Warning: Permanently added '[localhost]:19678' (ECDSA) to the list of known hosts. 2025/06/25 11:30:38 fuzzer started 2025/06/25 11:30:39 dialing manager at localhost:42423 syzkaller login: [ 104.668822] cgroup: Unknown subsys name 'net' [ 104.796673] cgroup: Unknown subsys name 'cpuset' [ 104.818138] cgroup: Unknown subsys name 'rlimit' 2025/06/25 11:31:01 syscalls: 209 2025/06/25 11:31:01 code coverage: enabled 2025/06/25 11:31:01 comparison tracing: enabled 2025/06/25 11:31:01 extra coverage: enabled 2025/06/25 11:31:01 setuid sandbox: enabled 2025/06/25 11:31:01 namespace sandbox: enabled 2025/06/25 11:31:01 Android sandbox: enabled 2025/06/25 11:31:01 fault injection: enabled 2025/06/25 11:31:01 leak checking: enabled 2025/06/25 11:31:01 net packet injection: enabled 2025/06/25 11:31:01 net device setup: enabled 2025/06/25 11:31:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/25 11:31:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/25 11:31:01 USB emulation: enabled 2025/06/25 11:31:01 hci packet injection: enabled 2025/06/25 11:31:01 wifi device emulation: enabled 2025/06/25 11:31:01 802.15.4 emulation: enabled 2025/06/25 11:31:01 fetching corpus: 0, signal 0/0 (executing program) 2025/06/25 11:31:02 starting 8 fuzzer processes 11:31:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1ac, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r3}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x1, 0x1f, 0x3f}, {0x7, 0x3, 0x6, 0x5}]}}}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x7f072cda5b60e04d) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r7, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20002000}, 0x4000001) r8 = socket(0x2b, 0x5, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000740), r8) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000081}, 0x2000c000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_VLANID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040841}, 0x4006) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getresuid(&(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@empty, @in=@broadcast, 0x4e20, 0x4, 0x4e23, 0x3e9a, 0x2, 0x20, 0x20, 0x2f, 0x0, r11}, {0x17f8290e, 0x2, 0x7, 0x2, 0x100000000, 0x40, 0x0, 0x200}, {0xe5, 0x4, 0xfffffffeffffffff, 0x10001}, 0x3, 0x6e6bb1, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x2b}, 0x2, @in=@broadcast, 0x0, 0x0, 0x2, 0x3, 0x8, 0xffffffc1, 0x7ff}}, 0xe8) 11:31:03 executing program 1: sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8626}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x405801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x8010) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x84) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x58, 0x0, &(0x7f00000008c0)=[@exit_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, &(0x7f0000000780)=""/99, 0x63, 0x1, 0x35}, @flat=@weak_binder={0x77622a85, 0x1}, @fd}, &(0x7f0000000880)={0x0, 0x28, 0x40}}, 0x40}, @decrefs={0x40046307, 0x1}], 0x0, 0x0, &(0x7f0000000940)}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b40)={0x14, 0x0, &(0x7f0000000a00)=[@dead_binder_done, @decrefs={0x40046307, 0x2}], 0xc8, 0x0, &(0x7f0000000a40)="051b9ec47f037b9dcce7b2d26692b5ed2815f5c6ddb763778095245700563085b525d08662a2bd7c18f33f152f89bfeec76c33e088c2694c37ecbe16dd6a581a7641b2d997bd272e7ac771b8abbf04987a2c2e7c6587841f3682244a9d7d1ceea11a5acc9c9663f453af5881323c8e1083dd580588a8333736199dc3609d430267f2cf213af1cd1fddd7e60f633405dce906dbc69037a097bf41a4294192e94d1c7de0d1f39e94fbb667b6af3e31b611a2b8e562536b680f15b17cb7ed8534088539049a20bd4460"}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x800) r7 = socket(0x21, 0x800, 0xfffffffd) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40004) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0xa00, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffc}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8090) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x28}}, 0x40000) 11:31:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20040011) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}}, 0x20040800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x18}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000901) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x60}}, 0x800) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xbc, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0xbc}, 0x1, 0x0, 0x0, 0x50}, 0x24004080) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r9, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x15}, 0x40010) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r11, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) 11:31:03 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb4, r0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x42}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x4040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000800}, 0x811) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/configfs', 0x200580, 0x40) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, r10, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x44) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r11, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r10, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040014) setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000bc0)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x1, 0x4e22, 0x26, 0x2, 0x20, 0x80, 0xff}, {0x3, 0x8, 0x7fff, 0x9, 0x8e4, 0x1, 0x9, 0xaf}, {0x6, 0x0, 0x4, 0xfffffffffffffff8}, 0x3, 0x6e6bba}, {{@in=@rand_addr=0x64010101, 0x4d4}, 0x2, @in=@loopback, 0x34ff, 0x3, 0x1, 0x20, 0x5, 0x7ff, 0x7}}, 0xe8) 11:31:03 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x10080, 0x180) ioctl$CDROMRESET(r0, 0x5312) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000280)={0x524, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x2b8, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x6, 0x1, 0xff, 0x835b}, {0x2, 0x7f, 0x93}, {0x5, 0xfc, 0x0, 0x7}, {0x80, 0x1, 0x1, 0xc633}, {0x100, 0x1f, 0xcf, 0x9}, {0x5, 0x0, 0xff, 0x5}, {0x6, 0x6, 0xca, 0xd07}, {0x71, 0xff, 0x40, 0x6ebc}, {0x2, 0x9, 0x2, 0xa455}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x3, 0x40, 0x3}, {0x6, 0x6, 0xf7, 0x8}, {0x8, 0x3, 0x20, 0x8}, {0x6, 0x8, 0x1, 0x7}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x524}, 0x1, 0x0, 0x0, 0x2000c890}, 0x20048000) accept$unix(0xffffffffffffffff, &(0x7f0000000840), &(0x7f00000008c0)=0x6e) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000900)={{{@in=@initdev, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000a00)=0xe8) ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000a40)={0x1, 0x0, 0x4, 0x1}) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2401680}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x178b}]}, 0x1c}}, 0x4) r5 = socket(0x27, 0x1, 0x6) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x48, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x48}}, 0x4) ioctl$CDROMREADCOOKED(r0, 0x5315, &(0x7f0000000d00)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000001780)={'icmp\x00'}, &(0x7f00000017c0)=0x1e) ioctl$CDROMCLOSETRAY(r0, 0x5319) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000001800)=0x2, 0x4) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000001840)={@mcast1, 0x48, r2}) 11:31:03 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$CDROM_DISC_STATUS(r0, 0x5327) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$CDROMREADMODE1(r1, 0x530d, &(0x7f0000000080)={0x80, 0x1, 0x81, 0x9, 0x0, 0x53}) r2 = syz_open_dev$vcsu(&(0x7f0000000e80), 0x100, 0x2040) ioctl$CDROM_TIMED_MEDIA_CHANGE(r2, 0x5396, &(0x7f0000000ec0)={0x7, 0x1}) ioctl$CDROMVOLREAD(0xffffffffffffffff, 0x5313, &(0x7f0000000f00)) ioctl$CDROM_SELECT_DISK(r2, 0x5322, 0x9e) sendmsg$802154_raw(r0, &(0x7f0000001080)={&(0x7f0000000f40)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14, &(0x7f0000001040)={&(0x7f0000000f80)="9c71646909e4169d426346ac775e0a893ac1f81bb7c512443117148cfa5f286dcd6309ed39120f114a7df4a3046c1b74ab20f5f0b1e682a414295bbf8fbc0025921e4f016dd3a9f04d357b7d0cbda10d1c934fb9c8da7c784cdb6492df14cf40e0b5b50b1c4def259eb34e6490fd582e114f7624015e05a1d863334953e50c01ce6e67cdb86c0c4b679280c8053fc4fc8e6ec6aa", 0x94}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$CDROMPAUSE(r3, 0x5301) r4 = accept4$inet6(r0, &(0x7f0000001100)={0xa, 0x0, 0x0, @private0}, &(0x7f0000001140)=0x1c, 0x800) getsockname$inet6(r4, &(0x7f0000001180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000011c0)=0x1c) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/module/dns_resolver', 0x0, 0x0) accept4$inet6(r5, &(0x7f0000001240)={0xa, 0x0, 0x0, @private2}, &(0x7f0000001280)=0x1c, 0x80800) ioctl$CDROMSEEK(r0, 0x5316, &(0x7f00000012c0)={0x2, 0x99, 0x1, 0x1, 0x80, 0x80}) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000001300)={0x7fff}, 0x4) recvfrom$unix(r5, &(0x7f0000001340)=""/244, 0xf4, 0x40, &(0x7f0000001440)=@abs={0x1, 0x0, 0x4e24}, 0x6e) inotify_add_watch(r5, &(0x7f00000014c0)='./file0\x00', 0x10000000) syz_open_dev$rtc(&(0x7f0000001500), 0x9, 0x10000) 11:31:03 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x48110) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4800041}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x20}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x42800}, 0x8000) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xdc, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ff35a17811eb0731576c1a84fc68fbfe"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}]}, @NL802154_ATTR_SEC_KEY={0x88, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "49df4305369eb664b6702dbebe3cd34e"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a51c57e339e12e52646d21887f7c6c37"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b55f668c84bcbbb6b713fcd692051956"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xdad3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x365}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x389808b5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8094}, 0x24000000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040}, 0x8040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x100}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "b364ca0a8219596fb1e4775cd153e01ad60fcc403c638913e4ed7e88357c36d0"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc040}, 0x4001) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000900)=""/115, 0x73}], 0x1}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000a40)=""/94, 0x5e}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/110, 0x6e}, {&(0x7f0000001b40)=""/50, 0x32}, {&(0x7f0000001b80)=""/20, 0x14}, {&(0x7f0000001bc0)=""/1, 0x1}], 0x6}}, {{&(0x7f0000001c80)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001d00)}, {&(0x7f0000001d40)=""/13, 0xd}, {&(0x7f0000001d80)=""/248, 0xf8}, {&(0x7f0000001e80)=""/155, 0x9b}, {&(0x7f0000001f40)=""/56, 0x38}, {&(0x7f0000001f80)=""/76, 0x4c}, {&(0x7f0000002000)=""/39, 0x27}], 0x7}}, {{&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002140)=""/5, 0x5}, {&(0x7f0000002180)=""/175, 0xaf}, {&(0x7f0000002240)=""/159, 0x9f}, {&(0x7f0000002300)=""/245, 0xf5}, {&(0x7f0000002400)=""/145, 0x91}, {&(0x7f00000024c0)=""/74, 0x4a}, {&(0x7f0000002540)=""/187, 0xbb}, {&(0x7f0000002600)=""/203, 0xcb}], 0x8, &(0x7f0000002780)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000027c0), 0x6e, &(0x7f0000002980)=[{&(0x7f0000002840)=""/19, 0x13}, {&(0x7f0000002880)=""/43, 0x2b}, {&(0x7f00000028c0)=""/17, 0x11}, {&(0x7f0000002900)=""/105, 0x69}], 0x4, &(0x7f00000029c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}], 0x5, 0x40000141, &(0x7f0000002b40)={0x77359400}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000002bc0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000002c80)={&(0x7f0000002b80), 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x34, r9, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002cc0)='/proc/vmallocinfo\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$team(&(0x7f0000002d40), r8) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000002d80)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f0000002e80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002ec0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f0000003b80)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003b40)={&(0x7f0000003280)={0x8b0, r11, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r12}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x240000}}, {0x8, 0x6, r13}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc2d6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xea95}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x16a}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0x2, 0x81, 0xe56}, {0x6, 0x3f, 0x96, 0xffffffff}, {0x7, 0x20, 0x0, 0x21}, {0xfffb, 0xc2, 0x7, 0x3}, {0x3, 0xa7, 0x0, 0x7}, {0x3f, 0x6, 0x2, 0xb3}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xd5, 0x5, 0x4, 0x5}, {0x87f4, 0x7, 0x0, 0xfffffff9}, {0x1, 0x3f, 0x4, 0x809}]}}}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x24000004}, 0x40010) 11:31:03 executing program 7: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) mount_setattr(r0, &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000080)={0x100001, 0x0, 0x20000}, 0x20) sendto$unix(r0, &(0x7f00000000c0)="0a9094c11c401fd7242ff13a05f55a5c874a627307b43b88697ea65af3282be99baa38d29208142a4c68c002fb756688013cc72fdbf9cf83b59474438628f6a2c98dab59af04401baf1d7f7d79e63d476213bc4e55140f558505cef5", 0x5c, 0x0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) getsockname$unix(r0, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) r1 = syz_open_dev$vcsu(&(0x7f0000000280), 0x100000000, 0x10381) ioctl$CDROM_TIMED_MEDIA_CHANGE(r1, 0x5396, &(0x7f00000002c0)={0x537, 0x1}) recvmmsg$unix(r1, &(0x7f0000004d40)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000380)=""/212, 0xd4}, {&(0x7f0000000480)=""/111, 0x6f}, {&(0x7f0000000500)=""/252, 0xfc}, {&(0x7f0000000600)=""/220, 0xdc}], 0x4, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)=""/80, 0x50}, {&(0x7f0000000900)=""/251, 0xfb}, {&(0x7f0000000a00)=""/205, 0xcd}, {&(0x7f0000000b00)=""/221, 0xdd}, {&(0x7f0000000c00)=""/31, 0x1f}, {&(0x7f0000000c40)=""/153, 0x99}, {&(0x7f0000000d00)=""/207, 0xcf}, {&(0x7f0000000e00)=""/71, 0x47}], 0x8}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000f00)=""/159, 0x9f}, {&(0x7f0000000fc0)=""/69, 0x45}], 0x2}}, {{&(0x7f0000001080), 0x6e, &(0x7f0000001200)=[{&(0x7f0000001100)=""/224, 0xe0}], 0x1, &(0x7f0000001240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000001300)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001380)=""/136, 0x88}, {&(0x7f0000001440)=""/162, 0xa2}, {&(0x7f0000001500)=""/104, 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000015c0)=""/184, 0xb8}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/182, 0xb6}, {&(0x7f0000002740)=""/187, 0xbb}, {&(0x7f0000002800)=""/253, 0xfd}, {&(0x7f0000002900)=""/39, 0x27}, {&(0x7f0000002940)=""/102, 0x66}, {&(0x7f00000029c0)=""/95, 0x5f}, {&(0x7f0000002a40)=""/119, 0x77}], 0x9, &(0x7f0000002b80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000002c80), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002d00)=""/19, 0x13}, {&(0x7f0000002d40)=""/94, 0x5e}, {&(0x7f0000002dc0)=""/86, 0x56}, {&(0x7f0000002e40)=""/8, 0x8}, {&(0x7f0000002e80)=""/51, 0x33}, {&(0x7f0000002ec0)=""/74, 0x4a}, {&(0x7f0000002f40)=""/16, 0x10}, {&(0x7f0000002f80)=""/46, 0x2e}], 0x8, &(0x7f0000003040)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000003140)=@abs, 0x6e, &(0x7f0000003780)=[{&(0x7f00000031c0)=""/8, 0x8}, {&(0x7f0000003200)=""/165, 0xa5}, {&(0x7f00000032c0)=""/184, 0xb8}, {&(0x7f0000003380)=""/130, 0x82}, {&(0x7f0000003440)=""/203, 0xcb}, {&(0x7f0000003540)=""/211, 0xd3}, {&(0x7f0000003640)=""/161, 0xa1}, {&(0x7f0000003700)=""/61, 0x3d}, {&(0x7f0000003740)=""/60, 0x3c}], 0x9, &(0x7f0000003840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000003880), 0x6e, &(0x7f0000004c40)=[{&(0x7f0000003900)=""/118, 0x76}, {&(0x7f0000003980)=""/134, 0x86}, {&(0x7f0000003a40)=""/57, 0x39}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/227, 0xe3}, {&(0x7f0000004b80)=""/185, 0xb9}], 0x6, &(0x7f0000004cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}], 0x9, 0x4002, &(0x7f0000004f80)={0x77359400}) mount_setattr(r6, &(0x7f0000004fc0)='./file0\x00', 0x100, &(0x7f0000005000)={0x78, 0x0, 0x80000, {r1}}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000005080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000005140)={&(0x7f0000005040)={0x10, 0x0, 0x0, 0x80001002}, 0xc, &(0x7f0000005100)={&(0x7f00000050c0)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x2000c000) clock_gettime(0x0, &(0x7f0000009540)={0x0, 0x0}) recvmmsg$unix(r4, &(0x7f00000093c0)=[{{&(0x7f0000005180)=@abs, 0x6e, &(0x7f0000006480)=[{&(0x7f0000005200)=""/171, 0xab}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/55, 0x37}, {&(0x7f0000006300)=""/226, 0xe2}, {&(0x7f0000006400)=""/67, 0x43}], 0x5, &(0x7f0000006500)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{0x0, 0x0, &(0x7f0000006640)=[{&(0x7f0000006580)=""/79, 0x4f}, {&(0x7f0000006600)=""/38, 0x26}], 0x2, &(0x7f0000006680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f00000066c0), 0x6e, &(0x7f0000006840)=[{&(0x7f0000006740)=""/251, 0xfb}], 0x1, &(0x7f0000006880)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000006900), 0x6e, &(0x7f0000007e00)=[{&(0x7f0000006980)=""/206, 0xce}, {&(0x7f0000006a80)=""/4096, 0x1000}, {&(0x7f0000007a80)=""/61, 0x3d}, {&(0x7f0000007ac0)=""/80, 0x50}, {&(0x7f0000007b40)=""/106, 0x6a}, {&(0x7f0000007bc0)=""/69, 0x45}, {&(0x7f0000007c40)=""/120, 0x78}, {&(0x7f0000007cc0)=""/255, 0xff}, {&(0x7f0000007dc0)=""/55, 0x37}], 0x9}}, {{0x0, 0x0, &(0x7f0000008040)=[{&(0x7f0000007ec0)=""/39, 0x27}, {&(0x7f0000007f00)=""/116, 0x74}, {&(0x7f0000007f80)=""/134, 0x86}], 0x3}}, {{&(0x7f0000008080), 0x6e, &(0x7f0000009300)=[{&(0x7f0000008100)=""/4096, 0x1000}, {&(0x7f0000009100)=""/185, 0xb9}, {&(0x7f00000091c0)=""/225, 0xe1}, {&(0x7f00000092c0)=""/42, 0x2a}], 0x4, &(0x7f0000009340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}], 0x6, 0x2, &(0x7f0000009580)={r9, r10+10000000}) sendmsg$BATADV_CMD_GET_HARDIF(r12, &(0x7f00000096c0)={&(0x7f00000095c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000009680)={&(0x7f0000009600)={0x44, 0x0, 0x830, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x946}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x40880}, 0x4880) clock_gettime(0x0, &(0x7f000000a100)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f000000a040)=[{{&(0x7f0000009700), 0x6e, &(0x7f0000009a40)=[{&(0x7f0000009780)=""/133, 0x85}, {&(0x7f0000009840)=""/231, 0xe7}, {&(0x7f0000009940)=""/80, 0x50}, {&(0x7f00000099c0)=""/48, 0x30}, {&(0x7f0000009a00)=""/59, 0x3b}], 0x5, &(0x7f0000009ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000009bc0), 0x6e, &(0x7f0000009e80)=[{&(0x7f0000009c40)=""/76, 0x4c}, {&(0x7f0000009cc0)=""/113, 0x71}, {&(0x7f0000009d40)=""/189, 0xbd}, {&(0x7f0000009e00)=""/89, 0x59}], 0x4, &(0x7f0000009ec0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000009f00), 0x6e, &(0x7f0000009fc0)=[{&(0x7f0000009f80)=""/11, 0xb}], 0x1, &(0x7f000000a000)=[@cred={{0x1c}}], 0x20}}], 0x3, 0x3020, &(0x7f000000a140)={r13, r14+60000000}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$batadv(&(0x7f000000a1c0), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r15, &(0x7f000000a280)={&(0x7f000000a180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f000000a240)={&(0x7f000000a200)={0x1c, r16, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) getsockopt$inet6_mtu(r11, 0x29, 0x17, &(0x7f000000a2c0), &(0x7f000000a300)=0x4) ioctl$CDROM_NEXT_WRITABLE(0xffffffffffffffff, 0x5394, &(0x7f000000a380)) [ 128.370664] audit: type=1400 audit(1750851063.150:7): avc: denied { execmem } for pid=276 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 129.742163] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.744169] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.749133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.759945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.761946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.822223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.823794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.827676] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.830468] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.831560] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.833174] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.834463] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.835487] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.840502] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.843664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.845018] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.846873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.848280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.851303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.863124] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.869345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.876268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.877773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.885881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.893538] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.898519] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.904934] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.910960] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.925233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 129.927107] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.929388] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 129.935031] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 129.937205] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.951622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 129.957065] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 129.959082] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 129.962295] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 129.968613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 129.973789] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 130.000327] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 131.832171] Bluetooth: hci0: command tx timeout [ 131.896284] Bluetooth: hci1: command tx timeout [ 131.960699] Bluetooth: hci4: command tx timeout [ 131.960823] Bluetooth: hci3: command tx timeout [ 131.962319] Bluetooth: hci2: command tx timeout [ 132.025772] Bluetooth: hci5: command tx timeout [ 132.027882] Bluetooth: hci6: command tx timeout [ 132.088986] Bluetooth: hci7: command tx timeout [ 133.880972] Bluetooth: hci0: command tx timeout [ 133.944113] Bluetooth: hci1: command tx timeout [ 134.009922] Bluetooth: hci2: command tx timeout [ 134.010455] Bluetooth: hci3: command tx timeout [ 134.010501] Bluetooth: hci4: command tx timeout [ 134.072110] Bluetooth: hci6: command tx timeout [ 134.072136] Bluetooth: hci5: command tx timeout [ 134.137061] Bluetooth: hci7: command tx timeout [ 135.928673] Bluetooth: hci0: command tx timeout [ 135.992234] Bluetooth: hci1: command tx timeout [ 136.055747] Bluetooth: hci2: command tx timeout [ 136.056286] Bluetooth: hci4: command tx timeout [ 136.057264] Bluetooth: hci3: command tx timeout [ 136.119704] Bluetooth: hci6: command tx timeout [ 136.120940] Bluetooth: hci5: command tx timeout [ 136.184683] Bluetooth: hci7: command tx timeout [ 137.977854] Bluetooth: hci0: command tx timeout [ 138.039685] Bluetooth: hci1: command tx timeout [ 138.103702] Bluetooth: hci4: command tx timeout [ 138.105065] Bluetooth: hci2: command tx timeout [ 138.105120] Bluetooth: hci3: command tx timeout [ 138.167663] Bluetooth: hci5: command tx timeout [ 138.167689] Bluetooth: hci6: command tx timeout [ 138.232058] Bluetooth: hci7: command tx timeout [ 190.187126] syz-executor.5 (288) used greatest stack depth: 25072 bytes left [ 190.340521] syz-executor.0 (287) used greatest stack depth: 24976 bytes left [ 192.739245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.744862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.748061] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.753155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.759108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.917846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 192.920770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 192.923420] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 192.929924] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 192.937125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.942771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.947047] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.948963] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.949002] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.951075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.959785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 192.961682] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 192.963522] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.963729] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.971124] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.977166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.978431] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.983166] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.986765] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.993223] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.001152] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 193.002863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 193.007497] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.010344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.022478] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 193.033191] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.035759] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.046389] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 193.054437] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 193.057179] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 193.061016] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 193.064425] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 193.079960] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.111932] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 193.138727] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 194.808129] Bluetooth: hci0: command tx timeout [ 194.999780] Bluetooth: hci1: command tx timeout [ 195.063726] Bluetooth: hci3: command tx timeout [ 195.127733] Bluetooth: hci5: command tx timeout [ 195.192652] Bluetooth: hci4: command tx timeout [ 195.255700] Bluetooth: hci2: command tx timeout [ 195.319668] Bluetooth: hci7: command tx timeout [ 195.383946] Bluetooth: hci6: command tx timeout [ 196.855773] Bluetooth: hci0: command tx timeout [ 197.048633] Bluetooth: hci1: command tx timeout [ 197.111998] Bluetooth: hci3: command tx timeout [ 197.177615] Bluetooth: hci5: command tx timeout [ 197.239923] Bluetooth: hci4: command tx timeout [ 197.305741] Bluetooth: hci2: command tx timeout [ 197.367841] Bluetooth: hci7: command tx timeout [ 197.433207] Bluetooth: hci6: command tx timeout [ 198.904695] Bluetooth: hci0: command tx timeout [ 199.095933] Bluetooth: hci1: command tx timeout [ 199.159687] Bluetooth: hci3: command tx timeout [ 199.223700] Bluetooth: hci5: command tx timeout [ 199.287957] Bluetooth: hci4: command tx timeout [ 199.352543] Bluetooth: hci2: command tx timeout [ 199.415648] Bluetooth: hci7: command tx timeout [ 199.479921] Bluetooth: hci6: command tx timeout [ 200.951662] Bluetooth: hci0: command tx timeout [ 201.143680] Bluetooth: hci1: command tx timeout [ 201.207904] Bluetooth: hci3: command tx timeout [ 201.272613] Bluetooth: hci5: command tx timeout [ 201.335951] Bluetooth: hci4: command tx timeout [ 201.400433] Bluetooth: hci2: command tx timeout [ 201.464086] Bluetooth: hci7: command tx timeout [ 201.528060] Bluetooth: hci6: command tx timeout [ 253.046272] syz-executor.2 (2468) used greatest stack depth: 24912 bytes left [ 255.395874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.433723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.475596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.478407] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.480236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.481665] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.484694] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.487056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.507492] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.511966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.517544] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.520444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.524262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.540548] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.543123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.585117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 255.593391] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 255.596083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 255.604911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 255.611284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.640301] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.647806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.658919] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.667024] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.672437] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.725190] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.732788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.733838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 255.739930] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 255.741115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 255.742246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.743791] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 255.749802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 255.751947] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 255.760224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.762334] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 255.765939] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 255.770030] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.772190] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 255.777049] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.527813] Bluetooth: hci1: command tx timeout [ 257.591857] Bluetooth: hci0: command tx timeout [ 257.592851] Bluetooth: hci2: command tx timeout [ 257.655859] Bluetooth: hci3: command tx timeout [ 257.720074] Bluetooth: hci4: command tx timeout [ 257.848685] Bluetooth: hci7: command tx timeout [ 257.848714] Bluetooth: hci6: command tx timeout [ 257.911672] Bluetooth: hci5: command tx timeout [ 259.576710] Bluetooth: hci1: command tx timeout [ 259.641643] Bluetooth: hci2: command tx timeout [ 259.642159] Bluetooth: hci0: command tx timeout [ 259.703714] Bluetooth: hci3: command tx timeout [ 259.767886] Bluetooth: hci4: command tx timeout [ 259.895794] Bluetooth: hci6: command tx timeout [ 259.898608] Bluetooth: hci7: command tx timeout [ 259.959977] Bluetooth: hci5: command tx timeout [ 261.623719] Bluetooth: hci1: command tx timeout [ 261.688728] Bluetooth: hci0: command tx timeout [ 261.689062] Bluetooth: hci2: command tx timeout [ 261.751676] Bluetooth: hci3: command tx timeout [ 261.815994] Bluetooth: hci4: command tx timeout [ 261.943699] Bluetooth: hci7: command tx timeout [ 261.943734] Bluetooth: hci6: command tx timeout [ 262.008361] Bluetooth: hci5: command tx timeout [ 263.672880] Bluetooth: hci1: command tx timeout [ 263.736010] Bluetooth: hci0: command tx timeout [ 263.736211] Bluetooth: hci2: command tx timeout [ 263.800352] Bluetooth: hci3: command tx timeout [ 263.864061] Bluetooth: hci4: command tx timeout [ 263.993316] Bluetooth: hci6: command tx timeout [ 263.993501] Bluetooth: hci7: command tx timeout [ 264.055795] Bluetooth: hci5: command tx timeout [ 318.157922] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.160474] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.181426] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.203719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.209827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.217127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.229038] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.232879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.236975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.242856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.289213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.302089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.306960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.313698] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.329006] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.428089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.431466] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.437102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.440026] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.450162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.451138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.453230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.455053] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.463938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.466380] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.474094] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.482179] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.496230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.512636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.517344] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.620590] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 318.630185] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 318.636903] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 318.646039] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 318.649439] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 318.664231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 318.671925] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 318.674190] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 318.677338] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 318.680010] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.247848] Bluetooth: hci0: command tx timeout [ 320.311800] Bluetooth: hci1: command tx timeout [ 320.377595] Bluetooth: hci2: command tx timeout [ 320.503995] Bluetooth: hci4: command tx timeout [ 320.568713] Bluetooth: hci3: command tx timeout [ 320.835782] Bluetooth: hci6: command tx timeout [ 320.888189] Bluetooth: hci7: command tx timeout [ 321.273690] Bluetooth: hci5: command tx timeout [ 322.295763] Bluetooth: hci0: command tx timeout [ 322.359817] Bluetooth: hci1: command tx timeout [ 322.423951] Bluetooth: hci2: command tx timeout [ 322.551684] Bluetooth: hci4: command tx timeout [ 322.615851] Bluetooth: hci3: command tx timeout [ 322.871825] Bluetooth: hci6: command tx timeout [ 322.936750] Bluetooth: hci7: command tx timeout [ 323.319683] Bluetooth: hci5: command tx timeout [ 324.343665] Bluetooth: hci0: command tx timeout [ 324.407652] Bluetooth: hci1: command tx timeout [ 324.472036] Bluetooth: hci2: command tx timeout [ 324.600721] Bluetooth: hci4: command tx timeout [ 324.664641] Bluetooth: hci3: command tx timeout [ 324.919677] Bluetooth: hci6: command tx timeout [ 324.983705] Bluetooth: hci7: command tx timeout [ 325.367671] Bluetooth: hci5: command tx timeout [ 326.391692] Bluetooth: hci0: command tx timeout [ 326.455878] Bluetooth: hci1: command tx timeout [ 326.519919] Bluetooth: hci2: command tx timeout [ 326.647834] Bluetooth: hci4: command tx timeout [ 326.711654] Bluetooth: hci3: command tx timeout [ 326.967776] Bluetooth: hci6: command tx timeout [ 327.032512] Bluetooth: hci7: command tx timeout [ 327.417067] Bluetooth: hci5: command tx timeout [ 378.891284] syz-executor.7 (6915) used greatest stack depth: 24872 bytes left [ 380.818307] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.820420] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.826010] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.830809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.833326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.835032] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.838522] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.842423] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.847738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.852955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 380.938977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.941025] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.949843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.955107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.957450] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.961961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.965334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.972910] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.979759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.994357] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 381.063843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.081177] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.088887] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.120970] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 381.132886] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 381.133477] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 381.141705] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.147861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.148172] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 381.154144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 381.160891] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 381.164420] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.167453] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 381.190319] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.205195] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.207729] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 381.211767] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 381.228383] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 381.234506] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 381.270389] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 382.903697] Bluetooth: hci0: command tx timeout [ 382.904661] Bluetooth: hci1: command tx timeout [ 383.032500] Bluetooth: hci2: command tx timeout [ 383.111214] Bluetooth: hci3: command tx timeout [ 383.224182] Bluetooth: hci4: command tx timeout [ 383.352481] Bluetooth: hci6: command tx timeout [ 383.436753] Bluetooth: hci5: command tx timeout [ 383.480658] Bluetooth: hci7: command tx timeout [ 384.952028] Bluetooth: hci1: command tx timeout [ 384.953111] Bluetooth: hci0: command tx timeout [ 385.079892] Bluetooth: hci2: command tx timeout [ 385.144657] Bluetooth: hci3: command tx timeout [ 385.272026] Bluetooth: hci4: command tx timeout [ 385.400087] Bluetooth: hci6: command tx timeout [ 385.464643] Bluetooth: hci5: command tx timeout [ 385.528695] Bluetooth: hci7: command tx timeout [ 386.999677] Bluetooth: hci0: command tx timeout [ 387.000219] Bluetooth: hci1: command tx timeout [ 387.127752] Bluetooth: hci2: command tx timeout [ 387.191661] Bluetooth: hci3: command tx timeout [ 387.319922] Bluetooth: hci4: command tx timeout [ 387.449599] Bluetooth: hci6: command tx timeout [ 387.512014] Bluetooth: hci5: command tx timeout [ 387.575702] Bluetooth: hci7: command tx timeout [ 389.048843] Bluetooth: hci0: command tx timeout [ 389.049366] Bluetooth: hci1: command tx timeout [ 389.177131] Bluetooth: hci2: command tx timeout [ 389.239965] Bluetooth: hci3: command tx timeout [ 389.369094] Bluetooth: hci4: command tx timeout [ 389.496651] Bluetooth: hci6: command tx timeout [ 389.560694] Bluetooth: hci5: command tx timeout [ 389.623682] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 11:36:08 Registers: info registers vcpu 0 RAX=ffff88802c620001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88802c61f301 RSI=ffff88802c61f3a0 RDI=ffff88802c61f128 RBP=ffff88802c61f3a0 RSP=ffff88802c61f080 R8 =ffffffff8685f10a R9 =0000000000000000 R10=000000000003b53d R11=00000000000231b3 R12=0000000000000008 R13=ffff88802c618000 R14=ffff88802c61f3a8 R15=ffff88802c61f118 RIP=ffffffff81353b5e RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd7b604da8 CR3=00000000253eb000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000002 RCX=ffff88806cf089cc RDX=0000000000000000 RSI=ffffffff81af02ca RDI=ffff888015f7d67c RBP=ffff88806cf08ad0 RSP=ffff88806cf08a08 R8 =ffffffff86867d0e R9 =ffff88806cf08ab8 R10=000000000003b53d R11=00000000000248fc R12=0000000000000000 R13=ffff88806cf08ac0 R14=ffff888015f7d280 R15=ffff88806cf08a78 RIP=ffffffff81353d0c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd615c7f368 CR3=000000002cbb2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000