Warning: Permanently added '[localhost]:19870' (ECDSA) to the list of known hosts. 2025/06/21 08:21:11 fuzzer started 2025/06/21 08:21:12 dialing manager at localhost:33119 syzkaller login: [ 90.254521] cgroup: Unknown subsys name 'net' [ 90.397671] cgroup: Unknown subsys name 'cpuset' [ 90.433710] cgroup: Unknown subsys name 'rlimit' 2025/06/21 08:21:27 syscalls: 201 2025/06/21 08:21:27 code coverage: enabled 2025/06/21 08:21:27 comparison tracing: enabled 2025/06/21 08:21:27 extra coverage: enabled 2025/06/21 08:21:27 setuid sandbox: enabled 2025/06/21 08:21:27 namespace sandbox: enabled 2025/06/21 08:21:27 Android sandbox: enabled 2025/06/21 08:21:27 fault injection: enabled 2025/06/21 08:21:27 leak checking: enabled 2025/06/21 08:21:27 net packet injection: enabled 2025/06/21 08:21:27 net device setup: enabled 2025/06/21 08:21:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/21 08:21:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/21 08:21:27 USB emulation: enabled 2025/06/21 08:21:27 hci packet injection: enabled 2025/06/21 08:21:27 wifi device emulation: enabled 2025/06/21 08:21:27 802.15.4 emulation: enabled 2025/06/21 08:21:27 fetching corpus: 0, signal 0/0 (executing program) 2025/06/21 08:21:29 starting 8 fuzzer processes 08:21:29 executing program 0: sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x120, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x9}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x4000016) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x10, 0x10, 0x3ff, 0x7fffffff, {{0x15, 0x4, 0x2, 0x1e, 0x54, 0x64, 0x0, 0x6, 0x45e2da75fb8e84d2, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x24}, {[@rr={0x7, 0x1b, 0xe8, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}, @dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x21}]}, @timestamp_addr={0x44, 0x14, 0x63, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x4}, {@loopback, 0x15ff}]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x8, 0x91, 0x0, 0x3, [0x40]}, @end]}}}}}) r1 = accept$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @initdev}, &(0x7f0000000300)=0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000003c0)=0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x73, 0x2, 0x7, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x10, 0x7800, 0x4, 0x7ff}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x7c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40854) socket$inet(0x2, 0x80005, 0x7fffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x14c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_macvtap\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ce436041143bbc8c52b9eeaf790420eb15fde8b5e061b95e"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8ce48c63332a35eae538486b11375dce84ca46e2776f4842"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "551bc5c1045c39c2609fc29b5c7140e623a56cf6b1d4efba"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x14c}, 0x1, 0x0, 0x0, 0x404c000}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000040) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x5c, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x74, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0x84) 08:21:29 executing program 1: sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8f20ff22cfe70fd2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0xa0}}, 0x4090) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x700, 0x80, 0x4, 0xffff, {{0x23, 0x4, 0x0, 0x27, 0x8c, 0x66, 0x0, 0xfb, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@generic={0x86, 0x10, "0743332af3aab609344b9c95f703"}, @rr={0x7, 0x13, 0x99, [@rand_addr=0x64010100, @local, @remote, @broadcast]}, @timestamp={0x44, 0xc, 0xca, 0x0, 0xd, [0x3f, 0x40]}, @rr={0x7, 0x1b, 0x88, [@empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010102]}, @lsrr={0x83, 0xf, 0x84, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local]}, @generic={0x94, 0x10, "b6d06a82684f2b034304f42d9850"}, @generic={0x7, 0x4, "a382"}, @timestamp={0x44, 0x8, 0x7, 0x0, 0x5, [0x5]}]}}}}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x44810) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x13000}]}, 0x48}, 0x1, 0x0, 0x0, 0x40810}, 0x40) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffff00}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xcf102007906b78c4}, 0x4004084) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000000) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000900)=0x7, &(0x7f0000000940)=0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4e8e7de}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b40)={'tunl0\x00', r0, 0x7, 0x40, 0x1000, 0x500000, {{0x21, 0x4, 0x1, 0x5, 0x84, 0x66, 0x0, 0x3f, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x54, 0xf4, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@empty, 0x800}, {@multicast1, 0xaefa}, {@multicast2, 0x1}, {@rand_addr=0x64010102, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@remote, 0xcbf00000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0xfff}, {@remote, 0x600000}]}, @rr={0x7, 0xb, 0x69, [@rand_addr=0x64010101, @empty]}, @ssrr={0x89, 0x3, 0xbe}, @rr={0x7, 0xb, 0x1f, [@dev={0xac, 0x14, 0x14, 0x1b}, @loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x188, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x8}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, r4, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40004) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000010c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x60, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 08:21:29 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x7, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}, 0x5) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x100, &(0x7f0000000080)=0x2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={0x300, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xe0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x40}, @NL802154_DEVKEY_ATTR_ID={0xa8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xffffffffffff0183}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x1a8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc88}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc685}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffb3eb3b4d}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0x8c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffff2f2d}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3ff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x300}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x38, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x48}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4004004) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'tunl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x10, 0x7, 0xff, 0xdbe, {{0x1d, 0x4, 0x0, 0xb, 0x74, 0x65, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x3c, 0xc1, 0x3, 0xc, [{@multicast1, 0x2}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x1}, {@private=0xa010102, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x3}, {@local, 0x9}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x1c, 0xb1, 0x3, 0x6, [{@rand_addr=0x64010101, 0x1000}, {@multicast1, 0x20}, {@remote, 0xffffffff}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6tnl0\x00', r2, 0x29, 0x4, 0x3, 0x3, 0x2a, @remote, @empty, 0x80, 0x80, 0x1, 0x2}}) r3 = syz_open_dev$vcsn(&(0x7f0000000800), 0x7, 0x82100) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x1, &(0x7f0000000840), &(0x7f0000000880)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x600, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6e5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xba}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20040800) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000002, 0x40010, r3, 0x10000000) r8 = socket(0x4664c9c154b7cd26, 0x80000, 0x3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3a0}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x404c044}, 0x20000c40) 08:21:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1ff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0xcd016908ef0c5018, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000001}, 0x4001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r2, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x35}}}}, ["", "", "", ""]}, 0x28}}, 0x14) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x4004000) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x20000010) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r3, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}]}, 0x38}}, 0x800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r4, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004091}, 0x14) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4001020}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4080844) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), r0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, r6, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3d}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000cc0)={'wpan0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f0000000d00), r5) 08:21:29 executing program 4: r0 = socket$inet(0x2, 0x6, 0x7f00000) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast1, 0x4e24, 0x2, 0x4e23, 0x0, 0xa, 0x1a0, 0x80, 0x16}, {0xfffffffffffffff9, 0xfffffffffffffffd, 0x4, 0x101, 0x7, 0x75dc00000, 0x3}, {0x7, 0x80000001, 0x9, 0xffffffff}, 0x5, 0x0, 0x2, 0x1, 0x3}, {{@in6=@private1, 0x4d4, 0x3c}, 0x2, @in=@multicast1, 0x34ff, 0x3, 0x1, 0x0, 0x40, 0x3, 0x33}}, 0xe8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r1, &(0x7f0000000100)=@nl=@unspec, 0x80) r2 = accept4(r1, &(0x7f0000000180)=@hci, &(0x7f0000000200)=0x80, 0x80000) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000240)=0x4f, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000fc0)=@filter={'filter\x00', 0xe, 0x3, 0xcca, [0x0, 0x200002c0, 0x20000e24, 0x20000f2a], 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x5, 0x40, 0x88f5, 'macvtap0\x00', 'ip6gre0\x00', 'macvlan0\x00', 'veth0_to_bond\x00', @remote, [0xff, 0xff, 0x0, 0x1c107904f2fe9cfa, 0xff, 0xff], @local, [0xff, 0xfee03f46a709b25f, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x15e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0x6, 0x8, 0x1, 0x0, 0x0, "0085dd84489d4d150bb2bb863d5ba096f6df6b29614c10a625bf6028bb357197694d930664cbf751a3c0cf0cecf3f069cc4a3eccff00366b3e8d620828d76e1d"}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x400, 0x1, 0x8000, 0x1, 0x0, "eb503ae28b3d974b2330f72a14ac57a19dc809416697833c2a5637ff4d5b9141552c109afaed129e57fdd1621f7b707b4c5b871d86a2ca287fc0b67407a78bbf"}}}], @common=@ERROR={'ERROR\x00', 0x20, {"89ac68493ecfe050dfc43b0023f29002ac865c5aae94ad50ab0c6cd58869"}}}, {0x3, 0x4, 0x6558, 'ip6gre0\x00', 'syz_tun\x00', 'ip6gretap0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff], @broadcast, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x92e, 0x95e, 0x98e, [@among={{'among\x00', 0x0, 0x898}, {{@zero, @zero, 0x3, {[0x100, 0x2, 0x0, 0x77, 0x3d5, 0x0, 0x1000, 0x6, 0x7f, 0x1ff, 0xffff, 0x1, 0x5, 0x8, 0x1, 0xb8c, 0x0, 0x2, 0x7, 0x40000000, 0x81, 0x3, 0x3, 0x7, 0x3, 0x20, 0x2, 0x0, 0x1000, 0x6d3dd3c2, 0x800, 0x7, 0x3, 0xe709, 0x101, 0x9, 0x6, 0x14, 0xff, 0x683251f6, 0x80, 0x80000000, 0xff, 0x4, 0x1, 0x1, 0xe6, 0x8000, 0x4, 0x352, 0x7fffffff, 0x2, 0x9, 0x10001, 0x1, 0x7, 0xff, 0x0, 0x2, 0x20, 0x84, 0x2, 0x8, 0xde9, 0x7ff, 0xffff, 0x400000, 0x3, 0x81, 0xdc6, 0x1, 0x81, 0x9dd, 0x2a4d34a6, 0x379c, 0x7, 0x3, 0x8, 0x4, 0x10000, 0x2, 0xfffff800, 0x10000, 0x4, 0x1, 0x400, 0x8, 0x2, 0x5, 0x8, 0x81, 0x0, 0x80, 0x80000001, 0x8001, 0x6, 0x8, 0x0, 0x7, 0x0, 0x4, 0x500, 0x2, 0x9, 0x50, 0x7f, 0x3f, 0x1, 0x20, 0x9, 0x2, 0x4, 0x4, 0x1, 0x0, 0x1, 0xee2f, 0x2, 0x81, 0x2, 0x1, 0xff, 0xffffffff, 0x9, 0x3, 0x7fff, 0x5, 0x4, 0x401, 0xfff, 0x3, 0xea2, 0x6, 0x800, 0x45, 0xc86c, 0x3f, 0x73, 0x80000000, 0xffff0001, 0x1, 0xe2, 0x7fffffff, 0x4, 0x7f, 0x6, 0x2c, 0x200, 0x80000001, 0x1, 0xffff, 0x5, 0x7fffffff, 0x5, 0x8, 0x4, 0x2, 0x9, 0x7fff, 0x7, 0x91e, 0x1, 0x5, 0x7, 0x1, 0xfff, 0xc67, 0x10001, 0x8, 0x200, 0x6, 0x9, 0x9, 0x3, 0x7fffffff, 0x7, 0x200, 0x7, 0x5, 0x9, 0x9, 0x4, 0x2, 0x1, 0x1000, 0x1000, 0x5, 0x3, 0x1f, 0x4, 0x8, 0x87, 0x6, 0x2, 0x401, 0x9, 0x8, 0x7, 0x0, 0x1, 0x1f, 0x0, 0x6, 0x620, 0x6410ea56, 0x2, 0x0, 0x800, 0x8000, 0xf7, 0x8, 0x10000, 0x0, 0xe4d, 0x2, 0x1, 0x5, 0x2, 0xffc00000, 0x8, 0x3ff, 0x9, 0x0, 0x200, 0x7, 0x10000, 0x4, 0xffffffff, 0x80000001, 0x9, 0x3, 0x2, 0x1f, 0xffff0001, 0x8, 0x7, 0x2, 0x100, 0x800, 0x77d2a4f0, 0x8001, 0x8, 0x0, 0x3f, 0x0, 0x2, 0xce74, 0x9, 0x1, 0xfffffffd, 0x4, 0xff, 0x3f, 0xf416, 0x7, 0x7, 0x1], 0x6, [{[0x9, 0x80000001], @initdev={0xac, 0x1e, 0x1, 0x0}}, {[0xfcb3, 0x6], @multicast1}, {[0x6, 0xffff8bcb], @dev={0xac, 0x14, 0x14, 0x38}}, {[0x80000000, 0x80000001], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[0x8, 0x5], @multicast1}, {[0x1000000, 0xfffffffa], @private=0xa010100}]}, {[0x400, 0x70af, 0x9, 0x51f40000, 0x81, 0x0, 0xde8, 0x7, 0x0, 0xfffffffa, 0x7fff, 0x3320000, 0xa85, 0xfbc, 0x2f, 0xb8d9, 0x7, 0x6, 0xfffffffe, 0x261, 0x0, 0x10000, 0x5, 0x7, 0x7ff, 0x7352, 0x1ff, 0x4, 0xc02, 0x2, 0x3ff, 0x7b, 0x10001, 0x8, 0x800, 0x179a271d, 0x8, 0x7, 0x1, 0x5, 0x5, 0x9, 0x8, 0x3, 0x4, 0x2, 0x100, 0x6, 0x423c, 0x800, 0x3f, 0x5, 0x2f1, 0x3, 0x3, 0x12, 0x6, 0x8, 0x2, 0x3, 0x80000001, 0x5, 0x7fffffff, 0x6, 0xea, 0x7f, 0x0, 0x5, 0x60e, 0x80000001, 0x4, 0x3, 0x20, 0x9, 0x9, 0x0, 0x10001, 0x7951f587, 0x4, 0x7f, 0x20, 0x1, 0x6, 0x0, 0x57aa1a1f, 0x93e6, 0x5858, 0x8, 0x9, 0x4, 0x80, 0x7, 0x200, 0x4, 0x1, 0x8b2, 0xe3, 0x2, 0x3, 0x8, 0x5, 0x6, 0x80000000, 0x8, 0x0, 0x9, 0x401, 0x8, 0x4, 0x4, 0xe79, 0x2, 0x400, 0x5, 0xce82, 0x0, 0x6, 0x2, 0x3ff, 0x2, 0xe8f, 0x2, 0x1f, 0x80, 0x7, 0xeb, 0x9c, 0x5, 0x0, 0x0, 0x0, 0x8d, 0x8, 0xffffff9b, 0x3, 0x7fffffff, 0x7, 0x4, 0x9, 0x80000001, 0xfffff663, 0x4ca8, 0x6, 0x4, 0x8, 0xffffffe1, 0x9, 0xec91, 0x3, 0x0, 0x7ff, 0x7, 0x81, 0x400, 0x7, 0x4, 0x6, 0x2, 0x6e2, 0x1ff, 0x3, 0x8, 0xad, 0x3, 0xffffff80, 0x1, 0x1, 0xfde, 0x89d, 0x1f, 0x51833705, 0xffffffe0, 0x7f, 0x3, 0x200, 0x9, 0x5, 0x4, 0x7b, 0x7fffffff, 0x0, 0x3, 0x952, 0x0, 0x1, 0x0, 0x6, 0xffff, 0x1, 0x6, 0x1, 0x43e4, 0x0, 0xdea8, 0x0, 0x2, 0x10000, 0x1, 0x5, 0x1000, 0x100, 0x7fffffff, 0xfffffff8, 0x5, 0xad43, 0x81, 0x1, 0x6, 0x8, 0xfffffff9, 0xfffffe00, 0x4, 0xbbcd, 0x6, 0xffff, 0x7fff, 0x40, 0x3, 0x1, 0x1, 0x8, 0xffffffff, 0x0, 0x8001, 0x81, 0xd4d1, 0x9, 0x6, 0x0, 0x8001, 0x3e, 0xf64d, 0x4f65, 0x397, 0x5, 0x1, 0xffffffc1, 0x976, 0x100, 0x3f, 0x4, 0x0, 0x7, 0x18, 0x386, 0x3, 0x3, 0x8d9, 0x81, 0x7, 0x3, 0x4, 0x3, 0x7ff, 0x400, 0x1, 0x6], 0x4, [{[0x4, 0x1], @empty}, {[0x0, 0x401], @multicast2}, {[0x400, 0x80000001], @multicast1}, {[0x80, 0x9], @broadcast}]}}}}], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x11, 0x4, 0x806, 'team0\x00', 'erspan0\x00', 'team0\x00', 'veth1_vlan\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0x0, 0x0, 0xff], @random="601b9995a682", [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffd0}}}}]}, {0x0, '\x00', 0x3, 0x3b98679a73f91e64}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0xd42) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001040)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001080), 0x80500, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000010c0), 0x4) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000001100)=0x9, 0x4) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000001140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000011c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001480)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001440)={&(0x7f0000001200)={0x214, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc85}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x800, 0x40, 0x5d, 0x7f}, {0xfff, 0x6, 0xc4, 0xffffffff}, {0x1, 0x0, 0x0, 0x3}, {0x5d, 0x81, 0x8, 0x8000}, {0x8, 0x2d, 0x5, 0xffe00000}, {0x200, 0x80, 0xfc, 0x2}, {0x1, 0x4, 0x20, 0x40}, {0xfff8, 0x3}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x804}, 0x40014) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f00000014c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'syztnl1\x00', r4, 0x4, 0x0, 0x57, 0x1, 0x0, @private1, @mcast2, 0x68e9786e924298a0, 0x48, 0x5, 0x444}}) r6 = syz_open_dev$vcsn(&(0x7f00000015c0), 0x7, 0x118000) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x58, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x48001) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000001740)=@gcm_256={{0x304}, "e408b11ad2dc7c18", "b87d3dbc5d40a3a66cd083c87d236f87d5783079f5b8c9f84fa4cd313af19131", "0680b6f5", "d4d2ecb07e29661c"}, 0x38) [ 107.418951] audit: type=1400 audit(1750494089.431:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:21:29 executing program 5: sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x148, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6f}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f5f329c60e494d6cb5a8babba1c8121aa90af925c5a17f12"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dcf1b9edadb735bcf0648cafa30d4b53952c17673f30baaa"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e030881cad6c3d92e2b11c1349234ea03881aaec29c111d4"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b764dc926ff8390e28f170ac92f3587d779a40a982e90034"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0bae114b65fd847cd39cdc123913890328147a890b73a2f"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "381055cca5e3ad285ae24456f3d51dc88952aaf92a05d8ed"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b38ff7f04c86e8eb7f5aaa68a42c46cd4c1762c8e8a18d1c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0783eeb100a6eab67f8b08fbb4b0ad821ba7a885573a5768"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "37c15df730c7f741bb42a4ae22f38e7d397481105d703747"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x148}, 0x1, 0x0, 0x0, 0x40}, 0x1) socketpair(0x1, 0x3, 0x6, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x4000810) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4004010) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x10040, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x40041}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r5, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008088) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r2, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000b00), 0x900, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r3) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x894}, 0xc4) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000001100)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000d00)={0x38c, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x20}}}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1}], @NL80211_ATTR_SSID={0x4}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}, @NL80211_ATTR_AKM_SUITES={0x1c, 0x4c, [0xfac07, 0xfac13, 0x0, 0xfac04, 0xfac07, 0xfac0f]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_SAE_PASSWORD={0x7, 0x115, "63845b"}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20, {0x8000, 0x9, 0xdb5, 0x14c}}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38c}, 0x1, 0x0, 0x0, 0x80}, 0x4008091) r7 = syz_genetlink_get_family_id$team(&(0x7f0000001180), r3) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001880)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001840)={&(0x7f0000001480)={0x38c, r7, 0x300, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x7f, 0x4, 0x2, 0x7ff}, {0x80, 0xff, 0x2, 0x1}, {0x0, 0x3, 0xd5, 0x9}, {0x3f, 0x9, 0xa2, 0x800}, {0x9, 0x3, 0x2, 0xfffffff7}, {0x5, 0x6, 0x9, 0x80000001}, {0x2, 0x73, 0x40, 0x4}, {0xee, 0x5, 0x6, 0x2049}, {0x1, 0x4, 0x7f, 0x80}, {0x200, 0x8, 0x8, 0x10001}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0x38c}}, 0x2804c890) 08:21:29 executing program 6: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0xe2) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xc000, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000080)) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x20403, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x7800, 0x40, 0x80000001, 0x6, {{0xb, 0x4, 0x3, 0x3d, 0x2c, 0x65, 0x0, 0x1f, 0x4, 0x0, @broadcast, @multicast2, {[@ssrr={0x89, 0x7, 0xf1, [@rand_addr=0x64010100]}, @generic={0x88, 0xe, "7e41f756029b310ef59c2a7e"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x2f, 0x80, 0x0, 0xed5f, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x80, 0x7, 0x474c}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1dc, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000b40)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c40)={'erspan0\x00', &(0x7f0000000b80)={'syztnl1\x00', r8, 0x20, 0x700, 0x0, 0x7fff, {{0x28, 0x4, 0x1, 0x38, 0xa0, 0x67, 0x0, 0x0, 0x29, 0x0, @empty, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0xc2, 0x1, 0x3, [{@broadcast, 0xfb3}, {@rand_addr=0x64010100, 0x9}]}, @noop, @generic={0x7, 0x7, "74709b3f78"}, @end, @timestamp_addr={0x44, 0x44, 0x73, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x9}, {@loopback, 0x1}, {@local, 0xdb6e}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x4}, {@broadcast, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x40000}, {@private=0xa010101, 0x6}, {@rand_addr=0x64010100, 0xfffffffd}]}, @lsrr={0x83, 0x2b, 0x25, [@remote, @local, @multicast2, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1]}]}}}}}) r9 = accept$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @multicast2}, &(0x7f0000000cc0)=0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000d, 0x80010, r9, 0x63f33000) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 08:21:29 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x3fb1ca390f88c312}, 0x4011) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004840}, 0x8800) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r1) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r3, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c844}, 0x1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x20, 0x700, 0xfffffffc, 0x6, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x66, 0x0, 0x4, 0x29, 0x0, @loopback, @remote, {[@noop, @end, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0xc, 0x1, 0x4, [{@empty, 0x8e27}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbd65}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}, {@rand_addr=0x64010101, 0x6}]}, @noop, @noop]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)={0x25c, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6150}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x4}}, {{0x8, 0x1, r5}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0x6, 0x80, 0xffffffff}, {0x3ff, 0x81, 0x2, 0x4}, {0x5, 0x1f, 0x6}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000000}}, {0x8}}}]}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r1) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, r6, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x881}, 0xc801) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4845}, 0x40840) bind(0xffffffffffffffff, &(0x7f0000000c40)=@qipcrtr={0x2a, 0x2, 0xfffffffe}, 0x80) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1f}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x50) r8 = accept$inet(0xffffffffffffffff, &(0x7f0000000e00), &(0x7f0000000e40)=0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000e80)) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xe4, r6, 0x11bb21d3f91abd82, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f3c31e7cf40932a0e735818a995c6d59"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4c40469a4ee66950ba0543aa53fdc3f675d5fc24131049e60c6f1373c6acb035"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0f269ea5b9d730507beb66ccec98ae43225a4acb1859ce8f23814e90cfd30db6"}]}, @NL802154_ATTR_SEC_KEY={0x48, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a105166f3c485c43292520b86a930f1006f6832dc172b1a93699bfe2f51608b2"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3ff6c7adccbe0f6caea64f5410697086"}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4040040}, 0x40841) [ 108.782485] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.784991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.792059] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.800862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.806828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.851850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.862355] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.862764] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.865037] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.867456] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.870045] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.886267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.892099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.909916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.918471] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.934318] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.937707] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.940571] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.942109] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.944426] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.956682] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.976882] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.982233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.990029] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.993400] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.008170] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 109.016026] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 109.019693] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 109.034079] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 109.035126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 109.040961] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.041720] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 109.044936] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 109.066903] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 109.094258] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 109.128958] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 109.136070] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 109.148177] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 109.164149] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 109.181145] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 110.864086] Bluetooth: hci0: command tx timeout [ 110.926822] Bluetooth: hci1: command tx timeout [ 110.991813] Bluetooth: hci2: command tx timeout [ 111.054737] Bluetooth: hci3: command tx timeout [ 111.055296] Bluetooth: hci4: command tx timeout [ 111.118769] Bluetooth: hci5: command tx timeout [ 111.182748] Bluetooth: hci6: command tx timeout [ 111.246720] Bluetooth: hci7: command tx timeout [ 112.910710] Bluetooth: hci0: command tx timeout [ 112.974704] Bluetooth: hci1: command tx timeout [ 113.038909] Bluetooth: hci2: command tx timeout [ 113.103016] Bluetooth: hci3: command tx timeout [ 113.103461] Bluetooth: hci4: command tx timeout [ 113.166748] Bluetooth: hci5: command tx timeout [ 113.230753] Bluetooth: hci6: command tx timeout [ 113.294678] Bluetooth: hci7: command tx timeout [ 114.958679] Bluetooth: hci0: command tx timeout [ 115.022682] Bluetooth: hci1: command tx timeout [ 115.086699] Bluetooth: hci2: command tx timeout [ 115.152873] Bluetooth: hci4: command tx timeout [ 115.153300] Bluetooth: hci3: command tx timeout [ 115.214783] Bluetooth: hci5: command tx timeout [ 115.278838] Bluetooth: hci6: command tx timeout [ 115.342763] Bluetooth: hci7: command tx timeout [ 117.006883] Bluetooth: hci0: command tx timeout [ 117.070961] Bluetooth: hci1: command tx timeout [ 117.134798] Bluetooth: hci2: command tx timeout [ 117.199046] Bluetooth: hci3: command tx timeout [ 117.199527] Bluetooth: hci4: command tx timeout [ 117.262735] Bluetooth: hci5: command tx timeout [ 117.326679] Bluetooth: hci6: command tx timeout [ 117.391846] Bluetooth: hci7: command tx timeout [ 171.163479] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.166907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.169861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.176520] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.181072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.404156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.405460] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.416002] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.422778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.426903] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.427684] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.432814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.436231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.439600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.441362] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.445975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.450366] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.456108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.458334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.461408] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.466870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.468592] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.475499] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.480981] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.484968] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.491172] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.496398] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 171.504855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.514879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.517250] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 171.519495] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 171.522417] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 171.530321] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 171.533580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.538696] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 171.587336] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 171.598538] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 171.600602] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 171.623212] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 171.628307] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.263886] Bluetooth: hci0: command tx timeout [ 173.518780] Bluetooth: hci4: command tx timeout [ 173.582724] Bluetooth: hci5: command tx timeout [ 173.583476] Bluetooth: hci1: command tx timeout [ 173.584013] Bluetooth: hci2: command tx timeout [ 173.711691] Bluetooth: hci3: command tx timeout [ 173.902773] Bluetooth: hci7: command tx timeout [ 174.158997] Bluetooth: hci6: command tx timeout [ 175.310699] Bluetooth: hci0: command tx timeout [ 175.566767] Bluetooth: hci4: command tx timeout [ 175.632735] Bluetooth: hci2: command tx timeout [ 175.633149] Bluetooth: hci1: command tx timeout [ 175.633197] Bluetooth: hci5: command tx timeout [ 175.759095] Bluetooth: hci3: command tx timeout [ 175.952896] Bluetooth: hci7: command tx timeout [ 176.206709] Bluetooth: hci6: command tx timeout [ 177.359036] Bluetooth: hci0: command tx timeout [ 177.614889] Bluetooth: hci4: command tx timeout [ 177.679020] Bluetooth: hci2: command tx timeout [ 177.679109] Bluetooth: hci1: command tx timeout [ 177.679451] Bluetooth: hci5: command tx timeout [ 177.807973] Bluetooth: hci3: command tx timeout [ 177.999992] Bluetooth: hci7: command tx timeout [ 178.255709] Bluetooth: hci6: command tx timeout [ 179.407779] Bluetooth: hci0: command tx timeout [ 179.662964] Bluetooth: hci4: command tx timeout [ 179.726765] Bluetooth: hci1: command tx timeout [ 179.727024] Bluetooth: hci2: command tx timeout [ 179.728674] Bluetooth: hci5: command tx timeout [ 179.855683] Bluetooth: hci3: command tx timeout [ 180.047817] Bluetooth: hci7: command tx timeout [ 180.302996] Bluetooth: hci6: command tx timeout [ 233.500068] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.503461] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.506234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.513086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.517759] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.560361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.576245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.581464] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.589132] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.594547] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.755286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.761104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.764257] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.773428] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.777281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.883681] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.890360] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.891686] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.895843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.909153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.909907] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.917258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.923843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.931432] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.971947] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.976102] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 233.978800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.979519] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.982747] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 233.986389] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 233.991551] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 233.995834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.019112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.027043] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.079867] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 234.083866] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 234.099882] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 234.101077] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 234.143229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 234.153053] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.598699] Bluetooth: hci0: command tx timeout [ 235.662948] Bluetooth: hci1: command tx timeout [ 235.791010] Bluetooth: hci2: command tx timeout [ 235.982882] Bluetooth: hci4: command tx timeout [ 236.111722] Bluetooth: hci3: command tx timeout [ 236.175872] Bluetooth: hci7: command tx timeout [ 236.176438] Bluetooth: hci5: command tx timeout [ 236.238728] Bluetooth: hci6: command tx timeout [ 237.646946] Bluetooth: hci0: command tx timeout [ 237.710787] Bluetooth: hci1: command tx timeout [ 237.838753] Bluetooth: hci2: command tx timeout [ 238.030703] Bluetooth: hci4: command tx timeout [ 238.158777] Bluetooth: hci3: command tx timeout [ 238.223302] Bluetooth: hci7: command tx timeout [ 238.223773] Bluetooth: hci5: command tx timeout [ 238.286744] Bluetooth: hci6: command tx timeout [ 239.696471] Bluetooth: hci0: command tx timeout [ 239.758889] Bluetooth: hci1: command tx timeout [ 239.886679] Bluetooth: hci2: command tx timeout [ 240.078682] Bluetooth: hci4: command tx timeout [ 240.208673] Bluetooth: hci3: command tx timeout [ 240.270753] Bluetooth: hci7: command tx timeout [ 240.271195] Bluetooth: hci5: command tx timeout [ 240.335879] Bluetooth: hci6: command tx timeout [ 241.742686] Bluetooth: hci0: command tx timeout [ 241.806677] Bluetooth: hci1: command tx timeout [ 241.935024] Bluetooth: hci2: command tx timeout [ 242.126674] Bluetooth: hci4: command tx timeout [ 242.255873] Bluetooth: hci3: command tx timeout [ 242.320854] Bluetooth: hci5: command tx timeout [ 242.321282] Bluetooth: hci7: command tx timeout [ 242.382685] Bluetooth: hci6: command tx timeout [ 295.912578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.918180] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.922017] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.931292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.939104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.000221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.008225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.011306] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.021197] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.028385] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.119941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.151191] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.156045] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.159408] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.173198] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.184465] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 296.186469] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.191376] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.256183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.265756] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.266164] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 296.268688] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.271710] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.279270] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.289201] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 296.376488] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.381239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.383705] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.398222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.420150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.474511] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 296.494498] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 296.496306] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 296.521394] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 296.530150] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 296.565102] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 296.580225] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 296.587197] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 296.588887] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 296.628464] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 297.998850] Bluetooth: hci0: command tx timeout [ 298.062867] Bluetooth: hci1: command tx timeout [ 298.256452] Bluetooth: hci2: command tx timeout [ 298.319730] Bluetooth: hci3: command tx timeout [ 298.384686] Bluetooth: hci4: command tx timeout [ 298.510867] Bluetooth: hci5: command tx timeout [ 298.766704] Bluetooth: hci6: command tx timeout [ 298.830765] Bluetooth: hci7: command tx timeout [ 300.046881] Bluetooth: hci0: command tx timeout [ 300.110916] Bluetooth: hci1: command tx timeout [ 300.302872] Bluetooth: hci2: command tx timeout [ 300.367704] Bluetooth: hci3: command tx timeout [ 300.430687] Bluetooth: hci4: command tx timeout [ 300.558825] Bluetooth: hci5: command tx timeout [ 300.815068] Bluetooth: hci6: command tx timeout [ 300.878701] Bluetooth: hci7: command tx timeout [ 302.094821] Bluetooth: hci0: command tx timeout [ 302.158685] Bluetooth: hci1: command tx timeout [ 302.350693] Bluetooth: hci2: command tx timeout [ 302.414800] Bluetooth: hci3: command tx timeout [ 302.478866] Bluetooth: hci4: command tx timeout [ 302.606891] Bluetooth: hci5: command tx timeout [ 302.862713] Bluetooth: hci6: command tx timeout [ 302.927716] Bluetooth: hci7: command tx timeout [ 304.142722] Bluetooth: hci0: command tx timeout [ 304.206965] Bluetooth: hci1: command tx timeout [ 304.398817] Bluetooth: hci2: command tx timeout [ 304.462823] Bluetooth: hci3: command tx timeout [ 304.526779] Bluetooth: hci4: command tx timeout [ 304.655009] Bluetooth: hci5: command tx timeout [ 304.910674] Bluetooth: hci6: command tx timeout [ 304.974883] Bluetooth: hci7: command tx timeout [ 358.693371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.696502] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.699338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.712532] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.719965] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.138552] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.147962] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.150556] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.159314] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.169085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.227538] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.233320] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.235456] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.248098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.258235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.289389] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.291073] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.300349] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.301877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.317174] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.318931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 359.324067] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 359.328259] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.332106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 359.337350] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.340359] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.346284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.369084] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.377055] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.388554] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 359.521021] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 359.530427] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 359.535147] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 359.544120] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 359.561329] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 359.563722] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 359.579580] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 359.582524] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 359.585477] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 359.620116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.782882] Bluetooth: hci0: command tx timeout [ 361.230747] Bluetooth: hci1: command tx timeout [ 361.360420] Bluetooth: hci2: command tx timeout [ 361.422957] Bluetooth: hci5: command tx timeout [ 361.552848] Bluetooth: hci3: command tx timeout [ 361.553568] Bluetooth: hci4: command tx timeout [ 361.680140] Bluetooth: hci7: command tx timeout [ 361.742711] Bluetooth: hci6: command tx timeout [ 362.830684] Bluetooth: hci0: command tx timeout [ 363.279729] Bluetooth: hci1: command tx timeout [ 363.408678] Bluetooth: hci2: command tx timeout [ 363.471647] Bluetooth: hci5: command tx timeout [ 363.598690] Bluetooth: hci4: command tx timeout [ 363.599130] Bluetooth: hci3: command tx timeout [ 363.727855] Bluetooth: hci7: command tx timeout [ 363.790666] Bluetooth: hci6: command tx timeout [ 364.879701] Bluetooth: hci0: command tx timeout [ 365.327703] Bluetooth: hci1: command tx timeout [ 365.455902] Bluetooth: hci2: command tx timeout [ 365.519731] Bluetooth: hci5: command tx timeout [ 365.648644] Bluetooth: hci3: command tx timeout [ 365.649046] Bluetooth: hci4: command tx timeout [ 365.775942] Bluetooth: hci7: command tx timeout [ 365.839703] Bluetooth: hci6: command tx timeout [ 366.927632] Bluetooth: hci0: command tx timeout [ 367.375909] Bluetooth: hci1: command tx timeout [ 367.502709] Bluetooth: hci2: command tx timeout [ 367.568134] Bluetooth: hci5: command tx timeout [ 367.697420] Bluetooth: hci3: command tx timeout [ 367.697892] Bluetooth: hci4: command tx timeout [ 367.823684] Bluetooth: hci7: command tx timeout [ 367.886884] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 08:26:30 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000002 RCX=ffff88806ce08b18 RDX=0000000000000000 RSI=1ffff1100d9c1151 RDI=ffff88801582d67c RBP=ffff88806ce08ad0 RSP=ffff88806ce089b8 R8 =0000000000000000 R9 =0000000000000000 R10=ffff88806ce08a78 R11=0000000000000001 R12=0000000000000000 R13=ffff88806ce08ac0 R14=ffff88806ce08ac0 R15=ffff88806ce08a78 RIP=ffffffff81353d0c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa2ea530008 CR3=000000001bf54000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73 XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88806cf36fc0 RCX=0000000000000302 RDX=ffff8880349553a8 RSI=ffff88806cf36fc0 RDI=ffff8880349553a8 RBP=ffff888034955300 RSP=ffff888015d2f820 R8 =00000000001a2000 R9 =0000000000068800 R10=ffffffff86414657 R11=0000000000000001 R12=0000000000000005 R13=0000000000000000 R14=ffff8880349553c0 R15=ffff88806cf37138 RIP=ffffffff8148f664 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd4e45f9c48 CR3=0000000032ba3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000