Warning: Permanently added '[localhost]:57356' (ECDSA) to the list of known hosts. 2025/01/26 07:56:39 fuzzer started 2025/01/26 07:56:39 dialing manager at localhost:40883 syzkaller login: [ 63.025913] cgroup: Unknown subsys name 'net' [ 63.112056] cgroup: Unknown subsys name 'cpuset' [ 63.139221] cgroup: Unknown subsys name 'rlimit' [ 69.793058] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/26 07:56:57 syscalls: 215 2025/01/26 07:56:57 code coverage: enabled 2025/01/26 07:56:57 comparison tracing: enabled 2025/01/26 07:56:57 extra coverage: enabled 2025/01/26 07:56:57 setuid sandbox: enabled 2025/01/26 07:56:57 namespace sandbox: enabled 2025/01/26 07:56:57 Android sandbox: enabled 2025/01/26 07:56:57 fault injection: enabled 2025/01/26 07:56:57 leak checking: enabled 2025/01/26 07:56:57 net packet injection: enabled 2025/01/26 07:56:57 net device setup: enabled 2025/01/26 07:56:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/26 07:56:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/26 07:56:57 USB emulation: enabled 2025/01/26 07:56:57 hci packet injection: enabled 2025/01/26 07:56:57 wifi device emulation: enabled 2025/01/26 07:56:57 802.15.4 emulation: enabled 2025/01/26 07:56:57 fetching corpus: 0, signal 0/0 (executing program) 2025/01/26 07:56:59 starting 8 fuzzer processes 07:56:59 executing program 0: getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000019c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000001ac0), r0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r1, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4801}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001c00)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) write$selinux_attr(r2, &(0x7f0000001c40)='system_u:object_r:inetd_child_exec_t:s0\x00', 0x28) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001c80), &(0x7f0000001cc0)=0x4) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000001d00)) getresgid(&(0x7f0000001d40), &(0x7f0000001d80), &(0x7f0000001dc0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r0, {0x663}}, './file0\x00'}) ioctl$RTC_UIE_OFF(r3, 0x7004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000004440)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004400)={&(0x7f00000043c0)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10800}, 0x800) r5 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000004480)=0x5, 0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000004580)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004540)={&(0x7f0000004500)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xbb0c184}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x22004840) 07:56:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x48041) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r3, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x16}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x13}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000081) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xf8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000804) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8001001}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x21c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0xf0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9d1cebee570230696e3ad53d787b787bc79fe168fce44523a551ce5df513ee97"}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc0}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "70671dc75ac98bdaae51605bb1af80fd"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0e6322b27343fc9a1515715afe8e5bd1a1ecc034bd4e3c313f59ab39f19f9a11"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5be036d90cde6e5f250098548a984f036141ba44e48bc1a20a1711b3e352f458"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e5e415ca54ac19b341d777e3251a7539"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0xf4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "030288476056453c469766903ea49690973a9df33c20bac9f451b6a1c7b85ae5"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3febbbca4fdfa7e0eedfae0a06ad45e93110787cc925f37196ddc20e338f12a0"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8ce7ea33120002e887d6e72615405377320bdb42d54af454c96e8afae702fb90"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b95aacd0faf3281633cb04086e91979b90ed245d875d5e8a08ad29cf43083323"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e2d599aa6db2992daccad05655c1a42d"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "cc15bd03a314585b40d9530548f4a43a"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40051}, 0x800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r7, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r9, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r3, 0x634, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040002}, 0x80) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x70, r7, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r7, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x40080) 07:56:59 executing program 2: sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x44080) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x81}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x68}}, 0x40004) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', r0, 0x700, 0x8, 0x2, 0x80000000, {{0x40, 0x4, 0x2, 0x26, 0x100, 0x65, 0x0, 0x85, 0x0, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x3c, 0x2d, 0x3, 0x9, [{@multicast1, 0x5}, {@private=0xa010101, 0x401}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x20}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x7}, {@local, 0x400}, {@multicast2, 0x1}]}, @timestamp_addr={0x44, 0x4, 0xfd, 0x1, 0xb}, @generic={0x82, 0x8, "8bf10a8790e4"}, @ssrr={0x89, 0x17, 0xc0, [@broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp={0x44, 0x2c, 0xb3, 0x0, 0x4, [0x1e, 0x11d0, 0x0, 0x2, 0x4, 0x3ff, 0x8, 0x9, 0x2, 0x6]}, @ssrr={0x89, 0x23, 0xcb, [@rand_addr=0x64010102, @remote, @broadcast, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback, @broadcast, @loopback]}, @lsrr={0x83, 0x23, 0xcd, [@remote, @broadcast, @empty, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x17}, @rand_addr=0x64010101, @broadcast]}, @generic={0x86, 0xd, "1a112cff7464cd470c5d41"}, @generic={0x82, 0xd, "6128605265f353b5123802"}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x855}, 0x8080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc93}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) socketpair(0x2a, 0x3, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000ac0)={'ip_vti0\x00', &(0x7f00000009c0)={'erspan0\x00', r0, 0x1, 0x80, 0x9e, 0x10000, {{0x2d, 0x4, 0x1, 0x16, 0xb4, 0x68, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp={0x44, 0x4, 0x87, 0x0, 0x5}, @noop, @timestamp={0x44, 0x1c, 0x8b, 0x0, 0x0, [0x3, 0x100, 0xffffffff, 0x6a115073, 0xffffffe1, 0x7]}, @end, @lsrr={0x83, 0x2b, 0xc7, [@dev={0xac, 0x14, 0x14, 0x14}, @multicast2, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local]}, @noop, @timestamp_prespec={0x44, 0x24, 0x9b, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x3d}}, {@multicast1, 0xfffffff9}, {@loopback, 0x7}, {@private=0xa010102, 0xfffffff9}]}, @timestamp_prespec={0x44, 0x2c, 0xf7, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4707}, {@local, 0x7f}, {@private=0xa010101, 0xfffffff7}, {@loopback, 0x200}, {@dev={0xac, 0x14, 0x14, 0x27}}]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r5, {r1, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048c11}, 0x10) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f0000000c40)) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000cc0), r5) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x7c, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0xe4, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r4) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x54, r9, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000881}, 0x4080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)={0x180, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0xb4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8c2f9fdf9fb6178c6a88b9ddf8a8d09f38aee13705addeb22126315043612408"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c6603d0811413fd2df3b8a77040585a9"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e97d89829de9a096e4ad6f5ca26c186ff7af01ac8318d4a354f3806144468704"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "49358a204f27d5e6385850204e3e4e22"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7f}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "05abadd1b798ff3e2ecde6757fa12c72"}]}, @NL802154_ATTR_SEC_KEY={0x9c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "426a517e0bdfecc41495ef9630326bb439a983f2f10dba2071e1894ecc939b32"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c2b12dfb2db5ebd8e646913b7ed62e46218782280378cfcce7d936bdff7c09f8"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x180}, 0x1, 0x0, 0x0, 0x4081}, 0x20000080) 07:56:59 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000000)) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'gre0\x00', r1, 0x700, 0x80, 0x7, 0x5, {{0x15, 0x4, 0x0, 0x8, 0x54, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0xf, 0x4c, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x13}]}, @lsrr={0x83, 0x1b, 0x7b, [@local, @rand_addr=0x64010100, @multicast1, @loopback, @rand_addr=0x64010101, @local]}, @lsrr={0x83, 0x13, 0x90, [@dev={0xac, 0x14, 0x14, 0xe}, @multicast2, @multicast1, @empty]}, @end, @end]}}}}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x118, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20088000}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004011}, 0x20000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44890}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000980)={'erspan0\x00', &(0x7f0000000900)={'gretap0\x00', r2, 0x1, 0x1, 0x8, 0x7, {{0x14, 0x4, 0x3, 0x1f, 0x50, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@cipso={0x86, 0x23, 0x2, [{0x0, 0xb, "e829ecf105717b96d6"}, {0x1, 0x12, "013a2176403a7fac27fe5b583f4f8068"}]}, @noop, @rr={0x7, 0x13, 0x8a, [@empty, @remote, @local, @multicast1]}, @noop, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f00000009c0)={'ip_vti0\x00', r9, 0x20, 0x40, 0x1, 0x27, {{0x6, 0x4, 0x2, 0x13, 0x18, 0x65, 0x0, 0x81, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x89, 0x3, 'n'}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) getsockname(r10, &(0x7f0000000a80)=@sco, &(0x7f0000000b00)=0x80) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r11, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c080}, 0x4880) [ 82.934795] audit: type=1400 audit(1737878219.621:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:56:59 executing program 6: ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20ce1ea8}}, './file0\x00'}) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x981) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040)) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x420, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4054}, 0x4044005) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000200)) ioctl$RTC_VL_CLR(r0, 0x7014) socketpair(0x29, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc084}, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000400)={0x94, 0x9, 0x0, "accd79bace4198dc1a892e67618f9a127016fbc1ed63d19a925035c759d89b4928d14992ae49cf35d0abf7f21d3f0c0e456d87552a02451f845d056454ad1627a5ec9cb7246727e6abbb8fe30555b9fd672ae739d6c7c908f3a5d466e9ff5499398ba8c7afd05c74f08536236868a71090862338af98909ba79d2ff7d59f5b396d45c7bd69a6c12654666957f1278fc675e0d61f"}) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f00000004c0)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) 07:56:59 executing program 4: sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004480) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfd66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x4044) getsockname(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000005c0)=0x80) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x211, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000044}, 0x44005) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc2}]}, 0x44}}, 0x0) getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f0000000880)=""/45, &(0x7f00000008c0)=0x2d) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000a40)={'tunl0\x00', &(0x7f0000000980)={'tunl0\x00', 0x0, 0x40, 0x0, 0x200, 0x3, {{0x1e, 0x4, 0x0, 0x1, 0x78, 0x64, 0x0, 0x5, 0x4, 0x0, @local, @private=0xa010101, {[@rr={0x7, 0x1f, 0x3b, [@multicast2, @broadcast, @multicast1, @private=0xa010101, @local, @broadcast, @loopback]}, @lsrr={0x83, 0x13, 0x5e, [@remote, @broadcast, @local, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x2c, 0xa3, 0x0, 0x4, [0x0, 0x7, 0x0, 0x800, 0x9da0, 0x6c, 0xffff, 0x10000, 0x4, 0x3]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000047c0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000004980)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004940)={&(0x7f0000004800)={0x11c, r4, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x200040d0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000004a80)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004a40)={&(0x7f0000004a00)={0x34, r4, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000004b00)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000004b40)={{{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000004c40)=0xe8) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000004dc0)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0xf4fa1ebef0875fe4}, 0xc, &(0x7f0000004d80)={&(0x7f0000004c80)={0xc4, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x841}, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000004e00), &(0x7f0000004e40)=0x4) 07:56:59 executing program 5: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)=0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@private2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'gre0\x00', &(0x7f0000000c80)={'gre0\x00', r0, 0x7800, 0x7800, 0x3c, 0xd3df, {{0x1b, 0x4, 0x1, 0x2, 0x6c, 0x64, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ssrr={0x89, 0x27, 0x13, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0xaa, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0x53, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast1, 0xffffffff}, {@broadcast, 0xb1}]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x0, 0xc, "8337f1504abd36624f4f"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'erspan0\x00', &(0x7f0000000e00)={'tunl0\x00', r0, 0x7800, 0x7800, 0x6, 0x4, {{0x37, 0x4, 0x2, 0x1, 0xdc, 0x67, 0x0, 0x7f, 0x4, 0x0, @rand_addr=0x64010102, @local, {[@timestamp_prespec={0x44, 0x3c, 0xf4, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x1}, {@multicast1, 0x4}, {@local, 0x8000}, {@multicast1, 0x8}, {@multicast2, 0xfffffff9}, {@private=0xa010100, 0x1f}, {@multicast1, 0x7ff}]}, @timestamp_addr={0x44, 0x1c, 0xf8, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast2, 0x1}, {@multicast1, 0x9}]}, @cipso={0x86, 0x3c, 0xffffffffffffffff, [{0xedd77784e5657709, 0x3, '\\'}, {0x5, 0x12, "3bd57e95d7d1c1feb76a1fec7673a4f7"}, {0x1, 0x10, "365b3cd635320c5816f19c00f836"}, {0x1, 0x11, "e5048d7c3281a3fb8e770f9fb72de1"}]}, @rr={0x7, 0xb, 0xfc, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x83, 0xe, "fe759bcfb29102978bf24c9f"}, @cipso={0x86, 0x14, 0x1, [{0x1, 0xe, "b3bcdebab94f0702a041b249"}]}, @ssrr={0x89, 0x7, 0x45, [@loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000001180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x184, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000013c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xf8, r7, 0x800, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000006}, 0x4000000) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000001400)) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20040005) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000001540)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000001580)={{0x1, 0x1, 0x18, r10, {r9}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000001600)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000001640)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r11, &(0x7f00000017c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001780)={&(0x7f0000001680)={0xd0, r7, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40040}, 0x30008000) 07:56:59 executing program 7: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2d, 0x37, 0x0, 0x14, 0x6, 0x0, 0x1, 0x149, 0x1}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22200, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x89}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) socketpair(0x0, 0x1, 0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003e00)={'ip_vti0\x00', &(0x7f0000003d40)={'gre0\x00', 0x0, 0x7, 0x7800, 0x80, 0x0, {{0x1a, 0x4, 0x0, 0x8, 0x68, 0x66, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, {[@end, @timestamp={0x44, 0x24, 0x36, 0x0, 0x4, [0x4, 0x1, 0x80000001, 0x6, 0xf66, 0x9, 0xb777, 0x6]}, @timestamp_addr={0x44, 0x2c, 0xe2, 0x1, 0xa, [{@multicast1, 0x7fffffff}, {@rand_addr=0x64010101, 0x7fffffff}, {@local, 0x100}, {@loopback, 0x7fff}, {@multicast1, 0x3}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003e40)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000004000)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003e80)={0x130, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x804}, 0x8000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000004040), 0x2800, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000004080)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000004180)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004140)={&(0x7f0000004100)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000040}, 0x24000040) getpeername$netlink(r1, &(0x7f00000041c0), &(0x7f0000004200)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000004440)={'syztnl2\x00', &(0x7f00000043c0)={'ip_vti0\x00', r4, 0x8000, 0x7800, 0x10000, 0xffff0000, {{0xa, 0x4, 0x2, 0x32, 0x28, 0x67, 0x0, 0x3, 0x29, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x83, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000004580)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004540)={&(0x7f0000004480)={0xac, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008010) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f00000046c0)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004680)={&(0x7f0000004600)={0x80, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x44080}, 0x24040000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000004740)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f0000004700), r8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000004840)={'gretap0\x00', &(0x7f00000047c0)={'gretap0\x00', r3, 0x7, 0x20, 0x9, 0x4, {{0x10, 0x4, 0x0, 0x2, 0x40, 0x68, 0x0, 0x59, 0x4, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x92, [@multicast1, @private=0xa010102, @remote, @private=0xa010100, @remote]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x6b, [@empty, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000004980)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004940)={&(0x7f0000004880)={0xa8, 0x0, 0x415ca3bc67897604, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40011}, 0x8000) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000049c0)=0x7c, 0x4) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000004b80)={&(0x7f0000004a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004b40)={&(0x7f0000004a80)={0x94, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) [ 84.438030] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.443123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.445734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.452482] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.456527] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.459031] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.506494] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.514954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.518082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.524024] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.530100] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.539826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.703910] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.705571] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.708013] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.721049] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.726537] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.737985] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.773370] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.782192] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.794941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.808540] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.817415] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.821867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.826678] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.840778] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.845787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.849823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.851524] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.865508] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.881850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.889815] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.890495] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.929381] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.931961] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.948430] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.952762] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.969895] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.973323] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.991432] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.004730] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.030512] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.043980] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.074046] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.077841] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.086295] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.103324] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.113732] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.524192] Bluetooth: hci0: command tx timeout [ 86.588288] Bluetooth: hci1: command tx timeout [ 86.779758] Bluetooth: hci2: command tx timeout [ 86.908293] Bluetooth: hci3: command tx timeout [ 87.035748] Bluetooth: hci5: command tx timeout [ 87.037340] Bluetooth: hci4: command tx timeout [ 87.227818] Bluetooth: hci7: command tx timeout [ 87.229300] Bluetooth: hci6: command tx timeout [ 88.572778] Bluetooth: hci0: command tx timeout [ 88.636648] Bluetooth: hci1: command tx timeout [ 88.828669] Bluetooth: hci2: command tx timeout [ 88.957622] Bluetooth: hci3: command tx timeout [ 89.085750] Bluetooth: hci4: command tx timeout [ 89.086190] Bluetooth: hci5: command tx timeout [ 89.277477] Bluetooth: hci7: command tx timeout [ 89.277979] Bluetooth: hci6: command tx timeout [ 90.620773] Bluetooth: hci0: command tx timeout [ 90.683776] Bluetooth: hci1: command tx timeout [ 90.876622] Bluetooth: hci2: command tx timeout [ 91.004314] Bluetooth: hci3: command tx timeout [ 91.133027] Bluetooth: hci5: command tx timeout [ 91.133876] Bluetooth: hci4: command tx timeout [ 91.324667] Bluetooth: hci6: command tx timeout [ 91.325172] Bluetooth: hci7: command tx timeout [ 92.669764] Bluetooth: hci0: command tx timeout [ 92.734629] Bluetooth: hci1: command tx timeout [ 92.925240] Bluetooth: hci2: command tx timeout [ 93.051720] Bluetooth: hci3: command tx timeout [ 93.180987] Bluetooth: hci5: command tx timeout [ 93.181483] Bluetooth: hci4: command tx timeout [ 93.372705] Bluetooth: hci6: command tx timeout [ 93.373192] Bluetooth: hci7: command tx timeout [ 145.138762] syz-executor.5 (286) used greatest stack depth: 23520 bytes left [ 147.529467] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.533760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.538412] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.547685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.551183] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.553867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.588925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.592911] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.604020] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.610644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.614409] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.618332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.664019] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.667296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.670405] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.679659] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.682857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.684506] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.689992] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.690846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.693743] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.694936] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.697071] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.703919] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.705999] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.706001] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.716743] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.722408] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.725156] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.727201] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.728643] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.729659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.734928] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.736073] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.737646] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.738788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.748393] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.749141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.751431] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.761810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.783013] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.783915] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.786988] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.792240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.795478] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.807660] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.811163] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.815516] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.628805] Bluetooth: hci0: command tx timeout [ 149.691938] Bluetooth: hci1: command tx timeout [ 149.819996] Bluetooth: hci5: command tx timeout [ 149.820128] Bluetooth: hci4: command tx timeout [ 149.821117] Bluetooth: hci3: command tx timeout [ 149.883948] Bluetooth: hci6: command tx timeout [ 149.947867] Bluetooth: hci7: command tx timeout [ 149.949296] Bluetooth: hci2: command tx timeout [ 151.675668] Bluetooth: hci0: command tx timeout [ 151.739745] Bluetooth: hci1: command tx timeout [ 151.867769] Bluetooth: hci3: command tx timeout [ 151.868364] Bluetooth: hci5: command tx timeout [ 151.868802] Bluetooth: hci4: command tx timeout [ 151.931666] Bluetooth: hci6: command tx timeout [ 151.995735] Bluetooth: hci2: command tx timeout [ 151.996356] Bluetooth: hci7: command tx timeout [ 153.724924] Bluetooth: hci0: command tx timeout [ 153.788698] Bluetooth: hci1: command tx timeout [ 153.916336] Bluetooth: hci4: command tx timeout [ 153.916541] Bluetooth: hci5: command tx timeout [ 153.917424] Bluetooth: hci3: command tx timeout [ 153.979785] Bluetooth: hci6: command tx timeout [ 154.043882] Bluetooth: hci7: command tx timeout [ 154.043908] Bluetooth: hci2: command tx timeout [ 155.771744] Bluetooth: hci0: command tx timeout [ 155.835817] Bluetooth: hci1: command tx timeout [ 155.963703] Bluetooth: hci3: command tx timeout [ 155.966656] Bluetooth: hci5: command tx timeout [ 155.967439] Bluetooth: hci4: command tx timeout [ 156.028043] Bluetooth: hci6: command tx timeout [ 156.091911] Bluetooth: hci2: command tx timeout [ 156.092896] Bluetooth: hci7: command tx timeout [ 209.549495] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.552913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.555649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.573686] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.575592] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.577884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.605371] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.607979] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.610887] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.622924] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.628121] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.632754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.719448] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.721812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.723452] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.731958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.735115] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.736351] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.739016] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.741351] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.749725] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.765861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.777814] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.782240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.820876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.826083] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.829957] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.834292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.839380] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.842171] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.900894] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.903301] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.907090] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.921254] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.991390] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.012739] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.029977] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.032699] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.044817] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.067936] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.080947] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.087914] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.090887] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.094873] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.104941] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.140239] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.141999] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.142888] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.643672] Bluetooth: hci0: command tx timeout [ 211.707719] Bluetooth: hci1: command tx timeout [ 211.771697] Bluetooth: hci2: command tx timeout [ 211.835792] Bluetooth: hci3: command tx timeout [ 211.900719] Bluetooth: hci4: command tx timeout [ 212.092682] Bluetooth: hci5: command tx timeout [ 212.155683] Bluetooth: hci6: command tx timeout [ 212.219668] Bluetooth: hci7: command tx timeout [ 213.691711] Bluetooth: hci0: command tx timeout [ 213.755718] Bluetooth: hci1: command tx timeout [ 213.819859] Bluetooth: hci2: command tx timeout [ 213.884672] Bluetooth: hci3: command tx timeout [ 213.947997] Bluetooth: hci4: command tx timeout [ 214.141660] Bluetooth: hci5: command tx timeout [ 214.203732] Bluetooth: hci6: command tx timeout [ 214.267708] Bluetooth: hci7: command tx timeout [ 215.739824] Bluetooth: hci0: command tx timeout [ 215.803713] Bluetooth: hci1: command tx timeout [ 215.868706] Bluetooth: hci2: command tx timeout [ 215.931774] Bluetooth: hci3: command tx timeout [ 215.995968] Bluetooth: hci4: command tx timeout [ 216.187769] Bluetooth: hci5: command tx timeout [ 216.251804] Bluetooth: hci6: command tx timeout [ 216.315677] Bluetooth: hci7: command tx timeout [ 217.789049] Bluetooth: hci0: command tx timeout [ 217.851629] Bluetooth: hci1: command tx timeout [ 217.915621] Bluetooth: hci2: command tx timeout [ 217.979732] Bluetooth: hci3: command tx timeout [ 218.043651] Bluetooth: hci4: command tx timeout [ 218.235618] Bluetooth: hci5: command tx timeout [ 218.299648] Bluetooth: hci6: command tx timeout [ 218.363833] Bluetooth: hci7: command tx timeout [ 271.947473] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.956199] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.959202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.966159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.972451] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.975766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.073437] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.078023] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.080368] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.088571] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.092657] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.096100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.208789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.216074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.226253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.250333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.267738] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 272.270053] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.284935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.297070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.310293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.336048] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.349893] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.352006] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.355112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.356669] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.358320] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.370923] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.378016] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.381013] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.383061] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.385513] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.388371] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.397463] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.417925] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.420041] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.475757] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.483910] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.490475] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.498027] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.502478] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.530445] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.533288] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.564990] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.567295] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.572950] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.574787] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 272.585908] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 274.043757] Bluetooth: hci0: command tx timeout [ 274.171707] Bluetooth: hci1: command tx timeout [ 274.299798] Bluetooth: hci2: command tx timeout [ 274.427762] Bluetooth: hci3: command tx timeout [ 274.492603] Bluetooth: hci4: command tx timeout [ 274.493631] Bluetooth: hci5: command tx timeout [ 274.621773] Bluetooth: hci6: command tx timeout [ 274.747894] Bluetooth: hci7: command tx timeout [ 276.092615] Bluetooth: hci0: command tx timeout [ 276.220611] Bluetooth: hci1: command tx timeout [ 276.347713] Bluetooth: hci2: command tx timeout [ 276.475932] Bluetooth: hci3: command tx timeout [ 276.539661] Bluetooth: hci5: command tx timeout [ 276.540162] Bluetooth: hci4: command tx timeout [ 276.667653] Bluetooth: hci6: command tx timeout [ 276.795609] Bluetooth: hci7: command tx timeout [ 278.140719] Bluetooth: hci0: command tx timeout [ 278.267678] Bluetooth: hci1: command tx timeout [ 278.395606] Bluetooth: hci2: command tx timeout [ 278.523608] Bluetooth: hci3: command tx timeout [ 278.587812] Bluetooth: hci5: command tx timeout [ 278.588312] Bluetooth: hci4: command tx timeout [ 278.715696] Bluetooth: hci6: command tx timeout [ 278.845610] Bluetooth: hci7: command tx timeout [ 280.188678] Bluetooth: hci0: command tx timeout [ 280.316630] Bluetooth: hci1: command tx timeout [ 280.446558] Bluetooth: hci2: command tx timeout [ 280.571743] Bluetooth: hci3: command tx timeout [ 280.636628] Bluetooth: hci5: command tx timeout [ 280.637064] Bluetooth: hci4: command tx timeout [ 280.764965] Bluetooth: hci6: command tx timeout [ 280.892633] Bluetooth: hci7: command tx timeout [ 332.295908] [ 332.296127] ====================================================== [ 332.296638] WARNING: possible circular locking dependency detected [ 332.297229] 6.13.0-next-20250124 #1 Not tainted [ 332.297675] ------------------------------------------------------ [ 332.298814] kworker/u8:0/11 is trying to acquire lock: [ 332.304182] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.306127] [ 332.306127] but task is already holding lock: [ 332.307239] ffff888025a90768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 332.309054] [ 332.309054] which lock already depends on the new lock. [ 332.309054] [ 332.310621] [ 332.310621] the existing dependency chain (in reverse order) is: [ 332.312148] [ 332.312148] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 332.313415] __mutex_lock+0x13d/0xb50 [ 332.314414] wiphy_register+0x1b2e/0x25d0 [ 332.315398] ieee80211_register_hw+0x23a4/0x3d60 [ 332.316407] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 332.317583] init_mac80211_hwsim+0x389/0x870 [ 332.318594] do_one_initcall+0xf9/0x640 [ 332.319546] kernel_init_freeable+0x53d/0x7a0 [ 332.320590] kernel_init+0x1e/0x2d0 [ 332.321403] ret_from_fork+0x48/0x80 [ 332.322217] ret_from_fork_asm+0x1a/0x30 [ 332.323131] [ 332.323131] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 332.324316] __lock_acquire+0x29fd/0x4580 [ 332.325243] lock_acquire+0x19b/0x520 [ 332.326087] __mutex_lock+0x13d/0xb50 [ 332.327071] unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.328250] unregister_netdevice_queue+0x224/0x2e0 [ 332.329321] _cfg80211_unregister_wdev+0x57b/0x700 [ 332.330373] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 332.331425] ieee80211_unregister_hw+0x55/0x3a0 [ 332.332573] hwsim_exit_net+0x3a0/0x730 [ 332.333576] ops_exit_list+0xb3/0x180 [ 332.334542] cleanup_net+0x546/0xad0 [ 332.335494] process_one_work+0x8ee/0x1a10 [ 332.336518] worker_thread+0x674/0xe70 [ 332.337432] kthread+0x3ab/0x720 [ 332.338239] ret_from_fork+0x48/0x80 [ 332.339081] ret_from_fork_asm+0x1a/0x30 [ 332.340101] [ 332.340101] other info that might help us debug this: [ 332.340101] [ 332.341699] Possible unsafe locking scenario: [ 332.341699] [ 332.342912] CPU0 CPU1 [ 332.343778] ---- ---- [ 332.344774] lock(&rdev->wiphy.mtx); [ 332.345554] lock(rtnl_mutex); [ 332.346651] lock(&rdev->wiphy.mtx); [ 332.347889] lock(rtnl_mutex); [ 332.348648] [ 332.348648] *** DEADLOCK *** [ 332.348648] [ 332.349750] 4 locks held by kworker/u8:0/11: [ 332.350596] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 332.352770] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 332.354600] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 332.356558] #3: ffff888025a90768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 332.358748] [ 332.358748] stack backtrace: [ 332.359598] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1 [ 332.359680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 332.359728] Workqueue: netns cleanup_net [ 332.359820] Call Trace: [ 332.359840] [ 332.359865] dump_stack_lvl+0xca/0x120 [ 332.359992] print_circular_bug+0x47b/0x750 [ 332.360094] check_noncircular+0x2e9/0x3c0 [ 332.360185] ? lock_repin_lock+0x207/0x320 [ 332.360316] ? __pfx_check_noncircular+0x10/0x10 [ 332.360408] ? hlock_class+0x4e/0x130 [ 332.360491] ? mark_lock+0xac/0xed0 [ 332.360579] ? __pfx_lock_repin_lock+0x10/0x10 [ 332.360726] ? lockdep_lock+0xba/0x1b0 [ 332.360853] ? __pfx_lockdep_lock+0x10/0x10 [ 332.360992] __lock_acquire+0x29fd/0x4580 [ 332.361112] ? __pfx___lock_acquire+0x10/0x10 [ 332.361208] ? lock_release+0x20f/0x6f0 [ 332.361307] ? __pfx_lock_release+0x10/0x10 [ 332.361414] lock_acquire+0x19b/0x520 [ 332.361510] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.361620] ? __pfx_lock_acquire+0x10/0x10 [ 332.361724] ? srso_return_thunk+0x5/0x5f [ 332.361849] ? lock_release+0x20f/0x6f0 [ 332.361947] ? srso_return_thunk+0x5/0x5f [ 332.362070] ? lock_is_held_type+0x9e/0x120 [ 332.362192] ? srso_return_thunk+0x5/0x5f [ 332.362323] __mutex_lock+0x13d/0xb50 [ 332.362439] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.362540] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.362643] ? srso_return_thunk+0x5/0x5f [ 332.362766] ? synchronize_rcu_expedited+0x38a/0x420 [ 332.362870] ? __pfx___mutex_lock+0x10/0x10 [ 332.362992] ? __pfx_autoremove_wake_function+0x10/0x10 [ 332.363112] ? srso_return_thunk+0x5/0x5f [ 332.363235] ? kasan_quarantine_put+0x84/0x1e0 [ 332.363369] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 332.363448] ? srso_return_thunk+0x5/0x5f [ 332.363580] unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.363682] ? __virt_addr_valid+0x2e8/0x5d0 [ 332.363799] ? __pfx_lock_release+0x10/0x10 [ 332.363905] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 332.364009] ? find_held_lock+0x2c/0x110 [ 332.364138] ? srso_return_thunk+0x5/0x5f [ 332.364266] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 332.364400] ? srso_return_thunk+0x5/0x5f [ 332.364536] ? lock_release+0x20f/0x6f0 [ 332.364635] ? __pfx_lock_release+0x10/0x10 [ 332.364731] ? srso_return_thunk+0x5/0x5f [ 332.364854] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 332.364962] ? srso_return_thunk+0x5/0x5f [ 332.365102] unregister_netdevice_queue+0x224/0x2e0 [ 332.365200] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 332.365297] ? up_write+0x195/0x520 [ 332.365419] _cfg80211_unregister_wdev+0x57b/0x700 [ 332.365495] ? srso_return_thunk+0x5/0x5f [ 332.365578] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 332.365632] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 332.365686] ? srso_return_thunk+0x5/0x5f [ 332.365762] ? srso_return_thunk+0x5/0x5f [ 332.365839] ? synchronize_rcu+0x1ff/0x260 [ 332.365899] ieee80211_unregister_hw+0x55/0x3a0 [ 332.365962] hwsim_exit_net+0x3a0/0x730 [ 332.366020] ? __pfx_hwsim_exit_net+0x10/0x10 [ 332.366084] ? srso_return_thunk+0x5/0x5f [ 332.366162] ? netdev_run_todo+0x788/0x1040 [ 332.366227] ? srso_return_thunk+0x5/0x5f [ 332.366307] ? __pfx_hwsim_exit_net+0x10/0x10 [ 332.366366] ops_exit_list+0xb3/0x180 [ 332.366426] cleanup_net+0x546/0xad0 [ 332.366488] ? __pfx_cleanup_net+0x10/0x10 [ 332.366563] process_one_work+0x8ee/0x1a10 [ 332.366654] ? __pfx_lock_acquire+0x10/0x10 [ 332.366716] ? __pfx_process_one_work+0x10/0x10 [ 332.366798] ? srso_return_thunk+0x5/0x5f [ 332.366875] ? move_linked_works+0x172/0x270 [ 332.366937] ? srso_return_thunk+0x5/0x5f [ 332.367014] ? assign_work+0x196/0x240 [ 332.367094] worker_thread+0x674/0xe70 [ 332.367180] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 332.367253] ? __pfx_worker_thread+0x10/0x10 [ 332.367337] kthread+0x3ab/0x720 [ 332.367409] ? __pfx_kthread+0x10/0x10 [ 332.367481] ? srso_return_thunk+0x5/0x5f [ 332.367558] ? finish_task_switch.isra.0+0x206/0x840 [ 332.367629] ? __pfx_kthread+0x10/0x10 [ 332.367705] ret_from_fork+0x48/0x80 [ 332.367748] ? __pfx_kthread+0x10/0x10 [ 332.367822] ret_from_fork_asm+0x1a/0x30 [ 332.367915] [ 334.023675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.024988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.029720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.035265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.038568] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.040544] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.402796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.404849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.406333] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.407325] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.408295] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.409422] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.412774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.414082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.414874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.415941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.418823] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.421420] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.465943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.468440] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.469743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.473686] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.474970] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.476387] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.560012] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.561152] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.576602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.600214] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.602284] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 334.606434] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.608010] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 334.609974] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 334.611242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.615300] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 334.616743] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.619087] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 334.620875] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 334.624687] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 334.625950] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.627719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.641036] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.645299] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.650038] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.650035] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 334.652288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.655777] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.673798] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 334.674956] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.060934] Bluetooth: hci0: command tx timeout [ 336.443599] Bluetooth: hci1: command tx timeout [ 336.444035] Bluetooth: hci2: command tx timeout [ 336.507556] Bluetooth: hci3: command tx timeout [ 336.636627] Bluetooth: hci6: command tx timeout [ 336.699684] Bluetooth: hci4: command tx timeout [ 336.700145] Bluetooth: hci7: command tx timeout [ 336.763655] Bluetooth: hci5: command tx timeout [ 338.107941] Bluetooth: hci0: command tx timeout [ 338.492744] Bluetooth: hci2: command tx timeout [ 338.493213] Bluetooth: hci1: command tx timeout [ 338.556565] Bluetooth: hci3: command tx timeout [ 338.683634] Bluetooth: hci6: command tx timeout [ 338.748617] Bluetooth: hci7: command tx timeout [ 338.749072] Bluetooth: hci4: command tx timeout [ 338.812738] Bluetooth: hci5: command tx timeout [ 340.155689] Bluetooth: hci0: command tx timeout [ 340.539754] Bluetooth: hci1: command tx timeout [ 340.540436] Bluetooth: hci2: command tx timeout [ 340.603575] Bluetooth: hci3: command tx timeout [ 340.731613] Bluetooth: hci6: command tx timeout [ 340.795611] Bluetooth: hci4: command tx timeout [ 340.796210] Bluetooth: hci7: command tx timeout [ 340.860604] Bluetooth: hci5: command tx timeout [ 342.204541] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 08:01:09 Registers: info registers vcpu 0 RAX=0000000000000071 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed1001656046 R10=0000000000000071 R11=2f72656b726f776b R12=0000000000000071 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f83fc6f7350 CR3=0000000012eec000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=c1042e195b0a62b47c4b6240807ae167 XMM02=ee7587d5db12e8e300000000000fc4f0 XMM03=f9980df3bdc2dbad0000000000130428 XMM04=d6218c1fbc58402500000000000ae988 XMM05=abe09f89515e57a90000000000150190 XMM06=9f165a4fe6c971ad0000000000138420 XMM07=711fbe8126c5d3440000000000138318 XMM08=a3797342f9eb3dd900000000000fe958 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88806cf00000 RBX=0000000000000001 RCX=ffffffff84a8e9d7 RDX=ffffed100d9e6c4b RSI=0000000000000004 RDI=ffffffff814b1bba RBP=dffffc0000000000 RSP=ffff88800970fe68 R8 =0000000000000000 R9 =ffffed100d9e6c4a R10=ffff88806cf36253 R11=0000000000000001 R12=ffffffff864043d0 R13=1ffff110012e1fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8f97e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056125d0a34f0 CR3=0000000015b32000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004145057c00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000