Warning: Permanently added '[localhost]:15432' (ECDSA) to the list of known hosts. 2025/04/23 03:56:37 fuzzer started 2025/04/23 03:56:37 dialing manager at localhost:42253 syzkaller login: [ 93.036287] cgroup: Unknown subsys name 'net' [ 93.187814] cgroup: Unknown subsys name 'cpuset' [ 93.231016] cgroup: Unknown subsys name 'rlimit' 2025/04/23 03:57:01 syscalls: 200 2025/04/23 03:57:01 code coverage: enabled 2025/04/23 03:57:01 comparison tracing: enabled 2025/04/23 03:57:01 extra coverage: enabled 2025/04/23 03:57:01 setuid sandbox: enabled 2025/04/23 03:57:01 namespace sandbox: enabled 2025/04/23 03:57:01 Android sandbox: enabled 2025/04/23 03:57:01 fault injection: enabled 2025/04/23 03:57:01 leak checking: enabled 2025/04/23 03:57:01 net packet injection: enabled 2025/04/23 03:57:01 net device setup: enabled 2025/04/23 03:57:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/23 03:57:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/23 03:57:01 USB emulation: enabled 2025/04/23 03:57:01 hci packet injection: enabled 2025/04/23 03:57:01 wifi device emulation: enabled 2025/04/23 03:57:01 802.15.4 emulation: enabled 2025/04/23 03:57:01 fetching corpus: 0, signal 0/0 (executing program) 2025/04/23 03:57:03 starting 8 fuzzer processes 03:57:03 executing program 3: sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, 0x0, 0x811, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x70004090}, 0x8000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r1, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1f}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008005}, 0x10004045) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, r2, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c001}, 0x44000010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, r5, 0x401, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfc000000}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3ff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x4c}}, 0x4081) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x48, r2, 0xb5e3fe13c89348c2, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '%,#+{(.\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x4004010) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, r5, 0xa39dd457877be01f, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5617}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x10000000) gettid() ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000b80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000044}, 0x4040090) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) 03:57:03 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x89}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x24008000) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x5d}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2c}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4001) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x6008002}, 0x4000080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'tunl0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x700, 0x8000, 0x81, 0x0, {{0xf, 0x4, 0x3, 0x8, 0x3c, 0x65, 0x0, 0x19, 0x4, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0x27, 0x1c, [@rand_addr=0x64010100, @rand_addr=0x64010100, @private=0xa010101, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x24}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @empty]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001b40)={0x21c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40001}, 0x48048) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, 0x0, 0x9, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x20000040) recvmsg$unix(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f0000001f00)=@abs, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001f80)=""/248, 0xf8}], 0x1, &(0x7f00000020c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0}, 0x42) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000002200)={@empty, 0x5f, r1}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000002340)={'ip6gre0\x00', &(0x7f00000022c0)={'syztnl2\x00', r1, 0x29, 0x5d, 0x3f, 0x0, 0x22, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, 0x1, 0x80, 0x11, 0x3}}) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000002380)={@remote, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x81b, 0x4, 0x3f, 0x400, 0xe6, 0x40000, r9}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002400)={'batadv_slave_0\x00', 0x0}) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x274399fddf9ff02e}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x2c, r11, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x44) bind$packet(r6, &(0x7f0000002580)={0x11, 0xf6, r10, 0x1, 0x8, 0x6, @local}, 0x14) syz_genetlink_get_family_id$smc(&(0x7f00000025c0), r7) 03:57:03 executing program 1: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x7, 0x0, 0x1, @private1, @remote, 0x8000, 0x789, 0x2, 0x1f}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x20, 0x2, 0x59a, 0x68, @dev={0xfe, 0x80, '\x00', 0x17}, @private0, 0x40, 0x8, 0x123, 0xffff8001}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x29, 0x38, 0x85, 0x3, 0x8, @dev={0xfe, 0x80, '\x00', 0x1a}, @rand_addr=' \x01\x00', 0x40, 0x782f, 0x5, 0x7833}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd4, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc850}, 0x80804) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x48, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x44005) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x801) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000d40)="a33f8d771b11db1e0e7e962194993bd9f72b146fa60910178a5b1a5622146f865f70a0bf4b6a11917ae311ec53f1d3bce8796a04fb9353e15147b252704cceefb7f176543671400d4c28853ccd", 0x4d) socketpair(0x26, 0x8d645caccb14b9de, 0x7f, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0x8c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2d}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) socket$inet_udplite(0x2, 0x2, 0x88) recvmsg$unix(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/82, 0x52}, {&(0x7f0000001300)=""/154, 0x9a}, {&(0x7f00000013c0)=""/38, 0x26}, {&(0x7f0000001400)=""/142, 0x8e}], 0x4, &(0x7f0000001500)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x100) bind$packet(0xffffffffffffffff, &(0x7f0000001700)={0x11, 0x4, 0x0, 0x1, 0x20, 0x6, @local}, 0x14) 03:57:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x4) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x19}}]}, 0x28}}, 0x80) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x800) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xb4d6968b944e83a5}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2f}}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40015}, 0x810) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x104, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff46d1}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc000000000000000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfff2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x104}, 0x1, 0x0, 0x0, 0x20004084}, 0x60004) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r5) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r1, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x24040080) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r3) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r6, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x80000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x480d4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d80), 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x5c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 03:57:03 executing program 4: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0xff, 0x1ff, 0x3ff, 0x9, 0x1, 0x1, 0x20}, 0xc) clock_gettime(0x4, &(0x7f0000000040)) clock_getres(0x7, &(0x7f0000000080)) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x40, 0x2000, 0x1}, 0x3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x400}, 0x11) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c810}, 0x40) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002e40), 0x4000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r2) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002fc0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000003200)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x70, r5, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044856) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x48, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7b}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x20008840) clock_getres(0x6, &(0x7f0000003380)) 03:57:03 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x200000) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000040)) r1 = timerfd_create(0x5, 0x80000) timerfd_gettime(r1, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c814) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x2000400000000, 0x40) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf4, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x2000c841}, 0x6000804) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x14, 0x1c, "9edf093c3692bd0dd82f152e0ee3ca332d8914dbd30aa179259740479ddfe650c30e6c1b879bc675beafb105f041ef1cf05e349ebc3a5530975dd81e1dde7f98", "833a94de30c5451b971fd121abaa35991d5d22e5575d211254d392f95a4e3eb50dc630a0e620bb1ad0876af4881053e393838a77d412c7d70843d17b50a98c2a", "7a56c2edbd2e3f6d26822b84e6944bcb7cee5693e4c410b3f05fdf12d602cfc3", [0x1f, 0x5]}) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4008010) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x800, 0x100, 0x0, 0x1, 0x0, 0x8, "7eaab595b761ec06418021dd80426632d6dfc997a8018c780f4426e424f48ec0b050756450c928fadc5e1da8a07823594dacdc228d62c53c05d0576cf68cc129", "05e0a3ab94d24bc595728c6c8710599c4b87558032513e88ca68a930f9abe09db657cc02b47f3f05882fed579ad9fbd9cff1a192c02d7022999f3cd3bbbd22f3", "583d1780adb9fd05422bfbb5d5a10dbebea0f8df160d033314be0820b3962f05", [0xffc0, 0x92]}) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x5) mq_unlink(&(0x7f00000008c0)='lo\x00') r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r3) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x7c, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x68, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "eb3cda0f78daffcca00dc590d758f709e7325325c09e5a23aed605e63d1cace34aca35a5e9c62bf21ce7401cc206a56d7c82a3e576928625"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000a80)) timer_gettime(0x0, &(0x7f0000000ac0)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 118.848286] audit: type=1400 audit(1745380623.749:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:57:03 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f0000000180)=[{&(0x7f0000000080)="3f6c343733baf2f2fc7bacb8cf8044731df07dfdbded0d1b9c06b5eb437956ce42", 0x21, 0x5}, {&(0x7f00000000c0)="07534874a2f3dc4a15d82f7c8abda0869764f076a566d779c1dcbad02597ca0196041788bbf4746ceec563eebc83574b43828a888878ed323f65323ed6c41af1675a67ec027d29e9616bf2e28c547231df2f805edcb2a5239de7a8f8e6b64930c9a9c3ba8b8906b4583e53621cb407367d1a82a2bdc8d718539689887ffbff1a5d", 0x81, 0x2}], 0x8002, &(0x7f00000001c0)={[{@fat=@flush}], [{@seclabel}, {@seclabel}, {@dont_hash}, {@pcr={'pcr', 0x3d, 0x30}}, {@smackfshat={'smackfshat', 0x3d, ')#{)'}}, {@pcr={'pcr', 0x3d, 0x12}}, {@smackfsroot}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_hash}]}) statx(r0, &(0x7f00000004c0)='./file0\x00', 0x6000, 0x4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_mount_image$nfs4(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x40, 0x2, &(0x7f0000000480)=[{&(0x7f0000000300)="1e2d92b1a6139ad00ca668ff4a6a31b92ca468cb3f94c68d1a4645cee472b7fe2eb3f389fe3220dbd88694b3b7d9a8154057da1bc3313bacff9238ecd572e041e36ddb247ce173195eb915c83265899aa8cb3e7792421079db437e94681c8adfed13991c9d51593e3e984029e2dfec0a1067e077489b07ac392f17467d3fa273e33f52f9c4c8bdea15ea53bb4031e8f6e126918c76e5a403776dc551630a7e15", 0xa0, 0x7}, {&(0x7f00000003c0)="2a14f59097a9317b75048267fc02c64cb721b07f8883f9c6593bb413bb39beac3f7724a741f6a825f1773c626c03e89554141030815a058fc249b00aacc4370ea9394c17440ba649f595033ab0ed1760274d20285b8202444cb54a085583f6ada59075da5bd08e57e708d616b6006b23c8d5cd55bc56bca9feb8a2897e9a4d6eb5e66a794d10ba8904f5f218e3468800d5310eb26b9c506180f1f5130651e7aee776f83fb68e", 0xa6, 0x3ff}], 0x5002, &(0x7f0000000600)={[{'pcr'}], [{@appraise_type}, {@subj_user={'subj_user', 0x3d, '\'@%['}}, {@euid_eq}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee01}}, {@euid_lt={'euid<', r1}}, {@smackfshat}]}) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000006c0)=0x1, 0x4) r3 = syz_open_dev$loop(&(0x7f0000000700), 0xe1, 0x80800) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xc0f, 0x10000, 0x0, 0xa, 0x1a, 0x1, "1e8cbaaced31bd7e5fe7b8238e56a4396c1e4f9252604f15f8578f338dee5f98ef2341195838c67d86480c09dd57a0cfb2336f37e08ebf74a194400da21f3374", "c2f1d702b4e6af31266611af5ac704df59ac2f85cfe6cd8ac6617bc322470920cc0d2a1e8b5e26aeefc859b36c6fa84207f8134f533956e1c1cbabbe5ac3f410", "457cdaa73b5c4b4eee867d37008630101ca2376e792b1a9b6d24283738be297f", [0x0, 0x100000000]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd0}, 0x4044) syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x7fff, 0x3, &(0x7f0000000b80)=[{&(0x7f00000009c0)="5c262aaeac4cd7ad07a211999fa150d95ef8a6458ac70b8be69fe75697b436af927e8822182523dd4232336bb3c7f9631d87d50651bffaa9419e191d49839a39fd0a8cf0d5ffebe01b7d6b98c61156f6ed438f75adf9bacc86669b4acfa1b073a73a9889ffb8542e45438cbecc40e49a8388e834178614e2edfd53d10f51c59ee1aa91d00f75d472e96532e574ba2f7983450f2e41ae4a7bd6370a2d7787d091cba219afdbeff506706b99a62b448e5e10a26df5d8c87387e308744a5f6dda23f3ddc1b722e40ad7bcd5db6087664ae021d0ec1603591ec0446f063df5524f9b26329162f1a421006c632e694333fadf30dcac38aeb7dc0a7eee18", 0xfb, 0xfffffffffffffff9}, {&(0x7f0000000ac0)="fdcb", 0x2, 0x40}, {&(0x7f0000000b00)="85d1447e74430daa24a2691103cb81a03e6301c0c414d24e83fa60f382a7f323d3c3693f6bbae096850a9565c18a0fed3417b2afda365566b75139752b077de173bd7b1762c5b6538633ec255ac33995c3896624231d35", 0x57}], 0x8800, &(0x7f0000000c00)={[{@utf8}], [{@dont_measure}, {@obj_type={'obj_type', 0x3d, ')#{)'}}, {@euid_eq={'euid', 0x3d, r1}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@appraise_type}, {@uid_eq={'uid', 0x3d, r1}}, {@obj_type={'obj_type', 0x3d, 'flush'}}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}]}) fchmodat(r2, &(0x7f0000000cc0)='./file0\x00', 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x0, 0x182) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001740)={'sit0\x00', &(0x7f00000016c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x97, 0x4, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x27}, 0x7800, 0x7, 0x341, 0x200}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001a40)={'sit0\x00', &(0x7f00000019c0)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x5, 0xfff, 0x20, @local, @empty, 0x7800, 0x7800, 0x7, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001a80)={0x258, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x46, 0x4, 0x2, 0x6}, {0x9, 0x24, 0x7f, 0x7fff}, {0xdd, 0x0, 0x5, 0xa980}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x35d}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe8}}}]}}, {{0x8, 0x1, r8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x243}}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001d80)={'wpan4\x00', 0x0}) socketpair(0x26, 0x5, 0x7, &(0x7f0000001dc0)) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000003200)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000840}, 0x77cd29d7d067457d) 03:57:03 executing program 7: syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x2) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0)=@random="87273c8c7f52", 0x6, 0x2) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x9a0, 0x338997eb, 0x5, 0x6, 0x10000000000000, 0x7d6c, 0x9}, &(0x7f0000000200)={0x7, 0x8, 0x1, 0x5, 0x0, 0x2}, &(0x7f0000000240)={0xffffffffffffff92, 0x30e, 0x8, 0x1, 0x4, 0x2, 0x82ed, 0x1}, &(0x7f00000002c0)={r0, r1+10000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x7]}, 0x8}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x10000, 0x109b03) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000003c0)) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x3) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000600), r2) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r4, 0x400, 0x0, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x844) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000d40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xf4, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x90, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8a, 0x5, "bdf6a28e1b0528fbda3f09e3b6036ee39b8255c4d8300d0e8dd89b15efdbca243c5d057c9068302c94597d909bf224b375cc6d3fd9226df1764449eab1177dd1e8b82c5ad88634cfb79ba4b4f85ffff43ac0882fbce40fabd0a5fd524d292e6ba6ce1c10dcf07ba55fab0b0cb044923dd287aa5a8190bb6448cf3b435e058282b8f031bcbdd6"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000884) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x40, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x48, 0x0, 0xd87acc6d1c3b8643, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4041}, 0x24040004) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000001080), r6) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x382689042bb6fc39}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x60, r8, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x4) [ 120.186773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.191043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.194859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.201240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.205067] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.266590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.275459] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.282167] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.294025] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.301346] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.302837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.309751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.314448] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.317672] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.326510] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.331662] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.334237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.336926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.368369] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.369564] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.453520] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.462740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.468702] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.472965] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.475601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.480341] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 120.485621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.490898] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.496234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.499204] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 120.501247] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 120.504043] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.518226] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 120.520243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.532179] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 120.543880] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 120.546882] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 120.554431] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 120.582671] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 120.584018] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 122.270482] Bluetooth: hci0: command tx timeout [ 122.459883] Bluetooth: hci1: command tx timeout [ 122.460970] Bluetooth: hci2: command tx timeout [ 122.461609] Bluetooth: hci3: command tx timeout [ 122.588704] Bluetooth: hci4: command tx timeout [ 122.589706] Bluetooth: hci5: command tx timeout [ 122.651604] Bluetooth: hci7: command tx timeout [ 122.652292] Bluetooth: hci6: command tx timeout [ 124.317453] Bluetooth: hci0: command tx timeout [ 124.507506] Bluetooth: hci2: command tx timeout [ 124.507963] Bluetooth: hci1: command tx timeout [ 124.508441] Bluetooth: hci3: command tx timeout [ 124.635723] Bluetooth: hci5: command tx timeout [ 124.636170] Bluetooth: hci4: command tx timeout [ 124.699554] Bluetooth: hci7: command tx timeout [ 124.700001] Bluetooth: hci6: command tx timeout [ 126.363466] Bluetooth: hci0: command tx timeout [ 126.555547] Bluetooth: hci3: command tx timeout [ 126.556032] Bluetooth: hci1: command tx timeout [ 126.556514] Bluetooth: hci2: command tx timeout [ 126.683512] Bluetooth: hci4: command tx timeout [ 126.683966] Bluetooth: hci5: command tx timeout [ 126.747475] Bluetooth: hci6: command tx timeout [ 126.747922] Bluetooth: hci7: command tx timeout [ 128.411596] Bluetooth: hci0: command tx timeout [ 128.604029] Bluetooth: hci2: command tx timeout [ 128.605639] Bluetooth: hci1: command tx timeout [ 128.606059] Bluetooth: hci3: command tx timeout [ 128.732563] Bluetooth: hci5: command tx timeout [ 128.733008] Bluetooth: hci4: command tx timeout [ 128.796362] Bluetooth: hci7: command tx timeout [ 128.796818] Bluetooth: hci6: command tx timeout [ 183.090668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.093919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.099249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.106402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.109972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.257875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.262500] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.264833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.269630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.272975] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.287681] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.292885] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.309724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.313767] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.317513] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.347296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.353022] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.356272] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.362667] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.368819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.509234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 183.527851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.548827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 183.570035] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 183.594184] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 183.678199] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 183.680173] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 183.685014] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 183.686287] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 183.703087] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 183.704530] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 183.711954] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 183.714890] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 183.772521] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 183.794864] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 183.808859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 183.846886] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 183.859150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 183.916692] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 183.969051] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 185.181639] Bluetooth: hci0: command tx timeout [ 185.313409] Bluetooth: hci1: command tx timeout [ 185.435478] Bluetooth: hci3: command tx timeout [ 185.436715] Bluetooth: hci2: command tx timeout [ 185.755494] Bluetooth: hci6: command tx timeout [ 185.755802] Bluetooth: hci4: command tx timeout [ 185.947627] Bluetooth: hci7: command tx timeout [ 186.075635] Bluetooth: hci5: command tx timeout [ 187.228628] Bluetooth: hci0: command tx timeout [ 187.355488] Bluetooth: hci1: command tx timeout [ 187.483545] Bluetooth: hci2: command tx timeout [ 187.484639] Bluetooth: hci3: command tx timeout [ 187.803482] Bluetooth: hci6: command tx timeout [ 187.804484] Bluetooth: hci4: command tx timeout [ 187.995473] Bluetooth: hci7: command tx timeout [ 188.123504] Bluetooth: hci5: command tx timeout [ 189.276201] Bluetooth: hci0: command tx timeout [ 189.403716] Bluetooth: hci1: command tx timeout [ 189.532631] Bluetooth: hci3: command tx timeout [ 189.532856] Bluetooth: hci2: command tx timeout [ 189.851742] Bluetooth: hci4: command tx timeout [ 189.851836] Bluetooth: hci6: command tx timeout [ 190.044775] Bluetooth: hci7: command tx timeout [ 190.172472] Bluetooth: hci5: command tx timeout [ 191.324441] Bluetooth: hci0: command tx timeout [ 191.451605] Bluetooth: hci1: command tx timeout [ 191.580208] Bluetooth: hci3: command tx timeout [ 191.580283] Bluetooth: hci2: command tx timeout [ 191.899647] Bluetooth: hci6: command tx timeout [ 191.899678] Bluetooth: hci4: command tx timeout [ 192.092440] Bluetooth: hci7: command tx timeout [ 192.219544] Bluetooth: hci5: command tx timeout [ 245.037761] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.043315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.046880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.056244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.064289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.110155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.117172] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.121865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.127884] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.136095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.305488] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.319088] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.324653] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.334987] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.345712] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.404477] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.406354] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.427636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.430303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.434644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.441374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.448951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.452793] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 245.462718] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 245.475122] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 245.486966] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.490427] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.494984] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 245.497510] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.507844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.530360] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 245.532362] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.541330] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 245.545646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 245.569337] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.772351] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 245.781717] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 245.795687] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 245.812973] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 245.835935] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 247.132733] Bluetooth: hci0: command tx timeout [ 247.195821] Bluetooth: hci1: command tx timeout [ 247.387774] Bluetooth: hci2: command tx timeout [ 247.643541] Bluetooth: hci4: command tx timeout [ 247.707512] Bluetooth: hci5: command tx timeout [ 247.707553] Bluetooth: hci6: command tx timeout [ 247.771497] Bluetooth: hci3: command tx timeout [ 247.900468] Bluetooth: hci7: command tx timeout [ 249.179524] Bluetooth: hci0: command tx timeout [ 249.243440] Bluetooth: hci1: command tx timeout [ 249.435812] Bluetooth: hci2: command tx timeout [ 249.691437] Bluetooth: hci4: command tx timeout [ 249.755741] Bluetooth: hci6: command tx timeout [ 249.756241] Bluetooth: hci5: command tx timeout [ 249.821868] Bluetooth: hci3: command tx timeout [ 249.949111] Bluetooth: hci7: command tx timeout [ 251.228739] Bluetooth: hci0: command tx timeout [ 251.292581] Bluetooth: hci1: command tx timeout [ 251.484438] Bluetooth: hci2: command tx timeout [ 251.739450] Bluetooth: hci4: command tx timeout [ 251.803655] Bluetooth: hci6: command tx timeout [ 251.804585] Bluetooth: hci5: command tx timeout [ 251.867533] Bluetooth: hci3: command tx timeout [ 251.996585] Bluetooth: hci7: command tx timeout [ 253.275479] Bluetooth: hci0: command tx timeout [ 253.341397] Bluetooth: hci1: command tx timeout [ 253.532516] Bluetooth: hci2: command tx timeout [ 253.787437] Bluetooth: hci4: command tx timeout [ 253.852779] Bluetooth: hci5: command tx timeout [ 253.852816] Bluetooth: hci6: command tx timeout [ 253.917429] Bluetooth: hci3: command tx timeout [ 254.044574] Bluetooth: hci7: command tx timeout [ 307.566037] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.580152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.584696] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.599997] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.610993] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.756173] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.760189] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 307.762424] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 307.771866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 307.775356] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 307.899899] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.903163] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.905693] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.912943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.917856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.979075] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.986710] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.991356] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.996932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.036499] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.044092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.053106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.058503] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.065783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.071641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.071938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.097877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.105353] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.151557] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 308.156553] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.161579] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 308.171126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.182072] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.185933] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 308.193923] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 308.208049] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.223592] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 308.227099] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 308.232726] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.255936] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 309.659488] Bluetooth: hci0: command tx timeout [ 309.851639] Bluetooth: hci1: command tx timeout [ 309.979624] Bluetooth: hci3: command tx timeout [ 310.108283] Bluetooth: hci2: command tx timeout [ 310.235585] Bluetooth: hci4: command tx timeout [ 310.363810] Bluetooth: hci7: command tx timeout [ 310.555737] Bluetooth: hci5: command tx timeout [ 310.876620] Bluetooth: hci6: command tx timeout [ 311.708567] Bluetooth: hci0: command tx timeout [ 311.900889] Bluetooth: hci1: command tx timeout [ 312.028576] Bluetooth: hci3: command tx timeout [ 312.155617] Bluetooth: hci2: command tx timeout [ 312.283489] Bluetooth: hci4: command tx timeout [ 312.411515] Bluetooth: hci7: command tx timeout [ 312.603470] Bluetooth: hci5: command tx timeout [ 312.923741] Bluetooth: hci6: command tx timeout [ 313.756581] Bluetooth: hci0: command tx timeout [ 313.947548] Bluetooth: hci1: command tx timeout [ 314.077041] Bluetooth: hci3: command tx timeout [ 314.204447] Bluetooth: hci2: command tx timeout [ 314.333605] Bluetooth: hci4: command tx timeout [ 314.460515] Bluetooth: hci7: command tx timeout [ 314.651522] Bluetooth: hci5: command tx timeout [ 314.972493] Bluetooth: hci6: command tx timeout [ 315.803487] Bluetooth: hci0: command tx timeout [ 315.997456] Bluetooth: hci1: command tx timeout [ 316.123786] Bluetooth: hci3: command tx timeout [ 316.251724] Bluetooth: hci2: command tx timeout [ 316.379575] Bluetooth: hci4: command tx timeout [ 316.507635] Bluetooth: hci7: command tx timeout [ 316.700444] Bluetooth: hci5: command tx timeout [ 317.020455] Bluetooth: hci6: command tx timeout [ 369.964280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.969748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.973702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.983017] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.989725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.103470] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.110005] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.112696] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.123541] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.140756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.437757] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.440913] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.444894] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.452882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.458006] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.517838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.524087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 370.527428] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.572187] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 370.577846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.583864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.588937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 370.592878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 370.597143] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 370.606127] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 370.610154] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 370.614687] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 370.614731] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.623327] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 370.625455] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 370.626775] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 370.632910] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 370.672331] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 370.674923] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.688791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.697579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.733981] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 370.739860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.743436] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 370.745575] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 372.061430] Bluetooth: hci0: command tx timeout [ 372.187676] Bluetooth: hci1: command tx timeout [ 372.571485] Bluetooth: hci2: command tx timeout [ 372.699672] Bluetooth: hci7: command tx timeout [ 372.763464] Bluetooth: hci3: command tx timeout [ 372.827781] Bluetooth: hci6: command tx timeout [ 372.828513] Bluetooth: hci4: command tx timeout [ 372.892314] Bluetooth: hci5: command tx timeout [ 374.109411] Bluetooth: hci0: command tx timeout [ 374.236149] Bluetooth: hci1: command tx timeout [ 374.619714] Bluetooth: hci2: command tx timeout [ 374.747501] Bluetooth: hci7: command tx timeout [ 374.811497] Bluetooth: hci3: command tx timeout [ 374.876411] Bluetooth: hci4: command tx timeout [ 374.876855] Bluetooth: hci6: command tx timeout [ 374.940653] Bluetooth: hci5: command tx timeout [ 376.155448] Bluetooth: hci0: command tx timeout [ 376.283633] Bluetooth: hci1: command tx timeout [ 376.667610] Bluetooth: hci2: command tx timeout [ 376.797468] Bluetooth: hci7: command tx timeout [ 376.859760] Bluetooth: hci3: command tx timeout [ 376.923480] Bluetooth: hci4: command tx timeout [ 376.923935] Bluetooth: hci6: command tx timeout [ 376.987489] Bluetooth: hci5: command tx timeout [ 378.203652] Bluetooth: hci0: command tx timeout [ 378.331494] Bluetooth: hci1: command tx timeout [ 378.715441] Bluetooth: hci2: command tx timeout [ 378.843786] Bluetooth: hci7: command tx timeout [ 378.907428] Bluetooth: hci3: command tx timeout [ 378.971464] Bluetooth: hci6: command tx timeout [ 378.971917] Bluetooth: hci4: command tx timeout [ 379.035625] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 04:02:06 Registers: info registers vcpu 0 RAX=ffffffff812d70f2 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888024effa01 RSI=ffff888024effac0 RDI=ffff888024effb20 RBP=ffff888024effb20 RSP=ffff888024effa08 R8 =ffffffff867abb58 R9 =ffff888024effb08 R10=000000000003b0b4 R11=0000000000006b5c R12=ffff888024effb28 R13=ffff888024effb10 R14=ffff888024effac8 R15=ffff888024effac8 RIP=ffffffff813513d0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f371f35d540 00000000 00000000 GS =0000 ffff8880e564d000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f978232b5d0 CR3=0000000034c98000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffffff81600480 RCX=ffff88802ae3768c RDX=1ffff110055c6ef2 RSI=ffffffff81a1530e RDI=ffff88802ae37800 RBP=ffff88802ae377d0 RSP=ffff88802ae37728 R8 =0000000000000001 R9 =ffff88802ae37778 R10=000000000003b0b4 R11=0000000000021e22 R12=ffff88802ae37800 R13=0000000000000000 R14=ffff888026f21bc0 R15=0000000000000000 RIP=ffffffff8160048f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574d000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f295c5cd028 CR3=00000000287d4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000