Warning: Permanently added '[localhost]:57196' (ECDSA) to the list of known hosts.
2025/06/08 23:43:06 fuzzer started
2025/06/08 23:43:07 dialing manager at localhost:40003
syzkaller login: [   99.798692] cgroup: Unknown subsys name 'net'
[   99.956376] cgroup: Unknown subsys name 'cpuset'
[  100.014803] cgroup: Unknown subsys name 'rlimit'
2025/06/08 23:43:23 syscalls: 202
2025/06/08 23:43:23 code coverage: enabled
2025/06/08 23:43:23 comparison tracing: enabled
2025/06/08 23:43:23 extra coverage: enabled
2025/06/08 23:43:23 setuid sandbox: enabled
2025/06/08 23:43:23 namespace sandbox: enabled
2025/06/08 23:43:23 Android sandbox: enabled
2025/06/08 23:43:23 fault injection: enabled
2025/06/08 23:43:23 leak checking: enabled
2025/06/08 23:43:23 net packet injection: enabled
2025/06/08 23:43:23 net device setup: enabled
2025/06/08 23:43:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/08 23:43:23 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/08 23:43:23 USB emulation: enabled
2025/06/08 23:43:23 hci packet injection: enabled
2025/06/08 23:43:23 wifi device emulation: enabled
2025/06/08 23:43:23 802.15.4 emulation: enabled
2025/06/08 23:43:23 fetching corpus: 0, signal 0/0 (executing program)
2025/06/08 23:43:25 starting 8 fuzzer processes
23:43:25 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
r1 = epoll_create(0x9)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0)
sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x21f14a05aaabcffb, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x811)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}]}, 0x80}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x8041)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f00000004c0)={0x4f4, 0x0, 0x100, 0x800, 0x25dfdbfe, {}, [{{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x3f, 0x0, 0x83}, {0x495b, 0x5, 0x9, 0x7}, {0xd740, 0x6, 0xff, 0x7}, {0x3, 0x9, 0xbd, 0x20}, {0x6, 0x7, 0x1, 0x800}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7, 0xc1, 0x2, 0x3ff}, {0x6, 0x20, 0x40, 0xff}, {0x8, 0xcb, 0x9}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x504e7efd}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc3c3}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x1, 0x0, 0x401}]}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4014)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x40000)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b40), 0x503000, 0x0)
sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, 0x0, 0x800, 0x70bd2a, 0x6, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48040}, 0x800)
pkey_free(0xffffffffffffffff)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000c80), r0)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000d00), r3)
sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, r5, 0x400, 0x7, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44010}, 0x90)
epoll_create1(0x80000)
timer_gettime(0x0, &(0x7f0000000e00))
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x114, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x41}, 0x40)

23:43:25 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), 0x4)
r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x2, 0x1)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000100)=0x1, 0x4)
pipe2(&(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
pipe2(&(0x7f0000000180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'})
clock_gettime(0x0, &(0x7f0000000200)={<r8=>0x0, <r9=>0x0})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)={r8, r9+10000000}, 0x1, 0x0, 0x1}, 0x401)
syz_open_dev$mouse(&(0x7f00000002c0), 0x100000000, 0x10500)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r10)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x400900, 0x0)
mount_setattr(r6, &(0x7f0000000340)='./file0\x00', 0x8100, &(0x7f0000000380)={0x2, 0xfc, 0x20000, {r6}}, 0x20)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r11, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40020)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r12, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1)

23:43:25 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x8}}, './file0\x00'})
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x20}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r5=>r4, {0xffff70c2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff)
r7 = syz_open_dev$mouse(&(0x7f00000002c0), 0x7, 0x103000)
ioctl$BLKRAGET(r7, 0x1263, &(0x7f0000000300))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r8=>r2, {0x7fffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r10=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r10}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'})
ioctl$RNDZAPENTCNT(r9, 0x5204, &(0x7f0000000480)=0x2)

23:43:25 executing program 3:
r0 = timerfd_create(0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan0\x00', <r5=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x1a0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x76d2868}}}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000740)={{{@in=@loopback, @in=@dev}}, {{@in6=@private1}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f00000009c0)=0xe8)
sendmsg$nl_xfrm(r0, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)=@newpolicy={0xdc, 0x13, 0x400, 0x70bd27, 0x25dfdbfc, {{@in=@private=0xa010101, @in=@loopback, 0x4e24, 0x8000, 0x4e20, 0x1b, 0xa, 0xa0, 0x20, 0x1d, 0x0, r8}, {0x2, 0xf4, 0x1ff, 0x3, 0xe2e, 0x3ff, 0x5, 0x2ad91b69}, {0x7, 0xfffffffffffffffa, 0x100, 0x9}, 0x3, 0x0, 0x2, 0x0, 0x2, 0x2}, [@coaddr={0x14, 0xe, @in6=@mcast2}, @proto={0x5, 0x19, 0x6c}, @extra_flags={0x8, 0x18, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x80)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0, <r10=>0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000dc0)=0xe8)
r11 = syz_mount_image$nfs(&(0x7f0000000b80), &(0x7f0000000bc0)='./file0\x00', 0x1f, 0x2, &(0x7f0000000c80)=[{&(0x7f0000000c00)='\b', 0x1, 0x800}, {&(0x7f0000000c40)="46b91d9bb361", 0x6, 0x78}], 0xc04, &(0x7f0000000e00)={[{'(/$'}, {}, {'team0\x00'}], [{@fowner_lt={'fowner<', r10}}]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000e40)={{0x1, 0x1, 0x18, <r12=>r11}, './file0\x00'})
r13 = syz_genetlink_get_family_id$team(&(0x7f0000000ec0), r1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000f00)={'team0\x00', <r14=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000f40)={'team0\x00', <r15=>0x0})
getsockname$packet(r1, &(0x7f0000000f80)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000fc0)=0x14)
sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000001640)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001600)={&(0x7f0000001000)={0x5c4, r13, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x2, 0x0, 0x8}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r2}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x267af077}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r3}, {0x1dc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x65}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff0246}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x18c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1f, 0x13, 0xf9, 0x2}, {0x8, 0xba, 0x2, 0x4}, {0x9, 0x6, 0x9, 0x8}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x5c4}, 0x1, 0x0, 0x0, 0x80}, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000001680), 0x10000, 0x0)

[  118.059320] audit: type=1400 audit(1749426205.649:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
23:43:25 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x5}}, './file0\x00'})
ioctl$RTC_PIE_OFF(r0, 0x7006)
setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000040)=0x401, 0x4)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xd6d}}, './file0\x00'})
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x7, 0x1, 0x8b, 0x748}, 0xc)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000140)='{@u#]\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='!\\/-\'^/\x00'], &(0x7f0000000340)=[&(0x7f0000000240)='\x00', &(0x7f0000000280)='\\-^\x00', &(0x7f00000002c0)='!--*\x00', &(0x7f0000000300)='+\x00'])
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x463c, &(0x7f0000000380)={0x0, 0x7f29, 0x2, 0x1, 0x102, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000400)=<r3=>0x0, &(0x7f0000000440))
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f00000004c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x3, 0x0, r4, 0x0, r5}, 0x3f6e)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4, {0xfa}}, './file0\x00'})
removexattr(&(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000580)=@random={'btrfs.', '#[*#.-\'\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r6=>r4, {0x711}}, './file0/../file0\x00'})
getsockname$packet(r4, &(0x7f0000000640)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f00000007c0)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000800)={'vxcan0\x00', <r9=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000940)=0xe8)
recvmsg(r1, &(0x7f0000001e40)={&(0x7f0000000980)=@can={0x1d, <r11=>0x0}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000a00)=""/88, 0x58}, {&(0x7f0000000a80)=""/205, 0xcd}, {&(0x7f0000000b80)=""/61, 0x3d}, {&(0x7f0000000bc0)=""/189, 0xbd}, {&(0x7f0000000c80)=""/79, 0x4f}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x6, &(0x7f0000001d80)=""/185, 0xb9}, 0x120)
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000002500)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x5fc3308e87f8d00c}, 0xc, &(0x7f00000024c0)={&(0x7f0000002040)={0x44c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x442}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x8, 0x40, 0xff}, {0x7, 0x0, 0x80, 0x2}, {0xd2f, 0x5, 0x8, 0x1}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xac}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40000}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x40844}, 0x20000000)

23:43:25 executing program 5:
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x84}}, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x800)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xc}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x4c}}, 0x40000)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x5, 0x7, &(0x7f0000000480)={[0x7fff]}, 0x8)
write$cgroup_type(0xffffffffffffffff, &(0x7f00000004c0), 0x9)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, '\x00'})
syz_genetlink_get_family_id$team(&(0x7f0000000500), r2)
syz_open_dev$rtc(&(0x7f0000000580), 0xaa5, 0x4ed9471345296e39)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2d}}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ')-#@'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40800}, 0x8044)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c845}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r4=>r2}, './file0\x00'})
openat$cgroup_type(r4, &(0x7f0000000840), 0x2, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r3)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r5, 0xd10, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000009c0)={{0x1, 0x1, 0x18, <r6=>r4}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'})

23:43:25 executing program 6:
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x25}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001}, 0x24004000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x628240, 0x0)
ioctl$RTC_WIE_OFF(r3, 0x7010)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340), r1)
sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240c0044}, 0x20000814)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'})
write$cgroup_type(r3, &(0x7f0000000480), 0x9)
openat$cgroup_type(r3, &(0x7f00000004c0), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r1)
sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r1)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040058)
ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000780)={0xffff, 0x1, 0x1}, &(0x7f00000007c0)=[{}])

23:43:25 executing program 7:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50020608}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@newsa={0xf8, 0x10, 0x200, 0x70bd26, 0x25dfdbfe, {{@in=@rand_addr=0x64010102, @in6=@mcast2, 0x4e20, 0x40, 0x4e24, 0x3ff, 0x2, 0x20, 0x40, 0x6, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x4d2, 0x2b}, @in6=@loopback, {0x80000000, 0x400, 0x9, 0xffffffff, 0xfffffffffffffffe, 0x10000, 0xfff, 0x100}, {0x7, 0x4, 0x9, 0x5}, {0x7, 0x58, 0x10001}, 0x70bd2a, 0x3503, 0xa, 0x4, 0xc8, 0x40}, [@extra_flags={0x8, 0x18, 0x3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000001)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000841)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x51)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000480), r3)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r1)
sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008041}, 0x4004010)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r3)
sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2200c004}, 0x4004080)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000740))
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'NET_DM\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000000)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r5)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r8, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x2840}, 0x1)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r4, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}}, 0xc050)

[  119.414882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  119.416350] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  119.420562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  119.421625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  119.423256] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  119.424662] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  119.426514] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  119.427762] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  119.433002] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  119.435934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  119.437775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  119.440602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  119.445651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  119.446403] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  119.462399] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  119.525875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  119.529583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  119.532966] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  119.554636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  119.567538] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  119.599534] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  119.623550] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  119.630594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  119.633961] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  119.650839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  119.651665] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  119.657353] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  119.661455] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  119.672234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  119.677530] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  119.678661] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  119.687044] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  119.699820] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  119.711486] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  119.712781] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  119.724541] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  119.731780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  119.771638] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  119.844824] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  119.874623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  121.490202] Bluetooth: hci1: command tx timeout
[  121.490206] Bluetooth: hci0: command tx timeout
[  121.490349] Bluetooth: hci2: command tx timeout
[  121.618243] Bluetooth: hci3: command tx timeout
[  121.744507] Bluetooth: hci4: command tx timeout
[  121.808203] Bluetooth: hci6: command tx timeout
[  121.936275] Bluetooth: hci7: command tx timeout
[  121.936855] Bluetooth: hci5: command tx timeout
[  123.536514] Bluetooth: hci0: command tx timeout
[  123.537047] Bluetooth: hci2: command tx timeout
[  123.537068] Bluetooth: hci1: command tx timeout
[  123.664220] Bluetooth: hci3: command tx timeout
[  123.793154] Bluetooth: hci4: command tx timeout
[  123.857349] Bluetooth: hci6: command tx timeout
[  123.985676] Bluetooth: hci7: command tx timeout
[  123.987300] Bluetooth: hci5: command tx timeout
[  125.585006] Bluetooth: hci2: command tx timeout
[  125.588079] Bluetooth: hci0: command tx timeout
[  125.588119] Bluetooth: hci1: command tx timeout
[  125.714175] Bluetooth: hci3: command tx timeout
[  125.841011] Bluetooth: hci4: command tx timeout
[  125.904727] Bluetooth: hci6: command tx timeout
[  126.032284] Bluetooth: hci7: command tx timeout
[  126.032901] Bluetooth: hci5: command tx timeout
[  127.632448] Bluetooth: hci1: command tx timeout
[  127.632927] Bluetooth: hci2: command tx timeout
[  127.633453] Bluetooth: hci0: command tx timeout
[  127.760654] Bluetooth: hci3: command tx timeout
[  127.890328] Bluetooth: hci4: command tx timeout
[  127.952425] Bluetooth: hci6: command tx timeout
[  128.081622] Bluetooth: hci5: command tx timeout
[  128.082093] Bluetooth: hci7: command tx timeout
[  181.883769] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  181.889793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  181.892588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  181.900671] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  181.908950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  181.913855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  181.914993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  181.926450] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  181.928630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  181.928945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  181.931947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  181.937746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  181.938643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  181.939475] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  181.940468] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  181.942290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  181.948507] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  181.950395] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  181.960687] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  181.961751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  181.963528] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  181.967070] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  181.967349] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  181.970728] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  181.977378] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  182.038652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  182.045381] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  182.057381] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  182.062912] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  182.063652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  182.071752] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  182.075255] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  182.079554] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  182.087615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  182.101677] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  182.106966] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  182.121011] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  182.127661] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  182.147566] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  182.152547] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  183.952367] Bluetooth: hci1: command tx timeout
[  184.016384] Bluetooth: hci4: command tx timeout
[  184.016619] Bluetooth: hci3: command tx timeout
[  184.081284] Bluetooth: hci0: command tx timeout
[  184.082029] Bluetooth: hci2: command tx timeout
[  184.144419] Bluetooth: hci5: command tx timeout
[  184.214881] Bluetooth: hci7: command tx timeout
[  184.272236] Bluetooth: hci6: command tx timeout
[  186.000236] Bluetooth: hci1: command tx timeout
[  186.064220] Bluetooth: hci4: command tx timeout
[  186.066590] Bluetooth: hci3: command tx timeout
[  186.129206] Bluetooth: hci2: command tx timeout
[  186.129225] Bluetooth: hci0: command tx timeout
[  186.192389] Bluetooth: hci5: command tx timeout
[  186.256600] Bluetooth: hci7: command tx timeout
[  186.322144] Bluetooth: hci6: command tx timeout
[  188.049144] Bluetooth: hci1: command tx timeout
[  188.112231] Bluetooth: hci3: command tx timeout
[  188.112520] Bluetooth: hci4: command tx timeout
[  188.176463] Bluetooth: hci0: command tx timeout
[  188.176567] Bluetooth: hci2: command tx timeout
[  188.240404] Bluetooth: hci5: command tx timeout
[  188.305401] Bluetooth: hci7: command tx timeout
[  188.368201] Bluetooth: hci6: command tx timeout
[  190.098149] Bluetooth: hci1: command tx timeout
[  190.160286] Bluetooth: hci4: command tx timeout
[  190.161777] Bluetooth: hci3: command tx timeout
[  190.224263] Bluetooth: hci0: command tx timeout
[  190.225212] Bluetooth: hci2: command tx timeout
[  190.288340] Bluetooth: hci5: command tx timeout
[  190.353191] Bluetooth: hci7: command tx timeout
[  190.416225] Bluetooth: hci6: command tx timeout
[  244.133529] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  244.140775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  244.143457] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  244.159949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  244.166506] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  244.265186] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  244.275630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  244.277902] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  244.282665] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  244.290572] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  244.339823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  244.345595] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  244.350381] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  244.356297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  244.362046] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  244.469584] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  244.483443] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  244.504849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  244.522662] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  244.538091] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  244.542568] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  244.545049] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  244.550073] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  244.555780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  244.562031] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  244.565508] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  244.574619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  244.579860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.601145] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  244.609589] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  244.709863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  244.725855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  244.741856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  244.765556] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  244.779657] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  244.899249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  244.910966] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  244.915386] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  244.930766] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  244.951577] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  246.224255] Bluetooth: hci0: command tx timeout
[  246.352198] Bluetooth: hci1: command tx timeout
[  246.416199] Bluetooth: hci2: command tx timeout
[  246.674230] Bluetooth: hci3: command tx timeout
[  246.674978] Bluetooth: hci4: command tx timeout
[  246.736192] Bluetooth: hci6: command tx timeout
[  246.929370] Bluetooth: hci5: command tx timeout
[  247.056303] Bluetooth: hci7: command tx timeout
[  248.272422] Bluetooth: hci0: command tx timeout
[  248.402493] Bluetooth: hci1: command tx timeout
[  248.464674] Bluetooth: hci2: command tx timeout
[  248.720343] Bluetooth: hci4: command tx timeout
[  248.723276] Bluetooth: hci3: command tx timeout
[  248.784707] Bluetooth: hci6: command tx timeout
[  248.976758] Bluetooth: hci5: command tx timeout
[  249.105425] Bluetooth: hci7: command tx timeout
[  250.321361] Bluetooth: hci0: command tx timeout
[  250.449244] Bluetooth: hci1: command tx timeout
[  250.513345] Bluetooth: hci2: command tx timeout
[  250.768700] Bluetooth: hci4: command tx timeout
[  250.769741] Bluetooth: hci3: command tx timeout
[  250.832717] Bluetooth: hci6: command tx timeout
[  251.024297] Bluetooth: hci5: command tx timeout
[  251.152356] Bluetooth: hci7: command tx timeout
[  252.369596] Bluetooth: hci0: command tx timeout
[  252.496191] Bluetooth: hci1: command tx timeout
[  252.561158] Bluetooth: hci2: command tx timeout
[  252.818358] Bluetooth: hci3: command tx timeout
[  252.818842] Bluetooth: hci4: command tx timeout
[  252.880215] Bluetooth: hci6: command tx timeout
[  253.073187] Bluetooth: hci5: command tx timeout
[  253.201559] Bluetooth: hci7: command tx timeout
[  304.339324] syz-executor.7 (5327) used greatest stack depth: 24336 bytes left
[  306.341242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  306.345082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  306.351636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  306.361190] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  306.366527] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  306.607530] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  306.612011] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  306.617631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  306.621934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  306.625741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  306.632706] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  306.635573] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  306.643636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  306.646231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  306.675532] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  306.721020] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  306.725586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  306.729733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  306.742681] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  306.754512] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  307.354368] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  307.362329] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  307.368902] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  307.371436] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  307.396122] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  307.396201] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  307.417597] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  307.439475] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  307.454396] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  307.455332] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  307.457814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  307.462747] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  307.466435] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  307.468672] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  307.483511] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  307.487902] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  307.496992] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  307.511272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  307.551348] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  307.593365] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  308.432301] Bluetooth: hci0: command tx timeout
[  308.688312] Bluetooth: hci1: command tx timeout
[  308.752316] Bluetooth: hci2: command tx timeout
[  308.816592] Bluetooth: hci3: command tx timeout
[  309.584467] Bluetooth: hci7: command tx timeout
[  309.584526] Bluetooth: hci5: command tx timeout
[  309.841211] Bluetooth: hci4: command tx timeout
[  310.416335] Bluetooth: hci6: command tx timeout
[  310.482167] Bluetooth: hci0: command tx timeout
[  310.736269] Bluetooth: hci1: command tx timeout
[  310.800661] Bluetooth: hci2: command tx timeout
[  310.864943] Bluetooth: hci3: command tx timeout
[  311.634290] Bluetooth: hci5: command tx timeout
[  311.634518] Bluetooth: hci7: command tx timeout
[  311.888223] Bluetooth: hci4: command tx timeout
[  312.464493] Bluetooth: hci6: command tx timeout
[  312.528276] Bluetooth: hci0: command tx timeout
[  312.784424] Bluetooth: hci1: command tx timeout
[  312.850668] Bluetooth: hci2: command tx timeout
[  312.912707] Bluetooth: hci3: command tx timeout
[  313.680410] Bluetooth: hci5: command tx timeout
[  313.681303] Bluetooth: hci7: command tx timeout
[  313.936376] Bluetooth: hci4: command tx timeout
[  314.512223] Bluetooth: hci6: command tx timeout
[  314.577155] Bluetooth: hci0: command tx timeout
[  314.834916] Bluetooth: hci1: command tx timeout
[  314.896257] Bluetooth: hci2: command tx timeout
[  314.960338] Bluetooth: hci3: command tx timeout
[  315.728286] Bluetooth: hci7: command tx timeout
[  315.728354] Bluetooth: hci5: command tx timeout
[  315.984287] Bluetooth: hci4: command tx timeout
[  316.560530] Bluetooth: hci6: command tx timeout
[  368.936444] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  368.939865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  368.946762] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  368.960677] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  368.966418] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  369.093214] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  369.106747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  369.114817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  369.136647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  369.141728] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  369.210171] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  369.227003] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  369.234032] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  369.260596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  369.270688] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  369.275723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  369.282797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  369.292414] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  369.294651] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  369.299522] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  369.400494] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  369.410222] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  369.415152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  369.423690] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  369.447655] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  369.491743] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  369.513235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  369.526225] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  369.529644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  369.531795] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  369.536718] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  369.540888] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  369.560424] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  369.610957] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  369.615772] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  369.626400] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  369.664831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  369.670420] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  369.720820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  369.732706] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  371.024204] Bluetooth: hci0: command tx timeout
[  371.217435] Bluetooth: hci1: command tx timeout
[  371.345278] Bluetooth: hci3: command tx timeout
[  371.409477] Bluetooth: hci2: command tx timeout
[  371.537223] Bluetooth: hci4: command tx timeout
[  371.601637] Bluetooth: hci6: command tx timeout
[  371.793499] Bluetooth: hci7: command tx timeout
[  372.306159] Bluetooth: hci5: command tx timeout
[  373.073295] Bluetooth: hci0: command tx timeout
[  373.267223] Bluetooth: hci1: command tx timeout
[  373.393290] Bluetooth: hci3: command tx timeout
[  373.457452] Bluetooth: hci2: command tx timeout
[  373.585479] Bluetooth: hci4: command tx timeout
[  373.649348] Bluetooth: hci6: command tx timeout
[  373.841389] Bluetooth: hci7: command tx timeout
[  374.354129] Bluetooth: hci5: command tx timeout
[  375.120441] Bluetooth: hci0: command tx timeout
[  375.313388] Bluetooth: hci1: command tx timeout
[  375.440233] Bluetooth: hci3: command tx timeout
[  375.504288] Bluetooth: hci2: command tx timeout
[  375.632636] Bluetooth: hci4: command tx timeout
[  375.696148] Bluetooth: hci6: command tx timeout
[  375.888153] Bluetooth: hci7: command tx timeout
[  376.402165] Bluetooth: hci5: command tx timeout
[  377.168269] Bluetooth: hci0: command tx timeout
[  377.360310] Bluetooth: hci1: command tx timeout
[  377.490564] Bluetooth: hci3: command tx timeout
[  377.553156] Bluetooth: hci2: command tx timeout
[  377.680317] Bluetooth: hci4: command tx timeout
[  377.745166] Bluetooth: hci6: command tx timeout
[  377.936499] Bluetooth: hci7: command tx timeout
[  378.449453] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
23:48:35  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff88806ce08a28 RCX=ffff88806ce0897c RDX=1ffff1100d9c1150
RSI=ffffffff85c1cbc0 RDI=ffffffff813b013e RBP=ffff88806ce08a80 RSP=ffff88806ce08a10
R8 =0000000000000001 R9 =ffff88806ce08a68 R10=000000000003b6cd R11=00000000000083e7
R12=ffff88806ce08af0 R13=0000000000000000 R14=ffff88801536d280 R15=ffff88800e38a700
RIP=ffffffff81353b1b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdce8339090 CR3=0000000026f81000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000ff00000000000000ff0000000000
XMM02=ff000000000000ff0000000000000000 XMM03=ff0000000000000000ff000000000000
XMM04=0000000000ff00000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff81450b7d RBX=ffffffff81604870 RCX=ffff8880097477f4 RDX=1ffff110012e8f1f
RSI=ffffffff81450b7d RDI=ffffffff81450b7d RBP=ffff888009747938 RSP=ffff8880097478a0
R8 =ffffffff867cbb24 R9 =ffff8880097478e0 R10=000000000003b6cd R11=0000000000008646
R12=ffff888009747968 R13=0000000000000000 R14=ffff8880096f3700 R15=ffff888035cfa800
RIP=ffffffff812d97bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe6000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1c77ee1260 CR3=000000002ca76000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000