Warning: Permanently added '[localhost]:60312' (ECDSA) to the list of known hosts.
2025/06/24 04:36:05 fuzzer started
2025/06/24 04:36:06 dialing manager at localhost:37113
syzkaller login: [   93.751220] cgroup: Unknown subsys name 'net'
[   93.885021] cgroup: Unknown subsys name 'cpuset'
[   93.923580] cgroup: Unknown subsys name 'rlimit'
2025/06/24 04:36:20 syscalls: 2214
2025/06/24 04:36:20 code coverage: enabled
2025/06/24 04:36:20 comparison tracing: enabled
2025/06/24 04:36:20 extra coverage: enabled
2025/06/24 04:36:20 setuid sandbox: enabled
2025/06/24 04:36:20 namespace sandbox: enabled
2025/06/24 04:36:20 Android sandbox: enabled
2025/06/24 04:36:20 fault injection: enabled
2025/06/24 04:36:20 leak checking: enabled
2025/06/24 04:36:20 net packet injection: enabled
2025/06/24 04:36:20 net device setup: enabled
2025/06/24 04:36:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/24 04:36:20 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/24 04:36:20 USB emulation: enabled
2025/06/24 04:36:20 hci packet injection: enabled
2025/06/24 04:36:20 wifi device emulation: enabled
2025/06/24 04:36:20 802.15.4 emulation: enabled
2025/06/24 04:36:20 fetching corpus: 0, signal 0/0 (executing program)
2025/06/24 04:36:23 starting 8 fuzzer processes
04:36:23 executing program 0:
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'sit0\x00', <r0=>0x0, 0x4, 0x3, 0x6b, 0x3d5, 0x15, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x80, 0x0, 0x9d4}})
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, @can={0x1d, r0}, @ax25={0x3, @null, 0x2}, @l2tp={0x2, 0x0, @remote, 0x2}, 0xfffc, 0x0, 0x0, 0x0, 0x3f, 0x0, 0xb8cfbc5, 0x5, 0x1ff})
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, 0x0, 0x300, 0x70bd25, 0x6, {}, [@ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x74}}, 0x4004080)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x40054)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x80, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xde}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x4040000)
r2 = openat$full(0xffffffffffffff9c, &(0x7f00000008c0), 0x80080, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl0\x00', r0, 0x4, 0x80, 0x6, 0x1, 0x35, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x7800, 0x8001, 0x2, 0x8}})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000009c0)={{0x1, 0x1, 0x18, <r3=>r2, {<r4=>r2}}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a40)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, 0x0, 0x4, 0x80000000, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x11}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xdf}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1)
r6 = openat$cgroup_int(r2, &(0x7f0000000b40)='cgroup.clone_children\x00', 0x2, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000b80)={0xffff, 0x100000000, 0x9, 0x0, 0x0, [{{r1}, 0x6}, {{r4}, 0xb72b}, {{r2}, 0xffffffffffffff7b}, {{r4}, 0x4}, {{}, 0x6}, {{r4}, 0x4}, {{r6}, 0x94e}, {{r2}, 0x7}, {{r3}, 0xffffffff}]})
sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
tee(r6, r1, 0x2, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000e80)={&(0x7f0000000dc0), 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c0d0}, 0x40010)

04:36:23 executing program 1:
syz_usb_connect(0x5, 0x1c0, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x21, 0x8e, 0x46, 0x40, 0xfd9, 0x8, 0x72be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ae, 0x1, 0x39, 0x40, 0x60, 0x6, [{{0x9, 0x4, 0x7f, 0x51, 0x6, 0x1, 0x1, 0x5c, 0x1, [@generic={0x41, 0xc, "cbad5b54fd6bd8f9a8e061c03601f9a59fff87ae818933eb5d917ed4e877a1583019cb84197f3ff4a37d8bffccd61647820c62addfcf16540b95716128df98"}, @uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xff, 0x4, 0x0, 0x2, "3b61903d997f26"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x7f, 0x4}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xfb, 0x2, 0x4, 0x0, "97983b8b"}]}], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0x1, 0x7f}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0x99, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x3}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x0, 0x80, 0x1}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x4, 0x5, 0x0, [@generic={0x2b, 0x0, "fa416b4c1faac6e21d294b25b7d1a666f34815bfb6f1f078693eb8b2a1f19295c88b2d6cbe789a5f74"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0xc9, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xdae}, @generic={0x38, 0x8, "04e851de61f7af4f30338f35c9f73cc19cb8012b233540d39f7a21cacb8950e8d68ed41b7059ed62321ac71b112b9685a02cd625f563"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x5c7, 0x7f, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x401}, @generic={0x8b, 0xd, "af1708e5ff23d52deec88825b8c0f89203181e002d37c5c9c2fb27f40bbe3889c12b21bb2c46352a130d50d982643d7263b7021501c9cb5f504974381da95ba9377d93728dc1ea883738a17e787419f8fe744577a3957b6814d29430b4d33590dd85b162d9815cefc8699cb634407061aa3a50a9d00b1f2fc5bfcf58c8e7a8efa7a340f01a3b9dd1c3"}]}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x0, 0x80, 0x7f, 0x8, 0x6}, 0x1a, &(0x7f0000000200)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x0, 0x0, 0x0, 0x20}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x6, 0x6}]}, 0x7, [{0x8, &(0x7f0000000240)=@string={0x8, 0x3, "c312cc630e88"}}, {0xa1, &(0x7f0000000280)=@string={0xa1, 0x3, "f3b16235abc77c52f7409714b4eeea02a3b8b6c6fac184310fc0519639868c8734767d3657a6f86f5b371459825c00d56bc0658ab61b653756d776aae1c61b36809099b7338d06ca5ad4f50093c095c76c760b891fc7f36635e7f4e70028673f2fbeec7cb4bd181d4dc6004c8fe8d9f6b9a622817aacbc2d884bad314ed2ec0468b062a57bbcf5f0b5e512e3e81a7e80b84f559beb55afd02c8d492cf7d941"}}, {0x37, &(0x7f0000000340)=@string={0x37, 0x3, "bc0157831d297fbc5fcf1e8c601887ea7bf57114a5006e2a41ac29fbfa9fcbfe876efb197478ba497ff4869e7c4ed1d80bcb43c70d"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2e3b80f6c98882b7}}, {0x47, &(0x7f00000003c0)=@string={0x47, 0x3, "9a959647b5566331bdebe65dd9e9cc2b5592d0f6aad4b45b0e1661a351c644d8f8c956b075ff7ed6a386827516e21f88882b0eb0171052fff8266947549821be443fb34c80"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3409}}, {0x3f, &(0x7f0000000480)=@string={0x3f, 0x3, "65c8ee46fd563f201ce4e654da6e6c4d3411d0eddd278fa35bfac5d1965ef64ae1715fe185098c921bfb5b9662a11c8d146f1eebc99424af7c0db8e95f"}}]})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000540)={0x3})
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x200000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r1=>r0, @out_args}, './file0\x00'})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', <r3=>0x0, 0x8, 0x40, 0x12a, 0x800, {{0x33, 0x4, 0x3, 0x2, 0xcc, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x29}, {[@ssrr={0x89, 0xb, 0x4, [@multicast1, @remote]}, @noop, @rr={0x7, 0x13, 0x5a, [@loopback, @multicast1, @private=0xa010102, @broadcast]}, @timestamp={0x44, 0x14, 0x5, 0x0, 0x2, [0x7, 0x3, 0x4, 0x3]}, @cipso={0x86, 0x5d, 0x0, [{0x0, 0x5, 'Oi-'}, {0x6, 0x7, "4485417012"}, {0x6, 0x12, "49cacd473ac42608b7ba11839bf2c047"}, {0x1, 0x4, "cd30"}, {0x5, 0x9, "4d814d4cc61411"}, {0x3, 0xa, "9fb8ddcd7a554abe"}, {0x6, 0xa, "5b1d20a41fc8937d"}, {0x1, 0x3, 'n'}, {0x7, 0xc, "8ef6e85948dcdd590055"}, {0x1, 0x9, "010946e8d8372c"}]}, @end, @generic={0x89, 0x4, "3619"}, @timestamp={0x44, 0x20, 0x23, 0x0, 0xe, [0x34ea8c46, 0x1, 0x1, 0xfffffffe, 0x4, 0xfffff801, 0x6]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', <r4=>0x0, 0x0, 0x2, 0x7, 0x101, 0x7a, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x1, 0x40000000, 0x4}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x108, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000800}, 0x24008081)
recvfrom$packet(r0, &(0x7f0000000a40)=""/116, 0x74, 0x40000001, 0x0, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000ac0), r1)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000b00)={{0x1, 0x1, 0x18, <r5=>r1, {0x7fff}}, './file0\x00'})
ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000b40)=""/123)
fcntl$setlease(r5, 0x400, 0x2)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = dup3(r6, r0, 0x0)
lsetxattr$security_selinux(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), &(0x7f0000000c40)='system_u:object_r:wtmp_t:s0\x00', 0x1c, 0x0)
read$ptp(r7, &(0x7f0000000c80)=""/155, 0x9b)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000d40)='./binderfs2/binder0\x00', 0x801, 0x0)
r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000d80), 0x1, 0x0)
fcntl$setflags(r8, 0x2, 0x0)

04:36:23 executing program 2:
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}}, 0x1)
pipe2(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x130, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x66a5191a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x32}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffeffff}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x15}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x400}, 0x4008040)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d80)=@broute={'broute\x00', 0x20, 0x6, 0x884, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000480), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x1, 0x4b, 0x8914, 'veth0_virt_wifi\x00', 'veth1_to_hsr\x00', 'team0\x00', 'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @random="e0125df6cb69", [0xff, 0xff, 0xff, 0xff], 0x6e, 0xee, 0x126, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xffffff81, 'syz0\x00', {0x1}}}}], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}}, {0x11, 0x6, 0x8906, 'veth0_to_hsr\x00', 'veth0_vlan\x00', 'veth0_to_hsr\x00', 'team_slave_1\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0xff, 0xff, 0xff], 0xce, 0xce, 0x11e, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x1}}}, @vlan={{'vlan\x00', 0x0, 0x8}, {{0x4, 0x5, 0x50fc, 0xa, 0x4}}}], [], @common=@log={'log\x00', 0x28, {{0x6f, "e8b8b771b818ebc46e1d389ef538263735827734187ef123f318b8839c26", 0x16}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x9, 0x19, 0x8914, 'wg0\x00', 'hsr0\x00', 'team0\x00', 'macvtap0\x00', @remote, [0x0, 0x0, 0xff, 0xff], @multicast, [0xff, 0xff, 0xff, 0xff], 0xee, 0x136, 0x1ae, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x1, 0x1}}}, @ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xffffffff, 0x0, 0xff0000ff, 0xff], 0x4e23, 0x33, 0x4, 0x4e24, 0x8, 0x4}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xf9, 0x99, {0x49}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x6, 0x1fc, 0xe1f, 0x0, 0x0, "ba7863b6d07c2d446ed87758910b383e2cd6008ea188305ef704ea306fbe14b66e0c9c7ca5efadfd34b27f2a906913c3a20d762a407ebaec8af4d850af41a2dc"}}}}, {0x11, 0x8, 0x8035, 'ip_vti0\x00', 'gre0\x00', 'macsec0\x00', 'macvlan1\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0xae, 0x14e, 0x17e, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x0, 0x2, 0x7f, 0x8001, {0xfdd}}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x2, 'syz0\x00', {0xd8}}}}, @common=@log={'log\x00', 0x28, {{0xf7, "899bfe39244670aac7753cdee5a1af69b7366029431f75438d7e0e03cd8f", 0x1}}}], @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x2, [{0x9, 0x41, 0xdada, 'gre0\x00', 'veth1_to_hsr\x00', 'batadv_slave_0\x00', 'caif0\x00', @broadcast, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff], 0xbe, 0x136, 0x16e, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@mcast2, [0xffffff00, 0xffffff00, 0xff000000, 0xff], 0x4e24, 0x3a, 0x0, 0x4e20, 0x4, 0x4}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"07076831efb98da9c19bc34cd4f6fcfc5bf0d0cf33f51af94996ff13d14d"}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}], @common=@dnat={'dnat\x00', 0x10, {{@multicast, 0x10}}}}, {0x5, 0x58, 0x806, 'veth1_to_hsr\x00', 'xfrm0\x00', 'wg2\x00', 'vxcan1\x00', @local, [0xff, 0x0, 0xff], @random="5164a7db76e4", [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0xae, 0xae, 0xe6, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x1, 0x4, 0xafe, 0x4, {0xf7}}}}], [], @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}}]}]}, 0x8fc)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wpan4\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048000}, 0x8884)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000f80), 0x220800, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000fc0))
ioctl$CDROM_SET_OPTIONS(r3, 0x5320, 0x9)
setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001000)=0x334, 0x4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wpan3\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x3c, r5, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040080)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001240)={'wpan3\x00', <r9=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0xa8, r5, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24040080}, 0x22000006)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001480)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f00000013c0)=0x80, &(0x7f0000001400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x800}, 0xe)

04:36:23 executing program 3:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r0, 0x80a, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf9857c19a0307952}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8045}, 0x10)
syz_open_dev$usbmon(&(0x7f0000000180), 0x80000000, 0x143043)
r1 = syz_io_uring_complete(0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20040000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xd6, 0x7d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0xc9be21fb2cbba20e)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/slabinfo\x00', 0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x1, 0x5, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x48040)
sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x1, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xff}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x4)
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000840))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x28}}, 0x40800)
recvfrom(r5, &(0x7f00000009c0)=""/177, 0xb1, 0x10141, &(0x7f0000000a80)=@x25, 0x80)
ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000b00))
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)

[  110.704450] audit: type=1400 audit(1750739783.756:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
04:36:23 executing program 4:
ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x4, 0xbc3})
r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x1ff, 0x1)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x2, 'vlan0\x00', {0x6ed}, 0x1ff})
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x6c}}, 0x4001)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c0}, 0x4081)
ioctl$RTC_UIE_ON(r0, 0x7003)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan4\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan4\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20040000)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), r5)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, r10, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000010}, 0x8041)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xf8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40024)

04:36:23 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x1)
write$P9_RGETATTR(r0, &(0x7f0000000040)={0xa0, 0x19, 0x1, {0x1, {0x8, 0x0, 0x2}, 0x4, 0x0, 0xee01, 0x0, 0x80000000, 0x0, 0x80, 0xe3, 0x1, 0x0, 0x5, 0x1, 0xf80000000000, 0x0, 0x9, 0x3, 0x10001, 0x3}}, 0xa0)
write$P9_RMKDIR(r0, &(0x7f0000000100)={0x14, 0x49, 0x2, {0x10, 0x3, 0x6}}, 0x14)
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000, 0x61)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x34, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x10)
r1 = openat$cgroup_ro(r0, &(0x7f0000001240)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
write$P9_RSYMLINK(r1, &(0x7f0000001280)={0x14, 0x11, 0x1, {0x10, 0x0, 0x6}}, 0x14)
getsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000012c0), &(0x7f0000001300)=0x4)
r2 = fspick(0xffffffffffffffff, &(0x7f0000001340)='./file0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001380)='$\x00', &(0x7f00000013c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000003fc0), 0x6, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004080)={&(0x7f0000004040)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xd1}, 0x24000018)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000004100)={@desc={0x1, 0x0, @desc2}, 0x10, 0x0, '\x00', @d})
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000004180)={0x14c, 0x3, 0xffff})
fsmount(r2, 0x1, 0x72)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f00000041c0)=0x6)
r4 = open(&(0x7f0000004200)='./file0\x00', 0x40800, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x814}, 0x4004)

04:36:23 executing program 6:
r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x315, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x10, 0x2b, [{{0x9, 0x4, 0x0, 0xb5, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0x145}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x7, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x1, 0x80}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x7, 0x1, 0x6, 0x20, 0x1}, 0x6a, &(0x7f0000000080)={0x5, 0xf, 0x6a, 0x2, [@generic={0x62, 0x10, 0x4, "1297d28866259bcebda224b963bc801b18c803f8cb8981f0740db6aeaa2c129be8fa25fe75f90fdaa6f9a82220e9860326ebaa0e2eb5fa2b2211e0d94bb30f844568708d8edb712574de1622a5301d553787c9d776e9bb9ddfd88121d0bc56"}, @ptm_cap={0x3}]}, 0xa, [{0x34, &(0x7f0000000100)=@string={0x34, 0x3, "5cfbbd16526cb73c18f9333db1d9dd323c08fd973c516069d1f75508d18311a253b2a6bbdb354320d908fa7e1df06fcd33e9"}}, {0x4f, &(0x7f0000000140)=@string={0x4f, 0x3, "b650737bea559608ab291dc4e3e934c12a3930eb33fb9b9bbf40bca211a1e691dd00ee3e65a5c5be4f48ae814c33af6ccc4e819f2511cc5a67641915702862a908b5fc5b234d77cb2379657eae"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40d}}, {0x9b, &(0x7f0000000280)=@string={0x9b, 0x3, "b9bf42cf19c4e482d9f2152832ae93333c715c2bacbe9449c31b60e25c06f98968873b0344ecf4abd33390ba92da09de189120016e9856a572b8021f37029a99bcfb4757fc62bfe3370f555957583df9137ed4b13d18a73245afb0e3ec68501c88347307f78f71da977a73b28691a63ff0ef982f84b0b309fe4957efff205664a28e91caa82ba9f6a3019d001df73d1114d3b822343b6dbda1"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x860}}, {0xa3, &(0x7f0000000400)=@string={0xa3, 0x3, "985ea7c71f733bfc02cc6e80a071cf68f50624045e6bebec5c408b53365c17c888fb72ca020cb78f2e5ac7d7ab12899a3fb645bbee2cea46f3ad17ccc8959985a935c8de96d54b6301e431bd55fb3c0fdd2b14a73f77da28ee3377255b41d17221dc9a17a80a187b664a819ac7fed2dac2c5dfdfcaea8a4362deedf37aee6cbb50b35521db64c20957f4da9bec63e6cb3e228eeda2030d4c53a6b61de104873e16"}}]})
syz_usb_disconnect(r0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x101c00, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000600)={&(0x7f00000005c0)=""/31, 0x1f, 0xc7, 0xffffffff})
syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x1440, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x81, 0xff, 0x1, {0x22, 0x7ef}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x7, 0x20}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0x0, 0x3}}]}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x250, 0x7f, 0xfa, 0x1, 0x30, 0x7}, 0xf, &(0x7f00000006c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x0, 0x0, 0x7fff}]}, 0x7, [{0xfb, &(0x7f0000000700)=@string={0xfb, 0x3, "7142376908a0b518c8922c25022e355ff6c99c7b8abf137e40fd58baa774f5392b3689767101b1caa74528c692b7e1559865b7e16f735d91e9a05b8445e97e94d7b22000b67aceff923284efd3299504c965b440a142109c023d5509baaa84b885ca2cd6a4a84e9b4f2455539fac3a8cf4fb84a7c0ffa72fd22dc7b7308498cddb461ea351235724438747d5452ed8242f9aa65d82cbeffe479bac998c81ea5d0c84c6afbeec633fc5f2512e41508b71549fd19d5afb233ee5c9c39b7b76e20152dfc41fe08f6e7faae281075ce642b09cfbbbb746ccc6eedc762e7e253ed3e9762c5528fab03c1208318ab19df617e6b9bf75ed616072e3dd"}}, {0x59, &(0x7f0000000800)=@string={0x59, 0x3, "2f2af3a98491518c42fcf3c5d1a6154ee7a4e45573f5bf04dcc4f6f4a6d3657a085d4e2941c1d6cb90869f1c987063b28d709f75b8243e6fd38c8d6c2507917c4225b77753ab5b5ddf19e19cf57c5fa9ac87ebcc8cbced"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xf4b7}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xc0c}}]})
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000a40), 0x2, 0x0)
r3 = pidfd_open(0x0, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000a80))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000ac0)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000bc0)=0xe8)
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000c00)={@private1, r5}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wg1\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000c40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0xa8, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x884)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000e40)={0x100, {{0xa, 0x4e23, 0xda, @loopback, 0x361c}}}, 0x88)
r7 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x3, 0x20000)
ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000f40)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x34, r5})
pipe(&(0x7f0000000f80)={<r8=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044005}, 0x65)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2}, @void, @val={0xc, 0x99, {0x10001, 0x69}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000)

04:36:23 executing program 7:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x105180, 0x0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x198, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x23a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x76}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @remote, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x20, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xbf1c, @private2, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcb7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x80}, 0x28000004)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6gre0\x00', <r1=>0x0, 0x4, 0xcd, 0xaf, 0x1, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x32}, 0x8000, 0x8, 0x0, 0x4}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x144, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x8040}, 0x24004852)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000600)={{0x1, 0x1, 0x18, <r3=>r0, {0xffff}}, './file0\x00'})
connect$bt_l2cap(r3, &(0x7f0000000640)={0x1f, 0x0, @any, 0x3}, 0xe)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000680))
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x600000, 0x0)
getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000700)={'filter\x00', 0x0, 0x0, 0x0, [0x4, 0x0, 0x5, 0x7f, 0xfffffffffffff801, 0x20]}, &(0x7f0000000780)=0x78)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000007c0))
ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f00000008c0)={'syzkaller1\x00', 0x8000})
r6 = memfd_secret(0x80000)
ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000900)={0x0, "a481624459672494bff0cbea0d47683f"})
r7 = syz_open_dev$hidraw(&(0x7f0000001900), 0x3, 0x404280)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0)
r8 = mq_open(&(0x7f0000001940)='$-)\x00', 0x800, 0x0, &(0x7f0000001980)={0x6, 0x8, 0x7fffffff})
write$binfmt_elf64(r8, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xe6, 0x9, 0x81, 0x97bb, 0x3, 0x3, 0x1, 0x25, 0x40, 0x1c6, 0x10000, 0x8, 0x38, 0x2, 0x3c, 0x2, 0x8}, [{0x6, 0x7, 0x7, 0x1000, 0x0, 0x6, 0x5, 0xfffffffeffffffff}, {0x4, 0x8, 0xe2, 0x5, 0x7fff, 0x7, 0x8, 0xfffffffffffffffe}], "1ea7af75d7144e30b08c75942f9834663c7355fc9669acadbe128d9ce891afb8a26f9b366dd4346f928e409d05151d94956889c1603c6f71d87398b83ba8807383854a2480cb1c6436c3da33b146705b9b3d28b830f7c6aa55c83ff96e947be742252ae02a1ccc831083740f50be7461b683086f25abcca18a846200e59daa6a66693d30f0aab41480d5d88a946f1a7044bae877541ce2502bfbef2818f86bdcd685ad1cc54c0429a6", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa59)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000002440)={0x0, 0x9a, 0x5})

[  112.226734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.236155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.242752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.251567] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.256940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.290790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.296786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.298984] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.307731] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.311215] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.342229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.344786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.348486] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.354063] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.358013] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.428878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  112.438358] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  112.445830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  112.483775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  112.485513] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  112.498111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  112.500812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  112.506827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  112.520207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  112.530128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  112.539960] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  112.561583] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  112.581080] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  112.591365] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  112.597086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  112.603761] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  112.687949] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  112.697781] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  112.702778] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  112.708619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  112.722916] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  112.737499] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  112.760981] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  112.780614] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  112.810157] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  114.308464] Bluetooth: hci0: command tx timeout
[  114.371680] Bluetooth: hci1: command tx timeout
[  114.372302] Bluetooth: hci2: command tx timeout
[  114.627428] Bluetooth: hci3: command tx timeout
[  114.755533] Bluetooth: hci4: command tx timeout
[  114.820310] Bluetooth: hci6: command tx timeout
[  114.820363] Bluetooth: hci5: command tx timeout
[  114.883386] Bluetooth: hci7: command tx timeout
[  116.357137] Bluetooth: hci0: command tx timeout
[  116.419519] Bluetooth: hci2: command tx timeout
[  116.420691] Bluetooth: hci1: command tx timeout
[  116.676114] Bluetooth: hci3: command tx timeout
[  116.803707] Bluetooth: hci4: command tx timeout
[  116.867445] Bluetooth: hci6: command tx timeout
[  116.867477] Bluetooth: hci5: command tx timeout
[  116.931358] Bluetooth: hci7: command tx timeout
[  118.403410] Bluetooth: hci0: command tx timeout
[  118.467590] Bluetooth: hci2: command tx timeout
[  118.468654] Bluetooth: hci1: command tx timeout
[  118.723631] Bluetooth: hci3: command tx timeout
[  118.851620] Bluetooth: hci4: command tx timeout
[  118.915507] Bluetooth: hci5: command tx timeout
[  118.915625] Bluetooth: hci6: command tx timeout
[  118.979608] Bluetooth: hci7: command tx timeout
[  120.452303] Bluetooth: hci0: command tx timeout
[  120.515468] Bluetooth: hci1: command tx timeout
[  120.515511] Bluetooth: hci2: command tx timeout
[  120.773371] Bluetooth: hci3: command tx timeout
[  120.899719] Bluetooth: hci4: command tx timeout
[  120.963717] Bluetooth: hci6: command tx timeout
[  120.964957] Bluetooth: hci5: command tx timeout
[  121.027529] Bluetooth: hci7: command tx timeout
[  172.284291] syz-executor.1 (284) used greatest stack depth: 24912 bytes left
[  172.643936] syz-executor.2 (285) used greatest stack depth: 24608 bytes left
[  174.675108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  174.677991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  174.679555] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  174.693800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  174.705692] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  174.799417] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  174.805822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  174.807479] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  174.815726] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  174.824376] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  174.867038] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  174.875958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  174.884063] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  174.885054] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  174.894516] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  174.895885] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  174.897383] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  174.903467] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  174.912055] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  174.919797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  174.921499] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  174.925171] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  174.926652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  174.930429] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  174.941000] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  174.962644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  174.969692] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  175.008519] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  175.015520] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  175.042829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  175.080355] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  175.088710] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  175.090717] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  175.143822] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  175.163142] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  175.207927] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  175.229895] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  175.261374] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  175.266482] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  175.268270] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  176.772327] Bluetooth: hci0: command tx timeout
[  176.899330] Bluetooth: hci1: command tx timeout
[  177.027354] Bluetooth: hci3: command tx timeout
[  177.091358] Bluetooth: hci2: command tx timeout
[  177.155361] Bluetooth: hci4: command tx timeout
[  177.219356] Bluetooth: hci5: command tx timeout
[  177.347854] Bluetooth: hci7: command tx timeout
[  177.348736] Bluetooth: hci6: command tx timeout
[  178.819332] Bluetooth: hci0: command tx timeout
[  178.947472] Bluetooth: hci1: command tx timeout
[  179.075323] Bluetooth: hci3: command tx timeout
[  179.139343] Bluetooth: hci2: command tx timeout
[  179.203656] Bluetooth: hci4: command tx timeout
[  179.267350] Bluetooth: hci5: command tx timeout
[  179.395354] Bluetooth: hci6: command tx timeout
[  179.395788] Bluetooth: hci7: command tx timeout
[  180.867319] Bluetooth: hci0: command tx timeout
[  180.995502] Bluetooth: hci1: command tx timeout
[  181.125315] Bluetooth: hci3: command tx timeout
[  181.187670] Bluetooth: hci2: command tx timeout
[  181.251422] Bluetooth: hci4: command tx timeout
[  181.317355] Bluetooth: hci5: command tx timeout
[  181.443537] Bluetooth: hci6: command tx timeout
[  181.444005] Bluetooth: hci7: command tx timeout
[  182.915399] Bluetooth: hci0: command tx timeout
[  183.043606] Bluetooth: hci1: command tx timeout
[  183.171684] Bluetooth: hci3: command tx timeout
[  183.237282] Bluetooth: hci2: command tx timeout
[  183.300287] Bluetooth: hci4: command tx timeout
[  183.364271] Bluetooth: hci5: command tx timeout
[  183.491498] Bluetooth: hci6: command tx timeout
[  183.491937] Bluetooth: hci7: command tx timeout
[  237.073005] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  237.076731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.078098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.082115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.084689] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  237.200867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  237.203395] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  237.205353] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  237.215504] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  237.219930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  237.221373] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  237.244461] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  237.266923] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  237.276140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  237.286927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  237.440840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  237.522935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  237.526817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  237.529974] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  237.535898] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  237.544868] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  237.548499] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  237.552775] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  237.561924] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  237.564675] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  237.606936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  237.613043] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  237.635705] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  237.635889] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  237.643676] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  237.658099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  237.658757] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  237.683891] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  237.695837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  237.712847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  237.714877] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  237.761809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  237.771890] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  237.796556] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  237.799349] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  239.108356] Bluetooth: hci0: command tx timeout
[  239.300428] Bluetooth: hci1: command tx timeout
[  239.364502] Bluetooth: hci2: command tx timeout
[  239.620441] Bluetooth: hci6: command tx timeout
[  239.748594] Bluetooth: hci3: command tx timeout
[  239.876333] Bluetooth: hci4: command tx timeout
[  239.939374] Bluetooth: hci5: command tx timeout
[  240.003413] Bluetooth: hci7: command tx timeout
[  241.155413] Bluetooth: hci0: command tx timeout
[  241.347319] Bluetooth: hci1: command tx timeout
[  241.412260] Bluetooth: hci2: command tx timeout
[  241.667473] Bluetooth: hci6: command tx timeout
[  241.795514] Bluetooth: hci3: command tx timeout
[  241.923857] Bluetooth: hci4: command tx timeout
[  241.987500] Bluetooth: hci5: command tx timeout
[  242.051336] Bluetooth: hci7: command tx timeout
[  243.203315] Bluetooth: hci0: command tx timeout
[  243.396286] Bluetooth: hci1: command tx timeout
[  243.459402] Bluetooth: hci2: command tx timeout
[  243.715367] Bluetooth: hci6: command tx timeout
[  243.843698] Bluetooth: hci3: command tx timeout
[  243.971565] Bluetooth: hci4: command tx timeout
[  244.035327] Bluetooth: hci5: command tx timeout
[  244.099613] Bluetooth: hci7: command tx timeout
[  245.251596] Bluetooth: hci0: command tx timeout
[  245.444758] Bluetooth: hci1: command tx timeout
[  245.507754] Bluetooth: hci2: command tx timeout
[  245.763941] Bluetooth: hci6: command tx timeout
[  245.891696] Bluetooth: hci3: command tx timeout
[  246.020294] Bluetooth: hci4: command tx timeout
[  246.083436] Bluetooth: hci5: command tx timeout
[  246.147471] Bluetooth: hci7: command tx timeout
[  299.349555] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  299.352956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  299.356944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  299.365207] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  299.372345] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  299.601181] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  299.604732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  299.607640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  299.616734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  299.622054] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  299.682163] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  299.692972] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  299.697777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  299.710081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  299.714593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  299.824901] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  299.835596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  299.852116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  299.870104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  299.883874] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  299.889217] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  299.893012] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  299.911094] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  299.921964] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  299.938916] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  299.948802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  299.968425] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  299.983329] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  300.015676] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  300.021680] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  300.067003] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  300.072285] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  300.076487] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  300.080550] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  300.092502] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  300.097616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  300.099810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  300.155683] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  300.158635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  300.168482] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  301.443329] Bluetooth: hci0: command tx timeout
[  301.700530] Bluetooth: hci1: command tx timeout
[  301.763326] Bluetooth: hci2: command tx timeout
[  302.147335] Bluetooth: hci6: command tx timeout
[  302.148106] Bluetooth: hci4: command tx timeout
[  302.148151] Bluetooth: hci3: command tx timeout
[  302.213360] Bluetooth: hci7: command tx timeout
[  302.276330] Bluetooth: hci5: command tx timeout
[  303.491363] Bluetooth: hci0: command tx timeout
[  303.749344] Bluetooth: hci1: command tx timeout
[  303.811309] Bluetooth: hci2: command tx timeout
[  304.195324] Bluetooth: hci6: command tx timeout
[  304.195786] Bluetooth: hci4: command tx timeout
[  304.196419] Bluetooth: hci3: command tx timeout
[  304.259361] Bluetooth: hci7: command tx timeout
[  304.324335] Bluetooth: hci5: command tx timeout
[  305.539514] Bluetooth: hci0: command tx timeout
[  305.795509] Bluetooth: hci1: command tx timeout
[  305.860351] Bluetooth: hci2: command tx timeout
[  306.244436] Bluetooth: hci3: command tx timeout
[  306.244814] Bluetooth: hci4: command tx timeout
[  306.245107] Bluetooth: hci6: command tx timeout
[  306.307482] Bluetooth: hci7: command tx timeout
[  306.371684] Bluetooth: hci5: command tx timeout
[  307.587329] Bluetooth: hci0: command tx timeout
[  307.843309] Bluetooth: hci1: command tx timeout
[  307.907338] Bluetooth: hci2: command tx timeout
[  308.291331] Bluetooth: hci6: command tx timeout
[  308.292518] Bluetooth: hci4: command tx timeout
[  308.292944] Bluetooth: hci3: command tx timeout
[  308.355484] Bluetooth: hci7: command tx timeout
[  308.419437] Bluetooth: hci5: command tx timeout
[  359.916309] syz-executor.7 (7780) used greatest stack depth: 24544 bytes left
[  361.756540] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  361.760081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  361.764014] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  361.772943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  361.777664] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  362.008675] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  362.019002] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  362.022806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  362.035138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  362.043961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  362.145996] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  362.148627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  362.151505] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  362.158179] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  362.161903] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  362.229884] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  362.271708] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  362.276785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  362.289723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  362.294744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  362.305827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  362.308625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  362.327348] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  362.330890] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  362.341498] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  362.362131] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  362.380001] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  362.397278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  362.403762] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  362.406578] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  362.407029] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  362.439053] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  362.440690] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  362.446838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  362.455869] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  362.480734] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  362.521804] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  362.522026] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  362.544819] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  362.581509] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  363.844336] Bluetooth: hci0: command tx timeout
[  364.100312] Bluetooth: hci1: command tx timeout
[  364.228556] Bluetooth: hci2: command tx timeout
[  364.419300] Bluetooth: hci4: command tx timeout
[  364.547419] Bluetooth: hci3: command tx timeout
[  364.547458] Bluetooth: hci5: command tx timeout
[  364.675354] Bluetooth: hci6: command tx timeout
[  364.867382] Bluetooth: hci7: command tx timeout
[  365.892350] Bluetooth: hci0: command tx timeout
[  366.148307] Bluetooth: hci1: command tx timeout
[  366.276725] Bluetooth: hci2: command tx timeout
[  366.468472] Bluetooth: hci4: command tx timeout
[  366.595380] Bluetooth: hci3: command tx timeout
[  366.595411] Bluetooth: hci5: command tx timeout
[  366.723326] Bluetooth: hci6: command tx timeout
[  366.915470] Bluetooth: hci7: command tx timeout
[  367.939574] Bluetooth: hci0: command tx timeout
[  368.195317] Bluetooth: hci1: command tx timeout
[  368.323420] Bluetooth: hci2: command tx timeout
[  368.515531] Bluetooth: hci4: command tx timeout
[  368.643825] Bluetooth: hci5: command tx timeout
[  368.643951] Bluetooth: hci3: command tx timeout
[  368.772302] Bluetooth: hci6: command tx timeout
[  368.964321] Bluetooth: hci7: command tx timeout
[  369.987527] Bluetooth: hci0: command tx timeout
[  370.243418] Bluetooth: hci1: command tx timeout
[  370.373047] Bluetooth: hci2: command tx timeout
[  370.564365] Bluetooth: hci4: command tx timeout
[  370.691621] Bluetooth: hci5: command tx timeout
[  370.692153] Bluetooth: hci3: command tx timeout
[  370.819366] Bluetooth: hci6: command tx timeout
[  371.011492] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
04:41:24  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffffffff81604d6e RCX=ffff8880382cfa90 RDX=1ffff11007059f49
RSI=ffffffff85c1cc40 RDI=ffffffff81604d6e RBP=ffffffff81604d6e RSP=ffff8880382cf9b0
R8 =0000000000000001 R9 =ffff8880382cfa30 R10=000000000003b53d R11=00000000000043f8
R12=ffff8880382cfab8 R13=0000000000000000 R14=ffff888031898000 R15=ffff88801651c1c0
RIP=ffffffff8142fa63 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f992db53540 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe4300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f992dcee4a1 CR3=000000002fc6c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000ff000000ffff0000000000000000
XMM02=ffffffffffffffffffff0f0e0d0c0b0a XMM03=2d646c6f2074736f0065736100006266
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff88802e45f370 RCX=0000000000000001 RDX=0000000000000000
RSI=ffff88802e45f340 RDI=ffff88806cf31850 RBP=ffff88802e458000 RSP=ffff88806cf08a08
R8 =0000000000000001 R9 =ffff88806cf08ab8 R10=000000000003b53d R11=000000000000e4d5
R12=ffff88806cf08a01 R13=ffff88806cf08ac0 R14=ffff88802e45f340 R15=ffff88806cf08a78
RIP=ffffffff8135474e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5ec623d310 CR3=000000002a27b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000