Debian GNU/Linux 11 syzkaller ttyS0

syzkaller login: [  103.999893] sshd (235) used greatest stack depth: 24064 bytes left
Warning: Permanently added '[localhost]:38602' (ECDSA) to the list of known hosts.
2023/08/20 05:55:25 fuzzer started
2023/08/20 05:55:25 dialing manager at localhost:46849
[  109.158887] cgroup: Unknown subsys name 'net'
[  109.346016] cgroup: Unknown subsys name 'rlimit'
[  121.903232] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2023/08/20 05:55:39 syscalls: 200
2023/08/20 05:55:39 code coverage: enabled
2023/08/20 05:55:39 comparison tracing: enabled
2023/08/20 05:55:39 extra coverage: enabled
2023/08/20 05:55:39 setuid sandbox: enabled
2023/08/20 05:55:39 namespace sandbox: enabled
2023/08/20 05:55:39 Android sandbox: enabled
2023/08/20 05:55:39 fault injection: enabled
2023/08/20 05:55:39 leak checking: enabled
2023/08/20 05:55:39 net packet injection: enabled
2023/08/20 05:55:39 net device setup: enabled
2023/08/20 05:55:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2023/08/20 05:55:39 devlink PCI setup: PCI device 0000:00:10.0 is not available
2023/08/20 05:55:39 USB emulation: enabled
2023/08/20 05:55:39 hci packet injection: enabled
2023/08/20 05:55:39 wifi device emulation: enabled
2023/08/20 05:55:39 802.15.4 emulation: enabled
2023/08/20 05:55:39 fetching corpus: 0, signal 0/0 (executing program)
2023/08/20 05:55:41 starting 8 fuzzer processes
05:55:41 executing program 0:
r0 = getpgrp(0x0)
prlimit64(r0, 0x6, &(0x7f0000000000)={0x8, 0x100}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4800)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x36}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x44}}, 0x40000)
r4 = getpid()
prlimit64(r4, 0x2, 0x0, &(0x7f00000003c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r2)
sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000480)={0x37c, r6, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6918}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff6c5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa467}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2f5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x486f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @remote, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xd6, @mcast1, 0xbc5a}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x40c4}, 0x24000010)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000008c0)={@empty, @remote, @dev={0xfe, 0x80, '\x00', 0x31}, 0x80000000, 0x4, 0x0, 0x100, 0x3, 0x1400000, r7})
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r2)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x98, r8, 0x300, 0xd2e7, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5c43}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40084a1}, 0x80080f0)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000dc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000110}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b80)={0x200, r9, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6baf}, @TIPC_NLA_NODE_ID={0xd1, 0x3, "0b36bf81f60014d65c08165ded95c03c5b1c51a9941aef474266ba9d96e24c43be45c0057ffa97b6685765bc56def12b6a58eccbeb3e2dc380beb27fb7525c1c469d1481949b76be910bebc77f9224696058ffd62170554c716e0807a3c68726c2a644e099b99299cc4d0ad00d8a5bb5483bbbca83d68b7d45babd6848b02f3d9c88c2212791d0f02d9d6d2f99a86107627e7736cd895244887533c959bf765a3eb66b90f68a7357209ba9417031dadc98222ec4ae3ec9e8361acd36abbda66170bc2a462e0cd1478e0520fc11"}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcfb}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)

05:55:41 executing program 1:
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9)
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x401)
r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=<r4=>0x0)
ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000040)=r4)
r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x41)
ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0xff, 0x4})
ioctl$KDDELIO(r2, 0x4b35, 0x1)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0)
ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000100))
ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000140))
r6 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000180))
ioctl$KDSKBLED(r5, 0x4b65, 0x1)
ioctl$FIONREAD(r6, 0x541b, &(0x7f00000001c0))
ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000200)={0x7f, 0x1, 0x100, 0xa92})

05:55:41 executing program 2:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1b}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "765da18dc405f63f2a043546c444ea393f6c5cf02bf79d2e0f741c"}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000000)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1fc}]}, 0x1c}}, 0x24000000)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x4)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20041220}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xfffffbff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1f}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xd1ee}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', <r4=>0x0, 0x4, 0x3, 0x1, 0x23, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x0, 0x20, 0x5, 0xd9}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'sit0\x00', <r5=>0x0, 0x2f, 0x1, 0x3f, 0x609, 0x1, @local, @local, 0x8000, 0x80, 0xcb, 0x2}})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000050}, 0x40000)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', r5, 0x4, 0x3, 0x0, 0x2, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x8, 0x7, 0xfff, 0x7fc00}})
r7 = fsmount(r2, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x24000894)
sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r0, 0xc, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008800}, 0x20000000)
setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000a40)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, r5}, 0xc)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040001}, 0x48800)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_FONTRESET(r8, 0x4b6d, 0x0)

05:55:41 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1a00c3, 0x0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040))
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='/dev/ptmx\x00', &(0x7f00000000c0)='/dev/ptmx\x00', 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0xffffff4e, 0x8, 0x6, 0x2, 0x17, "11bc5bfabf1a2a4bf941c4e9340d99925be8a8"})
r1 = syz_open_pts(r0, 0x40800)
ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000140))
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000001c0)={0x99, 0x101, 0x800, 0x6, 0x5, "93658d89a5f16b2453d0a2f074a4d5e087fdcd"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
ioctl$KDSKBLED(r2, 0x4b65, 0x3)
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_pts(r1, 0x40)
syz_open_pts(r3, 0x20000)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{}]})
r4 = fsmount(0xffffffffffffffff, 0x1, 0x0)
ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f00000002c0)=""/101)

05:55:41 executing program 4:
r0 = fsmount(0xffffffffffffffff, 0x0, 0x7b)
timerfd_gettime(r0, &(0x7f0000000000))
timer_create(0x5, &(0x7f0000000040)={0x0, 0x1f, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000080)=<r1=>0x0)
timer_gettime(r1, &(0x7f00000000c0))
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x160, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5bd1}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5345}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000380)=@gcm_256={{0x304}, "41cf7fc6a86219f1", "c1b20a91aaa41a0c546ea3229dc74a8c4871a9661a1eb5e062dc97adb51842eb", "611fa964", "cb1d4cbe4ebdf04f"}, 0x38)
r3 = fsmount(r0, 0x0, 0xe)
sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x890}, 0x20040080)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000004c0)=0xfffffffc, 0x4)
timer_create(0x1, &(0x7f0000000500)={0x0, 0x13, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000540)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000580)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000005c0))
timer_getoverrun(r4)
timer_gettime(0x0, &(0x7f0000000600))
clock_gettime(0x0, &(0x7f0000000640)={<r5=>0x0, <r6=>0x0})
timer_settime(r4, 0x0, &(0x7f0000000680)={{r5, r6+10000000}}, &(0x7f00000006c0))
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r0)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r7, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x100}, 0x8000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880))
getegid()

[  123.737544] audit: type=1400 audit(1692510941.413:6): avc:  denied  { execmem } for  pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:55:41 executing program 5:
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r0=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, <r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x160}, 0x0)
setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f00000013c0)=@gcm_256={{0x303}, "530680577780a402", "e55726b6f4e1315f7f3c25a01f2c6257793b1b00fe95c4172523a6d23ae35a56", "3adb949a", "4e20400a5a6b9261"}, 0x38)
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000001400))
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001600)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000015c0)={&(0x7f0000001480)={0x104, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x618b4984}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20004011}, 0x40000)
fsopen(&(0x7f0000001640)='cpuset\x00', 0x0)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001680))
r4 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000001840)=""/73)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, &(0x7f00000018c0)=""/89, &(0x7f0000001940)=0x59)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x20, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c080}, 0x0)
socket$unix(0x1, 0x5, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), r2)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001d00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b00)={0x190, r6, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9ea5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x53dc9267}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa14}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @loopback, 0xfffffc01}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5e9}]}]}]}, 0x190}}, 0x4000010)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000001d80), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x44, r8, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffd85}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x4000010)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000001ec0)=@ccm_128={{0x304}, "8da535756ded8189", "27507edc3c94970e11287e4251b0f2d7", "3b9cc717", "ce398c8339addf1b"}, 0x28)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001f00))

05:55:41 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'sit0\x00', <r0=>0x0, 0x2f, 0x2, 0x4, 0x1000, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, 0x7800, 0x10, 0x1, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r1=>0x0, 0x29, 0x1, 0x80, 0x0, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x8, 0x7, 0x7ff}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'ip6_vti0\x00', <r4=>0x0, 0x29, 0x8, 0x4, 0x8, 0x50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x7, 0x8390, 0x9, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', <r5=>0x0, 0x4, 0x40, 0x8, 0x800, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x10, 0x40, 0x1000, 0x5}})
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000003c0)={0x310, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5fdf6055}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x310}}, 0x800)
syz_open_dev$ttys(0xc, 0x2, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000780)=@gcm_256={{}, "a01ff867addc2931", "3cfca545d615f56829d8119371fcad4f632290e4b87293179191c18f5032cc6c", "de20116e", "5b9f247df823afa4"}, 0x38)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl0\x00', <r6=>r0, 0x2f, 0xdc, 0x9, 0x6, 0x42, @empty, @loopback, 0x700, 0x10, 0x4, 0x8000}})
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', <r8=>r6, 0x0, 0x5, 0x8, 0x8, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x20, 0x700, 0x3, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'ip6_vti0\x00', r8, 0x0, 0x7, 0x1, 0xffff, 0x0, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x1, 0x10001, 0x100}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'ip6tnl0\x00', r5, 0x4, 0x6, 0x1f, 0x1, 0x26, @mcast1, @mcast1, 0x8000, 0x20, 0x5, 0x6}})
r9 = syz_open_dev$tty1(0xc, 0x4, 0x4)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x0)
ioctl$KIOCSOUND(r9, 0x4b2f, 0xfffffffffffffffb)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xa0, r10, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004}, 0x4000004)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000e00)={'ip6tnl0\x00', &(0x7f0000000d80)={'ip6_vti0\x00', r2, 0x4, 0x80, 0xb5, 0x4, 0x12, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x10, 0x3, 0x80000000}})

05:55:41 executing program 7:
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)="4d7d72b37ce97697bda9cda804842fe813cf94241bcfc4d0787152daa888faad422df5650d848bf12016f2ae61590af6c388a7ef778098f997b5962bf5de024161d31da30fd176136d7be6beb7491e8fe3836b0c3905c239e7f75b355dd475dd34e3b97cb94ce49b009267d5a411aecc73aabf0a78c0056328fb3358ae0c3b803007aed76078e038fee24b57bd06fde4", 0x90)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/61, 0x3d}], 0x1, &(0x7f0000000200)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff]}}], 0x48}, 0x20)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x2a8, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xba4e}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b5c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x43}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff80}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7a9c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3cd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000000)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000780), r4)
getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000007c0)={@initdev, <r7=>0x0}, &(0x7f0000000800)=0x14)
getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000840)={@initdev, <r8=>0x0}, &(0x7f0000000880)=0x14)
getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000008c0)={@loopback, <r9=>0x0}, &(0x7f0000000900)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000009c0)={'ip6_vti0\x00', &(0x7f0000000940)={'ip6gre0\x00', <r10=>0x0, 0x29, 0x3f, 0x5, 0x1, 0x20, @empty, @dev={0xfe, 0x80, '\x00', 0xe}, 0x18, 0x8000, 0x10000, 0x6}})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a00)={'team0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001000)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000a40)={0x548, r6, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r9}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff80}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x4}}]}, 0x548}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
r12 = socket(0x9, 0x1, 0x1)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), r1)
sendmsg$TIPC_NL_MON_SET(r12, &(0x7f0000001240)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001200)={&(0x7f00000010c0)={0x138, r13, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8000}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa7}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20004000}, 0x10)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f00000012c0), r0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r14, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x78, r15, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x2800c044}, 0x4000000)

[  125.158075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  125.160343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  125.164923] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  125.187167] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  125.200905] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  125.208846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  125.210686] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  125.212688] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  125.216396] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  125.221239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  125.225761] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  125.227390] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  125.335988] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  125.339040] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  125.341748] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  125.343363] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  125.345706] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  125.347813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  125.354409] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  125.356044] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  125.357790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  125.360602] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  125.364152] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  125.367136] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  125.396841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  125.402672] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  125.405857] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  125.410132] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  125.413778] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  125.427701] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  127.149397] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  127.277907] Bluetooth: hci1: command 0x0409 tx timeout
[  127.278593] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  127.279538] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  127.341623] Bluetooth: hci2: command 0x0409 tx timeout
[  127.406516] Bluetooth: hci7: command 0x0409 tx timeout
[  127.470386] Bluetooth: hci5: command 0x0409 tx timeout
[  127.534310] Bluetooth: hci6: command 0x0409 tx timeout
[  129.325326] Bluetooth: hci1: command 0x041b tx timeout
[  129.389698] Bluetooth: hci2: command 0x041b tx timeout
[  129.453926] Bluetooth: hci7: command 0x041b tx timeout
[  129.519753] Bluetooth: hci5: command 0x041b tx timeout
[  129.581345] Bluetooth: hci6: command 0x041b tx timeout
[  130.128380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  130.139026] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  130.150036] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  130.167666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  130.191020] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  130.201750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  131.375338] Bluetooth: hci1: command 0x040f tx timeout
[  131.437327] Bluetooth: hci2: command 0x040f tx timeout
[  131.502343] Bluetooth: hci7: command 0x040f tx timeout
[  131.565616] Bluetooth: hci5: command 0x040f tx timeout
[  131.631315] Bluetooth: hci6: command 0x040f tx timeout
[  132.271761] Bluetooth: hci0: command 0x0409 tx timeout
[  132.274353] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  132.397339] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  133.423349] Bluetooth: hci1: command 0x0419 tx timeout
[  133.486335] Bluetooth: hci2: command 0x0419 tx timeout
[  133.552378] Bluetooth: hci7: command 0x0419 tx timeout
[  133.614475] Bluetooth: hci5: command 0x0419 tx timeout
[  133.677328] Bluetooth: hci6: command 0x0419 tx timeout
[  134.319327] Bluetooth: hci0: command 0x041b tx timeout
[  135.348190] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  135.368563] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  135.369733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  135.394588] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  135.413580] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  135.429171] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  136.365936] Bluetooth: hci0: command 0x040f tx timeout
[  137.392350] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  137.582376] Bluetooth: hci3: command 0x0409 tx timeout
[  138.413716] Bluetooth: hci0: command 0x0419 tx timeout
[  139.629919] Bluetooth: hci3: command 0x041b tx timeout
[  140.371436] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  140.377792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  140.404575] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  140.437077] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  140.460884] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  140.479585] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  141.677525] Bluetooth: hci3: command 0x040f tx timeout
[  142.574534] Bluetooth: hci4: command 0x0409 tx timeout
[  143.725898] Bluetooth: hci3: command 0x0419 tx timeout
[  144.621656] Bluetooth: hci4: command 0x041b tx timeout
[  146.669402] Bluetooth: hci4: command 0x040f tx timeout
[  148.717430] Bluetooth: hci4: command 0x0419 tx timeout
[  187.074723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  187.075999] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  187.078280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  187.081582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  187.083284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  187.087202] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  187.417861] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  187.418963] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  187.420554] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  187.428879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  187.429827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  187.436147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  187.489574] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  187.489767] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  187.493672] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  187.494589] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  187.494795] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  187.501564] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  187.580013] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  187.600368] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  187.601550] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  187.653268] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  187.665572] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  187.666661] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  189.165374] Bluetooth: hci1: command 0x0409 tx timeout
[  189.486543] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  189.614368] Bluetooth: hci2: command 0x0409 tx timeout
[  189.614869] Bluetooth: hci5: command 0x0409 tx timeout
[  189.806455] Bluetooth: hci7: command 0x0409 tx timeout
[  191.214346] Bluetooth: hci1: command 0x041b tx timeout
[  191.453139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  191.472836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  191.495931] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  191.511544] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  191.516723] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  191.521042] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  191.661578] Bluetooth: hci2: command 0x041b tx timeout
[  191.662082] Bluetooth: hci5: command 0x041b tx timeout
[  191.854355] Bluetooth: hci7: command 0x041b tx timeout
[  192.207788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  192.218642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  192.235897] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  192.245952] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  192.253806] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  192.256473] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  193.262843] Bluetooth: hci1: command 0x040f tx timeout
[  193.648365] Bluetooth: hci0: command 0x0409 tx timeout
[  193.709364] Bluetooth: hci2: command 0x040f tx timeout
[  193.709716] Bluetooth: hci5: command 0x040f tx timeout
[  193.903313] Bluetooth: hci7: command 0x040f tx timeout
[  194.350999] Bluetooth: hci6: command 0x0409 tx timeout
[  195.310363] Bluetooth: hci1: command 0x0419 tx timeout
[  195.693349] Bluetooth: hci0: command 0x041b tx timeout
[  195.757348] Bluetooth: hci2: command 0x0419 tx timeout
[  195.757698] Bluetooth: hci5: command 0x0419 tx timeout
[  195.951375] Bluetooth: hci7: command 0x0419 tx timeout
[  196.397367] Bluetooth: hci6: command 0x041b tx timeout
[  196.820328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  196.822961] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  196.857666] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  196.879881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  196.908759] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  196.914778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  197.743324] Bluetooth: hci0: command 0x040f tx timeout
[  198.445338] Bluetooth: hci6: command 0x040f tx timeout
[  199.022382] Bluetooth: hci3: command 0x0409 tx timeout
[  199.790340] Bluetooth: hci0: command 0x0419 tx timeout
[  200.494609] Bluetooth: hci6: command 0x0419 tx timeout
[  201.071784] Bluetooth: hci3: command 0x041b tx timeout
[  203.117548] Bluetooth: hci3: command 0x040f tx timeout
[  204.335473] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  205.165499] Bluetooth: hci3: command 0x0419 tx timeout
[  209.136366] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  213.936407] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  218.989565] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  221.785516] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  221.787202] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  221.793823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  221.797629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  221.799689] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  221.835708] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  223.919603] Bluetooth: hci4: command 0x0409 tx timeout
[  225.965334] Bluetooth: hci4: command 0x041b tx timeout
[  228.014607] Bluetooth: hci4: command 0x040f tx timeout
[  230.062347] Bluetooth: hci4: command 0x0419 tx timeout
[  249.534894] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  249.537498] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  249.539815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  249.552818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  249.564534] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  249.570700] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  251.182373] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  251.438342] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  251.631890] Bluetooth: hci5: command 0x0409 tx timeout
[  251.632573] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  253.626024] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  253.628089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  253.629666] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  253.636964] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  253.639729] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  253.640683] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  253.678333] Bluetooth: hci5: command 0x041b tx timeout
[  254.034867] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  254.044597] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  254.045588] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  254.056569] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  254.066585] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  254.072631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  254.173958] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  254.180594] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  254.182052] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  254.188908] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  254.192226] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  254.195017] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  254.829653] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  255.280383] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  255.661358] Bluetooth: hci2: command 0x0409 tx timeout
[  255.727659] Bluetooth: hci5: command 0x040f tx timeout
[  256.109452] Bluetooth: hci6: command 0x0409 tx timeout
[  256.302375] Bluetooth: hci7: command 0x0409 tx timeout
[  257.713393] Bluetooth: hci2: command 0x041b tx timeout
[  257.775336] Bluetooth: hci5: command 0x0419 tx timeout
[  258.157603] Bluetooth: hci6: command 0x041b tx timeout
[  258.349770] Bluetooth: hci7: command 0x041b tx timeout
[  258.710117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  258.729712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  258.736619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  258.745702] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  258.751632] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  258.758120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  259.759498] Bluetooth: hci2: command 0x040f tx timeout
[  259.821545] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  260.205451] Bluetooth: hci6: command 0x040f tx timeout
[  260.270523] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  260.398539] Bluetooth: hci7: command 0x040f tx timeout
[  260.847387] Bluetooth: hci3: command 0x0409 tx timeout
[  261.805406] Bluetooth: hci2: command 0x0419 tx timeout
[  262.254334] Bluetooth: hci6: command 0x0419 tx timeout
[  262.445607] Bluetooth: hci7: command 0x0419 tx timeout
[  262.551788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  262.555131] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  262.561534] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  262.567564] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  262.574633] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  262.575654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  262.893563] Bluetooth: hci3: command 0x041b tx timeout
[  263.062723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  263.078739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  263.087854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  263.126114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  263.142849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  263.153546] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  264.622383] Bluetooth: hci0: command 0x0409 tx timeout
[  264.942344] Bluetooth: hci3: command 0x040f tx timeout
[  265.200989] Bluetooth: hci1: command 0x0409 tx timeout
[  266.670409] Bluetooth: hci0: command 0x041b tx timeout
[  266.990453] Bluetooth: hci3: command 0x0419 tx timeout
[  267.245382] Bluetooth: hci1: command 0x041b tx timeout
[  268.717332] Bluetooth: hci0: command 0x040f tx timeout
[  269.296321] Bluetooth: hci1: command 0x040f tx timeout
[  270.765498] Bluetooth: hci0: command 0x0419 tx timeout
[  271.341342] Bluetooth: hci1: command 0x0419 tx timeout
[  285.549636] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  290.413356] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  295.215336] Bluetooth: hci4: Opcode 0x c03 failed: -110
2023/08/20 05:58:33 executor 4 failed 11 times:
executor 4: exit status 67
SYZFAIL: wrong response packet
 (errno 2: No such file or directory)
loop exited with status 67

VM DIAGNOSIS:
05:58:33  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88802250f980 RCX=0000000000000000 RDX=ffff88802e620000
RSI=ffffffff8113b78f RDI=0000000000000005 RBP=0000000000000000 RSP=ffff88802250f8f8
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=0000000000000001 R13=0000000000000000 R14=ffff88802e620000 R15=ffff88802250fa20
RIP=ffffffff814d916b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb47bfcc540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb47c1674a1 CR3=00000000262c8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000
XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff888034044132 RCX=0000000000000001 RDX=0000000000000002
RSI=0000000000000008 RDI=ffffffff870dccd8 RBP=ffff888034043680 RSP=ffff88806cf09b48
R8 =0000000000000000 R9 =fffffbfff0ee9f69 R10=ffffffff8774fb4f R11=0000000000000001
R12=ffff888034044110 R13=2645ebf64f6f4e04 R14=dffffc0000000000 R15=0000000000000000
RIP=ffffffff812e4197 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056535ea0d121 CR3=00000000349a6000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000
XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000