Warning: Permanently added '[localhost]:50711' (ECDSA) to the list of known hosts. 2025/06/14 09:12:14 fuzzer started 2025/06/14 09:12:15 dialing manager at localhost:42061 syzkaller login: [ 110.538990] cgroup: Unknown subsys name 'net' [ 110.670896] cgroup: Unknown subsys name 'cpuset' [ 110.711951] cgroup: Unknown subsys name 'rlimit' 2025/06/14 09:12:34 syscalls: 206 2025/06/14 09:12:34 code coverage: enabled 2025/06/14 09:12:34 comparison tracing: enabled 2025/06/14 09:12:34 extra coverage: enabled 2025/06/14 09:12:34 setuid sandbox: enabled 2025/06/14 09:12:34 namespace sandbox: enabled 2025/06/14 09:12:34 Android sandbox: enabled 2025/06/14 09:12:34 fault injection: enabled 2025/06/14 09:12:34 leak checking: enabled 2025/06/14 09:12:34 net packet injection: enabled 2025/06/14 09:12:34 net device setup: enabled 2025/06/14 09:12:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/14 09:12:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/14 09:12:34 USB emulation: enabled 2025/06/14 09:12:34 hci packet injection: enabled 2025/06/14 09:12:34 wifi device emulation: enabled 2025/06/14 09:12:34 802.15.4 emulation: enabled 2025/06/14 09:12:35 fetching corpus: 0, signal 0/0 (executing program) 2025/06/14 09:12:36 starting 8 fuzzer processes 09:12:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$unix(r0, 0x0, &(0x7f0000000040), 0x80000) r3 = accept$unix(r1, 0x0, &(0x7f0000000080)) accept4$unix(r3, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r3, 0x0, &(0x7f0000000180)="0c553b816cc97d0309e2f20011b7518dce57f1c57c56a22db82e1edeea2fabf13e2425bd0e0135c2e5a427ac60bae6ab82a06c2385d19531", 0x38, 0x0, 0x1}, 0x2) r4 = accept$unix(r2, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1010, r0, 0x7e7de000) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x20, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4810}, 0x40) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000340)=""/4096) socketpair(0x1a, 0x4, 0xc8, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r5, &(0x7f0000001380)=@abs, &(0x7f0000001400)=0x6e) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001440)={0x5, 0x86, 0x2, 0xffff}, 0x14) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x40, 0x0, 0x200, 0x1, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000002900)={0x88, 0x0, &(0x7f0000001840)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001600)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000001580)=""/104, 0x68, 0x2, 0x1}}, &(0x7f0000001680)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f00000017c0)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000016c0)=""/215, 0xd7, 0x1, 0xf}, @fd={0x66642a85, 0x0, r4}}, 0xfffffffffffffffe}}], 0x1000, 0x0, &(0x7f0000001900)="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"}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000002940)=0x2, 0x4) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000003e80), 0x50000, 0x0) recvmsg$unix(r7, &(0x7f00000044c0)={&(0x7f0000003ec0)=@abs, 0x6e, &(0x7f0000004400)=[{&(0x7f0000003f40)=""/255, 0xff}, {&(0x7f0000004040)=""/85, 0x55}, {&(0x7f00000040c0)=""/138, 0x8a}, {&(0x7f0000004180)=""/17, 0x11}, {&(0x7f00000041c0)=""/232, 0xe8}, {&(0x7f00000042c0)=""/117, 0x75}, {&(0x7f0000004340)=""/139, 0x8b}], 0x7, &(0x7f0000004480)=[@cred={{0x1c}}], 0x20}, 0x20) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000004500), 0x800) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000004740)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004700)={&(0x7f0000004680)={0x60, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1c7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x613345f87ec1f5a}]}, 0x60}}, 0x0) 09:12:36 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x800) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)) personality(0x4940006) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008800}, 0x24000880) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000480)="4924f1caff89dc9ec9eb0eb7b9865aef", 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10002}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8}]}, 0x1c}}, 0x4880) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, r6, 0x120, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x10) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf9e64000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000780)="1445b1ff7dc0e08c95e47875a5672d6b", 0x10) 09:12:36 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=0xffffffffffffffff, 0x12) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @sack_perm], 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x84, 0x8, 0x5, 0xa, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x5, 0x8a}}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x842000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4800) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0xc4ae6d0a1be0b9}, 0x24000007) r2 = socket(0x18, 0xa, 0x80000001) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x2f, 0x38, 0x6, 0x9, 0x11, @loopback, @remote, 0x10, 0x80, 0x0, 0x1f}}) r4 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', r3, 0x2f, 0x3, 0x1, 0x4, 0x0, @local, @local, 0x8000, 0x8, 0x3, 0x9}}) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000580)={0x800, 0x705, 0x7f, 0x0, 0x5, 0x1ff, 0x40, 0x1}, &(0x7f00000005c0)={0x9, 0x6, 0x6, 0xfff, 0x3, 0x5, 0x7, 0x1}, &(0x7f0000000600)={0x4, 0x8, 0x7ff, 0x7ff, 0x4, 0x81, 0xffff, 0x3}, &(0x7f0000000680)={r5, r6+10000000}, &(0x7f0000000700)={&(0x7f00000006c0)={[0x68c0]}, 0x8}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl2\x00', r3, 0x4, 0x5, 0x1, 0x7fffffff, 0x8, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8, 0x350, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'syztnl0\x00', r7, 0x2f, 0x8, 0x20, 0xffffffff, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x80, 0x117, 0x3}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001d00)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000008c0)=""/174, 0xae}, {&(0x7f0000000980)=""/44, 0x2c}, {&(0x7f00000009c0)=""/217, 0xd9}, {&(0x7f0000000ac0)=""/38, 0x26}, {&(0x7f0000000b00)=""/34, 0x22}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/96, 0x60}], 0x7, &(0x7f0000001c40)=""/112, 0x70}, 0x0, 0x40000100}, 0x1ff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001d80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x44, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001f40)={'sit0\x00', &(0x7f0000001ec0)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x88, 0x4, 0x4, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x1, 0x7f, 0x3}}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4080) [ 132.038364] audit: type=1400 audit(1749892356.941:7): avc: denied { execmem } for pid=283 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:12:36 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x801) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/84) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/174) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000001c0)=""/196) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x3, 0x0, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, 0x700, 0x7800, 0x4, 0x7ff}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x80100, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000011}, 0x8800) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000600)=""/206) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000700)=""/3) r4 = memfd_secret(0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000ac0)={0xe4, 0x0, &(0x7f0000000980)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000740)={@flat=@binder={0x73622a85, 0x10a, 0x1}, @fda={0x66646185, 0xa, 0x2, 0x2e}, @fd}, &(0x7f00000007c0)={0x0, 0x18, 0x38}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000800)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x4, 0x0, 0x20}, @fda={0x66646185, 0x8, 0x0, 0x29}}, &(0x7f0000000880)={0x0, 0x18, 0x38}}, 0x1440}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000008c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x1}}, &(0x7f0000000940)={0x0, 0x18, 0x30}}}, @exit_looper, @exit_looper, @decrefs={0x40046307, 0x3}], 0x21, 0x0, &(0x7f0000000a80)="e5c585e64e47b656a76a431e6965c0dcca468dfa2b79eeb90547dd3253ea3c43a8"}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b00)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001d80)={0x58, 0x0, &(0x7f0000000d00)=[@acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000c40)={@ptr={0x70742a85, 0x8, &(0x7f0000000b40)=""/203, 0xcb, 0x1, 0x1a}, @fda={0x66646185, 0x9, 0x1, 0x33}, @fda={0x66646185, 0x4, 0x1, 0xc}}, &(0x7f0000000cc0)={0x0, 0x28, 0x48}}}], 0x1000, 0x0, &(0x7f0000000d80)="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"}) syz_open_dev$evdev(&(0x7f0000001dc0), 0x3, 0x480c00) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x3c, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x25}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000001f00)) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000001f40)=""/101) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000001fc0)) 09:12:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x4000050) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x54}}, 0x4) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4008851) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x41c}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x130, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}]}, @NL802154_ATTR_SEC_DEVKEY={0xd4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfff}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x32000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x130}, 0x1, 0x0, 0x0, 0x4040000}, 0x44081) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000940)={&(0x7f0000000780), 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xcc, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xd7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc0}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x72075a5f8d13397}, 0x1) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, r7, 0x333, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x8014) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x30}}, 0x840) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000090) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x6c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x11) 09:12:36 executing program 6: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x88, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0xd2b261a9a2b8ed6b, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/146, 0x92, 0x0, 0x28}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0xa}, @fda={0x66646185, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x8, 0x1, 0x38}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}], 0xf5, 0x0, &(0x7f0000000300)="636690e5ef6e287c509cbcd4ee2f71cb2f40f256f6838d3416d18782bebd318a4043390d06647c99e4b4c80205f4baf751832db54ac7601e3a7339f1e279a888c43f9c4178e81666122892a29b0f8c8831814af6b9ec365066da85f80530595b401259ba18ac5756b9478b087fd705920958ba6017e7522e7be31ed9bc27c4a6186ee81b27ff04baeab6ac863d3432c42827adbaf900549fb825757353ac44defbbd2254aa74a86c5b1729f71e986b967d54a41e8dfc840ef70d6d55b5cf41f94cd75bf977521bfc727a7ad227cb6870ed8965ac224481fade067d465d09f376cbf82eb33836182f2cc4c059aaa3572fdea967a974"}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000480)={0x0, 0x3}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000004c0)=0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000640)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/10, 0xa, 0x0, &(0x7f0000000540)=""/204, 0xcc}, &(0x7f0000000680)=0x40) r1 = memfd_secret(0x80000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0, 0x0}) write$cgroup_pid(r1, &(0x7f0000000740)=r2, 0x12) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000800)=0xffff, 0x4) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000840)=""/45) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000880)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4004, @fd_index=0x1, 0xf3, 0x0, 0x0, 0x9, 0x0, {0x1}}, 0x7) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'ip6_vti0\x00', r3, 0x4, 0x1f, 0x40, 0x5, 0x71, @mcast2, @loopback, 0x40, 0x20, 0x64a1, 0x1}}) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'ip6gre0\x00', r3, 0x4, 0x3f, 0x5, 0x6, 0x8, @mcast1, @mcast1, 0x20, 0x10, 0x4, 0xe7}}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0x38, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000c80)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d00), 0x100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000d40)) 09:12:37 executing program 7: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@timestamp], 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x935, 0x0, 0x5b9, 0x800}, 0x14) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000140)=""/241) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000280)=""/239) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x20002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000003c0)) socketpair(0x2a, 0x1, 0xbe, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_buf(r4, 0x6, 0x24, &(0x7f0000000440)="e7da17585f3e9c38476907881c188826e3b414882ea4b852c31845bf56fd94d64acc7e1d1a6f6997698b9c01511e9302d261430dc73feaa3f6d6de68334f9f0962399d481cbb296defecb6823e99d1a2e24560faea8310a69b8e4ca7b49d10b717b3eb172d584980fee678099d99435e54226ff8d392481414fb16f94dd8f0e4f8b0cd5cd9997de8f5df293e20ff3c6524a41a01", 0x94) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x79571e3dd325590c, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r5) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x8840) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x4000010, r2, 0x0) r7 = memfd_secret(0x0) ioctl$EVIOCSREP(r7, 0x40084503, &(0x7f0000000680)=[0x0, 0x6]) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) 09:12:37 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x1, 0x2, 0x1f, 0x40}, {0x7f, 0x80, 0xf4, 0x3}, {0x8af, 0x80, 0x7f, 0x8}, {0x6, 0x9, 0x9, 0x8}, {0x1, 0x3, 0x6, 0x80}, {0x7, 0xff, 0x81, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000100)=r1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000140)={r1, 0x80000001, 0x3f}) munlockall() setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e21, 0x6, @private2, 0x4}}, 0x0, 0x0, 0x40, 0x0, "a8cc8c91bbf6e90e82688ed28e1f531dbf0159864c2329c85beb6e561c6b64cd99d4b9737c4d8fd3d803d6d3efabeaa2d40ca8316f5b7aba1379d99fae3d8430ecd5b2365b8d33291ad195d80ddc4202"}, 0xd8) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) r2 = epoll_create(0x7f) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x600000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "ec5eeae1f70c46"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000014c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000016c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000018c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001ac0)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x20, "6adc2f59814ae2"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002ac0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002cc0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000002ec0)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "3ceb452902cd09"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000003ec0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000040c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000538c0)={0x9, [{r3}, {}, {}, {0x0, r4}, {r5}, {}, {}, {r6, r7}, {}, {0x0, r8}, {}, {r9}, {}, {r10}, {}, {r11}, {0x0, r12}, {}, {}, {0x0, r13}], 0x9, "c5fd2a3b7b99df"}) [ 133.556054] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.561285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.564282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.574462] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.583839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.607128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 133.613859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 133.617854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 133.629840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 133.635725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 133.666365] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 133.669220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 133.674162] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 133.679911] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.683638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 133.688945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 133.701285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.705113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.719349] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.724145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.728118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.756526] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 133.760153] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 133.763857] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 133.770381] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 133.775850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 133.811527] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 133.815321] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.818091] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.831098] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 133.837134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 133.839513] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.843383] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.869855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 133.881837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 133.939560] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 133.960479] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 133.976187] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 133.990950] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 133.998514] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 135.698297] Bluetooth: hci0: command tx timeout [ 135.761669] Bluetooth: hci2: command tx timeout [ 135.762270] Bluetooth: hci1: command tx timeout [ 135.825655] Bluetooth: hci3: command tx timeout [ 135.888800] Bluetooth: hci6: command tx timeout [ 135.952985] Bluetooth: hci5: command tx timeout [ 135.953888] Bluetooth: hci4: command tx timeout [ 136.080942] Bluetooth: hci7: command tx timeout [ 137.744980] Bluetooth: hci0: command tx timeout [ 137.809208] Bluetooth: hci1: command tx timeout [ 137.810085] Bluetooth: hci2: command tx timeout [ 137.872784] Bluetooth: hci3: command tx timeout [ 137.937165] Bluetooth: hci6: command tx timeout [ 138.001184] Bluetooth: hci4: command tx timeout [ 138.002196] Bluetooth: hci5: command tx timeout [ 138.129675] Bluetooth: hci7: command tx timeout [ 139.792685] Bluetooth: hci0: command tx timeout [ 139.858651] Bluetooth: hci2: command tx timeout [ 139.859161] Bluetooth: hci1: command tx timeout [ 139.920699] Bluetooth: hci3: command tx timeout [ 139.984648] Bluetooth: hci6: command tx timeout [ 140.048980] Bluetooth: hci4: command tx timeout [ 140.049494] Bluetooth: hci5: command tx timeout [ 140.176755] Bluetooth: hci7: command tx timeout [ 141.840643] Bluetooth: hci0: command tx timeout [ 141.904807] Bluetooth: hci1: command tx timeout [ 141.905265] Bluetooth: hci2: command tx timeout [ 141.968651] Bluetooth: hci3: command tx timeout [ 142.032663] Bluetooth: hci6: command tx timeout [ 142.097135] Bluetooth: hci4: command tx timeout [ 142.097649] Bluetooth: hci5: command tx timeout [ 142.224897] Bluetooth: hci7: command tx timeout [ 193.086967] syz-executor.2 (290) used greatest stack depth: 24912 bytes left [ 193.455700] syz-executor.4 (293) used greatest stack depth: 24848 bytes left [ 195.437980] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.444973] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.450199] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.462428] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.469268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.683856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.693770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.698232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.711039] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.716543] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.760225] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.785387] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.800217] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.821686] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.827185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.885431] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 195.919467] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 195.926221] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 195.936747] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.959813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.963300] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 195.969208] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 195.973176] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 195.976658] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.980333] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.989163] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.993951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 195.996068] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.996389] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 196.002986] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 196.014123] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 196.018301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 196.022337] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.031769] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 196.042436] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 196.086337] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 196.117197] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.130227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.142363] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 196.209845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 197.520984] Bluetooth: hci0: command tx timeout [ 197.777700] Bluetooth: hci1: command tx timeout [ 197.905976] Bluetooth: hci2: command tx timeout [ 198.097871] Bluetooth: hci3: command tx timeout [ 198.097942] Bluetooth: hci6: command tx timeout [ 198.160810] Bluetooth: hci4: command tx timeout [ 198.290251] Bluetooth: hci7: command tx timeout [ 198.416784] Bluetooth: hci5: command tx timeout [ 199.569829] Bluetooth: hci0: command tx timeout [ 199.825656] Bluetooth: hci1: command tx timeout [ 199.952655] Bluetooth: hci2: command tx timeout [ 200.144980] Bluetooth: hci6: command tx timeout [ 200.145472] Bluetooth: hci3: command tx timeout [ 200.209737] Bluetooth: hci4: command tx timeout [ 200.337657] Bluetooth: hci7: command tx timeout [ 200.466636] Bluetooth: hci5: command tx timeout [ 201.616664] Bluetooth: hci0: command tx timeout [ 201.872843] Bluetooth: hci1: command tx timeout [ 202.002614] Bluetooth: hci2: command tx timeout [ 202.194658] Bluetooth: hci3: command tx timeout [ 202.195161] Bluetooth: hci6: command tx timeout [ 202.256970] Bluetooth: hci4: command tx timeout [ 202.384696] Bluetooth: hci7: command tx timeout [ 202.512836] Bluetooth: hci5: command tx timeout [ 203.664888] Bluetooth: hci0: command tx timeout [ 203.921022] Bluetooth: hci1: command tx timeout [ 204.048701] Bluetooth: hci2: command tx timeout [ 204.241201] Bluetooth: hci6: command tx timeout [ 204.241691] Bluetooth: hci3: command tx timeout [ 204.304690] Bluetooth: hci4: command tx timeout [ 204.432794] Bluetooth: hci7: command tx timeout [ 204.560661] Bluetooth: hci5: command tx timeout [ 257.702163] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.707914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.713325] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.732566] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.740701] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.892457] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.895382] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.899085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.904645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.907846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.961084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.966725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.988230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.995486] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.004110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.095507] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.102026] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 258.107133] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.122366] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 258.123184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.137267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.137419] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 258.155666] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 258.159400] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 258.177142] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 258.178995] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 258.181958] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 258.189265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 258.196442] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.203028] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 258.206083] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 258.209783] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 258.220141] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 258.238490] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 258.252853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 258.274770] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 258.305274] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 258.332717] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 258.367498] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 258.373108] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 259.793804] Bluetooth: hci0: command tx timeout [ 259.984734] Bluetooth: hci1: command tx timeout [ 260.113158] Bluetooth: hci2: command tx timeout [ 260.241821] Bluetooth: hci3: command tx timeout [ 260.304796] Bluetooth: hci5: command tx timeout [ 260.369773] Bluetooth: hci4: command tx timeout [ 260.496685] Bluetooth: hci7: command tx timeout [ 260.560706] Bluetooth: hci6: command tx timeout [ 261.840907] Bluetooth: hci0: command tx timeout [ 262.032793] Bluetooth: hci1: command tx timeout [ 262.160708] Bluetooth: hci2: command tx timeout [ 262.290647] Bluetooth: hci3: command tx timeout [ 262.354392] Bluetooth: hci5: command tx timeout [ 262.417777] Bluetooth: hci4: command tx timeout [ 262.545012] Bluetooth: hci7: command tx timeout [ 262.611599] Bluetooth: hci6: command tx timeout [ 263.888694] Bluetooth: hci0: command tx timeout [ 264.081640] Bluetooth: hci1: command tx timeout [ 264.209794] Bluetooth: hci2: command tx timeout [ 264.339269] Bluetooth: hci3: command tx timeout [ 264.401617] Bluetooth: hci5: command tx timeout [ 264.464728] Bluetooth: hci4: command tx timeout [ 264.594649] Bluetooth: hci7: command tx timeout [ 264.656658] Bluetooth: hci6: command tx timeout [ 265.936703] Bluetooth: hci0: command tx timeout [ 266.130947] Bluetooth: hci1: command tx timeout [ 266.257128] Bluetooth: hci2: command tx timeout [ 266.385815] Bluetooth: hci3: command tx timeout [ 266.449789] Bluetooth: hci5: command tx timeout [ 266.513648] Bluetooth: hci4: command tx timeout [ 266.640700] Bluetooth: hci7: command tx timeout [ 266.705611] Bluetooth: hci6: command tx timeout [ 320.227608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.230953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.246305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.269245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.277926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.552850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.556202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.560096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.572056] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.576294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 320.579941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.581849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 320.585295] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 320.592409] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 320.610232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 320.634882] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.646485] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.650293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.662341] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.678160] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.684074] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.705115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.711218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.734431] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.740868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 321.230992] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 321.232787] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.257260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 321.260247] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 321.262082] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 321.263736] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 321.268011] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 321.269422] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 321.364375] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 321.391540] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 321.400873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.400932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 321.405886] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 321.407773] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 321.432308] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 322.321801] Bluetooth: hci0: command tx timeout [ 322.640911] Bluetooth: hci2: command tx timeout [ 322.641677] Bluetooth: hci1: command tx timeout [ 322.768706] Bluetooth: hci3: command tx timeout [ 322.832674] Bluetooth: hci4: command tx timeout [ 323.537039] Bluetooth: hci6: command tx timeout [ 323.537091] Bluetooth: hci5: command tx timeout [ 323.538037] Bluetooth: hci7: command tx timeout [ 324.368657] Bluetooth: hci0: command tx timeout [ 324.689691] Bluetooth: hci1: command tx timeout [ 324.690161] Bluetooth: hci2: command tx timeout [ 324.817054] Bluetooth: hci3: command tx timeout [ 324.880906] Bluetooth: hci4: command tx timeout [ 325.585006] Bluetooth: hci5: command tx timeout [ 325.585483] Bluetooth: hci7: command tx timeout [ 325.586021] Bluetooth: hci6: command tx timeout [ 326.418605] Bluetooth: hci0: command tx timeout [ 326.737956] Bluetooth: hci2: command tx timeout [ 326.738446] Bluetooth: hci1: command tx timeout [ 326.864667] Bluetooth: hci3: command tx timeout [ 326.928654] Bluetooth: hci4: command tx timeout [ 327.633902] Bluetooth: hci6: command tx timeout [ 327.634391] Bluetooth: hci7: command tx timeout [ 327.634895] Bluetooth: hci5: command tx timeout [ 328.464775] Bluetooth: hci0: command tx timeout [ 328.785663] Bluetooth: hci2: command tx timeout [ 328.786146] Bluetooth: hci1: command tx timeout [ 328.912629] Bluetooth: hci3: command tx timeout [ 328.976663] Bluetooth: hci4: command tx timeout [ 329.682853] Bluetooth: hci5: command tx timeout [ 329.683331] Bluetooth: hci7: command tx timeout [ 329.684671] Bluetooth: hci6: command tx timeout [ 380.524340] syz-executor.7 (8204) used greatest stack depth: 24544 bytes left [ 382.630394] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.639028] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.644398] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.656237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.663820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.760090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.769863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.773112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.779806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.793281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 383.035394] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 383.042412] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 383.044315] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.047151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 383.054446] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 383.068035] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 383.082477] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.085185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.095470] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 383.110497] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 383.112503] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 383.115847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 383.117716] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 383.121255] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 383.127151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 383.129158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.129366] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 383.146542] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.148494] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 383.162300] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.168223] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 383.169087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 383.169940] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 383.175147] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 383.184474] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 383.188468] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.210083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.226081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.241052] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 383.289180] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 384.720657] Bluetooth: hci0: command tx timeout [ 384.848868] Bluetooth: hci1: command tx timeout [ 385.169788] Bluetooth: hci3: command tx timeout [ 385.232799] Bluetooth: hci5: command tx timeout [ 385.297921] Bluetooth: hci4: command tx timeout [ 385.298508] Bluetooth: hci6: command tx timeout [ 385.360649] Bluetooth: hci2: command tx timeout [ 385.424874] Bluetooth: hci7: command tx timeout [ 386.768716] Bluetooth: hci0: command tx timeout [ 386.897866] Bluetooth: hci1: command tx timeout [ 387.216702] Bluetooth: hci3: command tx timeout [ 387.282363] Bluetooth: hci5: command tx timeout [ 387.344717] Bluetooth: hci4: command tx timeout [ 387.345180] Bluetooth: hci6: command tx timeout [ 387.409497] Bluetooth: hci2: command tx timeout [ 387.473615] Bluetooth: hci7: command tx timeout [ 388.816655] Bluetooth: hci0: command tx timeout [ 388.944790] Bluetooth: hci1: command tx timeout [ 389.264688] Bluetooth: hci3: command tx timeout [ 389.329706] Bluetooth: hci5: command tx timeout [ 389.394085] Bluetooth: hci6: command tx timeout [ 389.395706] Bluetooth: hci4: command tx timeout [ 389.456683] Bluetooth: hci2: command tx timeout [ 389.520686] Bluetooth: hci7: command tx timeout [ 390.865745] Bluetooth: hci0: command tx timeout [ 390.992895] Bluetooth: hci1: command tx timeout [ 391.312684] Bluetooth: hci3: command tx timeout [ 391.378634] Bluetooth: hci5: command tx timeout [ 391.440644] Bluetooth: hci6: command tx timeout [ 391.441071] Bluetooth: hci4: command tx timeout [ 391.504684] Bluetooth: hci2: command tx timeout [ 391.568624] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 09:17:43 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=1ffff1100607cfa7 RCX=ffff8880303e7cbc RDX=0000000000000001 RSI=ffffffff85c1cc40 RDI=ffff888016835d00 RBP=ffffffff85c1cc40 RSP=ffff8880303e7cb0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff819d4dfd R13=0000000000000202 R14=ffff888016835280 R15=0000000000000002 RIP=ffffffff8151acda RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6fed301540 00000000 00000000 GS =0000 ffff8880e562f000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6fed505d5c CR3=000000002dbfb000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff888029770000 RCX=0000000000000001 RDX=0000000088304701 RSI=0000000000000000 RDI=ffff88800d497808 RBP=ffff88800d497808 RSP=ffff88802f3efc70 R8 =0000000000000000 R9 =ffffffff87a6ab88 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81518c9c RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb5e438b540 00000000 00000000 GS =0000 ffff8880e572f000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558d6c57a868 CR3=0000000024b47000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000