Warning: Permanently added '[localhost]:61553' (ECDSA) to the list of known hosts.
2023/08/28 05:12:24 fuzzer started
2023/08/28 05:12:24 dialing manager at localhost:42391
syzkaller login: [   93.794503] cgroup: Unknown subsys name 'net'
[   93.994705] cgroup: Unknown subsys name 'rlimit'
[  105.900076] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2023/08/28 05:12:38 syscalls: 200
2023/08/28 05:12:38 code coverage: enabled
2023/08/28 05:12:38 comparison tracing: enabled
2023/08/28 05:12:38 extra coverage: enabled
2023/08/28 05:12:38 setuid sandbox: enabled
2023/08/28 05:12:38 namespace sandbox: enabled
2023/08/28 05:12:38 Android sandbox: enabled
2023/08/28 05:12:38 fault injection: enabled
2023/08/28 05:12:38 leak checking: enabled
2023/08/28 05:12:38 net packet injection: enabled
2023/08/28 05:12:38 net device setup: enabled
2023/08/28 05:12:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2023/08/28 05:12:38 devlink PCI setup: PCI device 0000:00:10.0 is not available
2023/08/28 05:12:38 USB emulation: enabled
2023/08/28 05:12:38 hci packet injection: enabled
2023/08/28 05:12:38 wifi device emulation: enabled
2023/08/28 05:12:38 802.15.4 emulation: enabled
2023/08/28 05:12:38 fetching corpus: 0, signal 0/0 (executing program)
2023/08/28 05:12:39 starting 8 fuzzer processes
05:12:39 executing program 1:
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x22bd0000000000)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4044081}, 0x4)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x59}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x32e}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10ae}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x20048005)
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/150})
ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000004c0))
r3 = syz_io_uring_complete(0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x84)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x56}, @val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8880)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c805}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x50}}}}, ["", "", "", ""]}, 0x28}}, 0x20000000)
syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000940)=0x1, 0x0, 0x4)
r5 = syz_io_uring_complete(0x0)
sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x40005}, 0x40804)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'ip_vti0\x00', <r6=>0x0, 0x40, 0x20, 0xfffffffb, 0x1000, {{0x10, 0x4, 0x2, 0x4, 0x40, 0x66, 0x0, 0x4, 0x2f, 0x0, @local, @private=0xa010100, {[@noop, @ra={0x94, 0x4}, @end, @ra={0x94, 0x4, 0x1}, @generic={0xc1, 0x11, "09df16f3a912621b7f814f9580c3ca"}, @ra={0x94, 0x4}, @generic={0x44, 0xd, "38154fb5c3581b1fef3cd6"}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000c00)={'erspan0\x00', &(0x7f0000000b80)={'syztnl2\x00', r6, 0x1, 0x40, 0xffffffff, 0x6, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x65, 0x0, 0x1f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@end, @generic={0x86, 0xf, "8e23da67e67d5b85985b127bf8"}, @generic={0x44, 0x2}, @generic={0x88, 0xa, "3b0e1760174ac00a"}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000d00)={'syztnl2\x00', &(0x7f0000000c40)={'syztnl0\x00', r6, 0x10, 0x80, 0x0, 0x6, {{0x20, 0x4, 0x3, 0x9, 0x80, 0x66, 0x0, 0xff, 0x4, 0x0, @multicast2, @remote, {[@timestamp_addr={0x44, 0x44, 0x59, 0x1, 0xb, [{@multicast1}, {@local, 0x1}, {@local, 0xd03}, {@multicast1, 0xcebd}, {@remote, 0x3}, {@local, 0x4}, {@multicast2, 0x4}, {@multicast1, 0x3}]}, @timestamp={0x44, 0xc, 0xda, 0x0, 0x8, [0x0, 0x2]}, @timestamp_addr={0x44, 0x1c, 0x5e, 0x1, 0x1, [{@private=0xa010102, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x40}, {@multicast2}]}]}}}}})

05:12:39 executing program 0:
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000000))
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000040)={{0x4, 0x3, 0x3, 0xf032, 0x40, 0x9}, 0x195, [0x8, 0x3f, 0x7f, 0x8, 0xd400000, 0xb1, 0x10000, 0x4, 0x1, 0x8000, 0x1, 0x7ff, 0x9, 0x9, 0x5, 0x5, 0x0, 0x0, 0x8, 0x8, 0x3814, 0x3, 0x0, 0xff, 0xff, 0x10001, 0x3, 0xfffff42a, 0x0, 0x5, 0x7, 0x5, 0x5, 0x3, 0x70e, 0x3, 0x9, 0xc53d, 0x0, 0x80000000, 0xffff, 0x7fffffff, 0x3, 0x10001, 0x7, 0x7, 0x3, 0x6, 0x100, 0x6, 0x6, 0x10001, 0x84c5b65a, 0x9, 0x100, 0x4, 0xfffffffb, 0xa00000, 0x2, 0x4, 0x81, 0xffffffff, 0x56ed, 0x5, 0x9, 0x87d2, 0xeac3, 0x9, 0x7, 0x0, 0x7, 0x1000, 0x4, 0x74, 0x2, 0x1476d68f, 0x3, 0x101, 0x6, 0x3, 0x0, 0x1, 0xffff0000, 0x0, 0x3, 0x9, 0x4, 0x8, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x20, 0x10001, 0xbe, 0x0, 0x2, 0xe6d0, 0xd0f4, 0x6, 0x5, 0x1, 0x1, 0x8, 0xff, 0x5, 0x80, 0x0, 0x2, 0x9, 0xffff, 0x8, 0x80000001, 0x7, 0x871, 0x3, 0x9, 0x9, 0x0, 0xff, 0x8001, 0x5, 0x3, 0xfffffff7, 0x1aa200, 0x3, 0x7, 0x10001, 0x1, 0xc6, 0xd98, 0x100, 0x3f, 0x80, 0xc7e4, 0x8bf, 0xe076, 0xffffffff, 0x80000001, 0x80000001, 0x10, 0x100, 0x80000000, 0xfffffffb, 0x5, 0xb4, 0x7fffffff, 0x326, 0x412c9891, 0x3f, 0x2, 0x9, 0x7, 0x8001, 0x0, 0xe8f8, 0x6, 0x6, 0x7fff, 0x401, 0xff6, 0x401, 0x80, 0x7fffffff, 0xa1d3, 0x1, 0x1f, 0xfffffffd, 0x1000, 0x1, 0x9, 0x38bd, 0x7ff, 0x8, 0x8, 0x7ff, 0x8000, 0x76c, 0x6, 0x800, 0x4, 0xa9f, 0x5, 0x1000, 0xef4c, 0x8, 0x4, 0x1, 0x80, 0x1b88, 0x9, 0x10001, 0x5, 0x5, 0x8, 0x4, 0x400, 0x7ff, 0x5, 0xff, 0x8, 0x289, 0x80, 0x40, 0x9, 0x3, 0x92d, 0x7fff, 0x2, 0x1, 0x2, 0x4, 0x1, 0x8001, 0x749cdc11, 0x10001, 0x899, 0x3, 0x4, 0x5, 0x8, 0x2d2f, 0x9, 0x1, 0x5, 0x1, 0xd25, 0x7, 0x4, 0x8000, 0x5, 0x5, 0x800, 0x7, 0x3ff, 0x1db, 0x1, 0x9, 0x72, 0x0, 0x5, 0x4a, 0x7, 0x0, 0x1, 0x400, 0x0, 0x8001, 0xffffffff, 0x5, 0x7ff, 0x9b9, 0x80, 0x5, 0x7fffffff, 0x5, 0x80000000, 0x2, 0xfffff466, 0x445, 0xfffffffe, 0x401, 0x7, 0x1, 0x7e2, 0x4, 0xa71b, 0xb5a, 0xe9b3, 0x5, 0x5e, 0x1, 0x6, 0x400, 0x100, 0x80, 0x2, 0x0, 0x2, 0x245, 0x6, 0xffffffff, 0x2, 0xffff5634, 0x5, 0x467, 0x7, 0x5, 0x8, 0x5, 0x98, 0x81, 0x5, 0x0, 0x8, 0x10001, 0x7, 0x2, 0x9, 0xc3, 0xd28b, 0x5, 0x7, 0xffffffff, 0x6, 0x8001, 0x9, 0xe7d6de8, 0x7, 0x2, 0x0, 0x8, 0x3ff, 0x57, 0x6e4c, 0xfffffffd, 0x4, 0x3f, 0x4, 0x100, 0x2, 0x21, 0x8, 0x2, 0x4, 0x8df7, 0x0, 0x80000001, 0x401, 0x8, 0x1, 0x20, 0x8, 0x4, 0xfff, 0x200, 0x7fffffff, 0x4, 0xcb, 0x5, 0x9, 0x2, 0x9, 0x6, 0x1, 0x9, 0x3, 0x5, 0x1b1, 0xc33, 0x7, 0x81, 0x8000, 0x40, 0x435, 0x6f, 0xff000000, 0x6, 0x3, 0x0, 0x8ff8, 0x5, 0x80000000, 0x7fff, 0x8001, 0x3, 0xfe26, 0x3, 0x10000, 0x518f, 0xfffffb77, 0x9, 0x1, 0xa2, 0x5, 0x3ff, 0x8, 0x7, 0xffff, 0x1, 0x101, 0x9, 0x914, 0x8, 0x4, 0x4, 0x8, 0x1000, 0x28e, 0x2, 0x0, 0x9, 0x6804, 0xffff, 0x7, 0x1, 0x401, 0xfffffffe, 0x5, 0xff, 0xd79, 0x1f, 0x8, 0x0, 0x800, 0x8, 0x9, 0x400000, 0xfffffff9, 0x3, 0x80000000, 0x1f, 0x3ff, 0x4, 0x6, 0x2, 0x5e, 0x800, 0x5, 0x80, 0x1, 0x8001, 0x1, 0x68f, 0x80000001, 0x1e8676b, 0x3, 0xfff, 0x6, 0x6, 0x4, 0xa2, 0x1, 0x3, 0x8001, 0x5, 0x20, 0x3f, 0x46, 0x3a901054, 0x81, 0x1, 0x2, 0x6, 0x0, 0x0, 0x55, 0x8, 0xfffeffff, 0x6, 0x5, 0x3, 0x4, 0xb3, 0x1, 0x0, 0x8, 0x847, 0x4, 0xff, 0xfffffffd, 0x749, 0x1, 0x92b, 0x7, 0x8001, 0x8, 0xe6, 0x5, 0x5, 0x8, 0x8, 0x713dfdf3, 0x4, 0x8, 0x1, 0x5, 0x5, 0x5, 0x3, 0x80000000, 0xfffffff9, 0x1, 0xff, 0x8000, 0x3, 0x5c, 0x3, 0xfffffff9, 0xa240, 0x4, 0x5, 0xffffffc1, 0xfffffffa, 0x3, 0x3, 0x1, 0x9, 0x4, 0x8, 0x2b7, 0x66f, 0x8000, 0x0, 0x4, 0x1, 0x6568eeb6, 0x1, 0x341, 0x100, 0x1, 0x80, 0x1f, 0x2, 0x7, 0xfffffffb, 0x3, 0x6, 0x2, 0x9, 0x8, 0x6, 0x1ff, 0x80000000, 0x0, 0x8, 0x3, 0xfffffffe, 0x0, 0x80, 0x40, 0x3, 0x8, 0x7, 0x80000000, 0xffff, 0x9, 0x7, 0x2, 0x5, 0xffffff01, 0x8000, 0x7, 0xfffffffb, 0x10000, 0x7ff, 0xa9c9, 0x10000, 0x7, 0xda, 0xbf5, 0x5, 0x7f1, 0x9, 0x6, 0x0, 0x8, 0x7fff, 0x0, 0x9b, 0x8001, 0x4, 0x80, 0x9, 0xfffffffc, 0x7ff, 0x7fff, 0x0, 0x65f, 0x9, 0x9, 0xf2e9, 0x7, 0x7ff, 0x0, 0x3f, 0x10001, 0x7f, 0x1, 0x3a15, 0x7, 0x101, 0x8, 0x8, 0x4, 0xc0000, 0x8, 0x3, 0xff, 0xfffff000, 0xc1, 0x537, 0xa16, 0x1000, 0x3, 0x1, 0x7, 0x20, 0x2fd, 0x9, 0xffff, 0x6, 0x7ff, 0x7, 0x10001, 0x80000001, 0x7, 0x7, 0x1, 0x5e1, 0x7ff, 0x7fff, 0x8, 0x1000, 0x0, 0x2, 0x2, 0x99bc, 0x8, 0x1000, 0x3, 0xb5, 0x400, 0x7e, 0x2, 0x0, 0x80000001, 0x6, 0x5, 0x0, 0x40d, 0x0, 0x0, 0xfffffffd, 0x9, 0x7, 0x80000000, 0x1, 0x2, 0x2, 0x1ff, 0x7ff, 0x2, 0x6, 0x7, 0x8, 0x7, 0x8001, 0xdd97, 0x8, 0x6, 0x1, 0xafb6, 0x0, 0x4, 0x0, 0x8, 0x409f, 0xe0c, 0x200, 0xffffff5b, 0x7fff, 0x4, 0x0, 0x8, 0x7b43, 0x0, 0x4, 0x0, 0x200, 0x4, 0x0, 0x6, 0x7f, 0x7, 0x1774, 0xfffffff8, 0x1, 0x0, 0x1, 0x2, 0x9, 0xfffffffb, 0x5, 0x20, 0x790a2a2a, 0x6, 0x80000000, 0xa5, 0xb4, 0x3, 0x1f, 0x1ff, 0x1, 0x8, 0xfffffffe, 0x6, 0x9, 0x6, 0x4, 0x3d7cdc0b, 0x1, 0xffffffff, 0x79d7, 0xa2, 0x5, 0x7fffffff, 0xffffffff, 0x1c5, 0x5, 0xa0c9, 0x3, 0x8, 0x1, 0x87e, 0xfffffff9, 0x2, 0x0, 0x2, 0x6000000, 0x2, 0x10001, 0x0, 0x1, 0x0, 0x9, 0xd47d, 0x5, 0x6, 0x1000, 0xe8c1, 0x200, 0x14000, 0x0, 0x10000, 0x3, 0x7, 0x4, 0x65c8, 0x4, 0x5, 0x7, 0x5, 0xfff, 0x80000000, 0xeb3, 0x2aa4, 0xff, 0x3, 0x0, 0x7, 0xa753, 0x80000000, 0x5f0c, 0x40, 0x8, 0x1f, 0x3ff, 0x3, 0x7, 0x6, 0x8000, 0x4, 0x0, 0x0, 0x10000, 0x8, 0x1, 0x401, 0xfffffffb, 0x3, 0x1000, 0x7, 0x7, 0x6, 0x4, 0x5, 0x28000, 0x2, 0x8, 0xe4, 0x3, 0x10000000, 0x8, 0x4, 0x101, 0x82, 0xfffffffe, 0x5, 0x401, 0x4, 0x80, 0x7fffffff, 0x3, 0xca, 0x2, 0x800, 0xa5, 0x1, 0x1, 0x7, 0x100, 0x1ff, 0x400, 0x6, 0x40, 0xdbf, 0x3, 0x1, 0x1000, 0x2, 0xff, 0x6, 0x8, 0x4, 0x0, 0x8, 0x6, 0x4, 0x5, 0x3, 0x7fffffff, 0xb94a0000, 0x80, 0xfffffc01, 0x2, 0x1, 0x5, 0x127, 0x80000001, 0x81, 0x0, 0x6d8e38d7, 0x5, 0x2, 0x6, 0x0, 0x0, 0x7, 0x6, 0x4, 0x7, 0x4, 0x401, 0x5aeb, 0x88b, 0x0, 0x7fffffff, 0x3, 0x400, 0x4, 0x2, 0x7f, 0x3, 0x0, 0x80000000, 0x200, 0x5, 0x81, 0x265, 0x2, 0xc5, 0xfffffffb, 0x7, 0x80000001, 0x0, 0x10000, 0x4, 0x3f, 0x8, 0x800, 0x5, 0x9, 0x7ff, 0x0, 0x64671ae8, 0x8, 0x4, 0x1, 0x8, 0x401, 0x0, 0x4, 0x2287, 0x6, 0x2000000, 0x3f, 0x10001, 0x4, 0x1ff, 0x7, 0x16, 0x2, 0x3, 0x7ee, 0x3, 0x3e, 0x95a, 0xd457, 0x6, 0xffff0000, 0x6, 0x2, 0xff, 0x4, 0x81, 0x5, 0x1, 0x10000, 0x1, 0x8, 0xc4, 0xfb, 0x2e50, 0x5c31d871, 0x808000, 0x1, 0x1, 0xfffff0f9, 0x0, 0x756, 0x3, 0xf87a, 0xffff, 0x1d80, 0x6, 0x9f9, 0x10001, 0x0, 0x0, 0x3, 0x1, 0x5, 0x18, 0x9, 0x8, 0x3, 0x1, 0x1, 0x61162fea, 0x2, 0x6, 0xfffffffa, 0xab, 0x8001, 0x9, 0xf617, 0x3f, 0x800, 0x65c3, 0x4, 0x9, 0x3, 0x3, 0x100, 0x4, 0xed5b, 0x5, 0x7, 0x3, 0x5, 0x8000, 0x4, 0x2, 0x0, 0x2, 0x7fff, 0xfffffff7, 0x7, 0x592, 0x4, 0x101, 0x8, 0x8, 0x7ff, 0xfffffffb, 0x2, 0x8, 0x3, 0x4000, 0x8, 0x5, 0x3eb, 0x7, 0x7434, 0x4, 0x800, 0x3c, 0x6, 0x5, 0xde, 0x20, 0x6, 0x6, 0x1, 0x0, 0x200, 0x15, 0x7, 0x2, 0x8, 0x2, 0xde, 0x1, 0x10000, 0x2, 0x7, 0xda03, 0x1, 0x7, 0x9, 0x8000, 0x9, 0x1, 0xff, 0x6b38, 0x3, 0x692b, 0x5, 0x80000001, 0x6, 0x6, 0x1]})
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000001080)=0x3, 0x4)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000010c0)={0x1, 0x1, 0x0, 0xec, 0x3f, 0x7f})
r0 = syz_open_dev$hiddev(&(0x7f0000001100), 0x8, 0xc403)
ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000001140)={0x1, 0x1, 0x2, 0x4, 0x101, 0xe579})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001180), 0x602080, 0x0)
ioctl$VT_GETMODE(r1, 0x5601, &(0x7f00000011c0))
ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000001200)={{0x1, 0x1, 0x800, 0x5, 0xfff, 0x1}, 0xac, [0x9, 0x3, 0x7, 0x1000, 0x4b, 0x3f, 0x101, 0x2, 0x8001, 0x10000, 0x2, 0xf0a2, 0x9a, 0x2, 0x3, 0xf77b, 0x1, 0x80000000, 0x6, 0x81, 0x8, 0xffffccde, 0x0, 0x4, 0x7, 0x401, 0x4e, 0x3, 0x1, 0x12c3dce3, 0x400, 0x8, 0x6, 0x100, 0x7, 0xffffa73c, 0x80000001, 0x8, 0xec, 0x1ff, 0x3, 0x10001, 0x3, 0x2, 0x1, 0x2, 0x81, 0x2, 0x3, 0xffffffff, 0xfffffff9, 0x1f, 0x5, 0x3, 0x8001, 0x6, 0x6f8, 0x823d, 0x3ff, 0x9, 0x800, 0x3ff, 0x3, 0x7, 0x8e, 0x5, 0x100, 0x8, 0x1, 0x41, 0x8001, 0x10001, 0x100, 0x6, 0x7, 0x8001, 0x1, 0x0, 0x6, 0x6, 0x6, 0x8001, 0x401, 0x1ff, 0x8e, 0x2, 0x9e33, 0x4, 0x80, 0x1, 0xffff7d9c, 0x1000, 0x2, 0x34, 0x35, 0x5, 0x3ff, 0x7, 0xa67, 0x1, 0x7, 0x9, 0x1, 0x8, 0x8, 0x3, 0x1, 0xa9, 0x8, 0xac2, 0x0, 0x7fff, 0x81, 0x2, 0x9, 0x8, 0x3, 0x401, 0x0, 0x3, 0x7, 0xd4e1, 0x3, 0x80000000, 0x6, 0x20, 0x7, 0x9, 0x7ff, 0x2, 0x1000000, 0x800, 0xba, 0x3, 0x1, 0xbd1, 0x8001, 0x7f, 0x9, 0x7f, 0x1426, 0x6, 0x3, 0x4, 0x9, 0x3, 0xcbc1, 0x2, 0x200, 0x480, 0xfff, 0x6, 0x20, 0x0, 0x1, 0x8, 0x4, 0xd9, 0x80000000, 0x40, 0x1, 0x1, 0xffff, 0x6, 0x8, 0x3, 0x3, 0x0, 0x9, 0x3f, 0x2, 0x1ff, 0x81, 0x571e, 0x8, 0x6, 0xfffffffe, 0x1, 0xfff, 0x7fff, 0x9, 0x0, 0xfffff4b3, 0x3, 0x3, 0x7, 0x0, 0xffffff80, 0x0, 0x1, 0x401, 0x8001, 0x9, 0x1, 0xffffffff, 0x0, 0x6, 0x3, 0x1, 0x1, 0x200, 0x0, 0x4, 0x4, 0x4, 0x3, 0x3, 0x7f, 0x6fcb, 0x1, 0x40, 0x4, 0x0, 0x2, 0x1, 0x6, 0x394, 0x40, 0x4, 0x400, 0x7fffffff, 0x1, 0x519, 0x7, 0x335, 0x80, 0xe0f, 0x8e3, 0x7ff00000, 0x1, 0x3, 0x8, 0x800, 0x3f, 0x0, 0x7fff, 0x1a4a000, 0x3ff, 0x200, 0x9, 0x100, 0xc96, 0x800000, 0x1, 0xffffffc1, 0x1, 0x8, 0xffff, 0xfffffffd, 0x7, 0x3, 0x1, 0x7, 0x10000, 0x3, 0x0, 0x1, 0x400, 0x6, 0x7, 0x5, 0x0, 0x7fff, 0x2, 0x7, 0xffffddaf, 0x4, 0x3, 0xe4, 0x10000, 0x4, 0x5, 0x4, 0x1, 0x2, 0xfffffff8, 0x200, 0x81, 0x5, 0x9, 0x10000, 0x6d5, 0x2, 0x7, 0x10000, 0x4, 0x5, 0xfffffffb, 0x6, 0x3, 0x7, 0x3, 0x8, 0x4, 0x20200000, 0x5, 0x401, 0x4, 0x7, 0xda, 0x80000000, 0xffff, 0x8, 0x0, 0x2, 0xab8, 0x101, 0x20, 0x5, 0x0, 0x9, 0x9, 0x5, 0x100000, 0x7fffffff, 0x52, 0x1f, 0x4, 0x8, 0xe39, 0x40, 0x5, 0x1, 0x7fff, 0x7, 0x10000, 0x5, 0xfffffffa, 0x0, 0x3, 0x80, 0x276d, 0x20, 0x4, 0x0, 0x8, 0x6, 0x8, 0x7f, 0xffffffff, 0xffc, 0x3, 0x80000000, 0x4, 0x6, 0x7, 0x8001, 0x1, 0x0, 0x2, 0x8, 0x9, 0x80000000, 0xff, 0xffffff00, 0x9, 0x84f, 0x81, 0x6, 0x0, 0x9, 0x3, 0x0, 0x17d8, 0x101, 0x3ff, 0x800, 0x2, 0x9, 0x7fffffff, 0x618532df, 0x7, 0x8, 0xad, 0x6, 0x8, 0x6, 0x2, 0x172e, 0xffffff5c, 0x0, 0x0, 0xa8000000, 0x0, 0x7, 0x7, 0x9, 0x101, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x3, 0x80000001, 0x7ff, 0x4, 0x1f, 0x0, 0x2, 0xffffcf0a, 0xfffff96e, 0x1000, 0xfffffbff, 0x1, 0x5, 0x3, 0x3ff, 0x4, 0x200, 0x9, 0x101, 0x1, 0xfff, 0x2, 0x1, 0x0, 0x100, 0xffff7add, 0x2, 0x3, 0x8000, 0x8001, 0x4, 0x4, 0xff, 0x2b0d36cd, 0x7, 0x81, 0x1, 0x1f, 0x5, 0xfff, 0x5, 0x7, 0x40, 0x7, 0x3, 0x8, 0x2, 0x89f6, 0x100, 0x9, 0xff, 0xffffffff, 0x8, 0x2, 0x0, 0x1fe9011f, 0xa7, 0x5, 0x1da, 0x1, 0xffffffff, 0x6, 0x4, 0x1f, 0x2dd5, 0x3, 0x6, 0x9, 0x595cdba3, 0x0, 0xfffff801, 0x7887, 0x5, 0x4, 0x80000000, 0x9, 0x81, 0x80000001, 0x5, 0x0, 0x5, 0x9, 0x5, 0x4, 0x6, 0x8, 0x3, 0x8, 0xff, 0xef, 0xa000000, 0x0, 0x6, 0x9970, 0x2, 0x101, 0x8, 0x5, 0x6, 0x7f, 0x48e7, 0x401, 0xffffffa7, 0x6, 0x80000001, 0xfffffc01, 0xfffffffc, 0x2, 0x1f, 0x8000, 0x7fff, 0x2, 0x4, 0x3, 0x3, 0x5bf2, 0x899, 0xfdbc, 0xd71d, 0x0, 0x7fffffff, 0x0, 0xd1bd, 0x9, 0xffffc1b9, 0x2, 0x8, 0x9, 0x2d, 0x4, 0x10001, 0x80000001, 0x8, 0x2886, 0x9, 0x8, 0x7ff, 0x1, 0x7, 0x1, 0x4, 0x401, 0xfff, 0xd186, 0x3, 0x72, 0x7fff, 0xffffff80, 0xffff, 0x8, 0x5, 0xfffffff7, 0x1d, 0xe8d, 0x7, 0x9, 0x10001, 0x4eafbc5d, 0x4, 0x2, 0x2, 0x6, 0x7, 0x401, 0x4, 0x16a9, 0x6, 0xffffffff, 0x88e, 0x8001, 0x400, 0xfff, 0x2, 0x40, 0x1f0, 0x8, 0x10000, 0x6, 0x0, 0x10000, 0x4, 0x1, 0x1, 0x2, 0x10000, 0x8, 0x0, 0x2, 0x7ff, 0x9, 0x1d, 0x8, 0x27bf27fe, 0x4, 0x200, 0x8, 0x3, 0x7, 0xfffffffe, 0x9, 0xffffffff, 0xfffffffe, 0x6c, 0x7f, 0x0, 0x1, 0x3, 0x3d, 0x1ff, 0x100, 0x9, 0x7, 0x200, 0x400, 0x3ff, 0x0, 0x8001, 0x22a, 0x81, 0x4, 0xfffffff9, 0x2, 0x7, 0x2, 0x1, 0x7, 0x1e, 0x3, 0x6, 0x20, 0xfff, 0x2, 0x1, 0x3, 0x7ff, 0x5, 0x3, 0x6, 0x80000001, 0x3a7, 0xffffffff, 0x2, 0x6, 0x1ff, 0x3, 0x4, 0x2c, 0x0, 0x81, 0x0, 0x5, 0x9, 0x99, 0xd518, 0x47d, 0x2, 0x1bd, 0x401, 0x6, 0x1, 0x9, 0xffffffff, 0xba, 0xfffff3b6, 0x2, 0xdb, 0x3, 0x0, 0x4, 0x7ff, 0x5, 0xd9, 0x6, 0xfffffeff, 0xaf3, 0x4, 0x8, 0x9, 0x9, 0x3, 0xff, 0x3ff, 0x5, 0x3, 0x7ff, 0xffffffff, 0x0, 0x6, 0x2, 0x400, 0x3ff, 0x9, 0x100, 0x8, 0xfffffffe, 0x3, 0x0, 0xb90000, 0x6, 0x0, 0x7ff, 0x1, 0x3, 0x2, 0x6, 0x80000001, 0x9, 0x3ff, 0x9, 0xc1, 0x10000, 0x0, 0x20, 0x800, 0x4, 0x0, 0x3, 0x6, 0x9, 0x2, 0x1, 0x4, 0x1, 0x3, 0x7, 0x1, 0x0, 0x1f, 0x2, 0x9, 0x3, 0x8, 0xe241, 0x101, 0x4, 0x5, 0x0, 0x0, 0x40, 0x7fff, 0x9, 0x3, 0x2, 0x0, 0x7ff, 0x40, 0x400, 0x0, 0x9, 0x8, 0x0, 0x8000, 0x1f, 0x7, 0xfffffff7, 0x7fffffff, 0x9, 0x101, 0x7fffffff, 0x8, 0x1, 0x8bb, 0x3f, 0x926, 0x0, 0x7, 0xef8, 0x9, 0x8, 0x7, 0x3, 0x5, 0xfffffffc, 0x7fff, 0x26e, 0x6, 0x7fffffff, 0x8, 0x9, 0x2, 0x9, 0x3f, 0x0, 0x400, 0x25c3c20c, 0x7f, 0x2, 0x1, 0x80000000, 0x1, 0x9, 0x0, 0xa01, 0x401, 0x10000, 0x3, 0x9dd, 0x7d, 0x5, 0xffff, 0x8, 0x1, 0x57c, 0x5, 0x2, 0x4, 0x10001, 0xfffffffa, 0x3f, 0x5, 0x7fffffff, 0x81, 0x1, 0x101, 0x80000001, 0x5, 0xf32, 0x5, 0x227, 0x7, 0x0, 0x8, 0x4, 0x81, 0x77ea, 0x8, 0x9, 0x4, 0xff, 0x586e, 0x1, 0x7f, 0x5, 0x142e, 0x8, 0x80, 0x2, 0x93, 0x7ff, 0x1, 0x5, 0x2, 0x0, 0x80000000, 0x20, 0x1, 0x8, 0x401, 0x5, 0xa2, 0x7880, 0x69, 0x7ff, 0x4, 0xd5, 0xe97, 0xd2000000, 0x8, 0x1f52, 0xfffffffa, 0x4, 0x8c1f1e2f, 0x8f1, 0x4, 0x2, 0xfffffffb, 0x1000, 0x2, 0x8, 0x6, 0x20, 0x8, 0x7fff, 0x7fff, 0x1000, 0x80000001, 0xab, 0x1, 0x1, 0x3f, 0x0, 0xfffffffc, 0x0, 0x7, 0x4, 0x6, 0x7, 0x7, 0xa7f1, 0x0, 0xfffffff7, 0x800, 0x10001, 0xffffffff, 0x120000, 0x8, 0xaf2, 0x792, 0xfffffffe, 0x800, 0xfff, 0x0, 0x3, 0x0, 0xfffffff8, 0x6, 0x81, 0x1, 0xfffffffb, 0x8, 0x0, 0x0, 0x101, 0x9, 0xffffffa5, 0x328a04ac, 0x5, 0x251a, 0x7, 0x400, 0x1, 0x200, 0x0, 0x7, 0x2, 0x85f, 0x3, 0x2, 0x800, 0x7, 0x7, 0x0, 0x401, 0x800, 0x7f, 0x0, 0x50e5, 0x10001, 0x7, 0x0, 0x7, 0xffff, 0x3, 0x3, 0x8, 0x2, 0x9, 0x9, 0x366, 0x1312, 0x800, 0x6, 0x0, 0x7f, 0x1f, 0x3, 0x2, 0x5, 0x0, 0x81, 0x2, 0x6, 0xfff, 0x74f, 0x3ff, 0x7, 0x7ff, 0x80000000, 0x10000, 0x3, 0x2, 0x9, 0x1, 0x5, 0xc7, 0x15, 0x6, 0x4, 0x2, 0x4, 0x4, 0x2, 0x7, 0xab82, 0x8, 0xd1a, 0x1, 0xdf, 0x9, 0x7278bf9a, 0x58ec, 0x5, 0x8001, 0x6, 0xffff8000, 0x6, 0x6, 0x7ff, 0xa3a, 0x200, 0x1, 0x4, 0x5, 0x2, 0x78, 0x3f, 0x9, 0xfff, 0x2c2, 0x1, 0x0, 0x7, 0x1cdb, 0x7ff, 0x1, 0x8, 0xccb, 0xfffffffa, 0xf650, 0x1ff, 0x3ff, 0xb08, 0x5, 0xfffff000, 0x3, 0x65684f10, 0x0, 0x800, 0x7fff, 0x101, 0x9, 0x2]})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000002240)={@local, @empty}, 0xc)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000002280)={0x7fffffff, 0x5, 0xfffff241, 0x200, 0x3, "adbcc5dff1e157642cfaf78e967134b3983c18"})
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f00000022c0)={0x0, 0x10000})
ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f00000032c0)={0x3, 0xffffffff, 0x100, 0x1000, 0x9, 0xfd})
ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000003300)={0x2, 0x2, 0x100, 0x80000000, 0x3, 0x4})
r3 = syz_io_uring_complete(0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003380)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000003480)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003440)={&(0x7f00000033c0)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7c}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x399}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40044}, 0x4000000)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000034c0), 0x80, 0x0)
ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000003500))

[  107.010807] audit: type=1400 audit(1693199559.184:6): avc:  denied  { execmem } for  pid=270 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:12:39 executing program 2:
ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000000))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
r0 = syz_open_pts(0xffffffffffffffff, 0x44401)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x204082, 0x0)
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x20010, 0xffffffffffffffff, 0x3f)
ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f00000000c0))
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'gretap0\x00', <r3=>0x0, 0x8, 0x40, 0x0, 0x4, {{0x29, 0x4, 0x1, 0x1e, 0xa4, 0x65, 0x0, 0xf, 0x2f, 0x0, @empty, @local, {[@lsrr={0x83, 0x23, 0x57, [@rand_addr=0x64010102, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x16}, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x12}, @broadcast]}, @rr={0x7, 0x17, 0x32, [@empty, @rand_addr=0x64010101, @multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x23, 0x2c, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @local, @loopback, @remote, @private=0xa010101, @local]}, @noop, @ssrr={0x89, 0x7, 0xeb, [@broadcast]}, @lsrr={0x83, 0x17, 0x8d, [@dev={0xac, 0x14, 0x14, 0x1d}, @empty, @remote, @local, @broadcast]}, @end, @timestamp_addr={0x44, 0xc, 0x34, 0x1, 0x0, [{@local}]}, @ra={0x94, 0x4}]}}}}})
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000240)={0x16a9, 0x4, 0x7, 0x9, 0x3, "0af488bdb29142aeea9d6e8ca20b200047e073"})
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0)
ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000002c0)=0x4b8)
getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000300)=""/8, &(0x7f0000000340)=0x8)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x82, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0xfffffffffffffffe, 0x1f})
r5 = syz_open_pts(r1, 0x50d300)
ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000000400))
ioctl$TCXONC(r5, 0x540a, 0x3)
ioctl$TCFLSH(r4, 0x540b, 0x0)
getpeername$inet(r2, &(0x7f0000000440)={0x2, 0x0, @dev}, &(0x7f0000000480)=0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f00000004c0)={'tunl0\x00', r3, 0x40, 0xf848, 0xffff, 0x998, {{0x8, 0x4, 0x2, 0xf, 0x20, 0x65, 0x0, 0x4, 0x2b, 0x0, @loopback, @multicast1, {[@end, @end, @lsrr={0x83, 0x7, 0xba, [@remote]}]}}}}})

05:12:39 executing program 3:
r0 = io_uring_setup(0x7748, &(0x7f0000000000)={0x0, 0x8f39, 0x8, 0x0, 0x108})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{<r1=>0x0, 0x2, 0x40, 0x81, 0x9, 0x7, 0x7ff, 0xdd, 0x38a82f9d, 0x6, 0x6, 0x800, 0x0, 0x9, 0x1}})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001080)={{<r2=>r1, 0x7, 0x6, 0x1, 0x14250000, 0xffff, 0x5, 0x2, 0x3f, 0x3, 0x0, 0x3, 0x4, 0x100000001, 0x2}, 0x10, [0x0, 0x0]})
io_uring_setup(0x74ff, &(0x7f0000001100)={0x0, 0xa750, 0x2, 0x2, 0x2d8, 0x0, r0})
r3 = syz_open_dev$hiddev(&(0x7f0000001180), 0x0, 0x18400)
ioctl$HIDIOCINITREPORT(r3, 0x4805, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000011c0)={0x7f, 0xfffffffa, 0x400, 0x50})
r4 = socket$inet(0x2, 0x4, 0x80)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000013c0)="83581031a037429a5d114f9f181df66a", 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001640)={'tunl0\x00', &(0x7f0000001540)={'syztnl2\x00', <r5=>0x0, 0x1, 0x8, 0x7, 0x40, {{0x34, 0x4, 0x1, 0x13, 0xd0, 0x66, 0xce4, 0xd2, 0x4, 0x0, @empty, @local, {[@cipso={0x86, 0x19, 0x2, [{0x6, 0x2}, {0x0, 0x4, "84c9"}, {0x2, 0xd, "46053b9f98a07c0f0fc56f"}]}, @rr={0x7, 0xb, 0xcf, [@dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x3e}]}, @timestamp_prespec={0x44, 0x1c, 0x8c, 0x3, 0x8, [{@broadcast, 0x3}, {@multicast2, 0xad}, {@rand_addr=0x64010102, 0x1f}]}, @ssrr={0x89, 0x7, 0x65, [@loopback]}, @ssrr={0x89, 0x27, 0xe, [@multicast2, @remote, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010100, @multicast1, @loopback]}, @cipso={0x86, 0x34, 0x2, [{0x0, 0xb, "a0fe194733096d9159"}, {0x0, 0x10, "419c9eb15b7c0c30d7132af769a1"}, {0x7, 0x6, "6271d0ed"}, {0x5, 0x6, "72850612"}, {0x6, 0x5, "d276f8"}, {0x7, 0x2}]}, @timestamp={0x44, 0x18, 0x28, 0x0, 0x8, [0x80000001, 0xc7a, 0x401, 0xffff, 0x71]}]}}}}})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001800)={&(0x7f0000001680)={0x158, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8, 0x6, r5}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40048d4}, 0x80004)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000001880)={0x6, [{r1}, {r2}, {r1}, {r1}, {r2}, {r1}, {r2}, {r2}, {r2}, {r2}, {r1}, {r2}, {r2}, {}, {}, {r2}, {r1}, {r2}, {r2}, {r2}, {r2}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r2}, {r1}, {r1}, {}, {r1}, {r2}, {r1}, {}, {r2}, {r2}, {r2}, {r2}, {r2}, {r2}, {r2}, {r1}, {}, {r2}, {r2}, {r2}, {r1}, {r2}, {r1}, {r2}, {r1}, {r2}, {r2}, {r1}, {r2}, {r1}, {r2}, {r2}, {r2}, {}, {r1}, {r2}, {r1}, {r2}, {}, {r1}, {}, {r2}, {r1}, {}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r2}, {r2}, {r1}, {r1}, {r1}, {}, {r2}, {r2}, {}, {r2}, {r1}, {r2}, {r2}, {}, {r1}, {r2}, {r1}, {}, {r1}, {r1}, {r2}, {r2}, {r2}, {r2}, {r2}, {r2}, {r1}, {r1}, {r2}, {r1}, {r2}, {r1}, {}, {r1}, {r1}, {}, {r1}, {r2}, {r2}, {r1}, {r2}, {r1}, {r2}, {r2}, {r2}, {r1}, {r1}, {r2}, {r1}, {r1}, {r1}, {r2}, {r1}, {}, {r1}, {r1}, {r1}, {}, {}, {r1}, {r2}, {r1}, {}, {r1}, {r1}, {r1}, {r2}, {r1}, {r2}, {r1}, {r2}, {r2}, {r2}, {r1}, {r1}, {}, {r2}, {r1}, {}, {r2}, {r1}, {r1}, {r2}, {r1}, {r1}, {r1}, {r1}, {r1}, {r2}, {r1}, {r1}, {r2}, {r2}, {r2}, {r1}, {r2}, {r2}, {}, {r2}, {r1}, {r2}, {r1}, {r1}, {r2}, {r1}, {r2}, {r2}, {r2}, {r1}, {r1}, {r2}, {r1}, {r2}, {r1}, {r1}, {}, {r1}, {r2}, {r2}, {r1}, {r1}, {r2}, {r1}, {r1}, {r1}, {r2}, {r2}, {}, {r1}, {r2}, {r1}, {r2}, {r2}, {r2}, {r1}, {r2}, {r2}, {}, {}, {r1}, {r1}, {r2}, {r1}, {r1}, {}, {r2}, {r1}, {}, {r1}, {r2}, {r1}, {r1}, {r2}, {r2}, {r1}, {r2}, {r2}, {r1}, {}, {r2}, {}, {r1}, {r1}, {r2}, {r1}, {r2}, {<r6=>r2}, {r2}, {r2}, {r2}, {r2}, {r1}, {r2}, {r1}, {r1}, {}, {r2}, {r1}], 0x3, "85423e033cc927"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000002880)={{r6, 0x9, 0x8, 0x76b, 0x5, 0x0, 0x100, 0x6, 0x2, 0x9, 0xd177, 0x5, 0x75a0, 0x51e, 0x8c4e}})
ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000003880)=0x3ff)
r7 = io_uring_setup(0x4e4c, &(0x7f00000038c0)={0x0, 0x5669, 0x10, 0x3, 0x48, 0x0, r0})
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000009, 0x2010, r7, 0x10000000)
r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003940), 0x119000, 0x0)
write$vga_arbiter(r8, &(0x7f0000003980)=@unlock_all, 0xb)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000039c0), 0x4)
ioctl$HIDIOCINITREPORT(r3, 0x4805, 0x0)

05:12:39 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSIG(r0, 0x40045436, 0xc)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xdb, 0x3ff, 0xf05, 0xff, 0xf}})
ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x3ff, 0x7, 0x2, 0x7, 0x4e4})
ioctl$TIOCNOTTY(r0, 0x5422)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)=0x4)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1ec, r2, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2ea7ea8a6fca5b14ef60fe819ab623ed"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="92aa6371f0a33d080cba408f4d32b57524f5d941a6949e8ff910379f904d711d"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b58434a527d26c5f33af759b9393b55f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="96d4310d0cac7a51eb46fccf1fbb47b63160bc7f711a8cd792562ab4dc4ef826"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "106a70b296aca6c9"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="812f90f8d227d179e2df900906cad408"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b43b22dd6e1a7552a1e6cbf9d1ef52090bdb02ce8a9fdb4070a4f869ed577ea0"}]}, @NL80211_ATTR_REKEY_DATA={0xb0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f50a4c9c48f1073b9085ec82e71d102e9ef12b76104c56da06e65895c98c2116"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8db5539658ee2ba6ebd8e93c3058e188"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "21519c6339445f46"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8bdaf2182adef5bd"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3907e8ab97d3c255f791b39aa0a44f65fc197c8d2a549697"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1a2879ffdf4f6a9809549b58a9e34aa176d2574a0b861ba12f448e2169641e66"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="48350ef92a27aa63f28aace573dc131a"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c55f4728cf360855ac7ab5e9f7b20912"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x43e6}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="40ba04e645d8417d8b698b01cc745c0da38c48b5cd8bd9f2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c11ecdf64fdba1a5"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20048804}, 0x40)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x240, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r2, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x75, 0x7b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000500)={0x1ff, '\x00Hy'}, 0x6)
ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000540)={0x3, 0x0, 0x7})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000580)=""/63)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x40100, 0x0)
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000600)=""/108)

05:12:39 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x3)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', <r1=>0x0, 0x10, 0x7, 0x9, 0x1ff, {{0x16, 0x4, 0x2, 0x6, 0x58, 0x67, 0x0, 0xc6, 0x2f, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0x2c, 0x88, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@remote, 0x4}, {@broadcast, 0x8c8}, {@multicast2}, {@loopback, 0x8}]}, @end, @noop, @end, @noop, @ssrr={0x89, 0x13, 0x50, [@local, @multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x35}]}]}}}}})
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, r1}, 0xc)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x4e22, @multicast2}, {0x1, @remote}, 0x0, {0x2, 0x4e22, @rand_addr=0x64010102}, 'team_slave_0\x00'})
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000180)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000200)={0x7, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}}, {{0x2, 0x4e24, @broadcast}}}, 0x108)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x2f, 0x5, 0xa3, 0x0, 0x54, @private2, @local, 0x7800, 0xb70a342ea135ab81, 0x8001, 0x2}})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0xc)
r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0xe, 0x80000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r4=>0x0})
accept4$bt_l2cap(r3, 0x0, &(0x7f0000000540), 0x80000)
ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/129})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000006c0)={0x6, 0xfffffd6a, 0xffffff2e, 0x7, 0x9, "5b5d0b583bf94c3f9e17ff2d9634091804f6d7"})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x80c0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000002)
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001080), 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x561f, 0x21}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="211647ac0728"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000)

05:12:39 executing program 7:
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TCSBRKP(r0, 0x5425, 0x1)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x40, 0x7, 0x8})
ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000040))
ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TCSBRKP(r1, 0x5425, 0x1ff)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40800, 0x0)
ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000100)={0x2dd, 0x2, 0xce9a})
syz_open_dev$hiddev(&(0x7f0000000140), 0x3, 0x400)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000180))
r3 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TCSETSF(r3, 0x5404, &(0x7f00000001c0)={0xbb7, 0x154, 0x0, 0x100, 0x6, "8b57ce2b9015c15cd0ad2e2dde36ba515c098b"})
ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000200)={0xffff0001, 0x4, 0x10000, 0xfffff890, 0xfff})
ioctl$TIOCCONS(r3, 0x541d)
ioctl$TIOCCONS(r0, 0x541d)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'syztnl1\x00', <r4=>0x0, 0x8000, 0x700, 0xfff, 0x80000001, {{0xa, 0x4, 0x3, 0x6, 0x28, 0x64, 0x0, 0x8, 0x2b, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp={0x44, 0x14, 0x49, 0x0, 0x7, [0x401, 0x9, 0x9, 0x6]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000b40)={'ip_vti0\x00', &(0x7f0000000ac0)={'tunl0\x00', r4, 0x7, 0x700, 0x1ff, 0x8, {{0xc, 0x4, 0x0, 0x7, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @empty, @local, {[@timestamp={0x44, 0x1c, 0x92, 0x0, 0x0, [0x7fffffff, 0x2c6, 0x9, 0x6, 0x200, 0xffffff17]}]}}}}})

05:12:39 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x2f, @empty, 0x86, 0x2, 'lblc\x00', 0x4, 0x8, 0x34}, 0x2c)
r1 = syz_io_uring_complete(0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', <r2=>0x0, 0x8, 0x20, 0x4, 0x1, {{0x25, 0x4, 0x0, 0x3b, 0x94, 0x67, 0x0, 0xfb, 0x4, 0x0, @private=0xa010102, @broadcast, {[@timestamp_addr={0x44, 0x54, 0x9f, 0x1, 0xd, [{@multicast1, 0xc9}, {@private=0xa010102, 0x5}, {@local, 0x3f}, {@local, 0x4}, {@multicast2, 0xfffffc01}, {@remote, 0x9}, {@rand_addr=0x64010101, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @timestamp_addr={0x44, 0x2c, 0x9b, 0x1, 0x2, [{@multicast1, 0x19b}, {@rand_addr=0x64010100, 0x1}, {@private=0xa010101, 0x6}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x3f}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x4}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'erspan0\x00', <r3=>r2, 0x8, 0x10, 0x5, 0x3, {{0x14, 0x4, 0x1, 0x4, 0x50, 0x64, 0x0, 0x8, 0x29, 0x0, @multicast2, @empty, {[@end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0x70, 0x1, 0x9, [{@multicast2}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x23}, 0xfffffffa}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}]}}}}})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000200)={0x2, {0x2, 0x2ea0, 0x7, 0x8001, 0x8, 0x2}})
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x200900, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x54}, @void, @val={0xc, 0x99, {0x4, 0x1b}}}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x0)
ioctl$TCFLSH(r5, 0x540b, 0x2)
bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10)
sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x3, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x1)
r7 = accept4$inet(r1, &(0x7f0000000540), &(0x7f0000000580)=0x10, 0x80000)
setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f00000005c0)={{0x2f, @multicast2, 0x4e23, 0x4, 'none\x00', 0x20, 0x2, 0x78}, {@remote, 0x4e23, 0x0, 0x8, 0x7fff, 0x20c59883}}, 0x44)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000000640)={'erspan0\x00', r3, 0x40, 0x20, 0xffffffff, 0x8, {{0x10, 0x4, 0x3, 0x4, 0x40, 0x67, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@rr={0x7, 0x2b, 0x23, [@local, @dev={0xac, 0x14, 0x14, 0x15}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x39}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}}}})
r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000700), 0x8903, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000740)={<r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000000940)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r10=>0x0}], 0x20, "b2923d6716c96b"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000072e40)={0x7, [{r9}, {r10}], 0xfc, "822b3145ceb465"})

[  108.354203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  108.358478] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  108.360674] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  108.367312] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  108.369234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  108.373562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  108.376512] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  108.378527] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  108.380939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  108.384126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  108.388769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  108.399239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  108.404882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  108.424650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  108.439918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  108.458127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  108.463934] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  108.469001] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  108.605938] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  108.608580] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  108.611872] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  108.616759] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  108.619382] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  108.621400] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  110.433350] Bluetooth: hci1: command 0x0409 tx timeout
[  110.497485] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  110.498492] Bluetooth: hci2: command 0x0409 tx timeout
[  110.499176] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  110.560522] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  110.560630] Bluetooth: hci0: command 0x0409 tx timeout
[  110.624982] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  110.688508] Bluetooth: hci7: command 0x0409 tx timeout
[  112.480450] Bluetooth: hci1: command 0x041b tx timeout
[  112.544512] Bluetooth: hci2: command 0x041b tx timeout
[  112.608463] Bluetooth: hci0: command 0x041b tx timeout
[  112.736453] Bluetooth: hci7: command 0x041b tx timeout
[  113.713914] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  113.717644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  113.719129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  113.722207] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  113.725823] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  113.726693] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  113.890185] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  113.898859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  113.928140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  113.985120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  113.988931] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  113.996918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  114.528584] Bluetooth: hci1: command 0x040f tx timeout
[  114.593325] Bluetooth: hci2: command 0x040f tx timeout
[  114.656462] Bluetooth: hci0: command 0x040f tx timeout
[  114.785052] Bluetooth: hci7: command 0x040f tx timeout
[  115.744530] Bluetooth: hci3: command 0x0409 tx timeout
[  115.936469] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  115.937810] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  116.128652] Bluetooth: hci4: command 0x0409 tx timeout
[  116.576451] Bluetooth: hci1: command 0x0419 tx timeout
[  116.640799] Bluetooth: hci2: command 0x0419 tx timeout
[  116.704725] Bluetooth: hci0: command 0x0419 tx timeout
[  116.832463] Bluetooth: hci7: command 0x0419 tx timeout
[  117.792929] Bluetooth: hci3: command 0x041b tx timeout
[  118.176638] Bluetooth: hci4: command 0x041b tx timeout
[  119.164268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  119.167741] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  119.173290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  119.190082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  119.191890] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  119.194756] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  119.840696] Bluetooth: hci3: command 0x040f tx timeout
[  120.224467] Bluetooth: hci4: command 0x040f tx timeout
[  121.312976] Bluetooth: hci5: command 0x0409 tx timeout
[  121.506426] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  121.889523] Bluetooth: hci3: command 0x0419 tx timeout
[  122.272763] Bluetooth: hci4: command 0x0419 tx timeout
[  123.362835] Bluetooth: hci5: command 0x041b tx timeout
[  124.432938] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  124.450427] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  124.458460] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  124.505318] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  124.517896] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  124.531106] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  125.408488] Bluetooth: hci5: command 0x040f tx timeout
[  126.624533] Bluetooth: hci6: command 0x0409 tx timeout
[  127.456486] Bluetooth: hci5: command 0x0419 tx timeout
[  128.672459] Bluetooth: hci6: command 0x041b tx timeout
[  130.720454] Bluetooth: hci6: command 0x040f tx timeout
[  132.768758] Bluetooth: hci6: command 0x0419 tx timeout
[  170.864883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  170.878873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  170.889490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  170.901275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  170.905010] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  170.906734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  171.202310] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  171.204979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  171.209683] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  171.231396] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  171.233710] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  171.235234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  171.412299] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  171.419124] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  171.429118] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  171.446038] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  171.465357] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  171.501335] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  172.576532] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  172.961303] Bluetooth: hci1: command 0x0409 tx timeout
[  173.345833] Bluetooth: hci2: command 0x0409 tx timeout
[  173.537630] Bluetooth: hci7: command 0x0409 tx timeout
[  175.010425] Bluetooth: hci1: command 0x041b tx timeout
[  175.392587] Bluetooth: hci2: command 0x041b tx timeout
[  175.584745] Bluetooth: hci7: command 0x041b tx timeout
[  175.799948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  175.802748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  175.804791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  175.820121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  175.828364] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  175.839316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  177.056868] Bluetooth: hci1: command 0x040f tx timeout
[  177.440567] Bluetooth: hci2: command 0x040f tx timeout
[  177.632740] Bluetooth: hci7: command 0x040f tx timeout
[  177.888467] Bluetooth: hci0: command 0x0409 tx timeout
[  178.208539] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  178.209681] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  179.105466] Bluetooth: hci1: command 0x0419 tx timeout
[  179.488488] Bluetooth: hci2: command 0x0419 tx timeout
[  179.682441] Bluetooth: hci7: command 0x0419 tx timeout
[  179.936856] Bluetooth: hci0: command 0x041b tx timeout
[  180.416787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  180.428086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  180.431140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  180.440297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  180.450155] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  180.451141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  181.297368] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  181.305718] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  181.346393] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  181.375764] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  181.412186] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  181.413235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  181.985945] Bluetooth: hci0: command 0x040f tx timeout
[  182.560775] Bluetooth: hci3: command 0x0409 tx timeout
[  183.201463] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  183.521383] Bluetooth: hci5: command 0x0409 tx timeout
[  184.032528] Bluetooth: hci0: command 0x0419 tx timeout
[  184.608743] Bluetooth: hci3: command 0x041b tx timeout
[  185.568758] Bluetooth: hci5: command 0x041b tx timeout
[  186.516835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  186.519204] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  186.522801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  186.543955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  186.585802] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  186.594325] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  186.656470] Bluetooth: hci3: command 0x040f tx timeout
[  187.617441] Bluetooth: hci5: command 0x040f tx timeout
[  188.512520] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  188.705475] Bluetooth: hci3: command 0x0419 tx timeout
[  188.705519] Bluetooth: hci4: command 0x0409 tx timeout
[  189.665658] Bluetooth: hci5: command 0x0419 tx timeout
[  190.753453] Bluetooth: hci4: command 0x041b tx timeout
[  192.804014] Bluetooth: hci4: command 0x040f tx timeout
[  193.633468] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  194.850449] Bluetooth: hci4: command 0x0419 tx timeout
[  198.560704] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  201.375925] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  201.391300] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  201.401548] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  201.435020] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  201.444664] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  201.447544] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  203.489521] Bluetooth: hci6: command 0x0409 tx timeout
[  205.537742] Bluetooth: hci6: command 0x041b tx timeout
[  207.585917] Bluetooth: hci6: command 0x040f tx timeout
[  209.632931] Bluetooth: hci6: command 0x0419 tx timeout
[  232.962795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  232.964812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  232.966123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  232.970991] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  232.974653] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  232.975683] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  234.529607] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  235.040904] Bluetooth: hci2: command 0x0409 tx timeout
[  235.169463] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  237.088609] Bluetooth: hci2: command 0x041b tx timeout
[  237.375284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  237.378657] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.379817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.386161] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.408717] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  237.409980] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  237.760924] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  237.762116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  237.779721] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  237.794922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  237.820954] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  237.823715] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  239.136476] Bluetooth: hci2: command 0x040f tx timeout
[  239.520838] Bluetooth: hci0: command 0x0409 tx timeout
[  239.904659] Bluetooth: hci1: command 0x0409 tx timeout
[  239.968608] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  241.185502] Bluetooth: hci2: command 0x0419 tx timeout
[  241.569673] Bluetooth: hci0: command 0x041b tx timeout
[  241.869695] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  241.874217] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  241.875259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  241.890106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  241.903210] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  241.904301] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  241.953577] Bluetooth: hci1: command 0x041b tx timeout
[  242.755574] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  242.764376] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  242.772941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  242.783002] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  242.797711] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  242.804792] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  242.816496] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  242.904537] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  242.943700] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  242.950204] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  242.953990] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  242.956322] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  243.616488] Bluetooth: hci0: command 0x040f tx timeout
[  243.938481] Bluetooth: hci3: command 0x0409 tx timeout
[  244.001486] Bluetooth: hci1: command 0x040f tx timeout
[  244.897547] Bluetooth: hci5: command 0x0409 tx timeout
[  245.024560] Bluetooth: hci7: command 0x0409 tx timeout
[  245.666266] Bluetooth: hci0: command 0x0419 tx timeout
[  245.984553] Bluetooth: hci3: command 0x041b tx timeout
[  246.048476] Bluetooth: hci1: command 0x0419 tx timeout
[  246.944726] Bluetooth: hci5: command 0x041b tx timeout
[  247.073342] Bluetooth: hci7: command 0x041b tx timeout
[  248.033462] Bluetooth: hci3: command 0x040f tx timeout
[  248.992772] Bluetooth: hci5: command 0x040f tx timeout
[  249.120484] Bluetooth: hci7: command 0x040f tx timeout
[  250.081446] Bluetooth: hci3: command 0x0419 tx timeout
[  250.209457] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  251.042877] Bluetooth: hci5: command 0x0419 tx timeout
[  251.169454] Bluetooth: hci7: command 0x0419 tx timeout
[  253.002609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  253.004160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  253.012700] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  253.029263] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  253.031772] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  253.032907] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  255.072480] Bluetooth: hci4: command 0x0409 tx timeout
[  257.120637] Bluetooth: hci4: command 0x041b tx timeout
[  259.168765] Bluetooth: hci4: command 0x040f tx timeout
[  261.217451] Bluetooth: hci4: command 0x0419 tx timeout
[  263.329235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  263.345810] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  263.354538] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  263.379833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  263.383897] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  263.396008] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  265.440508] Bluetooth: hci6: command 0x0409 tx timeout
[  267.489650] Bluetooth: hci6: command 0x041b tx timeout
[  269.536467] Bluetooth: hci6: command 0x040f tx timeout
[  271.584458] Bluetooth: hci6: command 0x0419 tx timeout
[  294.734580] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  294.737929] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  294.743634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  294.760704] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  294.769285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  294.775670] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  296.928510] Bluetooth: hci2: command 0x0409 tx timeout
[  298.976692] Bluetooth: hci2: command 0x041b tx timeout
[  299.022087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  299.033715] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  299.039697] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  299.059186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  299.068022] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  299.068984] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  299.428686] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  299.448331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  299.477556] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  299.510960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  299.516942] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  299.533578] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  301.026280] Bluetooth: hci2: command 0x040f tx timeout
[  301.153513] Bluetooth: hci0: command 0x0409 tx timeout
[  301.600632] Bluetooth: hci1: command 0x0409 tx timeout
[  302.008596] syz-executor.7 (6515) used greatest stack depth: 23896 bytes left
[  303.073469] Bluetooth: hci2: command 0x0419 tx timeout
[  303.200505] Bluetooth: hci0: command 0x041b tx timeout
[  303.648838] Bluetooth: hci1: command 0x041b tx timeout
[  303.738093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  303.762790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  303.789576] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  303.801557] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  303.809217] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  303.810153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  305.248515] Bluetooth: hci0: command 0x040f tx timeout
[  305.696672] Bluetooth: hci1: command 0x040f tx timeout
[  305.888500] Bluetooth: hci3: command 0x0409 tx timeout
[  306.656616] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  306.720496] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  307.296690] Bluetooth: hci0: command 0x0419 tx timeout
[  307.746435] Bluetooth: hci1: command 0x0419 tx timeout
[  307.936470] Bluetooth: hci3: command 0x041b tx timeout
[  309.855070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  309.858371] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  309.862888] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  309.886444] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  309.929189] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  309.941769] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.984644] Bluetooth: hci3: command 0x040f tx timeout
[  310.079024] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  310.126795] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  310.134776] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  310.173808] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  310.188880] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  310.203852] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  312.032646] Bluetooth: hci3: command 0x0419 tx timeout
[  312.034092] Bluetooth: hci5: command 0x0409 tx timeout
[  312.352500] Bluetooth: hci7: command 0x0409 tx timeout
[  314.080444] Bluetooth: hci5: command 0x041b tx timeout
[  314.400450] Bluetooth: hci7: command 0x041b tx timeout
[  316.128460] Bluetooth: hci5: command 0x040f tx timeout
[  316.448475] Bluetooth: hci7: command 0x040f tx timeout
[  316.576489] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  318.176467] Bluetooth: hci5: command 0x0419 tx timeout
[  318.497462] Bluetooth: hci7: command 0x0419 tx timeout
[  319.305674] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  319.319564] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  319.333127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  319.427682] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  319.430198] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  319.438741] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  321.504486] Bluetooth: hci4: command 0x0409 tx timeout
[  323.552464] Bluetooth: hci4: command 0x041b tx timeout
[  324.941066] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  324.979775] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  325.000046] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  325.070766] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  325.074983] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  325.103838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  325.600489] Bluetooth: hci4: command 0x040f tx timeout
[  327.136828] Bluetooth: hci6: command 0x0409 tx timeout
[  327.648798] Bluetooth: hci4: command 0x0419 tx timeout
[  329.184574] Bluetooth: hci6: command 0x041b tx timeout
[  331.234433] Bluetooth: hci6: command 0x040f tx timeout
[  333.280626] Bluetooth: hci6: command 0x0419 tx timeout
[  356.537858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  356.541741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  356.547552] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  356.555710] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  356.586044] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  356.593091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  358.690482] Bluetooth: hci2: command 0x0409 tx timeout
[  360.736450] Bluetooth: hci2: command 0x041b tx timeout
[  360.894332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  360.896838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  360.907844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  360.945535] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  360.952871] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  360.957545] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  361.230834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  361.237852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  361.240553] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  361.249337] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  361.250708] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  361.251524] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  362.784657] Bluetooth: hci2: command 0x040f tx timeout
[  363.040502] Bluetooth: hci0: command 0x0409 tx timeout
[  363.361332] Bluetooth: hci1: command 0x0409 tx timeout
[  364.832465] Bluetooth: hci2: command 0x0419 tx timeout
[  365.088508] Bluetooth: hci0: command 0x041b tx timeout
[  365.409502] Bluetooth: hci1: command 0x041b tx timeout
[  365.583928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  365.599700] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  365.602769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  365.647655] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  365.677674] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  365.708605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  367.136488] Bluetooth: hci0: command 0x040f tx timeout
[  367.456464] Bluetooth: hci1: command 0x040f tx timeout
[  367.777358] Bluetooth: hci3: command 0x0409 tx timeout
[  369.186461] Bluetooth: hci0: command 0x0419 tx timeout
[  369.505672] Bluetooth: hci1: command 0x0419 tx timeout
[  369.824479] Bluetooth: hci3: command 0x041b tx timeout
[  371.872820] Bluetooth: hci3: command 0x040f tx timeout
[  371.980579] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  372.002924] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  372.013934] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  372.036559] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  372.045901] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  372.047664] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  373.792528] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  373.924943] Bluetooth: hci3: command 0x0419 tx timeout
[  374.112496] Bluetooth: hci7: command 0x0409 tx timeout
[  376.160771] Bluetooth: hci7: command 0x041b tx timeout
[  376.589936] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  376.598793] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  376.600708] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  376.614803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  376.622545] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  376.627543] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  378.208448] Bluetooth: hci7: command 0x040f tx timeout
[  378.785774] Bluetooth: hci5: command 0x0409 tx timeout
[  380.257473] Bluetooth: hci7: command 0x0419 tx timeout
[  380.834819] Bluetooth: hci5: command 0x041b tx timeout
[  382.880494] Bluetooth: hci5: command 0x040f tx timeout
[  382.880701] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  384.929644] Bluetooth: hci5: command 0x0419 tx timeout
[  385.665758] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  385.694241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  385.704652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  385.714107] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  385.740689] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  385.746939] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  386.497923] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  386.505847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  386.506999] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  386.517979] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  386.519368] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  386.522646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  387.809482] Bluetooth: hci4: command 0x0409 tx timeout
[  388.577700] Bluetooth: hci6: command 0x0409 tx timeout
[  389.856461] Bluetooth: hci4: command 0x041b tx timeout
[  390.625667] Bluetooth: hci6: command 0x041b tx timeout
[  391.904695] Bluetooth: hci4: command 0x040f tx timeout
[  392.673464] Bluetooth: hci6: command 0x040f tx timeout
[  393.953704] Bluetooth: hci4: command 0x0419 tx timeout
[  394.720470] Bluetooth: hci6: command 0x0419 tx timeout

VM DIAGNOSIS:
05:17:43  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88802abb7398 RCX=0000000000000000 RDX=ffff88801686d1c0
RSI=ffffffff8113d374 RDI=ffff88802abb73a8 RBP=ffff88802abb7f00 RSP=ffff88802abb7310
R8 =0000000000000004 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000
R12=ffff88802abb0000 R13=ffff88802abb8000 R14=ffff88802abb7ef8 R15=0000000000000001
RIP=ffffffff814d90fb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa5634f96f4 CR3=000000002b8f4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fa56350847000007fa563507f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffffffff813c0de0 RCX=0000000000000000 RDX=ffff8880253d0000
RSI=ffffffff810c5f66 RDI=0000000000000005 RBP=ffff888008fcf590 RSP=ffff888008fcf4e8
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=0000000000000001 R13=ffff888008fcf5c0 R14=ffff8880253d0000 R15=ffff888008fcf590
RIP=ffffffff814d90fb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005652510114c8 CR3=0000000022fa2000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000