$hidraw(r2, &(0x7f0000001180)=""/37, 0x25)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f00000011c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r4 = fsmount(r0, 0x0, 0x9)
sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2002002}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x80, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x10040)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r4)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x68, r5, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffeff, 0x3b}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x81}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3f}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004011}, 0x8000)
mkdirat(r4, &(0x7f00000016c0)='./file0\x00', 0x2c)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001700), 0x88200, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, r5, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4008)

[  119.627419] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  119.635341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  119.639864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  119.652753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  119.661773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  119.811579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  119.818622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  119.822731] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  119.833253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  119.837876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  119.896737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  119.905743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  119.909017] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  119.914541] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  119.931155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  119.953592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  119.959436] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  119.963446] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  119.967789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  119.977931] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  119.992706] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  119.995410] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  120.004345] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  120.006990] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  120.009716] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  120.011701] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  120.015610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  120.020662] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  120.025177] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  120.027033] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  120.027893] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  120.030988] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  120.042834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  120.052333] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  120.060408] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  120.079022] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  120.081591] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  120.084641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  120.098897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  120.103432] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  121.710277] Bluetooth: hci0: command tx timeout
[  121.899750] Bluetooth: hci1: command tx timeout
[  122.027232] Bluetooth: hci2: command tx timeout
[  122.091531] Bluetooth: hci3: command tx timeout
[  122.155577] Bluetooth: hci4: command tx timeout
[  122.156199] Bluetooth: hci7: command tx timeout
[  122.220617] Bluetooth: hci5: command tx timeout
[  122.221190] Bluetooth: hci6: command tx timeout
[  123.755356] Bluetooth: hci0: command tx timeout
[  123.947937] Bluetooth: hci1: command tx timeout
[  124.075497] Bluetooth: hci2: command tx timeout
[  124.140347] Bluetooth: hci3: command tx timeout
[  124.204222] Bluetooth: hci4: command tx timeout
[  124.204714] Bluetooth: hci7: command tx timeout
[  124.267438] Bluetooth: hci6: command tx timeout
[  124.268910] Bluetooth: hci5: command tx timeout
[  125.804116] Bluetooth: hci0: command tx timeout
[  125.995343] Bluetooth: hci1: command tx timeout
[  126.123344] Bluetooth: hci2: command tx timeout
[  126.187183] Bluetooth: hci3: command tx timeout
[  126.251309] Bluetooth: hci7: command tx timeout
[  126.251751] Bluetooth: hci4: command tx timeout
[  126.315160] Bluetooth: hci5: command tx timeout
[  126.315607] Bluetooth: hci6: command tx timeout
[  127.851393] Bluetooth: hci0: command tx timeout
[  128.044350] Bluetooth: hci1: command tx timeout
[  128.171162] Bluetooth: hci2: command tx timeout
[  128.235348] Bluetooth: hci3: command tx timeout
[  128.299391] Bluetooth: hci4: command tx timeout
[  128.299838] Bluetooth: hci7: command tx timeout
[  128.363229] Bluetooth: hci6: command tx timeout
[  128.363711] Bluetooth: hci5: command tx timeout
[  179.574962] syz-executor.1 (283) used greatest stack depth: 25072 bytes left
[  182.273063] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  182.277675] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  182.280542] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  182.289941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  182.294068] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  182.351880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  182.356755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  182.359398] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  182.365539] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  182.370559] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  182.422307] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  182.424828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  182.427707] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  182.433062] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  182.436943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  182.478307] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  182.480644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  182.482001] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  182.483378] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  182.490721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  182.493390] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  182.493882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  182.516692] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  182.522559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  182.539977] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  182.562273] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  182.588035] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  182.623666] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  182.631295] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  182.634410] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  182.642629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  182.651843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  182.659603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  182.691460] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  182.718865] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  182.947978] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  182.950767] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  182.954654] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  182.987070] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  183.007669] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  184.364403] Bluetooth: hci0: command tx timeout
[  184.427548] Bluetooth: hci1: command tx timeout
[  184.557172] Bluetooth: hci3: command tx timeout
[  184.557439] Bluetooth: hci2: command tx timeout
[  184.619670] Bluetooth: hci4: command tx timeout
[  184.811166] Bluetooth: hci6: command tx timeout
[  184.876261] Bluetooth: hci5: command tx timeout
[  185.196292] Bluetooth: hci7: command tx timeout
[  186.412516] Bluetooth: hci0: command tx timeout
[  186.476166] Bluetooth: hci1: command tx timeout
[  186.604412] Bluetooth: hci3: command tx timeout
[  186.604452] Bluetooth: hci2: command tx timeout
[  186.668112] Bluetooth: hci4: command tx timeout
[  186.859351] Bluetooth: hci6: command tx timeout
[  186.923201] Bluetooth: hci5: command tx timeout
[  187.243896] Bluetooth: hci7: command tx timeout
[  188.459247] Bluetooth: hci0: command tx timeout
[  188.524156] Bluetooth: hci1: command tx timeout
[  188.651376] Bluetooth: hci3: command tx timeout
[  188.651540] Bluetooth: hci2: command tx timeout
[  188.717112] Bluetooth: hci4: command tx timeout
[  188.907360] Bluetooth: hci6: command tx timeout
[  188.974323] Bluetooth: hci5: command tx timeout
[  189.292272] Bluetooth: hci7: command tx timeout
[  190.507195] Bluetooth: hci0: command tx timeout
[  190.572112] Bluetooth: hci1: command tx timeout
[  190.699444] Bluetooth: hci2: command tx timeout
[  190.700542] Bluetooth: hci3: command tx timeout
[  190.763141] Bluetooth: hci4: command tx timeout
[  190.955398] Bluetooth: hci6: command tx timeout
[  191.019178] Bluetooth: hci5: command tx timeout
[  191.340156] Bluetooth: hci7: command tx timeout
[  242.409636] syz-executor.3 (2933) used greatest stack depth: 25040 bytes left
[  244.359860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  244.365809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  244.368832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  244.378822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  244.382597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  244.607608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  244.610866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  244.613427] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  244.622657] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  244.626976] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  244.759375] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  244.769631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  244.773677] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  244.787016] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  244.808761] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  244.863189] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  244.882054] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  244.896742] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  244.898398] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  244.910015] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  244.917518] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  244.927258] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  244.929302] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  244.934046] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  244.939182] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  244.943388] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  244.944477] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  244.950405] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  244.953478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  244.958963] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.962643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  244.991056] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  244.998610] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  245.005918] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  245.015418] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  245.019965] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  245.022319] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  245.066049] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  245.103527] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  245.121438] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  246.443177] Bluetooth: hci0: command tx timeout
[  246.700406] Bluetooth: hci1: command tx timeout
[  247.019162] Bluetooth: hci4: command tx timeout
[  247.083313] Bluetooth: hci5: command tx timeout
[  247.147278] Bluetooth: hci6: command tx timeout
[  247.147329] Bluetooth: hci7: command tx timeout
[  247.148042] Bluetooth: hci2: command tx timeout
[  247.211191] Bluetooth: hci3: command tx timeout
[  248.491526] Bluetooth: hci0: command tx timeout
[  248.747203] Bluetooth: hci1: command tx timeout
[  249.067291] Bluetooth: hci4: command tx timeout
[  249.133110] Bluetooth: hci5: command tx timeout
[  249.195270] Bluetooth: hci2: command tx timeout
[  249.195306] Bluetooth: hci7: command tx timeout
[  249.195721] Bluetooth: hci6: command tx timeout
[  249.259189] Bluetooth: hci3: command tx timeout
[  250.539213] Bluetooth: hci0: command tx timeout
[  250.795439] Bluetooth: hci1: command tx timeout
[  251.115186] Bluetooth: hci4: command tx timeout
[  251.180140] Bluetooth: hci5: command tx timeout
[  251.243371] Bluetooth: hci6: command tx timeout
[  251.243396] Bluetooth: hci7: command tx timeout
[  251.243844] Bluetooth: hci2: command tx timeout
[  251.307265] Bluetooth: hci3: command tx timeout
[  252.588795] Bluetooth: hci0: command tx timeout
[  252.843591] Bluetooth: hci1: command tx timeout
[  253.163419] Bluetooth: hci4: command tx timeout
[  253.227550] Bluetooth: hci5: command tx timeout
[  253.291327] Bluetooth: hci7: command tx timeout
[  253.291428] Bluetooth: hci6: command tx timeout
[  253.292013] Bluetooth: hci2: command tx timeout
[  253.355229] Bluetooth: hci3: command tx timeout
[  304.643737] syz-executor.3 (5630) used greatest stack depth: 24912 bytes left
[  306.632631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  306.637662] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  306.643847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  306.657659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  306.666672] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  306.886403] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  306.894044] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  306.898353] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  306.909567] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  306.915696] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  306.954524] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  306.959613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  306.971560] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  306.976942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  306.980706] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  307.094698] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  307.099845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  307.102460] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  307.128545] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  307.144869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  307.205830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  307.223242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  307.225729] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  307.229500] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  307.238643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  307.249596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  307.258641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  307.272338] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  307.275702] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  307.315649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  307.320796] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  307.331638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  307.335787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  307.350747] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  307.382618] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  307.408282] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  307.409486] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  307.419809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  307.428558] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  307.439316] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  308.716157] Bluetooth: hci0: command tx timeout
[  308.971440] Bluetooth: hci1: command tx timeout
[  309.035191] Bluetooth: hci2: command tx timeout
[  309.291800] Bluetooth: hci3: command tx timeout
[  309.420164] Bluetooth: hci4: command tx timeout
[  309.420233] Bluetooth: hci5: command tx timeout
[  309.612388] Bluetooth: hci6: command tx timeout
[  309.612440] Bluetooth: hci7: command tx timeout
[  310.763171] Bluetooth: hci0: command tx timeout
[  311.019189] Bluetooth: hci1: command tx timeout
[  311.084108] Bluetooth: hci2: command tx timeout
[  311.339204] Bluetooth: hci3: command tx timeout
[  311.467479] Bluetooth: hci4: command tx timeout
[  311.470444] Bluetooth: hci5: command tx timeout
[  311.659429] Bluetooth: hci7: command tx timeout
[  311.659899] Bluetooth: hci6: command tx timeout
[  312.811306] Bluetooth: hci0: command tx timeout
[  313.067506] Bluetooth: hci1: command tx timeout
[  313.131230] Bluetooth: hci2: command tx timeout
[  313.387244] Bluetooth: hci3: command tx timeout
[  313.515189] Bluetooth: hci5: command tx timeout
[  313.515439] Bluetooth: hci4: command tx timeout
[  313.707197] Bluetooth: hci6: command tx timeout
[  313.707224] Bluetooth: hci7: command tx timeout
[  314.859229] Bluetooth: hci0: command tx timeout
[  315.115193] Bluetooth: hci1: command tx timeout
[  315.179735] Bluetooth: hci2: command tx timeout
[  315.435183] Bluetooth: hci3: command tx timeout
[  315.563221] Bluetooth: hci5: command tx timeout
[  315.563238] Bluetooth: hci4: command tx timeout
[  315.755206] Bluetooth: hci6: command tx timeout
[  315.758145] Bluetooth: hci7: command tx timeout
[  369.230902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  369.236692] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  369.239919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  369.246944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  369.251026] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  369.504043] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  369.508343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  369.512527] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  369.514540] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  369.534585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  369.540942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  369.553694] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  369.568189] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  369.583386] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  369.591225] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  369.594694] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  369.596645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  369.600999] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  369.603943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  369.606609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  369.611863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  369.614500] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  369.616541] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  369.617915] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  369.620931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  369.625039] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  369.630605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  369.638215] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  369.653422] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  369.659520] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  369.736043] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  369.742323] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  369.746344] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  369.780363] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  369.782649] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  369.787986] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  369.790046] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  369.844857] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  369.847265] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  369.884645] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  371.307544] Bluetooth: hci0: command tx timeout
[  371.627388] Bluetooth: hci1: command tx timeout
[  371.691408] Bluetooth: hci5: command tx timeout
[  371.947192] Bluetooth: hci7: command tx timeout
[  371.947938] Bluetooth: hci4: command tx timeout
[  372.011294] Bluetooth: hci6: command tx timeout
[  372.075229] Bluetooth: hci3: command tx timeout
[  372.075770] Bluetooth: hci2: command tx timeout
[  373.359113] Bluetooth: hci0: command tx timeout
[  373.676165] Bluetooth: hci1: command tx timeout
[  373.739478] Bluetooth: hci5: command tx timeout
[  373.996311] Bluetooth: hci7: command tx timeout
[  373.996771] Bluetooth: hci4: command tx timeout
[  374.060438] Bluetooth: hci6: command tx timeout
[  374.124224] Bluetooth: hci3: command tx timeout
[  374.124661] Bluetooth: hci2: command tx timeout
[  375.404885] Bluetooth: hci0: command tx timeout
[  375.724328] Bluetooth: hci1: command tx timeout
[  375.789143] Bluetooth: hci5: command tx timeout
[  376.044442] Bluetooth: hci7: command tx timeout
[  376.044939] Bluetooth: hci4: command tx timeout
[  376.107666] Bluetooth: hci6: command tx timeout
[  376.172153] Bluetooth: hci3: command tx timeout
[  376.172593] Bluetooth: hci2: command tx timeout
[  377.452165] Bluetooth: hci0: command tx timeout
[  377.772164] Bluetooth: hci1: command tx timeout
[  377.836307] Bluetooth: hci5: command tx timeout
[  378.092404] Bluetooth: hci7: command tx timeout
[  378.092855] Bluetooth: hci4: command tx timeout
[  378.157294] Bluetooth: hci6: command tx timeout
[  378.219181] Bluetooth: hci3: command tx timeout
[  378.219591] Bluetooth: hci2: command tx timeout

VM DIAGNOSIS:
15:50:31  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000001 RCX=ffff88802c7ff744 RDX=0000000000000002
RSI=ffffffff85c1d1c0 RDI=ffff888037668a80 RBP=ffffffff85c1d1c0 RSP=ffff88802c7ff708
R8 =0000000000000001 R9 =ffff88802c7ff830 R10=000000000003b6bd R11=0000000000024c1d
R12=ffff888037668a80 R13=ffff88802c7ff744 R14=0000000000000002 R15=0000000000000002
RIP=ffffffff815140cd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe5a00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f79aaf9a090 CR3=000000000e48e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff88806cf08a50 RCX=ffff88806cf089a4 RDX=1ffff1100d9e1155
RSI=ffffffff85c1d1c0 RDI=ffffffff8142fd0d RBP=ffff88806cf08aa8 RSP=ffff88806cf08a38
R8 =0000000000000001 R9 =ffff88806cf08a90 R10=000000000003b6bd R11=000000000000a7cf
R12=ffff88806cf08b18 R13=0000000000000000 R14=ffff888038378000 R15=ffff8880394aa200
RIP=ffffffff81353b1b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe1900000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdf50c83620 CR3=000000001c170000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000