Warning: Permanently added '[localhost]:24008' (ECDSA) to the list of known hosts. 2025/05/23 13:05:51 fuzzer started 2025/05/23 13:05:52 dialing manager at localhost:41873 syzkaller login: [ 97.976769] cgroup: Unknown subsys name 'net' [ 98.105781] cgroup: Unknown subsys name 'cpuset' [ 98.129711] cgroup: Unknown subsys name 'rlimit' 2025/05/23 13:06:06 syscalls: 200 2025/05/23 13:06:06 code coverage: enabled 2025/05/23 13:06:06 comparison tracing: enabled 2025/05/23 13:06:06 extra coverage: enabled 2025/05/23 13:06:06 setuid sandbox: enabled 2025/05/23 13:06:06 namespace sandbox: enabled 2025/05/23 13:06:06 Android sandbox: enabled 2025/05/23 13:06:06 fault injection: enabled 2025/05/23 13:06:06 leak checking: enabled 2025/05/23 13:06:06 net packet injection: enabled 2025/05/23 13:06:06 net device setup: enabled 2025/05/23 13:06:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/23 13:06:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/23 13:06:06 USB emulation: enabled 2025/05/23 13:06:06 hci packet injection: enabled 2025/05/23 13:06:06 wifi device emulation: enabled 2025/05/23 13:06:06 802.15.4 emulation: enabled 2025/05/23 13:06:06 fetching corpus: 0, signal 0/0 (executing program) 2025/05/23 13:06:08 starting 8 fuzzer processes 13:06:08 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8881}, 0x24040814) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x8c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}}, @NLBL_UNLABEL_A_SECCTX={0x13, 0x7, '/usr/sbin/ntpd\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tty_device_t:s0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004050}, 0x8081) syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r7, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r10, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r11}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 13:06:08 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@tipc, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1}, 0x10040) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x600, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x6048002}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000240)=@x25, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/133, 0x85}], 0x1, &(0x7f00000003c0)=""/40, 0x28}, 0x62) syz_io_uring_setup(0x1afc, &(0x7f0000000440)={0x0, 0x217d, 0x10, 0x3, 0x37}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000004c0)=0x0, &(0x7f0000000500)) r2 = syz_io_uring_setup(0x41df, &(0x7f0000000540)={0x0, 0xdd91, 0x4, 0x2, 0x3e5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000640)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r0, 0x6, 0x0, 0x800, 0x3}, 0x6) syz_io_uring_setup(0x3199, &(0x7f0000000680)={0x0, 0xdbcf, 0x20, 0x1, 0x343, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000780)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x224}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48040}, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000a80)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0xe0db, 0x9, 0x0, {0x0, 0x0, r7}}, 0xfffffffd) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r7) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r9, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x90}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0xc4}, 0x3f13831f393aaaf6) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r10, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x40401) 13:06:08 executing program 2: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40091}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x20}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x35}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc5}, 0x440000c0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000004c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r3, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r3, 0x923, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x50) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), r2) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, r10, 0x4, 0x0, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x400}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x58}, 0x1, 0x0, 0x0, 0x44800}, 0x4040040) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000900)={0x408, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x3b0, 0x11d, 0x0, 0x1, [{0x330, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2fc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xd80e, 0x0, 0x7f, 0x75ab, 0xbd6e, 0x5, 0x8001]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0x7}, {0x3, 0xa}, {0x5, 0x9}, {0x1, 0xa}, {0x6, 0x8}, {0x1, 0x6}, {0x4, 0x1a}, {0x1, 0x1}, {0x0, 0xa}, {0x2, 0x6}, {0x4, 0x9}, {0x7, 0x4}, {0x4, 0x7}, {0x5, 0x9}, {0x3, 0x9}, {0x7, 0x3}, {0x0, 0x4}, {0x2, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x6}, {0x2, 0x3}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xff, 0x8, 0x7f, 0x6, 0x9, 0xbce, 0x88ec]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x5, 0x0, 0xfff9, 0x1000, 0x5, 0x8000, 0x8]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x6, 0x2}, {0x1}, {0x0, 0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x0, 0x9}, {0x6, 0x1}, {0x4, 0x8}, {0x5, 0x9}, {0x3, 0x4}, {0x3, 0x6}, {0x7, 0x8}, {0x5, 0x8}, {0x7}, {0x0, 0x2}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x8}, {0x7, 0x8}, {0x7, 0x8}, {0x4, 0x1}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0x9}, {0x1, 0xa}, {0x1}, {0x4, 0x4}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x1}, {0x2, 0x8}, {0x5, 0x8}, {0x2, 0x8}, {0x1, 0x9}, {0x5, 0x3}, {0x7, 0x6}, {0x1, 0x7}, {0x2}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x6}, {0x6, 0x1}, {0x2, 0x4}, {0x1, 0x2}, {0x1, 0x9}, {0x3, 0x3}, {0x5}, {0x0, 0x6}, {0x0, 0xa}, {0x7, 0x4}, {0x2, 0x4}, {0x5, 0x2}, {0x5, 0xa}, {0x7, 0x9}, {0x6, 0x6}, {0x5, 0x2}, {0x7, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x0, 0x5}, {0x4, 0x5}, {0x1, 0x1}, {0x7, 0x6}, {0x6, 0x4}, {0x5, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x9, 0x18, 0x18, 0x6, 0x1b, 0x0, 0x60, 0x3, 0x9, 0x59, 0x60, 0x4, 0x9, 0x6c, 0x18, 0x18, 0x60, 0xe, 0x48, 0x12, 0x30, 0x1, 0xb, 0x12, 0x16, 0xc, 0x30]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x5, 0x6, 0x6c, 0x2, 0x4a, 0x60, 0x36, 0x16, 0x24, 0x48, 0x0, 0x5, 0x6, 0x5]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5e, 0x16, 0xb, 0xc, 0x0, 0x63, 0x6c, 0x16, 0x18, 0xc, 0x1, 0x16, 0x18, 0x1b, 0x4, 0x36, 0x5, 0x2, 0x12, 0x2b, 0x30, 0xb]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x60, 0x18, 0x24, 0x20, 0x2, 0x2, 0x2, 0xc, 0x3, 0x65, 0x16, 0x6, 0x16, 0xc, 0x1b, 0x16, 0x3, 0x9, 0x24, 0x60, 0xf, 0x9, 0x1b, 0x48, 0xc, 0x36, 0xf10dd743c3ef6952, 0x60, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0x30, 0x12, 0x1, 0x4, 0x1b, 0x18, 0x1b, 0x12, 0x1e49079c76d12388, 0x5, 0x6, 0x16, 0xb, 0x36, 0x18, 0x16, 0x1b, 0x48, 0x18, 0x12, 0x18, 0x6c, 0x3, 0xb, 0x18, 0x36, 0x30, 0x6c, 0x17, 0x48]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfc00, 0x6, 0xb2, 0x1ff, 0x446, 0x19e, 0x3]}}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x800, 0x101, 0x0, 0x9, 0x8, 0x9, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x5}, {0x5, 0x9}, {0x1, 0x4}, {0x0, 0x1}, {0x5}, {0x6, 0x2}, {0x4, 0x3}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x3}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x4}, {0x2, 0xa}, {0x0, 0x8}, {0x4}, {0x6, 0x3}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x6, 0xa}, {0x0, 0x9}, {0x2, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x6, 0x7}, {0x2, 0x1}, {0x5, 0x2}, {0x0, 0x8}, {0x2, 0x1}, {0x5, 0x7}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x3, 0x6c, 0x60, 0x30, 0x12, 0xc, 0x16, 0x16, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a, 0x49, 0x1c, 0xff, 0xc1a, 0xcaf, 0x1000, 0x100]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x4, 0x36, 0x2, 0x24, 0x9, 0xc, 0x16, 0x4, 0x16, 0x2, 0x1b, 0x48, 0x5, 0x24, 0x9, 0x9, 0x0, 0x61, 0x6, 0x9, 0x48, 0x6, 0x9, 0x60, 0x4, 0x5, 0x24, 0x3, 0x12, 0x18, 0xb]}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x1ff, 0x7fff, 0xcb, 0x3, 0xcd8, 0x7, 0xfb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x1, 0x4, 0x6, 0x2, 0x5, 0x3, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xc, 0x24, 0x4, 0x1, 0xb, 0x16, 0x24, 0x1b, 0x18, 0x36, 0x30, 0x48, 0xf5cd86d0e484e3aa, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0xc, 0x48, 0x2, 0x16, 0x18, 0x60, 0x30, 0x60]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x70, 0x9, 0x9, 0x6, 0x6c, 0x24, 0xc, 0x24, 0x1b, 0x4]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0x8}, {0x7, 0x6}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x7}, {0x7, 0xa}, {0x2, 0xa}, {0x7, 0x3}, {0x1, 0x3}, {0x3, 0x7}, {0x2, 0x8}, {0x2, 0x6}, {0x3, 0x8}, {0x2, 0x6}, {0x7, 0x4}, {0x6, 0x4}, {0x7, 0x8}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x3, 0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x7}, {0x0, 0x1}, {0x0, 0x5}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x7}, {}, {0x0, 0x3}, {0x4, 0x7}, {0x1, 0x8}, {0x7, 0xa}, {0x3, 0x1}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x8}, {0x7, 0x8}, {0x0, 0x4}, {0x7, 0x1}, {0x0, 0x9}, {0x5, 0x6}, {0x0, 0x3}, {0x5, 0x3}, {0x0, 0x5}, {0x2, 0x5}, {0x5, 0x7}, {0x2, 0x5}, {0x3, 0x1}, {0x2, 0x2}, {0x6, 0x7}, {0x7, 0x9}, {0x0, 0x4}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0x4}, {0x5, 0x1}, {0x7, 0x4}, {}, {0x4, 0xa}, {0x0, 0x8}, {0x7, 0x7}, {0x6}, {0x0, 0x7}, {0x4, 0x1}, {0x3, 0x2}, {0x0, 0x6}, {0x6, 0x3}, {0x3, 0x1}, {0x4, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x8001, 0x4, 0x1, 0x3, 0x0, 0xfff, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x50}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3622}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x200000000000}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000000) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80002013}, 0xc, &(0x7f0000001640)={&(0x7f0000001100)={0x528, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb1f}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x528}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000840) 13:06:08 executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xf3f9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8008081}, 0x48011) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x101, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x88}, 0x4000004) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x88480, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001940)={'ip6gre0\x00', &(0x7f00000018c0)={'syztnl2\x00', r0, 0x4, 0x5, 0x8, 0x2e5, 0x45, @dev={0xfe, 0x80, '\x00', 0x38}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8759311b82213b96, 0x2f, 0x20, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000001a00)={'ip6_vti0\x00', &(0x7f0000001980)={'syztnl1\x00', r3, 0x4, 0x6, 0xf8, 0xd91, 0x0, @private2, @remote, 0x0, 0x40, 0x3, 0x7}}) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001a40)=""/58, 0x3a}], 0x1, &(0x7f0000001ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x10020) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001b80)={{{@in6=@local, @in=@private}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000001c80)=0xe8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x24004011) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e00), r5) sendmsg$NL802154_CMD_GET_SEC_KEY(r6, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x68, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000005}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x60004001}, 0x40814) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000002000)={&(0x7f0000001f40), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x1c, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, 0x0, 0x410, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000002180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x28, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x2008004}, 0x4045) 13:06:08 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/187, 0xbb) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x1, 0x10001, 0x27, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7fc0, 0xa1, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6gre0\x00', r2, 0x29, 0xd5, 0x1, 0x101, 0x12, @dev={0xfe, 0x80, '\x00', 0x12}, @local, 0x8, 0x8, 0x7, 0x1000}}) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x1, 0x4, 0x35, @loopback, @empty, 0x1, 0x7, 0x101, 0x1}}) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000480)) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000006c0)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x4, 0x1}}, @qipcrtr={0x2a, 0x4}, @in={0x2, 0x4e22, @empty}, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)='hsr0\x00', 0x3, 0x10001, 0x50a8}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000740), &(0x7f0000000780)=0x4) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f00000007c0), &(0x7f0000000800)=0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f0000000880)={'ip6tnl0\x00', r3, 0x4, 0x1f, 0x4, 0x4, 0xa5196d98c09ffb91, @dev={0xfe, 0x80, '\x00', 0x10}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x10, 0x6, 0xb37}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'syztnl2\x00', r7, 0x4, 0x20, 0x4, 0x2, 0x4, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x20, 0x3, 0x1ff}}) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000a00)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan0\x00'}) [ 113.629033] audit: type=1400 audit(1748005568.172:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:06:08 executing program 5: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x6f, 0x9, 0x1, 0x18, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x7800, 0x9, 0xe5}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/200, 0xc8}], 0x2, &(0x7f0000000340)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x2140) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r0, 0x29, 0x2, 0xf1, 0x6, 0x40, @loopback, @loopback, 0x8, 0x20, 0x2, 0x1}}) r8 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) process_mrelease(r8, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', r7, 0x2f, 0x9, 0x8, 0x1, 0x40, @private1, @remote, 0x1, 0x8, 0x2, 0x932}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl0\x00', r9, 0x29, 0x6, 0x9, 0x7f, 0x30, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x40, 0x1, 0x400, 0x2}}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x20}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x54040}, 0x4000000) r11 = syz_open_dev$mouse(&(0x7f0000000880), 0x3000, 0x2) waitid$P_PIDFD(0x3, r11, &(0x7f00000008c0), 0x80000014, &(0x7f0000000940)) r12 = pidfd_getfd(r3, r5, 0x0) pidfd_getfd(r2, r12, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000a80)={'sit0\x00', &(0x7f0000000a00)={'sit0\x00', r0, 0x4, 0x1, 0x4, 0x7fffffff, 0x3, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x40, 0x80, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000b40)={'ip6_vti0\x00', r13, 0x29, 0xfd, 0xfd, 0x1f, 0x0, @mcast1, @mcast2, 0x8000, 0x8000, 0x9, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'ip6_vti0\x00', r14, 0x2f, 0x7f, 0x5, 0x7f, 0x60, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x8000, 0xffff, 0x5}}) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000d00)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000e00)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ec0)={'sit0\x00', &(0x7f0000000e40)={'ip6_vti0\x00', r14, 0x2f, 0x1, 0x7f, 0x0, 0x53, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @empty, 0x8, 0x21, 0xffffffff, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000f80)={'syztnl0\x00', &(0x7f0000000f00)={'syztnl2\x00', r0, 0x29, 0x7, 0x3, 0x20d, 0x77, @empty, @mcast2, 0xe, 0x8000, 0x8, 0x8000}}) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000002500)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000024c0)={&(0x7f0000001800)={0xcb0, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r13}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffff80}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x270, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa0}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xffc0, 0xff, 0x1, 0x7}, {0xffff, 0x0, 0x4, 0x80000000}, {0xa3bd, 0x6, 0x8, 0x7fff}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}]}}, {{0x8, 0x1, r9}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd5}}}]}}, {{0x8, 0x1, r18}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc000000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r19}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7f, 0x2, 0xd6, 0x4b6}]}}}]}}, {{0x8}, {0x2b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xdc}}, {0x8, 0x6, r9}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x40, 0x0, 0x60, 0x1}, {0x0, 0x9, 0xd6, 0xffffffff}, {0x8, 0x8, 0x7, 0x533f}, {0xb0, 0x5f, 0x9, 0x8}, {0x6, 0x7f, 0x0, 0x8}, {0x4, 0x7, 0x6, 0x4}, {0x7, 0x3f, 0x9, 0x7}, {0x81, 0x0, 0x9, 0x2}, {0x6, 0x14, 0x7, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6f3}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe51}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r15}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaf1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}]}}]}, 0xcb0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 13:06:08 executing program 6: r0 = socket$inet(0x2, 0x1, 0x1f) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}, {&(0x7f0000000100)=""/129, 0x81}, {&(0x7f00000001c0)=""/192, 0xc0}, {&(0x7f0000000280)=""/176, 0xb0}, {&(0x7f0000000340)=""/51, 0x33}, {&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000000440)=""/66, 0x42}], 0x8, &(0x7f0000000540)=""/92, 0x5c}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'ip6tnl0\x00', r1, 0x29, 0x17, 0x6, 0x2, 0x4e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x8, 0x8000, 0x1f, 0xffff0001}}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000840)=""/55, 0x37}], 0x2}, 0x10061) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x200, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1ea, 0x2a, [@tim={0x5, 0xe9, {0x1, 0x7b, 0x3, "79115af4dfc930af505163a5aaa9e4e22c319d2e35ee8d1bfa9d4381115a7faee6208845c658a2cfd44e410f453e14cab5a19cdfa02e6133a56abf84b0e24c07ad46d37067bb68390bebd7ef4d09b43222c1e387bd54b23423b627aaa15f239157192d47f1e5f65a9f70e2763f6777dada53ac654a3fb636ba9bc3fd04523c2ac50db4682f263ca2d48ddbcb5f7f697a73651fcf192b9ba6810d75b6a460d39ade6778ad23709efd6651339fa98dcbcca157993de22fb6e2e487b83a6e0791ece6ce3f0f643a6d121f7c3a89048b738b30a228f7818094ec6956f10f89b5c05b88b8c48c06f1"}}, @chsw_timing={0x68, 0x4, {0x7, 0x1}}, @ssid={0x0, 0xd, @random="f6cd9174b8b230bac89f92e6fc"}, @erp={0x2a, 0x1, {0x1}}, @tim={0x5, 0x96, {0x1f, 0x75, 0x5a, "81296b0a5077a4a3d09d249f59223a35faea7e7047f60dae69b5ed79cae50961423ca71bd8973f0064be676efa4c2184e49c82433a6d548ad8fe75b0f733e4807d86b5999beb80732f3a639d4d05444e78115ac3ef05fee96d3ef2acec960597613caa7e3457bb76b5a30dfb296e05232c8e15bb05cb5db8243762bd6f37b009937f0b02093a947524f970a65fdf5ea98ab36b"}}, @mic={0x8c, 0x10, {0x26c, "ce2e9afe3171", @short="8052ce84aa57c03f"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x40, 0x9}}, @prep={0x83, 0x25, @ext={{}, 0x81, 0x0, @device_b, 0x6, @broadcast, 0x3ff, 0xffffffff, @device_a, 0x8}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0xd8a6c7131bba6394}, 0x400c000) inotify_add_watch(r2, &(0x7f0000000c00)='./file0\x00', 0x804) r3 = inotify_init() r4 = inotify_add_watch(r2, &(0x7f0000000c40)='./file0\x00', 0x4000100) inotify_rm_watch(r3, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000cc0)={0x0, @l2={0x1f, 0x7fff, @none, 0x100, 0x1}, @hci={0x1f, 0x3, 0x3}, @l2tp={0x2, 0x0, @multicast1}, 0x8, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000c80)='syzkaller1\x00', 0x9, 0x9, 0x6}) inotify_add_watch(r3, &(0x7f0000000d40)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000d80)={{{@in=@empty, @in6=@empty}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000000e80)=0xe8) syz_mount_image$ext4(&(0x7f0000000ec0)='ext4\x00', &(0x7f0000000f00)='./file0\x00', 0x8001, 0x3, &(0x7f00000010c0)=[{&(0x7f0000000f40)="2bd7e9bb4f721ea24b738b4913bcd1d1ce34bdb710e11e9b2fa18bb1ab1f08e6bce75b", 0x23, 0x100000000}, {&(0x7f0000000f80)="b6f6df369d22c2d875df4a3d7bad4226e12238b571a39a0882746fbf51169e45b6b50e1c4957d09cbda792e0e3acc8a09cab7494ee07a372217e0043e59ec6e5d0e42d8d140e0adf7bb45affdcad0f60f7f17928ad0aeaf44fd21e2e1dc9f26a1960a2319e3d665fed1353967d5621c7afbf3ba14e6f207a37018cf9ea191bb81405a619aa130a244287fe274ef59c2e6caa42901fe167b29cfd6dd6c6e9d27072b3249f0fb6d51b157536f26d78986b6307", 0xb2, 0xfff}, {&(0x7f0000001040)="f7c6fbef377b8740f60004470f55b9e1d7526c18b6e433c7b80e63d1f835e892b8f4d36e02c8763eabd6b7a66ba218356c49d7b62e72b8371e40029d433ae782ad611901cb59dc37ed8af3edb1ab", 0x4e, 0x20}], 0x1, &(0x7f0000001140)={[{@data_err_ignore}], [{@subj_type={'subj_type', 0x3d, 'syzkaller1\x00'}}]}) open$dir(&(0x7f0000001180)='./file0\x00', 0x28000, 0x8) statx(0xffffffffffffffff, &(0x7f00000011c0)='./file0\x00', 0x6c33ff7d095a0e76, 0x7ff, &(0x7f0000001200)) inotify_rm_watch(r2, 0x0) 13:06:08 executing program 7: sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x805) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x600020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000880}, 0x4) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x6f7, 0x101400) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x5) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4010) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88054}, 0x41) syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r2) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r5, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000800), 0x80002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x110, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6gre0\x00', 0x0, 0x29, 0xe8, 0x4e, 0x0, 0x66, @loopback, @empty, 0x8000, 0x7800, 0x8, 0xd1fb}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000e00)={&(0x7f00000008c0), 0xc, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x218, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40080}, 0x20008000) [ 115.018951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.021799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.022994] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.025679] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.027080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.033270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.038671] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.039045] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.041836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.041840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.060943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.081296] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.091768] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.100260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.110961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.152355] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.165959] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.172946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.178740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.194403] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.289208] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.295551] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.300534] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.301768] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.304655] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.306844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.310695] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.312118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.313105] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.316182] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.316347] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.330015] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.332030] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.336461] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.338015] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.341267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.344179] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.345267] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.348041] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.383013] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.095961] Bluetooth: hci1: command tx timeout [ 117.096071] Bluetooth: hci0: command tx timeout [ 117.160212] Bluetooth: hci2: command tx timeout [ 117.287827] Bluetooth: hci3: command tx timeout [ 117.415502] Bluetooth: hci7: command tx timeout [ 117.479540] Bluetooth: hci5: command tx timeout [ 117.479557] Bluetooth: hci4: command tx timeout [ 117.479800] Bluetooth: hci6: command tx timeout [ 119.143811] Bluetooth: hci0: command tx timeout [ 119.144007] Bluetooth: hci1: command tx timeout [ 119.207927] Bluetooth: hci2: command tx timeout [ 119.335516] Bluetooth: hci3: command tx timeout [ 119.464561] Bluetooth: hci7: command tx timeout [ 119.528863] Bluetooth: hci5: command tx timeout [ 119.529281] Bluetooth: hci4: command tx timeout [ 119.530035] Bluetooth: hci6: command tx timeout [ 121.192333] Bluetooth: hci1: command tx timeout [ 121.193278] Bluetooth: hci0: command tx timeout [ 121.255867] Bluetooth: hci2: command tx timeout [ 121.383523] Bluetooth: hci3: command tx timeout [ 121.511998] Bluetooth: hci7: command tx timeout [ 121.575467] Bluetooth: hci6: command tx timeout [ 121.577636] Bluetooth: hci4: command tx timeout [ 121.578998] Bluetooth: hci5: command tx timeout [ 123.239819] Bluetooth: hci0: command tx timeout [ 123.241467] Bluetooth: hci1: command tx timeout [ 123.303498] Bluetooth: hci2: command tx timeout [ 123.432284] Bluetooth: hci3: command tx timeout [ 123.559721] Bluetooth: hci7: command tx timeout [ 123.623760] Bluetooth: hci4: command tx timeout [ 123.626268] Bluetooth: hci5: command tx timeout [ 123.627594] Bluetooth: hci6: command tx timeout [ 177.803865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.805974] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.808785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.829483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.836946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.923934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.928039] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.937826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.943001] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.945252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.951937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.963161] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.972919] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.989065] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.009759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.098230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.109480] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.114730] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.116857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.117861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.121659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.123761] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.129806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.141339] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.152064] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.159950] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.161773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.184995] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.187124] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.195629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.329873] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.332267] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.335604] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.417633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.419220] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.421814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.423197] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.426983] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.428977] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.433866] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 179.881666] Bluetooth: hci0: command tx timeout [ 180.008502] Bluetooth: hci1: command tx timeout [ 180.071465] Bluetooth: hci2: command tx timeout [ 180.199614] Bluetooth: hci4: command tx timeout [ 180.328459] Bluetooth: hci3: command tx timeout [ 180.328555] Bluetooth: hci6: command tx timeout [ 180.520595] Bluetooth: hci5: command tx timeout [ 180.583850] Bluetooth: hci7: command tx timeout [ 181.927936] Bluetooth: hci0: command tx timeout [ 182.055690] Bluetooth: hci1: command tx timeout [ 182.119550] Bluetooth: hci2: command tx timeout [ 182.248460] Bluetooth: hci4: command tx timeout [ 182.375484] Bluetooth: hci3: command tx timeout [ 182.377057] Bluetooth: hci6: command tx timeout [ 182.567725] Bluetooth: hci5: command tx timeout [ 182.632757] Bluetooth: hci7: command tx timeout [ 183.975863] Bluetooth: hci0: command tx timeout [ 184.104430] Bluetooth: hci1: command tx timeout [ 184.167699] Bluetooth: hci2: command tx timeout [ 184.296530] Bluetooth: hci4: command tx timeout [ 184.423707] Bluetooth: hci3: command tx timeout [ 184.425179] Bluetooth: hci6: command tx timeout [ 184.617466] Bluetooth: hci5: command tx timeout [ 184.680829] Bluetooth: hci7: command tx timeout [ 186.023570] Bluetooth: hci0: command tx timeout [ 186.153543] Bluetooth: hci1: command tx timeout [ 186.215465] Bluetooth: hci2: command tx timeout [ 186.344476] Bluetooth: hci4: command tx timeout [ 186.471670] Bluetooth: hci6: command tx timeout [ 186.471718] Bluetooth: hci3: command tx timeout [ 186.663535] Bluetooth: hci5: command tx timeout [ 186.727907] Bluetooth: hci7: command tx timeout [ 240.443866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.445467] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.452589] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.461330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.468662] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.512267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.518053] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.523698] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.530317] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.536000] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.587072] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.593719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.596662] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.607305] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.612700] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.664025] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.671180] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.677677] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.700280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.705710] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.886122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.901214] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.908720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.910612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.923112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.926860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.929281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.936679] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.948767] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.951100] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.952794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.985806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.987592] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.019148] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.020196] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.046684] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.054618] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.074683] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.077099] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.096547] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.535498] Bluetooth: hci0: command tx timeout [ 242.599515] Bluetooth: hci1: command tx timeout [ 242.663688] Bluetooth: hci2: command tx timeout [ 242.792332] Bluetooth: hci3: command tx timeout [ 243.047494] Bluetooth: hci5: command tx timeout [ 243.047518] Bluetooth: hci4: command tx timeout [ 243.111744] Bluetooth: hci6: command tx timeout [ 243.176665] Bluetooth: hci7: command tx timeout [ 244.584837] Bluetooth: hci0: command tx timeout [ 244.649706] Bluetooth: hci1: command tx timeout [ 244.711651] Bluetooth: hci2: command tx timeout [ 244.839748] Bluetooth: hci3: command tx timeout [ 245.095522] Bluetooth: hci5: command tx timeout [ 245.095837] Bluetooth: hci4: command tx timeout [ 245.160476] Bluetooth: hci6: command tx timeout [ 245.223433] Bluetooth: hci7: command tx timeout [ 246.631504] Bluetooth: hci0: command tx timeout [ 246.696606] Bluetooth: hci1: command tx timeout [ 246.759681] Bluetooth: hci2: command tx timeout [ 246.887518] Bluetooth: hci3: command tx timeout [ 247.143536] Bluetooth: hci4: command tx timeout [ 247.145348] Bluetooth: hci5: command tx timeout [ 247.207645] Bluetooth: hci6: command tx timeout [ 247.273471] Bluetooth: hci7: command tx timeout [ 248.679619] Bluetooth: hci0: command tx timeout [ 248.743858] Bluetooth: hci1: command tx timeout [ 248.808878] Bluetooth: hci2: command tx timeout [ 248.936679] Bluetooth: hci3: command tx timeout [ 249.191486] Bluetooth: hci4: command tx timeout [ 249.192870] Bluetooth: hci5: command tx timeout [ 249.255506] Bluetooth: hci6: command tx timeout [ 249.320428] Bluetooth: hci7: command tx timeout [ 303.501581] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.503078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.505886] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.508780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.511471] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.547825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.552261] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.552779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.555152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.561504] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.563780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.566423] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.575662] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.595780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.597770] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.602776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.607277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.608580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.612569] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.614674] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.683684] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.695253] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.696750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.700209] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.700930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.701641] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.706711] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.711240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.712230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.727515] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.729119] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.734738] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.744777] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.745714] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.754199] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.759036] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.775768] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.777855] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.780837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.797668] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 305.575502] Bluetooth: hci0: command tx timeout [ 305.639520] Bluetooth: hci1: command tx timeout [ 305.641467] Bluetooth: hci2: command tx timeout [ 305.703648] Bluetooth: hci3: command tx timeout [ 305.833433] Bluetooth: hci4: command tx timeout [ 305.835415] Bluetooth: hci5: command tx timeout [ 305.835483] Bluetooth: hci6: command tx timeout [ 305.960473] Bluetooth: hci7: command tx timeout [ 307.623513] Bluetooth: hci0: command tx timeout [ 307.689052] Bluetooth: hci2: command tx timeout [ 307.690189] Bluetooth: hci1: command tx timeout [ 307.752501] Bluetooth: hci3: command tx timeout [ 307.883864] Bluetooth: hci4: command tx timeout [ 307.884474] Bluetooth: hci6: command tx timeout [ 307.884945] Bluetooth: hci5: command tx timeout [ 308.008262] Bluetooth: hci7: command tx timeout [ 309.671605] Bluetooth: hci0: command tx timeout [ 309.735543] Bluetooth: hci2: command tx timeout [ 309.738580] Bluetooth: hci1: command tx timeout [ 309.799591] Bluetooth: hci3: command tx timeout [ 309.927917] Bluetooth: hci5: command tx timeout [ 309.927975] Bluetooth: hci6: command tx timeout [ 309.928511] Bluetooth: hci4: command tx timeout [ 310.055565] Bluetooth: hci7: command tx timeout [ 311.719766] Bluetooth: hci0: command tx timeout [ 311.783768] Bluetooth: hci1: command tx timeout [ 311.784130] Bluetooth: hci2: command tx timeout [ 311.849430] Bluetooth: hci3: command tx timeout [ 311.975602] Bluetooth: hci6: command tx timeout [ 311.975776] Bluetooth: hci4: command tx timeout [ 311.977224] Bluetooth: hci5: command tx timeout [ 312.105402] Bluetooth: hci7: command tx timeout [ 366.028477] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.030416] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.032137] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.039332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.041701] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.139649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.147805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.154953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.165037] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.168864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.270122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.274775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.277971] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.289511] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.298166] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.414240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.424166] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.427404] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.435810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.439236] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 366.453972] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.463291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.467629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.476029] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 366.480906] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 366.484678] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.488802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.496146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.499057] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.505422] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.510633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 366.512868] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.519900] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 366.523268] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.527001] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.530226] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 366.539146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.572131] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.583910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.594295] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.103470] Bluetooth: hci0: command tx timeout [ 368.232068] Bluetooth: hci1: command tx timeout [ 368.359890] Bluetooth: hci2: command tx timeout [ 368.551517] Bluetooth: hci3: command tx timeout [ 368.615462] Bluetooth: hci7: command tx timeout [ 368.616079] Bluetooth: hci4: command tx timeout [ 368.684453] Bluetooth: hci6: command tx timeout [ 368.685034] Bluetooth: hci5: command tx timeout [ 370.152698] Bluetooth: hci0: command tx timeout [ 370.280828] Bluetooth: hci1: command tx timeout [ 370.408452] Bluetooth: hci2: command tx timeout [ 370.599678] Bluetooth: hci3: command tx timeout [ 370.663855] Bluetooth: hci7: command tx timeout [ 370.664417] Bluetooth: hci4: command tx timeout [ 370.728444] Bluetooth: hci5: command tx timeout [ 370.728691] Bluetooth: hci6: command tx timeout [ 372.199587] Bluetooth: hci0: command tx timeout [ 372.327545] Bluetooth: hci1: command tx timeout [ 372.455532] Bluetooth: hci2: command tx timeout [ 372.649422] Bluetooth: hci3: command tx timeout [ 372.711641] Bluetooth: hci7: command tx timeout [ 372.713403] Bluetooth: hci4: command tx timeout [ 372.775602] Bluetooth: hci6: command tx timeout [ 372.775780] Bluetooth: hci5: command tx timeout [ 374.249660] Bluetooth: hci0: command tx timeout [ 374.376709] Bluetooth: hci1: command tx timeout [ 374.503448] Bluetooth: hci2: command tx timeout [ 374.695643] Bluetooth: hci3: command tx timeout [ 374.761414] Bluetooth: hci4: command tx timeout [ 374.761970] Bluetooth: hci7: command tx timeout [ 374.823529] Bluetooth: hci6: command tx timeout [ 374.823562] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 13:11:11 Registers: info registers vcpu 0 RAX=ffff88802fc58000 RBX=ffff88802fc57258 RCX=0000000000000001 RDX=1ffff11005f8ae4d RSI=ffff88802fc57758 RDI=ffff88802fc57268 RBP=ffff88802fc57758 RSP=ffff88802fc571b0 R8 =0000000000000001 R9 =ffff88802fc57298 R10=000000000003b3bd R11=0000000000022746 R12=0000000000000008 R13=ffff88802fc50000 R14=ffff88802fc57758 R15=ffff88802fc57258 RIP=ffffffff81353a22 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5634000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1226ab76f4 CR3=0000000018b0f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000ff0000000000000000 XMM02=000000000000000000ff000000000000 XMM03=0000000000000000000000ff00000000 XMM04=0000ff00000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff888029a23700 RCX=ffff888030a7792c RDX=0000000000000000 RSI=ffffffff84b0fa99 RDI=ffff888029a23afc RBP=ffff888030a77a30 RSP=ffff888030a77950 R8 =ffffffff867bea62 R9 =ffff888030a77a18 R10=000000000003b3bd R11=0000000000008699 R12=0000000000000000 R13=ffff888030a77a20 R14=ffff888029a23700 R15=ffff888030a779d8 RIP=ffffffff815abcca RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc310e11540 00000000 00000000 GS =0000 ffff8880e5734000 00000000 00000000 LDT=0000 fffffe4000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc310ffc620 CR3=0000000028bf3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000ff000000 XMM01=00000000000000000000000000ffffff XMM02=00362e322e325f4342494c4700352e32 XMM03=00000000000000000000004700352e32 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000