L802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf000000}, 0x0) 03:01:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9000000}, 0x0) 03:01:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf00}, 0x0) 03:01:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x6000000}, 0x0) 03:01:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9effffff}, 0x0) 03:01:11 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(0x0, 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:01:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x7000000}, 0x0) 03:01:11 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xbc00}, 0x0) 03:01:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x1000000}, 0x0) 03:01:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc00e}, 0x0) 03:01:11 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9effffff}, 0x0) 03:01:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf000000}, 0x0) 03:01:11 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc00e}, 0x0) 03:01:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x2000000}, 0x0) 03:01:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9000000}, 0x0) 03:01:12 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xa6ffffff}, 0x0) 03:01:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xd100}, 0x0) 03:01:12 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf000}, 0x0) 03:01:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xa6ffffff}, 0x0) 03:01:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9effffff}, 0x0) [ 1949.893806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1949.896885] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1949.898528] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1949.902994] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1949.907069] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1951.931478] Bluetooth: hci4: command tx timeout [ 1953.979418] Bluetooth: hci4: command tx timeout [ 1956.027585] Bluetooth: hci4: command tx timeout [ 1957.245125] Bluetooth: hci0: command 0x0406 tx timeout [ 1958.075571] Bluetooth: hci4: command tx timeout 03:01:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x3000000}, 0x0) 03:01:36 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffff}, 0x0) 03:01:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xa6ffffff}, 0x0) 03:01:36 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:01:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xb5000000}, 0x0) 03:01:36 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc00e0000}, 0x0) 03:01:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf000}, 0x0) 03:01:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf000000}, 0x0) 03:01:36 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0000000}, 0x0) 03:01:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9effffff}, 0x0) 03:01:36 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff}, 0x0) 03:01:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffff}, 0x0) 03:01:36 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x1000000}, 0x0) 03:01:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc00e0000}, 0x0) 03:01:36 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffff000}, 0x0) 03:01:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xa6ffffff}, 0x0) 03:01:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x4000000}, 0x0) 03:01:36 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 1974.794716] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1974.799906] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1974.802935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1974.809452] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1974.813095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1974.927174] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1974.931447] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1974.934814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1974.943775] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1974.948228] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1976.827393] Bluetooth: hci4: command tx timeout [ 1977.020662] Bluetooth: hci6: command tx timeout [ 1978.875387] Bluetooth: hci4: command tx timeout [ 1979.068086] Bluetooth: hci6: command tx timeout [ 1980.924734] Bluetooth: hci4: command tx timeout [ 1981.115805] Bluetooth: hci6: command tx timeout [ 1982.972834] Bluetooth: hci4: command tx timeout [ 1983.164009] Bluetooth: hci6: command tx timeout 03:01:56 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff9e}, 0x0) 03:01:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc00e0000}, 0x0) 03:01:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x1000000}, 0x0) 03:01:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc00e0000}, 0x0) 03:01:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff}, 0x0) 03:01:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x5000000}, 0x0) 03:01:56 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:01:56 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x2000000}, 0x0) 03:01:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x6000000}, 0x0) 03:01:56 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffffa6}, 0x0) 03:01:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x7000000}, 0x0) 03:01:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x2000000}, 0x0) 03:01:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc4000000}, 0x0) 03:01:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffff000}, 0x0) 03:01:56 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffffff0}, 0x0) 03:01:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc5000000}, 0x0) 03:01:56 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x3000000}, 0x0) 03:01:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9000000}, 0x0) 03:01:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0) 03:01:56 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 03:01:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf000000}, 0x0) 03:02:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff}, 0x0) 03:02:04 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:02:04 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x100000000000000}, 0x0) 03:02:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff9e}, 0x0) 03:02:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff}, 0x0) 03:02:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9effffff}, 0x0) 03:02:04 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x4000000}, 0x0) 03:02:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x3000000}, 0x0) 03:02:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x4000000}, 0x0) 03:02:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffff000}, 0x0) 03:02:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffffa6}, 0x0) 03:02:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffff000}, 0x0) 03:02:12 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x5000000}, 0x0) 03:02:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffffff0}, 0x0) 03:02:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xa6ffffff}, 0x0) 03:02:12 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x200000000000000}, 0x0) 03:02:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x5000000}, 0x0) 03:02:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0) 03:02:12 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:02:12 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0) 03:02:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 03:02:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc0000000}, 0x0) 03:02:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x6000000}, 0x0) 03:02:12 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x400000000000000}, 0x0) 03:02:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0) 03:02:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x100000000000000}, 0x0) 03:02:12 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x6000000}, 0x0) 03:02:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc00e0000}, 0x0) 03:02:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff9e}, 0x0) 03:02:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x200000000000000}, 0x0) 03:02:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff}, 0x0) [ 2010.627933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2010.633532] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2010.636838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2010.644980] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2010.649012] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2012.667579] Bluetooth: hci2: command tx timeout [ 2014.590631] Bluetooth: hci7: command 0x0406 tx timeout [ 2014.715477] Bluetooth: hci2: command tx timeout [ 2016.764368] Bluetooth: hci2: command tx timeout [ 2018.811378] Bluetooth: hci2: command tx timeout 03:02:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff9e}, 0x0) 03:02:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x7000000}, 0x0) 03:02:37 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x500000000000000}, 0x0) 03:02:37 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:02:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffff000}, 0x0) 03:02:37 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x7000000}, 0x0) 03:02:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffffa6}, 0x0) 03:02:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0) [ 2039.163492] Bluetooth: hci5: command 0x0406 tx timeout 03:02:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffffa6}, 0x0) 03:02:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x400000000000000}, 0x0) 03:02:45 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:02:45 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9000000}, 0x0) 03:02:45 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x600000000000000}, 0x0) 03:02:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0) 03:02:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9000000}, 0x0) 03:02:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffffff0}, 0x0) 03:02:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x500000000000000}, 0x0) 03:02:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf000000}, 0x0) 03:02:45 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf000000}, 0x0) 03:02:45 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x700000000000000}, 0x0) 03:02:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9effffff}, 0x0) 03:02:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff9e}, 0x0) 03:02:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffffff0}, 0x0) 03:02:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 03:02:45 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9effffff}, 0x0) 03:02:45 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x900000000000000}, 0x0) 03:02:45 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4c"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 2043.077179] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2043.084281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2043.086711] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2043.091617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2043.094042] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2045.116401] Bluetooth: hci3: command tx timeout [ 2047.163679] Bluetooth: hci3: command tx timeout [ 2049.212448] Bluetooth: hci3: command tx timeout [ 2051.259382] Bluetooth: hci3: command tx timeout 03:03:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x600000000000000}, 0x0) 03:03:10 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4c"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:03:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x100000000000000}, 0x0) 03:03:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffffa6}, 0x0) 03:03:10 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xa6ffffff}, 0x0) 03:03:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xa6ffffff}, 0x0) 03:03:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 03:03:10 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf00000000000000}, 0x0) 03:03:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x100000000000000}, 0x0) 03:03:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x700000000000000}, 0x0) 03:03:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffffff0}, 0x0) 03:03:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc00e0000}, 0x0) 03:03:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x200000000000000}, 0x0) 03:03:10 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 03:03:10 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xbc000000}, 0x0) 03:03:10 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4c"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:03:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 03:03:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x200000000000000}, 0x0) 03:03:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x900000000000000}, 0x0) 03:03:10 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xa6ffffff00000000}, 0x0) 03:03:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xd1000000}, 0x0) 03:03:18 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be86"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:03:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0) 03:03:18 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc00e000000000000}, 0x0) 03:03:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0) 03:03:18 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc00e0000}, 0x0) 03:03:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf00000000000000}, 0x0) 03:03:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x100000000000000}, 0x0) 03:03:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff}, 0x0) 03:03:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x400000000000000}, 0x0) [ 2076.422925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2076.428091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2076.429936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2076.435578] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2076.442065] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2078.524930] Bluetooth: hci0: command tx timeout [ 2080.571380] Bluetooth: hci0: command tx timeout [ 2082.622814] Bluetooth: hci0: command tx timeout [ 2084.667517] Bluetooth: hci0: command tx timeout 03:03:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x400000000000000}, 0x0) 03:03:42 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be86"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:03:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffff000}, 0x0) 03:03:42 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff}, 0x0) 03:03:42 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf000000000000000}, 0x0) 03:03:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x500000000000000}, 0x0) 03:03:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 03:03:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x200000000000000}, 0x0) 03:03:42 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 03:03:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0) 03:03:43 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffff000}, 0x0) 03:03:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0) 03:03:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xa6ffffff00000000}, 0x0) 03:03:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x400000000000000}, 0x0) 03:03:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x600000000000000}, 0x0) 03:03:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x500000000000000}, 0x0) 03:03:43 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0) 03:03:43 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be86"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:03:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x500000000000000}, 0x0) 03:03:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xb500000000000000}, 0x0) 03:03:43 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff9e}, 0x0) 03:03:43 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 03:03:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x600000000000000}, 0x0) 03:03:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff9e}, 0x0) 03:03:43 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffffa6}, 0x0) [ 2100.603775] Bluetooth: hci4: command 0x0406 tx timeout [ 2100.604612] Bluetooth: hci6: command 0x0406 tx timeout 03:03:50 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 03:03:50 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb84753"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:03:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffffa6}, 0x0) 03:03:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x600000000000000}, 0x0) 03:03:50 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffffff0}, 0x0) 03:03:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc00e000000000000}, 0x0) 03:03:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x700000000000000}, 0x0) 03:03:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x700000000000000}, 0x0) 03:03:50 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 03:03:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x900000000000000}, 0x0) [ 2108.358054] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2108.361368] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2108.365049] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2108.371702] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2108.376860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2110.396387] Bluetooth: hci4: command tx timeout [ 2112.444465] Bluetooth: hci4: command tx timeout [ 2114.492424] Bluetooth: hci4: command tx timeout [ 2116.539408] Bluetooth: hci4: command tx timeout 03:04:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x900000000000000}, 0x0) 03:04:14 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x100000000000000}, 0x0) 03:04:14 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:04:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf00000000000000}, 0x0) 03:04:14 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb84753"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:04:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 03:04:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffffff0}, 0x0) 03:04:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x700000000000000}, 0x0) 03:04:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf00000000000000}, 0x0) 03:04:14 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:04:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 03:04:14 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x200000000000000}, 0x0) 03:04:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 03:04:14 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 03:04:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x900000000000000}, 0x0) 03:04:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 03:04:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 03:04:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xa6ffffff00000000}, 0x0) 03:04:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xa6ffffff00000000}, 0x0) 03:04:15 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb84753"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:04:15 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:04:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc00e000000000000}, 0x0) 03:04:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc000000000000000}, 0x0) [ 2132.996011] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2133.000703] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2133.003927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2133.011016] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2133.014944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2133.371391] Bluetooth: hci2: command 0x0406 tx timeout [ 2135.035577] Bluetooth: hci0: command tx timeout [ 2137.083855] Bluetooth: hci0: command tx timeout [ 2139.133156] Bluetooth: hci0: command tx timeout [ 2141.179397] Bluetooth: hci0: command tx timeout 03:04:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x100000000000000}, 0x0) 03:04:40 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0) 03:04:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf00000000000000}, 0x0) 03:04:40 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 03:04:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc500000000000000}, 0x0) 03:04:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc00e000000000000}, 0x0) 03:04:40 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:04:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 03:04:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 03:04:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x200000000000000}, 0x0) 03:04:46 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 03:04:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 03:04:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 03:04:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 03:04:46 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x400000000000000}, 0x0) 03:04:46 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:04:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:04:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xa6ffffff00000000}, 0x0) 03:04:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 03:04:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0) 03:04:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 03:04:47 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x500000000000000}, 0x0) 03:04:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:04:47 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7}, 0x0) 03:04:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) [ 2166.139516] Bluetooth: hci3: command 0x0406 tx timeout 03:04:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc00e000000000000}, 0x0) 03:04:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:04:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:04:55 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x600000000000000}, 0x0) 03:04:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x400000000000000}, 0x0) 03:04:55 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9}, 0x0) 03:04:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 03:04:55 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:04:55 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf}, 0x0) 03:04:55 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x700000000000000}, 0x0) 03:04:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:04:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x500000000000000}, 0x0) 03:04:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:04:55 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae8"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:04:55 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x900000000000000}, 0x0) 03:04:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 2173.317803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2173.322160] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2173.326075] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2173.331540] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2173.334117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2173.383501] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2173.386732] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2173.388643] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2173.392978] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2173.395089] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2175.355777] Bluetooth: hci0: command tx timeout [ 2175.419752] Bluetooth: hci6: command tx timeout [ 2177.403445] Bluetooth: hci0: command tx timeout [ 2177.467820] Bluetooth: hci6: command tx timeout [ 2179.452159] Bluetooth: hci0: command tx timeout [ 2179.515419] Bluetooth: hci6: command tx timeout [ 2181.500345] Bluetooth: hci0: command tx timeout [ 2181.563486] Bluetooth: hci6: command tx timeout 03:05:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc400000000000000}, 0x0) 03:05:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:05:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x600000000000000}, 0x0) 03:05:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 03:05:14 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae8"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:05:14 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 03:05:14 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf00000000000000}, 0x0) 03:05:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:05:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x700000000000000}, 0x0) 03:05:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 03:05:14 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 03:05:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x900000000000000}, 0x0) 03:05:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 03:05:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 03:05:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 2192.774960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2192.780247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2192.782938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2192.789112] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2192.792999] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2192.839795] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2192.845002] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2192.847639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2192.856419] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2192.859942] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2194.876442] Bluetooth: hci5: command tx timeout [ 2194.877633] Bluetooth: hci3: command tx timeout [ 2196.924423] Bluetooth: hci5: command tx timeout [ 2196.924864] Bluetooth: hci3: command tx timeout [ 2198.973175] Bluetooth: hci3: command tx timeout [ 2198.973693] Bluetooth: hci5: command tx timeout [ 2201.019787] Bluetooth: hci3: command tx timeout [ 2201.020237] Bluetooth: hci5: command tx timeout 03:05:34 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 03:05:34 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x500}, 0x0) 03:05:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf00000000000000}, 0x0) 03:05:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 03:05:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7}, 0x0) 03:05:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 03:05:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:05:34 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae8"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:05:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 03:05:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 03:05:34 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xa6ffffff00000000}, 0x0) 03:05:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 03:05:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7}, 0x0) 03:05:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9}, 0x0) 03:05:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:05:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 03:05:34 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f0000"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:05:34 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 03:05:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xa6ffffff00000000}, 0x0) 03:05:34 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xbc00000000000000}, 0x0) 03:05:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:05:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7}, 0x0) 03:05:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 03:05:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9}, 0x0) 03:05:43 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f0000"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:05:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9}, 0x0) 03:05:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf}, 0x0) 03:05:43 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x700}, 0x0) 03:05:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc00e000000000000}, 0x0) 03:05:43 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xc00e000000000000}, 0x0) 03:05:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf}, 0x0) 03:05:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xd100000000000000}, 0x0) 03:05:50 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x900}, 0x0) 03:05:50 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f0000"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:05:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xb5}, 0x0) 03:05:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf}, 0x0) 03:05:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:05:50 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 03:05:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 03:05:50 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 03:05:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 03:05:50 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f00000000"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:05:50 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 03:05:50 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 03:05:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 03:05:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 03:05:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc5}, 0x0) 03:05:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 03:05:50 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:05:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 03:05:51 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 03:05:51 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f00000000"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:05:51 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:05:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x500}, 0x0) [ 2231.679063] Bluetooth: hci4: command 0x0406 tx timeout 03:05:59 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) 03:05:59 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f00000000"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:05:59 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 03:05:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 03:05:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 03:05:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 03:05:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 03:05:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 03:05:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:05:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7}, 0x0) 03:05:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 03:06:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:06:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 03:06:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x500}, 0x0) 03:06:08 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:06:08 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 03:06:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9}, 0x0) 03:06:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x700}, 0x0) 03:06:08 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:06:08 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 03:06:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 03:06:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf}, 0x0) 03:06:08 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 03:06:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x500}, 0x0) 03:06:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x900}, 0x0) 03:06:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 03:06:08 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:06:08 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 03:06:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 03:06:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 03:06:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 03:06:16 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 03:06:16 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:06:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x700}, 0x0) 03:06:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:06:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 03:06:16 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 03:06:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x700}, 0x0) 03:06:16 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 03:06:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 03:06:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x900}, 0x0) 03:06:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 03:06:24 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7}, 0x0) 03:06:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 03:06:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 03:06:24 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:06:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x500}, 0x0) 03:06:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x900}, 0x0) 03:06:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xb500}, 0x0) 03:06:24 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:06:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 03:06:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 03:06:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) 03:06:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 03:06:24 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 03:06:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) 03:06:25 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9}, 0x0) 03:06:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x700}, 0x0) 03:06:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 03:06:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc500}, 0x0) 03:06:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 03:06:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 03:06:33 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 03:06:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7}, 0x0) 03:06:33 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf}, 0x0) 03:06:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x900}, 0x0) 03:06:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 03:06:33 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:06:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 03:06:33 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xbc}, 0x0) 03:06:33 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 03:06:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9}, 0x0) 03:06:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 03:06:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 03:06:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 03:06:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) 03:06:33 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:06:33 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 03:06:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 03:06:41 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 03:06:41 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:06:41 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 03:06:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 03:06:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 03:06:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 03:06:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf}, 0x0) 03:06:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) 03:06:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 03:06:41 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 03:06:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 2279.366475] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2279.371592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2279.374388] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2279.379420] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2279.381898] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2281.404385] Bluetooth: hci4: command tx timeout [ 2283.451453] Bluetooth: hci4: command tx timeout [ 2285.499369] Bluetooth: hci4: command tx timeout [ 2287.547385] Bluetooth: hci4: command tx timeout [ 2297.215107] Bluetooth: hci0: command 0x0406 tx timeout [ 2297.217791] Bluetooth: hci6: command 0x0406 tx timeout 03:07:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd1}, 0x0) 03:07:06 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:07:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc400}, 0x0) 03:07:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 03:07:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 03:07:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 03:07:06 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 03:07:06 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x500}, 0x0) 03:07:06 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 03:07:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 03:07:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 03:07:06 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa6ffffff}, 0x0) 03:07:06 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x700}, 0x0) 03:07:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 03:07:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 03:07:06 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:07:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:07:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 03:07:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 03:07:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 03:07:14 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x900}, 0x0) 03:07:14 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) 03:07:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 03:07:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:07:14 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:07:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 03:07:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x500}, 0x0) 03:07:14 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0000000}, 0x0) 03:07:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:07:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 03:07:14 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 03:07:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 03:07:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) [ 2317.693792] Bluetooth: hci3: command 0x0406 tx timeout [ 2317.694948] Bluetooth: hci5: command 0x0406 tx timeout 03:07:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 03:07:22 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:07:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 03:07:22 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 03:07:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 03:07:22 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 03:07:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 03:07:22 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 03:07:22 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xbc00}, 0x0) 03:07:22 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:07:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 03:07:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 03:07:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x700}, 0x0) 03:07:22 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:07:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 03:07:22 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 03:07:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x900}, 0x0) 03:07:22 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xb2}, @l2cap_cid_signaling={{0xae}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}]}}, 0xb7) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 2320.841418] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2320.845257] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2320.848190] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2320.852635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2320.857107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2322.940433] Bluetooth: hci2: command tx timeout [ 2324.987346] Bluetooth: hci2: command tx timeout [ 2327.035546] Bluetooth: hci2: command tx timeout [ 2329.083751] Bluetooth: hci2: command tx timeout 03:07:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 03:07:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 03:07:47 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 03:07:47 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xb2}, @l2cap_cid_signaling={{0xae}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}]}}, 0xb7) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:07:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 03:07:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 03:07:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 03:07:47 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) 03:07:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 03:07:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 03:07:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 03:07:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 03:07:48 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 03:07:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 03:07:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 03:07:55 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 03:07:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) 03:07:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa6ffffff}, 0x0) 03:07:55 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xb2}, @l2cap_cid_signaling={{0xae}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}]}}, 0xb7) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:07:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 03:07:55 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 03:07:55 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x0, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:07:55 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffa6}, 0x0) 03:07:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) 03:07:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 03:07:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc5000000}, 0x0) 03:07:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa6ffffff}, 0x0) 03:07:55 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x0, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:07:55 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 03:07:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 03:07:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd100}, 0x0) 03:07:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) [ 2353.671592] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2353.675631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2353.678856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2353.682931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2353.686972] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2355.707921] Bluetooth: hci3: command tx timeout [ 2357.755449] Bluetooth: hci3: command tx timeout [ 2359.803369] Bluetooth: hci3: command tx timeout [ 2361.852864] Bluetooth: hci3: command tx timeout 03:08:20 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 03:08:20 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 03:08:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 03:08:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xb5000000}, 0x0) 03:08:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 03:08:20 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x0, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:08:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 03:08:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa6ffffff}, 0x0) 03:08:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 03:08:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0000000}, 0x0) 03:08:20 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x2) 03:08:20 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 03:08:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 03:08:20 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x0, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:08:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) 03:08:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 03:08:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa6ffffff}, 0x0) 03:08:20 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x3) 03:08:20 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 03:08:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 03:08:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) 03:08:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) 03:08:28 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4) 03:08:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 03:08:28 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x0, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:08:28 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 03:08:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 03:08:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffa6}, 0x0) 03:08:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4000000}, 0x0) 03:08:28 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x5) 03:08:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 03:08:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 03:08:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 03:08:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 03:08:36 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:08:36 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x6) 03:08:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 03:08:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 03:08:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 03:08:36 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x0, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:08:36 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 03:08:36 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x7) 03:08:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 03:08:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:08:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 03:08:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 03:08:36 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x0, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:08:36 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) [ 2394.630102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2394.637276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2394.641057] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2394.645602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2394.649169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2396.668472] Bluetooth: hci0: command tx timeout [ 2398.715747] Bluetooth: hci0: command tx timeout [ 2400.763439] Bluetooth: hci0: command tx timeout [ 2402.811524] Bluetooth: hci0: command tx timeout [ 2403.708957] Bluetooth: hci4: command 0x0406 tx timeout 03:09:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 03:09:01 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9) 03:09:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 03:09:01 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 03:09:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 03:09:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 03:09:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x2) 03:09:01 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x0, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:09:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 03:09:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffa6}, 0x0) 03:09:01 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 03:09:01 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf) 03:09:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x3) 03:09:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffa6}, 0x0) 03:09:01 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 03:09:01 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x0, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 2419.396388] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2419.400497] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2419.405650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2419.413732] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2419.417452] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2421.435399] Bluetooth: hci0: command tx timeout [ 2423.483431] Bluetooth: hci0: command tx timeout [ 2425.531511] Bluetooth: hci0: command tx timeout [ 2427.579960] Bluetooth: hci0: command tx timeout 03:09:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 03:09:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 03:09:26 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x0, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:09:26 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0) 03:09:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 03:09:26 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 03:09:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 03:09:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4) 03:09:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 03:09:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 03:09:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x5) 03:09:26 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa6ffffff}, 0x0) 03:09:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 03:09:26 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x300) 03:09:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x6) 03:09:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 03:09:26 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x500) 03:09:26 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x0, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:09:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) [ 2444.667628] Bluetooth: hci2: command 0x0406 tx timeout 03:09:35 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x0, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:09:35 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xbc000000}, 0x0) 03:09:35 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x600) 03:09:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffa6}, 0x0) 03:09:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x7) 03:09:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 03:09:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x2) 03:09:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x2) 03:09:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 03:09:35 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x700) 03:09:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9) 03:09:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x3) 03:09:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 03:09:35 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x900) 03:09:35 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) 03:09:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa6ffffff}, 0x0) 03:09:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x2) 03:09:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x3) 03:09:43 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 03:09:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf) 03:09:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) 03:09:43 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xec0) 03:09:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4) 03:09:43 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x10a}, @l2cap_cid_signaling={{0x106}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x54}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}]}}]}}, 0x10f) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:09:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4) 03:09:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x3) 03:09:51 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x10a}, @l2cap_cid_signaling={{0x106}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x54}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}]}}]}}, 0x10f) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:09:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x5) 03:09:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x5) 03:09:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd1000000}, 0x0) 03:09:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc5) 03:09:51 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 03:09:51 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf00) 03:09:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4) 03:09:51 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e) 03:09:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0) 03:09:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x6) 03:09:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 03:09:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x5) 03:09:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x6) 03:09:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x300) 03:09:52 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf000) 03:09:52 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x10a}, @l2cap_cid_signaling={{0x106}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x54}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}]}}]}}, 0x10f) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 2469.962616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2469.972957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2469.975069] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2469.980002] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2469.982238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2471.996184] Bluetooth: hci3: command tx timeout [ 2474.043466] Bluetooth: hci3: command tx timeout [ 2476.091385] Bluetooth: hci3: command tx timeout [ 2478.141325] Bluetooth: hci3: command tx timeout 03:10:17 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 03:10:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 03:10:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x6) 03:10:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x500) 03:10:17 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:10:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x7) 03:10:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x7) 03:10:17 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffff) 03:10:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9) 03:10:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9) 03:10:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x600) 03:10:17 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x1000000) 03:10:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x7) 03:10:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 03:10:17 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 03:10:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf) 03:10:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf) 03:10:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9) 03:10:18 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:10:26 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x2000000) 03:10:26 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffa6}, 0x0) 03:10:26 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:10:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf) 03:10:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xb5) 03:10:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc0) 03:10:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x700) 03:10:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 03:10:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0) 03:10:26 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 03:10:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x900) 03:10:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0) 03:10:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffa6}, 0x0) 03:10:26 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x3000000) 03:10:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x300) [ 2504.643504] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2504.650031] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2504.653000] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2504.660143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2504.665918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2506.683403] Bluetooth: hci0: command tx timeout [ 2508.731559] Bluetooth: hci0: command tx timeout [ 2510.779756] Bluetooth: hci0: command tx timeout [ 2512.827983] Bluetooth: hci0: command tx timeout 03:10:52 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:10:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x300) 03:10:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc4) 03:10:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x500) 03:10:52 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 03:10:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xec0) 03:10:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 03:10:52 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000000) 03:10:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 03:10:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0) 03:10:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf00) 03:10:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x500) 03:10:52 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x2) 03:10:52 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x5000000) 03:10:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x600) 03:10:52 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x3) 03:10:52 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x6000000) 03:10:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x2) 03:10:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e) 03:10:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x600) 03:10:52 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:11:00 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x7000000) 03:11:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x300) 03:11:00 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:11:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x700) 03:11:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x3) 03:11:00 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4) 03:11:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc500) 03:11:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x700) 03:11:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf000) 03:11:08 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0x0, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:11:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4) 03:11:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffff) 03:11:08 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9000000) 03:11:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x500) 03:11:08 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x5) 03:11:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x900) 03:11:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x900) 03:11:08 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf000000) 03:11:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x600) 03:11:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x1000000) 03:11:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xec0) 03:11:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xec0) 03:11:08 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9effffff) 03:11:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x5) 03:11:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x700) 03:11:16 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0x0, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:11:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf00) 03:11:16 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x6) 03:11:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x2000000) 03:11:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x6) 03:11:16 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xa6ffffff) 03:11:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x900) 03:11:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf00) 03:11:16 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e0000) 03:11:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc000) 03:11:16 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0000000) 03:11:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xb500) 03:11:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x7) 03:11:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xec0) 03:11:16 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x7) 03:11:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x3000000) 03:11:24 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9) 03:11:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000000) 03:11:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9) 03:11:24 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffff) 03:11:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e) 03:11:24 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0x0, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:11:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e) 03:11:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf00) 03:11:24 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf) 03:11:24 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffff000) 03:11:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf000) 03:11:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf) 03:11:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf000) 03:11:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x5000000) 03:11:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e) 03:11:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffff) [ 2562.900083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2562.903487] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2562.907639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2562.914412] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2562.918559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2562.955232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2562.961545] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2562.963530] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2562.968527] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2562.974822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2564.988199] Bluetooth: hci3: command tx timeout [ 2565.052140] Bluetooth: hci5: command tx timeout [ 2567.035866] Bluetooth: hci3: command tx timeout [ 2567.100111] Bluetooth: hci5: command tx timeout [ 2569.083368] Bluetooth: hci3: command tx timeout [ 2569.147335] Bluetooth: hci5: command tx timeout [ 2571.131798] Bluetooth: hci3: command tx timeout [ 2571.195389] Bluetooth: hci5: command tx timeout 03:11:46 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x0, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:11:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xd1) 03:11:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffff) 03:11:46 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xbc) 03:11:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc400) 03:11:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x6000000) 03:11:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x1000000) 03:11:46 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff7f) 03:11:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf000) 03:11:46 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff9e) 03:11:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x7000000) 03:11:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0) 03:11:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffff) 03:11:46 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x0, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:11:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x1000000) 03:11:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x2000000) 03:11:46 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffffa6) 03:11:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9000000) 03:11:46 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x0, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 2584.645472] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2584.650906] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2584.653790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2584.656931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2584.659573] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2586.683826] Bluetooth: hci3: command tx timeout [ 2588.731764] Bluetooth: hci3: command tx timeout [ 2590.779567] Bluetooth: hci3: command tx timeout [ 2592.828346] Bluetooth: hci3: command tx timeout 03:12:12 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0) 03:12:12 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0x0, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:12:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x300) 03:12:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x3000000) 03:12:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x1000000) 03:12:12 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffffff0) 03:12:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf000000) 03:12:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x2000000) 03:12:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9effffff) 03:12:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x2000000) 03:12:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x500) 03:12:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x3000000) 03:12:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000000) 03:12:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xa6ffffff) 03:12:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x600) 03:12:20 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x300) 03:12:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000000) 03:12:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x3000000) 03:12:20 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffffffffff) 03:12:20 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0x0, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:12:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x5000000) 03:12:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x700) 03:12:20 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0x0, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:12:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000000) 03:12:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e0000) 03:12:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x6000000) 03:12:20 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x100000000000000) 03:12:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x5000000) 03:12:20 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x500) 03:12:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x7000000) 03:12:20 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:12:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x5000000) 03:12:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x900) 03:12:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc5000000) 03:12:28 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:12:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x6000000) 03:12:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x6000000) 03:12:28 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x200000000000000) 03:12:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xec0) 03:12:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9000000) 03:12:28 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x600) [ 2628.989424] Bluetooth: hci0: command 0x0406 tx timeout 03:12:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x7000000) 03:12:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffff) 03:12:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf000000) 03:12:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf00) 03:12:36 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x700) 03:12:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x7000000) 03:12:36 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x300000000000000) 03:12:36 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:12:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9000000) 03:12:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9000000) 03:12:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9effffff) 03:12:37 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x400000000000000) 03:12:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffff000) 03:12:37 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x900) 03:12:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e) 03:12:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff7f) 03:12:37 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x111}, @l2cap_cid_signaling={{0x10d}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5b}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x116) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:12:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf000000) 03:12:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xa6ffffff) 03:12:37 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xec0) 03:12:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xd100) 03:12:37 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x500000000000000) 03:12:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf000000) 03:12:44 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf00) 03:12:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff9e) 03:12:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc0000000) 03:12:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9effffff) 03:12:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9effffff) 03:12:44 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x600000000000000) 03:12:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf000) 03:12:44 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x111}, @l2cap_cid_signaling={{0x10d}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5b}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x116) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:12:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e0000) 03:12:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffff) 03:12:44 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x700000000000000) 03:12:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffffa6) 03:12:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xa6ffffff) 03:12:44 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xbc00) 03:12:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xa6ffffff) 03:12:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e0000) 03:12:52 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e) 03:12:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffff) 03:12:52 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x111}, @l2cap_cid_signaling={{0x10d}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5b}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x116) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:12:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x1000000) 03:12:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xb5000000) 03:12:52 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x900000000000000) 03:12:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffffff0) 03:12:52 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf000) 03:12:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc4000000) 03:12:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffffffffff) 03:12:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x2000000) 03:12:52 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffff) 03:12:52 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf00000000000000) 03:12:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffff000) 03:12:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e0000) 03:12:52 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x1000000) 03:12:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x100000000000000) [ 2650.758475] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2650.761204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2650.766165] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2650.771325] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2650.773429] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2652.796357] Bluetooth: hci2: command tx timeout [ 2654.843427] Bluetooth: hci2: command tx timeout [ 2656.891832] Bluetooth: hci2: command tx timeout [ 2658.940605] Bluetooth: hci2: command tx timeout 03:13:18 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9effffff00000000) 03:13:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x200000000000000) 03:13:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffff) 03:13:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff7f) 03:13:18 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x2000000) 03:13:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x3000000) 03:13:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffff) 03:13:18 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:13:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff9e) 03:13:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x300000000000000) 03:13:18 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xa6ffffff00000000) 03:13:18 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x3000000) 03:13:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffff000) 03:13:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffff000) 03:13:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000000) 03:13:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffffa6) 03:13:19 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e000000000000) 03:13:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x5000000) 03:13:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x400000000000000) 03:13:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffffff0) 03:13:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff7f) 03:13:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff7f) 03:13:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x500000000000000) 03:13:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x6000000) 03:13:27 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf000000000000000) 03:13:27 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:13:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff9e) 03:13:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffffffffff) 03:13:27 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000000) 03:13:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x100000000000000) [ 2685.445024] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2685.447599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2685.451868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2685.457136] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2685.459906] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2686.331400] Bluetooth: hci5: command 0x0406 tx timeout [ 2687.548469] Bluetooth: hci0: command tx timeout [ 2689.596738] Bluetooth: hci0: command tx timeout [ 2691.643394] Bluetooth: hci0: command tx timeout [ 2693.693107] Bluetooth: hci0: command tx timeout [ 2706.811512] Bluetooth: hci3: command 0x0406 tx timeout 03:13:53 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffff00000000) 03:13:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff9e) 03:13:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x7000000) 03:13:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x200000000000000) 03:13:53 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x5000000) 03:13:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffffa6) 03:13:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x600000000000000) 03:13:53 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:13:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x300000000000000) 03:13:53 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x6000000) 03:13:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x700000000000000) 03:13:53 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff7f00000000) 03:13:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9000000) 03:13:53 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x10a}, @l2cap_cid_signaling={{0x106}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x54}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x10f) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 2711.749226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2711.757319] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2711.761465] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2711.767433] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2711.773209] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2711.880194] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2711.883875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2711.888461] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2711.897060] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2711.900432] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2713.852352] Bluetooth: hci0: command tx timeout [ 2713.979403] Bluetooth: hci5: command tx timeout [ 2715.900012] Bluetooth: hci0: command tx timeout [ 2716.028916] Bluetooth: hci5: command tx timeout [ 2717.947978] Bluetooth: hci0: command tx timeout [ 2718.075778] Bluetooth: hci5: command tx timeout [ 2719.995331] Bluetooth: hci0: command tx timeout [ 2720.124379] Bluetooth: hci5: command tx timeout 03:14:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffffa6) 03:14:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffffff0) 03:14:13 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x7000000) 03:14:13 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x10a}, @l2cap_cid_signaling={{0x106}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x54}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x10f) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:14:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x400000000000000) 03:14:13 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffffffffffff000) 03:14:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x900000000000000) 03:14:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf000000) 03:14:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffffff0) 03:14:13 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9000000) 03:14:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x500000000000000) 03:14:13 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf000000) 03:14:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf00000000000000) 03:14:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffffffffff) 03:14:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9effffff) 03:14:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffffffffff) 03:14:13 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x10a}, @l2cap_cid_signaling={{0x106}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x54}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x10f) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:14:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x100000000000000) [ 2731.656862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2731.662492] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2731.667938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2731.672846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2731.676439] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2733.692389] Bluetooth: hci2: command tx timeout [ 2735.739460] Bluetooth: hci2: command tx timeout [ 2737.787355] Bluetooth: hci2: command tx timeout [ 2739.836635] Bluetooth: hci2: command tx timeout 03:14:38 executing program 6: timer_gettime(0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="034beb70e85c9436cfb09d4781f52b0503be75941c2be32a6f181c", @ANYRES16=r2, @ANYBLOB="2907000000000000000100000008000180f300000000"], 0x1c}}, 0x0) 03:14:38 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:14:38 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9effffff) 03:14:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9effffff00000000) 03:14:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xa6ffffff) 03:14:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x600000000000000) 03:14:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x100000000000000) 03:14:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x200000000000000) 03:14:38 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xa6ffffff) 03:14:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x300000000000000) 03:14:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e0000) 03:14:39 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xa6ffffff00000000) 03:14:39 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xbc000000) 03:14:39 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:14:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x200000000000000) 03:14:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x700000000000000) 03:14:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xd1000000) 03:14:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffff) 03:14:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x400000000000000) 03:14:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x900000000000000) 03:14:47 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e0000) 03:14:47 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x101}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x230, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37244f9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc0cf55b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a8d0301}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fb74132}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b65178f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12bdddd5}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3aee0363}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1013d0b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fca89e8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x158, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6cf7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf1caf9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e96b2c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a65}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8537}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14280a34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7123}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xec74e2e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa9c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a47}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b9a543d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39339900}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d54}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x371d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ad2228c}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa12b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c53}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9578}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2de9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4878cf52}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x408a27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7eef8550}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2265415e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d4bd9c6}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbbb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa7733bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cf3db3b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c03}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ed3788b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7054}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x508d24f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52efeedc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c9ad713}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcfbd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51640150}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x88c0}, 0x4000000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000066", @ANYRES16=r2, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000127bd7000fddbdf250900000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006783d521c080002000000020000000800010003000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x3c}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20044805) 03:14:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x300000000000000) 03:14:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e000000000000) 03:14:47 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:14:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x500000000000000) 03:14:47 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffff) 03:14:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffff000) 03:14:47 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x1c}}, 0x8001) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:14:47 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffff000) 03:14:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf00000000000000) 03:14:47 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x0, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 2765.380520] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2765.385047] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2765.388100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2765.397198] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2765.400782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2767.484141] Bluetooth: hci4: command tx timeout [ 2769.531336] Bluetooth: hci4: command tx timeout [ 2771.579643] Bluetooth: hci4: command tx timeout [ 2773.628382] Bluetooth: hci4: command tx timeout 03:15:12 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff7f) 03:15:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc500000000000000) 03:15:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff7f) 03:15:12 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2907000000000000000001000000080001000200000019785083ead105a3e5d25865440ae47a6440e079d886017ccb56be37db85481ddc50aa72aa11188a4fdf05c965ab205ce8071f50690a79ca8b3141edeca1dd80b6bd112656f45212e9b93554"], 0x1c}}, 0x0) 03:15:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9effffff00000000) 03:15:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x600000000000000) 03:15:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x400000000000000) 03:15:12 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x0, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:15:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff9e) 03:15:12 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) 03:15:12 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff9e) 03:15:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x700000000000000) 03:15:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xa6ffffff00000000) 03:15:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x500000000000000) 03:15:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffff00000000) 03:15:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffffa6) 03:15:20 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x0, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:15:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffffff0) 03:15:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff7f00000000) 03:15:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc000000000000000) 03:15:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x900000000000000) 03:15:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x600000000000000) 03:15:20 executing program 6: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0xc}, 0x20008000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x10) 03:15:20 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffffa6) 03:15:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffffffffffff000) 03:15:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf00000000000000) 03:15:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffffffffff) 03:15:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x700000000000000) 03:15:20 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffffff0) 03:15:20 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x200, 0x2, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x44000) 03:15:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e000000000000) 03:15:20 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x0, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 2798.345690] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2798.350882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2798.354642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2798.360228] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2798.364216] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2800.380375] Bluetooth: hci4: command tx timeout [ 2802.427336] Bluetooth: hci4: command tx timeout [ 2804.475585] Bluetooth: hci4: command tx timeout [ 2806.524478] Bluetooth: hci4: command tx timeout 03:15:45 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffffffffff) 03:15:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9effffff00000000) 03:15:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:15:45 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x0, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:15:45 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}}, 0x40000) 03:15:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x900000000000000) 03:15:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffff00000000) 03:15:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x100000000000000) 03:15:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff7f00000000) 03:15:45 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x100000000000000) 03:15:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf00000000000000) 03:15:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xa6ffffff00000000) 03:15:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x729, 0x70bd29, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}}, 0x81) 03:15:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x200000000000000) 03:15:45 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r4, @ANYBLOB="050007"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5c, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x8c0) 03:15:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9effffff00000000) 03:15:53 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x200000000000000) 03:15:53 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x0, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:15:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffffffffffff000) 03:15:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000009338db29c31e8514538ebcdc612f2f1a4670fc", @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) 03:15:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e000000000000) 03:15:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x300000000000000) 03:15:53 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r2, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)="cc8e8def27fa9f293786ef59cd3e3e05134f334d87af984f55f42c699f1245e01c9fd7c0fded38d31d66327c5d5358a18b11df533ed83172bd5881ca3c55d0ac25eccf909a2421d78f00"/84, 0x54}, {&(0x7f0000001580)="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", 0x156}, {&(0x7f00000000c0)="2922b2ac03460fd4c90709333aa5084a25e6c2f57154f001b85607f0a687d9628c2ee47e44b39292420f8748ce48423de2bc32d643ce5c4298a1597d68b5df566ecdaa59577abfd0e63fd51d76364312e18724c6d1b383cc33f5dfff844e0371ed3a50ec7d7430bf1b1c12b40d0ecdc2d53f799c12beed64c44058a2ec554b46004c71f655a55cef42edae0f0d0365ca3b876994b0aece2ac550241f01a720bfab26a14bcabe632ffda9ecbcb9ce97523a61f9e1e87c4a80c7", 0xb9}, {&(0x7f0000000180)="d53c18a30e694dda2caebc3081d015422bc96eaa581beae9dab255bb50619747297b8aaa996d9ec214284da812b51068c36fe0bfaa99c354676a7b81df4382720dbc302f8d940ff4f6f8a6882c3a865298b802dc843aa6bd5cfdb3727e72a102e28615985f8b88e4c86af5d611e5977d69ac3640ecd643096011b5c5bc7239559b3b586f8371", 0x86}, {&(0x7f0000000000)="e56c7b4b97c4279f7e30b8a40deea1148e39545a7cda4504378f8efd", 0x1c}, {&(0x7f0000000400)="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", 0x1000}], 0x6, 0x400600, 0xff030000, 0x24) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00 ', @ANYRES16=r6, @ANYBLOB="040028bd7000fcdbdf25090000000500300000000000050038000100000008003a0004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4010) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="080026bd7000fedbdf251a00000008000300", @ANYRES32=r3, @ANYBLOB="0c00060003000000030000000c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="3c002380060002000000000006000300a3aa00000600010068ae00000600020000800000000000000000000006000300feff0000050005000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES16=r7, @ANYBLOB="c048f54f29077ec08c97184373efb276380000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 03:15:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x400000000000000) 03:15:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000001540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x48, r5, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4044000) r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r7, &(0x7f00000002c0)=[{&(0x7f0000000040)="cc8e8def27fa9f293786ef59cd3e3e05134f334d87af984f55f42c699f1245e01c9fd7c0fded38d31d66327c5d5358a18b11df533ed83172bd5881ca3c55d0ac25eccf909a2421d78f00"/84, 0x54}, {&(0x7f0000001580)="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", 0x156}, {&(0x7f00000000c0)="2922b2ac03460fd4c90709333aa5084a25e6c2f57154f001b85607f0a687d9628c2ee47e44b39292420f8748ce48423de2bc32d643ce5c4298a1597d68b5df566ecdaa59577abfd0e63fd51d76364312e18724c6d1b383cc33f5dfff844e0371ed3a50ec7d7430bf1b1c12b40d0ecdc2d53f799c12beed64c44058a2ec554b46004c71f655a55cef42edae0f0d0365ca3b876994b0aece2ac550241f01a720bfab26a14bcabe632ffda9ecbcb9ce97523a61f9e1e87c4a80c7", 0xb9}, {&(0x7f0000000180)="d53c18a30e694dda2caebc3081d015422bc96eaa581beae9dab255bb50619747297b8aaa996d9ec214284da812b51068c36fe0bfaa99c354676a7b81df4382720dbc302f8d940ff4f6f8a6882c3a865298b802dc843aa6bd5cfdb3727e72a102e28615985f8b88e4c86af5d611e5977d69ac3640ecd643096011b5c5bc7239559b3b586f8371", 0x86}, {&(0x7f0000000000)="e56c7b4b97c4279f7e30b8a40deea1148e39545a7c0176d22316a05223b318a7ef974bda4504378f8efd", 0xffffff3d}, {&(0x7f0000000400)="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", 0x1000}], 0x6, 0x400600, 0xff030000, 0x24) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x140, r8, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x37e40777}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xf7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x26}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004001}, 0x4) 03:15:53 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x300000000000000) 03:15:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}]}, 0x20}}, 0x0) 03:15:53 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x0, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:15:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xa6ffffff00000000) 03:15:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x500000000000000) 03:15:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc400000000000000) 03:16:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="c620f5ce00000d9900"/18, @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) 03:16:02 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x400000000000000) 03:16:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x531100, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24000001) 03:16:02 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x0, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:16:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xb500000000000000) 03:16:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x600000000000000) 03:16:02 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="290700000000d1cc43af23f8f39fc889a40d7562d700"], 0x1c}}, 0x0) 03:16:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffff00000000) 03:16:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x700000000000000) 03:16:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1ce300008348c0039a356830ad8a6aed06c0c6bbcde1b09523fcb7104ee007a679a17520f5ff820748a28be00076379c1a0e54f62ec3fddaade5f0fead48b70d76c98ef215f5814890f82af1b165fef26aaeca95c36a81bc05d92b7f7aea65514121adb32624ba4af8a5b148bd8f06deb095881c92aff74f179fafaa2aa29d528aab89ef28d40108f188d0db500de8ebfc6b52628e26107c934c77", @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r6, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r6, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x880) 03:16:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e000000000000) 03:16:02 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x0, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:16:02 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x40800) 03:16:02 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x500000000000000) 03:16:02 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r0, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 03:16:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x900000000000000) 03:16:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff7f00000000) 03:16:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffff00000000) 03:16:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf00000000000000) 03:16:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4044080) [ 2837.883471] Bluetooth: hci5: command 0x0406 tx timeout [ 2837.887046] Bluetooth: hci0: command 0x0406 tx timeout 03:16:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff7f00000000) 03:16:10 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1ce60000", @ANYRES16=r1, @ANYBLOB="2907000000009a0000000000000049fdabf80002000000"], 0x1c}}, 0x0) 03:16:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x51ee35699754e128}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x20) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:16:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffffffffffff000) 03:16:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9effffff00000000) 03:16:10 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x600000000000000) 03:16:10 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) fcntl$setstatus(r0, 0x4, 0xc0800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r7, @ANYBLOB="050007"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0xfffffffffffffe14, r5, 0x100, 0x70bd28, 0xfffffffc, {}, [@NL802154_ATTR_IFINDEX={0x0, 0x3, r7}]}, 0x1c}}, 0x0) 03:16:10 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:16:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xa6ffffff00000000) [ 2854.269611] Bluetooth: hci2: command 0x0406 tx timeout 03:16:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffffffffffff000) 03:16:19 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x700000000000000) 03:16:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x4000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r5, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0x40881}, 0x4000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRESDEC], 0x1c}}, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r7) 03:16:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e000000000000) 03:16:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r1, 0x729, 0x70bd28, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x24000085) 03:16:19 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:16:19 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x78, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x21}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x9}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x85}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r8) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x78, r9, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:sshd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x78}, 0x1, 0x7000000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0xac, r9, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:insmod_exec_t:s0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x40040}, 0x40800) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r7, @ANYBLOB="050007"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x4045) 03:16:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000407c9c6757cead6b7eb25616807701185cafe102cbf6531e0b8cab3a2ba67f241827744f5c91b16ec95e2ed64aa851caa67c03d0737698803670c357db9770659e33bb4366785561918e74fab95824b87dd7e8cd01821636504e19cbfb2faf0a55134fc8f19e7cf10005caff287b32aff6d564f540b7c95b42344e3942a1633a1a41646cb48922783309ee0498bce2ea135af8721d80f22361c2b075b3accbf3453c729aeac9de9711b5217c52d4ac818dd118e4ed39be0f5199d92ceae6330a7ab4f34ebb195a948f496d044b8e700ea8b8778c442ad4cb860aecfa2080bffb6cfa071aa644bd3013ee921f9ebb00000000000000000000000000c183f087313264ba3f3f08b02114d510add40f7cf0105562303abc8f62d2f8b3ebac6f62ed48d4cd6dd1436de67f3f1c690964a9bb88750024a63f04be06dd47507302378a2d43022a1d1897187ca5eafc8d406dd02d60bd9ade873fd8c7044977cef4d8cb53d2f0e5c106189422b105bde6055e1c22368f98543d0a0a1384e436022c00dbffaf0aab706d1dd0c508627fb82ba4353d1c87117405a35caa2c9041944a4d3e77ea72cd8fe8a4", @ANYRESDEC=r2, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) 03:16:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf25010000000800010001000000eaff0100020000000800010002000200"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x64040000) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:16:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r1, 0x729}, 0x61}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) 03:16:19 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x900000000000000) 03:16:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xd100000000000000) 03:16:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x44041}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:16:19 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x78, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:sshd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x78}, 0x1, 0x7000000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1a080000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc0, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:initctl_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:getty_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44054}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="69af127cbd331871fcc4dc015c0000134bcc4699926b4020e864a7427fde105247549616315cdb6194cb31c30690bc5b7fd5b87621663de58e7d32d750eb2e43698b919c267ed8d7a1149b0004388aaf14786620cd17cdef2729baa37e39951ad79aec990b4d91d04b3b23527479e37b2f3d0374aee7003b7be8693327f956fb70927ca8", @ANYRES16=r2, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) 03:16:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="291c000000000000000001000000080001000200c15d"], 0x1c}}, 0x0) 03:16:19 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf00000000000000) 03:16:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffff00000000) 03:16:19 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:16:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r1, 0x2a, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000094}, 0x40900) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x48, r6, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x41) 03:16:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x84, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:16:27 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x111}, @l2cap_cid_signaling={{0x10d}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5b}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x116) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:16:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r3, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x9, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008801}, 0x4000004) 03:16:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x101}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x19c, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0xe}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x104, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23c1baea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ca6320b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b29021e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d9de4a5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x508dc1e8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a7d162b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3db4c8bb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12281ffe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ff30031}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4368b118}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b521034}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44a566d4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b987f32}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x741d59be}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f8c727f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fa6d4e8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x555c57bb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23ecbbe7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52b91488}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000008}, 0x44000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:16:27 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x9effffff00000000) 03:16:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff7f00000000) 03:16:27 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="6907000000eb6795d2930ec4aeac90036905c02619069ca2e680cedf4b000000000001000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x60, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x19}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c000}, 0x8000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x1}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r6) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x78, r7, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:sshd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x78}, 0x1, 0x7000000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r7, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x80c0) 03:16:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, r4, 0x100, 0x70bd26, 0x0, {{}, {@val={0x8, 0x1, 0x11}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8854}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xb0}}, 0x15d8402335113ca1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10010042}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0x129, r5, 0x825, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0xff}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6}, {0x8, 0x13, 0x7f}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x1}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x7f}, {0x8, 0x13, 0x50}, {0x5}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x0, 0xb, 0x81}, {0x0, 0x11, 0xd3}, {0x0, 0x13, 0x2}}, {@pci, {0x0, 0xb, 0x1000}, {0x0, 0x11, 0xfa4c}, {0x0, 0x13, 0x1}, {0x0, 0x14, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20040840}, 0x4004005) 03:16:27 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000042c537707344da9dac066e6ccd255c745e24d26d74a387531014417c70162380d7cc6b5e33a6a56517984eb0810047cb214e599a25386d419c18b41e3bd618592c233ebea6335ee6f9f80175249d45a0eb3a6b183086770a6d1e139af5eaefcda6b5163413145caef2fb6f0742f499fb1fdfe9c9ef19f0f530911cd763defe105ec3bb4794aaa3bae18423a0aeb4e25e22e533a0925d9b0a6537a84d50c58412d75e59138abffe5aa39596f100633fb7d21eea3be88332c162afc5e4727ed6c7b3b0fb13face97c4b0a3085bfbb780a63526b3c27580b9682529b6b6acbc008e655a6514698cf305d0fadf0cd85b56c8", @ANYRES16=r2, @ANYRESOCT=r4, @ANYRESDEC=r1, @ANYBLOB="520207"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x800) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:16:27 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xa6ffffff00000000) 03:16:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffffffffffff000) 03:16:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x78, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:sshd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x78}, 0x1, 0x7000000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:16:28 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x402000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:16:28 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x111}, @l2cap_cid_signaling={{0x10d}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5b}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x116) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:16:28 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xbc00000000000000) 03:16:28 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r0, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x40) 03:16:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x64, r4, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x64}}, 0x5) 03:16:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r9, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r11, 0x2, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r12, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:16:28 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x70bd25, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:16:28 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x111}, @l2cap_cid_signaling={{0x10d}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5b}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x116) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:16:28 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc00e000000000000) 03:16:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000001) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r2, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:16:28 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x0, 0x8, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0x51, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000fbdbdf2501000000080001000200000078fd0300", @ANYRES32=r2, @ANYBLOB="147e2890aa0cf5320146da1be1efcafe2c427d09e4ce2ea181314cb371003e57b005"], 0x24}}, 0x40010) 03:16:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000034af888b37d45bc86039e8ddcc3e8e73bd5ea9b153b133a2e82cc02debfc421842776d83ded1d3969a614bd5a004ac9cad5b7eb4d2dd42a9065bcd134d0ddef9c888b3026aec82984b1c27965d7a9025734c1dda9eb5e6636a66a9bade650362ff98943b382435ae2a49cb5ca8f4e985d1c2df61e74e952b7280d3ceee69db224ee0efb26050c63244a755b406ba99c2e0fcb7e00e05f5ea0d508acefaf47021e5", @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r3, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r5, @ANYBLOB="050007"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xd1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x6040091}, 0x20008000) 03:16:28 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xf0ffffff00000000) 03:16:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r1, 0x729, 0x1}, 0x14}}, 0x0) [ 2866.433926] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2866.438934] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2866.444206] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2866.450081] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2866.453109] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2868.539608] Bluetooth: hci7: command tx timeout [ 2870.587340] Bluetooth: hci7: command tx timeout [ 2872.635370] Bluetooth: hci7: command tx timeout [ 2874.684348] Bluetooth: hci7: command tx timeout 03:16:54 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:16:54 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) 03:16:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r3, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r5, @ANYBLOB="050007"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x840) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:16:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000128bd7000fcdbdf25110000000c00060003000000030000000c0006022d00000000000000050059270200000005001200090000000c00060087a2a232fd7c9ff7c9c0030000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2907000fa44fb4e96609fbd236060000000100000008"], 0x1c}}, 0x0) 03:16:54 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) 03:16:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, r4, 0x10, 0x70bd26, 0x25dfdbf8, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="a9000000", @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) 03:16:54 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xffffff7f00000000) 03:16:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="29070000000039294bcf8025b6340400010002e40000"], 0x1c}}, 0x0) 03:16:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r3, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040005}, 0x4004) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:16:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:16:54 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:16:54 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xfffffffffffff000) 03:16:54 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:sound_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000800) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r3, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x28, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x8080) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="29072abd7000007876009c0000000800010002000000fa3e35f333bfd613be62b47a2438839c253ee2c13547590a54b37887f32df477d4ba6a1815bc0a8360bfcb8fec2bd4c1ade43be83453757107d22d52208e675fde25287e3751c8485588596cfae57eea8d435fb4149eee52df15c04ca121e61a8f6e3caf7e87e59f5d7bf60b229d745f"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x460400a4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1b}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x240c0081) 03:17:03 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x4, 0x1, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x1, 0x20, 0x3, 0xcb2b}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', r0, 0x8000, 0x10, 0xdd65, 0x9d, {{0x20, 0x4, 0x0, 0x19, 0x80, 0x65, 0x0, 0x20, 0x4, 0x0, @multicast2, @broadcast, {[@noop, @timestamp_prespec={0x44, 0x14, 0x4f, 0x3, 0xe, [{@loopback, 0x5}, {@local, 0xfffffe00}]}, @ssrr={0x89, 0x1f, 0x7c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @remote, @multicast1, @private=0xa010100, @private=0xa010101]}, @cipso={0x86, 0x2f, 0x0, [{0x6, 0xb, "3eac19fb03b2eb6061"}, {0x2, 0x2}, {0x5, 0x5, "6b0dc4"}, {0x3, 0xe, "e133a1d289b44b6c08ddd93c"}, {0x5, 0x9, "7c69442d984577"}]}, @noop, @generic={0x82, 0x5, "8a65c2"}]}}}}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r2, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:03 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1bfffffb9e164e0f44cb03c29045d8f17c0e1b87d581136586ee79a8d0d9d8c8705c034ee3227fb34a2abbadc738b08ad8dcf7f3aa7a21cd2f90a6c14b05b9922208a86647967c29b7153b0497d939d4784f846a82e87050c63b2661726ceb3e80d45dc186538f702b3fa10c7b60d6eecfb26254ff868413d100c3e954ef5cd3a2ec5339635e2965e76da6fd0186617f3f1b8568aa9191a11184", @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r3, @ANYBLOB="050007"], 0x2c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r6, @ANYBLOB="050007"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x24008810) 03:17:03 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:17:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x2, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r3, @ANYBLOB="050007"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r1, 0x729, 0x3}, 0xffffffffffffffa5}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r6, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r8, @ANYBLOB="050007"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r11) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r11) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r6, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xcd}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x50040) 03:17:03 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x7}, [@CTA_LABELS_MASK={0xc, 0x17, [0x50, 0x1]}]}, 0x20}}, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r2, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:03 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0xc1) 03:17:03 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20020000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0xc1, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x50804) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x24000084) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r2) 03:17:10 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) 03:17:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x1}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r7, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x91) 03:17:10 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)="cc8e8def27fa9f293786ef59cd3e3e05134f334d87af984f55f42c699f1245e01c9fd7c0fded38d31d66327c5d5358a18b11df533ed83172bd5881ca3c55d0ac25eccf909a2421d78f00"/84, 0x54}, {&(0x7f0000001580)="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", 0x156}, {&(0x7f00000000c0)="2922b2ac03460fd4c90709333aa5084a25e6c2f57154f001b85607f0a687d9628c2ee47e44b39292420f8748ce48423de2bc32d643ce5c4298a1597d68b5df566ecdaa59577abfd0e63fd51d76364312e18724c6d1b383cc33f5dfff844e0371ed3a50ec7d7430bf1b1c12b40d0ecdc2d53f799c12beed64c44058a2ec554b46004c71f655a55cef42edae0f0d0365ca3b876994b0aece2ac550241f01a720bfab26a14bcabe632ffda9ecbcb9ce97523a61f9e1e87c4a80c7", 0xb9}, {&(0x7f0000000180)="d53c18a30e694dda2caebc3081d015422bc96eaa581beae9dab255bb50619747297b8aaa996d9ec214284da812b51068c36fe0bfaa99c354676a7b81df4382720dbc302f8d940ff4f6f8a6882c3a865298b802dc843aa6bd5cfdb3727e72a102e28615985f8b88e4c86af5d611e5977d69ac3640ecd643096011b5c5bc7239559b3b586f8371", 0x86}, {&(0x7f0000000000)="e56c7b4b97c4279f7e30b8a40deea1148e39545a7c0176d22316a05223b318a7ef974bda4504378f8efd", 0xffffff3d}, {&(0x7f0000000400)="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", 0x1000}], 0x6, 0x400600, 0xff030000, 0x24) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r3, 0x4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="290700000000000000000100000008000100020000006f779bf9789978ed4a2b4b6f3b08f9f119defe279177674fbf4edb7f6fdc143c45b29283b4aa059815bdaa86d60e0f55e3f7aef90a9172bc4245f7c9c849390231ea8408fddfc9761b90e35790fc69d98fe96a665aaf5fe40938668240c60000000000000086e32d33199182417a3837062402ac3b67bfe289bce4916456d2a934b28f2e4248f0befb105546d2136ca360f428215c3ae020492c38e55e10386f180f1789524f77f7d7921d41f6"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 03:17:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r2, 0x729}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 03:17:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="e5c34fed", @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:17:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r4, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r4, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4008801) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:10 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x10a}, @l2cap_cid_signaling={{0x106}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x54}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x10f) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:17:10 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x10a}, @l2cap_cid_signaling={{0x106}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x54}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x10f) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:17:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x8004) 03:17:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x94}, 0x0) 03:17:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 03:17:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffcfffc}]}) r4 = gettid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) kcmp(r4, r4, 0x0, r3, 0xffffffffffffffff) bind$inet6(r5, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) kcmp(r4, r4, 0x0, 0xffffffffffffffff, r5) fcntl$lock(r6, 0x24, &(0x7f0000000140)={0x0, 0x0, 0xfff, 0x0, r4}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10001020}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x60, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000081}, 0x0) 03:17:10 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x10a}, @l2cap_cid_signaling={{0x106}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x54}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x10f) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:17:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="3029754f8b3364731142176c94233844e04df6aab8114202a2e4b64110aa62b5d6a0985c3664cc19772909b6425740a0c1d83b13333f27233e6eaa81b3d7", @ANYRES16=r1, @ANYBLOB="040000000000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000828bd7000fedbdf251f0000000a0001007770616e3300000008000200", @ANYRES32=r6, @ANYBLOB="0a0001007770616e3400000008000200", @ANYRES32=r7, @ANYBLOB="6733bd4eeaf78e07adf31f926236abe87e4aa5c05c086b48f851f0821b9e11164c314e5abb965b004988"], 0x3c}, 0x1, 0x0, 0x0, 0x44804}, 0x2400c011) 03:17:10 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x72d}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x7c, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r4, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) [ 2906.143593] kauditd_printk_skb: 106 callbacks suppressed [ 2906.143613] audit: type=1326 audit(1776827830.816:374): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44643 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bdc4bb19 code=0x7ffc0000 03:17:10 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r0, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) [ 2906.167244] audit: type=1326 audit(1776827830.819:375): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44643 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f19bdc4bb19 code=0x7ffc0000 [ 2906.192521] audit: type=1326 audit(1776827830.819:376): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44643 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bdc4bb19 code=0x7ffc0000 [ 2906.211563] audit: type=1326 audit(1776827830.819:377): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44643 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bdc4bb19 code=0x7ffc0000 [ 2906.231346] audit: type=1326 audit(1776827830.826:378): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44643 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19bdc4bb19 code=0x7ffc0000 [ 2906.243856] audit: type=1326 audit(1776827830.826:379): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44643 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bdc4bb19 code=0x7ffc0000 [ 2906.257961] audit: type=1326 audit(1776827830.826:380): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44643 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bdc4bb19 code=0x7ffc0000 [ 2906.267781] audit: type=1326 audit(1776827830.829:381): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44643 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f19bdc4bb19 code=0x7ffc0000 [ 2906.283370] audit: type=1326 audit(1776827830.830:382): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44643 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bdc4bb19 code=0x7ffc0000 [ 2906.295433] audit: type=1326 audit(1776827830.832:383): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44643 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f19bdc4bb19 code=0x7ffc0000 03:17:19 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="7cf787d8", @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) 03:17:19 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:17:19 executing program 3: waitid(0x2, 0x0, &(0x7f0000000240), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000a5b5604e7b9b2d01f029b5fef9ae0d6c686f92baf97951070fe896b9ed8654aab4e376243b900f6f00e5d21669f5104ac0060aa6a69829163ea3f729dfeb9621b19ee807d6c540860280"], 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x78435f32}, {0x6, 0x11, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040814}, 0x20040004) 03:17:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000c58fb4bb5564f2e31e83b737a0001403348820f6f4cc21791c3de8049105f8e6599648021a3a7370f177107af24e63aa538122b28fbc721b58652d34be6a510be03ca5c9f5cedee633286794b12d44ab74e296ffcbcd17ab454b42f44ebbaa4de5f55a420393970e5f4c220f67a978ee53a95d76286bd76fbec1c702f263964651d48e11c9b1581032767669cd4908e4", @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 03:17:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2907000000000000ec87401ef8e6b1b967f29292ba91"], 0x1c}}, 0x0) 03:17:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, 0x0, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYRES32=r4, @ANYRESDEC=r4, @ANYRESDEC=r2, @ANYRESHEX, @ANYRES16=r6, @ANYRESHEX=r7], 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x200000a0) 03:17:19 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r1, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r4, @ANYBLOB="050007"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xcc, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x90, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a9bdcdc9f144129758ec6014213573f8"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5902749497f4e78820708da32ced00bf"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xf0}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "be020a2dd2fcb4a10f63742af95c92ac"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dac56ebef794cc482336b4b92b83ab47b4fedd39e02e1adcf6ac9a5013b79999"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fbd46d973333dca865992cbea54350fd2aafdc77888d0637276ac97389eb144c"}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x49}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c002f71c23dc9775b31d364501375808164524a", @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) 03:17:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r2, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x4000) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="230127bd7000fcdbdf25230000000500220001000000eb35dc0259e4d39509013092221d466a957a57a66e011582f9edf46ad2b3e0431977d621873fc6b73d41f9b6a0a1360266de36ab614de8a64116e2468ae3ad83d49f58a9d5932973294b6de477e4e212714b8f9acfcc47661a74c686e7ff5c86fa00ee70d695f32c74827d0ca558dbcc27e8698f88673734f430c63ea754ce1273788186fd2d1866b86f19b9258537f5d99c6d722f453cde1e72c703c166f431c1eca8cf1d3f40eeff44aff353ab5c7ad33ac1d336fa5a4f56bb0d4a0b816e91e47c70f866aba246fe71c588f8650a714c7f4fe58b7b4d819b64d1013d0a541205ba2572e0cb318ed535f6a55f09"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4001) 03:17:19 executing program 6: ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001500)={'ip6gre0\x00', &(0x7f0000001480)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x24, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x40, 0x6, 0x2}}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x90, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4a86f05}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r3, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000891}, 0x8010) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="b36a63f9d8022f43e267b9c1497a443fd4e779ce728112ad512ece212496742912934f91dcdf6980b0b05229a67d5e2c265da50247a1104b656f5f252383fd78be3f01d37637bcef757325da7b98879212889d78e3db49", @ANYRES16=r3, @ANYBLOB="29072abd700000000000010000000800010002000000"], 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r5, 0x1}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r7, 0xe30, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x850) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000680), r9) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="080001000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) [ 2918.024525] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2918.031730] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2918.033524] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2918.037799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2918.041113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2918.086507] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2918.091117] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2918.095083] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2918.099814] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2918.101639] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2920.061070] Bluetooth: hci3: command tx timeout [ 2920.124071] Bluetooth: hci7: command tx timeout [ 2922.108776] Bluetooth: hci3: command tx timeout [ 2922.172465] Bluetooth: hci7: command tx timeout [ 2923.903332] Bluetooth: hci4: command 0x0406 tx timeout [ 2924.155705] Bluetooth: hci3: command tx timeout [ 2924.220293] Bluetooth: hci7: command tx timeout [ 2926.204855] Bluetooth: hci3: command tx timeout [ 2926.268448] Bluetooth: hci7: command tx timeout 03:17:41 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:17:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r3, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r3, 0x4, 0x70bd2d, 0xf33, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x4080) 03:17:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="b3090000", @ANYRESHEX, @ANYRES16=r0], 0x1c}}, 0x0) 03:17:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001ed8f759b9829a92955f29e7b5e1ff65863603153aca07ab3f400c8406b1904ce8844b12633b89b41dd7d27d7544b4bc65ec20d6bf31adb33131b7991f19fa899325865018546104b0eb79a75bd8", @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x8044) 03:17:41 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="290f0000000000000000010000000800010002000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) 03:17:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffcfffc}]}) r3 = gettid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) kcmp(r3, r3, 0x0, r2, 0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) kcmp(r3, r3, 0x0, 0xffffffffffffffff, r4) fcntl$lock(r5, 0x24, &(0x7f0000000140)={0x0, 0x0, 0xfff, 0x0, r3}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x40) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x15, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000040) 03:17:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002040000"], 0x1c}}, 0x0) 03:17:41 executing program 7: execveat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000280)='nl802154\x00'], &(0x7f0000000440)=[&(0x7f0000000300)='-}[${\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='nl802154\x00', &(0x7f00000003c0)='\xa7[.\x00'], 0x400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010011a70be24d665c9daa000000"], 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000780), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r9, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r9, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4041}, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00082abd7000fedbdf2501000000080019002300000008000100010000004f002428c529504f"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x810) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r2, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r11, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) 03:17:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502103, &(0x7f0000001180)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000000c331325661c00005525c8070ef6a41a1d285225fda3d55d1b439efa3a9020ec10f2755de6c560c1283b033ad72da630720efd2c893cb237dc5d9418519364139783ab285fb716e702e8d4a789fec846e16e882e89c2f12b1f3e15f7748ad5", @ANYRES16=r2, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) [ 2936.799429] kauditd_printk_skb: 57 callbacks suppressed [ 2936.799443] audit: type=1326 audit(1776827861.471:441): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45652 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3400583b19 code=0x7ffc0000 [ 2936.806635] audit: type=1326 audit(1776827861.471:442): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45652 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3400583b19 code=0x7ffc0000 [ 2936.815405] audit: type=1326 audit(1776827861.476:443): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45652 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3400583b19 code=0x7ffc0000 [ 2936.824018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=45653 comm=syz-executor.4 [ 2936.827987] audit: type=1326 audit(1776827861.476:444): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45652 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3400583b19 code=0x7ffc0000 03:17:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000087901366efa9", @ANYRES16=r6, @ANYBLOB="020026bd7000fddbdf2502000000080001000100000008000200020000000800020002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x801) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x54, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x8800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r8) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x78, r9, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:sshd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x78}, 0x1, 0x7000000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)={0x60, r9, 0x504, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:auditd_initrc_exec_t:s0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044005}, 0x40014) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r7, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) [ 2936.834191] audit: type=1326 audit(1776827861.476:445): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45652 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3400583b19 code=0x7ffc0000 [ 2936.840971] audit: type=1326 audit(1776827861.476:446): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45652 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3400583b19 code=0x7ffc0000 [ 2936.851580] audit: type=1326 audit(1776827861.476:447): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45652 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f3400583b19 code=0x7ffc0000 [ 2936.865250] audit: type=1326 audit(1776827861.476:448): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45652 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3400583b19 code=0x7ffc0000 03:17:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0ffcf511", @ANYRES16=r1, @ANYBLOB="290700000000000000a2000000000000000000000000d9efbfb0fafea8fa7f8980fb008e"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x1}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4851}, 0x4000) [ 2936.879865] audit: type=1326 audit(1776827861.478:449): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45652 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3400583b19 code=0x7ffc0000 [ 2936.883097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=45653 comm=syz-executor.4 [ 2936.885726] audit: type=1326 audit(1776827861.480:450): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45652 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3400583b19 code=0x7ffc0000 03:17:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) 03:17:41 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x0, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:17:41 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r3, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0xd0a, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x4001) 03:17:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x7f}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xc}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x81}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x9}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r5, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:41 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48a1}, 0x20000091) 03:17:49 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r3, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x41) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x40, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000003340f7f9688b06e75cc4601486337163ca490286ef644b922abe42eae227edb2178719b85767d871bfab26f8b88a3a1fd954533227528e2afe65f5d2c11add41630004315f39cf8c7eed64d2fa1c190a07539ef7bc1b35729e24ddc8a56dc8bd1b711aad1a7e9aa5e3a38ed24edf230f97e346fc1772054c19", @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r3, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r5, @ANYBLOB="050007"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x28, r3, 0x104, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x20040000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r8, 0x1}, 0x14}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r11, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="be90", @ANYRES16=r11, @ANYBLOB="020025bd7000fddbdf25110000000c00060002000000000000000c000600020000000000000005001200090000000c00060001000000010000000c0006000300000003000000"], 0x4c}}, 0x40044) 03:17:49 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10001}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x20}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r4, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:17:49 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x0, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:17:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r2, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="28002846b2f00642841f8136830000", @ANYRES16=r2, @ANYBLOB="2907000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x10044}, 0x0) 03:17:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x76}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x80) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r4, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x60, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x400, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r5, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r5, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) 03:17:49 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000005) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6, @link_local}, 0x10) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @random="a2836ee8dbe1"}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x69}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r2, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r1, 0x29, 0x3, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x0) [ 2945.188212] syz_tun: entered allmulticast mode [ 2945.196317] syz_tun: entered promiscuous mode [ 2945.198998] syz_tun: left promiscuous mode [ 2945.199837] syz_tun: left allmulticast mode [ 2945.217775] syz_tun: entered allmulticast mode [ 2945.231334] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:17:49 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x0, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:17:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2945.266013] syz_tun: entered promiscuous mode 03:17:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r2, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) [ 2945.271498] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:17:49 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r1, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x68, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffff7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000005}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0xc004) [ 2945.299003] syz_tun: left promiscuous mode [ 2945.299592] syz_tun: left allmulticast mode 03:17:49 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r0, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) 03:17:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000014b4f507cc64c6756a3aab7a0df623710553e4cf56ede0680204411286f99fe4fec26bca9425952cfe9f6c3f908df88761bbd9c74a6b4d0d461192725cab0126ed831ac30f25b5a550ef428a5ef5414e3c8629e60d6438b52a72327e743645bb56f307e422dd5b971515ca6414260156d6ee2560a085f113279a806bc26b47f7c4cff819748d45b0d6bcdb35e35b35c3123d25ad6f59abe324585d8c34940000000075a20ecfa535dc9be66e30c58f0edf143503436999388a28fafa56115f6528f4bff82c67cc95302daaa37734d43a581f08000000000000000000", @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000650ac60a2eaf12174c0762a29a5fe5181793fa96fa3b180cbb8dbb9174e3ffd8682b", @ANYRES16=r3, @ANYBLOB="080026bd700000f0ff3e500774000200278501000008000200020000000800020002"], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044481}, 0x4040041) 03:17:50 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x0, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:17:50 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r4, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:58 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x0, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:17:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r2, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r4, @ANYBLOB="050007"], 0x2c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r7, @ANYBLOB="050007"], 0x2c}}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r9, 0x200}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) 03:17:58 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x614, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x1) 03:17:58 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, r1, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:58 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, r0, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:17:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000ff00002b72b100", @ANYRES32=r3, @ANYBLOB="050007"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 03:17:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r2, 0x4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 03:17:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="04000000", @ANYRES16=r1, @ANYBLOB="080028bd7000fedbdf25150000000800210000000080"], 0x1c}, 0x1, 0x0, 0x0, 0x44848}, 0x400c010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}}, 0x20040801) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="296c7f0000000000100001000000080001e9090000a3"], 0x1c}}, 0x0) 03:17:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="29074800009f5a05fd0000000000de04d157c0f78937"], 0x1c}}, 0x0) 03:17:58 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c002000", @ANYRES16, @ANYBLOB="2907000000000000000001000000080001000200000070fc2ab81bd5a1770538693a8ab19a0427409e2d0a12"], 0x1c}}, 0x20008051) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:17:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x5d}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xe2}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24058804}, 0x44000) 03:17:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x854}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x24, r6, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x237, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20018080}, 0x10) 03:17:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="2907000000000000000001000000080001000212f93aa01fcb66a75ec1b8000000"], 0x1c}}, 0x0) 03:17:58 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x0, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:17:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8841}, 0x8080) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r1, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040090}, 0x20000001) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r3, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c814}, 0x24000080) 03:18:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x409, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc024}, 0x4000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="29072abd700000000000010000016d763663ab4df917e5"], 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r5, @ANYBLOB="050007"], 0x2c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000900000005001f000001000008fefd00", @ANYRES32=r8, @ANYBLOB="050007"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x60, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1a}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x12}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000008118adf823cf43a7c08e82f6a078346448cf349109baea34a4cd5e5bed81a934b7ebbdf3c5ee56be7f7e3a4f9b863f16f4e65fdd5ab5b86f88207718a91bf4064b74eca703ab620e59b18b18f25c79d0684ab15620b64ef69d25ced5301397dce898b3fcbf6e88f766f909aa4ca9f2267b5c2f59a12f4230ebe62d750000000000000000680000000000", @ANYRES16=r2, @ANYBLOB="290725cd700000000000020000000800010002000000"], 0x1c}}, 0x0) 03:18:06 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000e303897b036ee2762bb19a0ef7b05a8166af5c17fe56004683b89b06f11ceebd6b60f5630f14bdaea74854295eb6e1f14148f6e5bcbbf10c0ff1fd9c723e3820770db99ed3c53f57472e3fb61b33a4908f1254c934590eec30e94b74287f1eaf9b5932e762306a20d70c7c7bce66a43453afa14f42568f50dbaf01e0337fe426c0fbaddc65eb7756c09ad97ab591f4", @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) 03:18:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:18:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100001e00000000000009000000050008000000000008000300", @ANYRES32=r6, @ANYBLOB="050007"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r1, 0x800, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044094}, 0x0) 03:18:06 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x0, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:18:06 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd8, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x5c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "665a724ee6f77459df7545de8bf08bf38f8488a928c03d65bd4d71679257e63f"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f5a2506cd6fe632c208d21f9cf18ca55966abfd6a2be0972318395768dd87a29"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "46ace0801b3aba0e15a79a68762b2b9e"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xffffebd39e612882}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000008}, 0xc4) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r6, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0xc004) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:18:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) 03:18:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:18:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x5c}}, 0x40000) 03:18:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="131e1f2c", @ANYRES16=r1, @ANYBLOB="29070000080000000000010000000800010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:18:06 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = signalfd4(r4, &(0x7f0000000300)={[0x80000000]}, 0x8, 0x80000) r7 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x3f, 0xf3, 0x4a, 0x0, 0x6, 0x2000, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000340)}, 0x40000, 0x1f, 0x40, 0x5, 0x10000, 0x10001, 0x3, 0x0, 0xffffffff, 0x0, 0x1}, 0x0, 0x8, r2, 0x11) dup2(r6, r7) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) r8 = syz_io_uring_setup(0xf29, &(0x7f00000000c0)={0x0, 0x3652, 0x10, 0x2, 0x135}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)={0x0, 0x3, 0x3, 0x0, 0x0, [{{r2}, 0x80000001}, {{}, 0xe4c1}, {{r8}, 0x73}]}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r10, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:18:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8050}, 0x44040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x1}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8600}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1b}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:18:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:18:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x4c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xa1}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x4}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xa1}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x47}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x3}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x401}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000d7eb9d4f1dea8653483fffa3de", @ANYRES16=r3, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) 03:18:06 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:18:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x7, 0x1, 0x8, 0x0, 0x8, 0x47604, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0x2, @perf_config_ext={0x6, 0x5}, 0x10c00, 0x9, 0x80, 0x0, 0x400, 0xff, 0x2, 0x0, 0x9, 0x0, 0xcc1}, 0xffffffffffffffff, 0xb, r2, 0x8) 03:18:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000) 03:18:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x50, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1f}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="329cc5e7aebf3e606378e1d2dcdd68d746", @ANYRES16=r1, @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) 03:18:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r2) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x94, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x94}}, 0x2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x2000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r4, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0xc1) 03:18:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x64088811) 03:18:06 executing program 4: sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x108, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x28}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x401}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xca60}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x80000000}}]}, 0x108}, 0x1, 0x0, 0x0, 0x2845}, 0x814) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r1, 0x729, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 03:18:06 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:18:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000af96f38822a8ff921483d3f968cf7bff99d6113b9661fd36969315191ea17f46a73c1df456b8a7730e1c711550f8e2eb94eb6e154b137d1f8823d53abddc0f9404ec6fc36bfa842967a326bd8004cd4f3ebfaf2f28126e35bef0e4c39ab618f9f6faa8e1e769567f58159bcc8bd043b0c35e4a9f9090a416ce9e5feabe19ba3df8d474184768fa81ea743c575b2dc662e3d601", @ANYRES64=r2, @ANYBLOB="29070000000000000000010000000800010002000000", @ANYRES32, @ANYRESDEC=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 03:18:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="ee750900", @ANYRES16=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}}, 0x0) 03:18:14 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r0, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:18:14 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x115}, @l2cap_cid_signaling={{0x111}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5f}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x11a) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:18:14 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0x20040000) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="000127bd7000fddbdf25090000000500070006000000050008000a00000008000300", @ANYRES32=0x0, @ANYBLOB="ac2a570300d9c0f8741ddc8b6b1e28f4d47d9109532fc09b4ab6499830ab90ede674bcce9a75da71106f94802102d50fba5e163d9231ff83358881df89134b0c15fc979393ede409a347f65ed47fa800ef4a04f451feff7c4cf74404a332ca97bc48b4643a59f64e985fd943943e6dd245d048cc8ef60ab0cedfee4041e238b84ec9665b69d5dbda436b999990cd988daec365502679c8a941b236e68a081b78fc47f6731bc6da3dcac53dcc3dad1c2ea5cd537eabe7c0b40238051b3cf80067", @ANYRES32=0x0, @ANYBLOB="050007000100000008000100030000000c0006000200000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40804}, 0x20040000) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0095e8d3f96556cfe203e3cbb54518c8ab5c5cf0ed21790c8fd51570b22df1ad1134cae1d4988db0081f0bf7b6c46f1e6e7eec0f17808d4f21d20d2f", @ANYRES64=r0, @ANYRES64=r7], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 03:18:14 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r2, 0x729, 0x70bd2a, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r2, 0x729, 0x70bd2c, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x20000000) 03:18:14 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) 03:18:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r5, @ANYBLOB="050007"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r9, @ANYBLOB="050007"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:18:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100e0050}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0xc000) 03:18:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0000000100000008000100020000e05a0c9f79665375"], 0x1c}}, 0x0) 03:18:15 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:18:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001817c5de15d2421443e59beea1f340cb76b5e9f722eea335baea1590e72bce1c694cd8addd7e5d3e4e06af02ecf40178be0538e64f1586253a20ea101916054052744a9b9c5802750e153aa8cac8ba8bdd4316470033073c3d1165547ba21c950fceec1b938feaabfde68d470d730b907fd3a1659abacb84fc5656d19716b0dda907344b8ff442f1681a22c8f5ec00"/161, @ANYRES16=r2, @ANYBLOB="0100000000000000000021000000"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x15c, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x114, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8001}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=r7, @ANYBLOB="0100000000000000000021000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r8) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r4, 0x20, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x4000044) 03:18:15 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="39e108190000f36baaa6ce0dab080000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 03:18:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x4ae502, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000400)={0x64, 0x0, &(0x7f0000000340)=[r0, r1]}, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd39, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r4, 0x300, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88000}, 0x401) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r9, @ANYBLOB="050007"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000010) 03:18:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0xc8, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3f}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r8, 0x2, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000009000000050008000000000008000300", @ANYRES32=r5, @ANYBLOB="050007"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="290726bd7000fddbdf250100000008000300", @ANYRES32=r5, @ANYBLOB="7ed917ebf6606d30bd0b36e1525dae32ebade923ecc57581a4e57abd3a5bcd9d23e5e4b4fb6153b2a32e8beac9b012ed9bee3c294b5e8ca21653b9f2e37f9fb6e8ef8bd3ca7616b2167756e6754b47c2e93dc30674cb4c1180a43043c7d031b6b108f45e75fc628b315edf31f9904d409779471e1fc039aa51c1179a29ef4a2dc653619c461c6c7d199f0259"], 0x1c}}, 0x0) 03:18:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0001014}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf250100000006000b000200000008000700ffffffff08000700ac1414aa08000800ac14143414000500fe8000000000000000000000000000aa06000b00220000000800040000000000080008007f000001080008000a01010208000800ac141424"], 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x44004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x40, 0x0, 0x50b, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x16}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x240408c1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000280)={'wpan4\x00'}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r8, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:18:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x70bd28, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) 03:18:24 executing program 0: r0 = epoll_create(0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x1}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x2, 0x6, 0x6, 0x5, 0x99]}, &(0x7f0000000240)=0x78) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xffffffffffffff5d) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x101100, 0x0) syz_emit_vhci(&(0x7f0000000c80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x56}, "aebc3499b2c42f45afc98390710d6b5d84bc4d52c3da16925761ec468cd552ffa6b71706ccc7c8fd42c808060b1f3ff92fceff2705f371486a493fdbc93060ff1e5f8e1527dcaa7f7e47d95ba879a6cf4dc1979ec0e2"}, 0x5a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b40)={0x4, 0x36, 0x2, 0x5, 0x2, [0x2, 0x200, 0x48, 0x5]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000700)={r2, 0x6, 0x80000001}) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3b}, "e2b513251d701b417d26fac69df7ecdfdccba7a0954b5da995847765ff2fa1f25ad16800f02077d60e92316384ad5db791e1342d13e61ab81ff6c1"}, 0x3f) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="0280d00a00060005001a0702000002b8eb434d0209282897ea99d597fa63247abfc30fb67424007f4ddcae0eafb79e4500c070501b3bb0e0a8d94b808f4ef4ab5941fd069f21f0858061666aee391b62c4c44dd4d569946fe3faf73a95c90ae2a2ffbd7bfc4cb6e6069a0b56882f98411a1064c491f6989a61e190cef278b12808d8f59e915d3ea36b786676cc88ccc5b9aefa30646a11be8699feab4cc363c27c91df962414e48c7e41ddb88f841a6cb8475348367dde7cd1139d904cd5f740a62a2b91dae82f000000009f"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x111}, @l2cap_cid_signaling={{0x10d}, [@l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x8, 0xfef}}, @l2cap_conf_req={{0x4, 0xe1, 0x14}, {0x40, 0x46, [@l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x3ff}, @l2cap_conf_flushto={0x2, 0x2, 0x2}]}}, @l2cap_info_rsp={{0xb, 0x2, 0x61}, {0x7, 0x9, "83a4cbb19f034487970a5691c107162c6aa2751a9e4713ad99dee24c5b0587bac0807ba2d61c4b01dc04dffcf172ebd7a02ce3cf2b4084da21acdbb92fcde8a617b41c1a7689720b109d5d275373e257808abaf4a093b471356a350a17"}}, @l2cap_disconn_rsp={{0x7, 0xe9, 0x4}, {0x0, 0x360a}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x9000}}, @l2cap_create_chan_rsp={{0xd, 0x20, 0x8}, {0x4, 0x401, 0x1, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x1ff}}, @l2cap_create_chan_req={{0xc, 0x73, 0x5}, {0x1, 0x100, 0xff}}, @l2cap_conf_rsp={{0x5, 0x1, 0x5b}, {0x7ff, 0x3ff, 0x8, [@l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x6, 0x4, 0x7}}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x1000, 0x2, 0x81, 0x400}}, @l2cap_conf_ews={0x7, 0x2, 0x81cf}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6, 0x0, 0x1, 0x4, 0x9}}, @l2cap_conf_flushto={0x2, 0x2, 0x100}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x2, 0x5, 0x4a6, 0x8, 0x1f}}, @l2cap_conf_mtu={0x1, 0x2, 0xd5f}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x49, 0xfd, 0x3, 0xfc00, 0x3}}]}}]}}, 0x116) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x2019}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02593b9c7d18f98c8fafaaca56277b0b82c8b02b13da3f00539d769144fc70180014000500178737cc10000600"], 0x1d) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 03:18:24 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x20000, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 03:18:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x72d}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40410}, 0x40) 03:18:24 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r1, 0x729, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x11}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xb0}}, 0x15d8402335113ca1) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x88, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20000060) [ 2979.707705] Failed to initialize the IGMP autojoin socket (err -2) 03:18:24 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="29070000000000000000010000000800010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x41) [ 2982.849824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2982.852882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2982.853915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2982.856533] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2982.858596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2983.072886] Failed to initialize the IGMP autojoin socket (err -2) [ 2984.891353] Bluetooth: hci0: command tx timeout [ 2986.940485] Bluetooth: hci0: command tx timeout [ 2988.987401] Bluetooth: hci0: command tx timeout [ 2991.035479] Bluetooth: hci0: command tx timeout [ 3000.071826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3000.077094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3000.080980] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3000.088754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3000.094092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3000.444609] Failed to initialize the IGMP autojoin socket (err -2) [ 3002.172363] Bluetooth: hci0: command tx timeout [ 3004.219857] Bluetooth: hci0: command tx timeout [ 3006.267336] Bluetooth: hci0: command tx timeout [ 3008.316411] Bluetooth: hci0: command tx timeout [ 3017.478213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3017.481890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3017.485468] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3017.492796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3017.496557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3017.810681] Failed to initialize the IGMP autojoin socket (err -2) [ 3019.579354] Bluetooth: hci0: command tx timeout [ 3021.627415] Bluetooth: hci0: command tx timeout [ 3023.676497] Bluetooth: hci0: command tx timeout [ 3025.723720] Bluetooth: hci0: command tx timeout [ 3034.440417] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3034.447560] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3034.450709] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3034.455904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3034.460478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3034.776663] Failed to initialize the IGMP autojoin socket (err -2) [ 3036.540674] Bluetooth: hci0: command tx timeout [ 3038.588019] Bluetooth: hci0: command tx timeout [ 3040.636423] Bluetooth: hci0: command tx timeout [ 3042.684344] Bluetooth: hci0: command tx timeout [ 3050.058214] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3050.065924] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3050.070026] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3050.075896] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3050.078879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3050.382432] Failed to initialize the IGMP autojoin socket (err -2) [ 3052.091485] Bluetooth: hci0: command tx timeout [ 3054.139422] Bluetooth: hci0: command tx timeout [ 3056.188143] Bluetooth: hci0: command tx timeout [ 3058.235380] Bluetooth: hci0: command tx timeout [ 3066.379759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3066.384734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3066.387694] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3066.395617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3066.399537] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3066.677617] Failed to initialize the IGMP autojoin socket (err -2) [ 3068.475468] Bluetooth: hci0: command tx timeout [ 3070.523317] Bluetooth: hci0: command tx timeout [ 3072.572105] Bluetooth: hci0: command tx timeout [ 3074.619321] Bluetooth: hci0: command tx timeout [ 3083.206108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3083.210934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3083.214790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3083.219448] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3083.224455] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3083.538474] Failed to initialize the IGMP autojoin socket (err -2) [ 3085.243885] Bluetooth: hci0: command tx timeout [ 3087.293316] Bluetooth: hci0: command tx timeout [ 3089.339395] Bluetooth: hci0: command tx timeout [ 3091.388187] Bluetooth: hci0: command tx timeout [ 3100.358059] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3100.361227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3100.367466] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3100.372157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3100.377206] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3100.701956] Failed to initialize the IGMP autojoin socket (err -2) [ 3102.395353] Bluetooth: hci0: command tx timeout [ 3104.443363] Bluetooth: hci0: command tx timeout [ 3106.493318] Bluetooth: hci0: command tx timeout [ 3108.539338] Bluetooth: hci0: command tx timeout [ 3117.445980] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3117.451923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3117.454091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3117.460575] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3117.463576] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3117.747100] Failed to initialize the IGMP autojoin socket (err -2) [ 3119.547350] Bluetooth: hci0: command tx timeout [ 3121.596359] Bluetooth: hci0: command tx timeout [ 3123.643741] Bluetooth: hci0: command tx timeout [ 3125.691330] Bluetooth: hci0: command tx timeout [ 3134.466958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3134.472317] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3134.475665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3134.479036] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3134.482749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3134.774381] Failed to initialize the IGMP autojoin socket (err -2) [ 3136.507375] Bluetooth: hci0: command tx timeout [ 3138.556379] Bluetooth: hci0: command tx timeout [ 3140.604128] Bluetooth: hci0: command tx timeout [ 3142.652144] Bluetooth: hci0: command tx timeout [ 3151.051813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3151.059213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3151.061571] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3151.068457] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3151.071757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3151.407546] Failed to initialize the IGMP autojoin socket (err -2) [ 3153.084327] Bluetooth: hci0: command tx timeout [ 3155.133049] Bluetooth: hci0: command tx timeout [ 3157.179403] Bluetooth: hci0: command tx timeout [ 3159.229600] Bluetooth: hci0: command tx timeout 2026/04/22 03:21:30 executor 7 failed 11 times: executor 7: exit status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 2: No such file or directory) loop exited with status 67 VM DIAGNOSIS: 03:21:30 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000004865a86 RDX=00000000c8b803b5 RSI=ffff88801c0d43f0 RDI=0000000011719ffa RBP=0000000000000000 RSP=ffff8880492e70e0 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000005 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=ffffffff86027b40 R15=0000000000000200 RIP=ffffffff81538e5a RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e4eb0000 00000000 00000000 LDT=0000 fffffe4000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005639bba562b0 CR3=000000000f2d4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=7379732f646d65747379732f62696c2f XMM01=6c6c696b66722d646d65747379732f64 XMM02=00000000000000000000000000000000 XMM03=3d59524f5443455249445f4554415453 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=7379732f646d65747379732f62696c2f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880e4fb0000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff88806cd08a30 RDI=ffff88806cd32210 RBP=ffff88806cd01000 RSP=ffff88806cd08990 R8 =0000000000000001 R9 =ffff88806cd08aa0 R10=000000000003e465 R11=0000000000006e95 R12=ffff88806cd08a01 R13=ffff88806cd08aa8 R14=ffff88806cd08a30 R15=ffff88806cd08a60 RIP=ffffffff815cb7d0 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e4fb0000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556a5d690c90 CR3=000000000ed93000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000000000000030000556a5d69df00 XMM05=0000556a5d6916c00000556a5d67ac60 XMM06=0000556a5d681e500000000000000000 XMM07=00000000000000000000000000000000 XMM08=7269762f736563697665642f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000