(0x1, 0x5, 0x8000, &(0x7f0000000000)={0xffffffffffffffff}) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) 23:48:41 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0x3, 0x29, 'MDI', 0x3}) [ 311.633377][ T9698] Bluetooth: hci4: command 0x0401 tx timeout 23:48:41 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000000)) socket(0x10, 0x80804, 0xd855) 23:48:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, "872fd2"}) 23:48:41 executing program 1: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) socket(0x10, 0x80804, 0xd855) 23:48:41 executing program 5: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x80804, 0xd855) 23:48:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x1, r1}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x349b, 0x4) 23:48:41 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000000)) 23:48:42 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x3, 0x29, 'MDI', 0x3}) 23:48:42 executing program 1: socket(0x10, 0x80804, 0xd855) [ 311.963463][ T9698] Bluetooth: hci3: command 0x0401 tx timeout 23:48:42 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x6, 0x5) socketpair(0x1, 0x5, 0x8000, &(0x7f0000000000)) 23:48:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000080)="23183f91492ad8dd93dd0512536159db6f07035167c0226053788af9a5191b52d74df5cde48bd3463b55fb055349eba280feca14295e683b62b1290508") r1 = socket(0x6, 0x5, 0x2) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x9, 0x40, 0x2f, 0x7}, {0x4, 0x7, 0x9, 0x5}, {0x75b, 0x5, 0x4, 0x80000001}, {0x3e54, 0x80, 0x6, 0x9}]}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) 23:48:42 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000000)) 23:48:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x1, r1}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x349b, 0x4) 23:48:42 executing program 1: socket(0x0, 0x80804, 0xd855) 23:48:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7ff}) 23:48:42 executing program 3: socketpair(0x15, 0x80000, 0x5, &(0x7f0000000000)) 23:48:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x1, r1}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x349b, 0x4) 23:48:42 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x6, 0x5) 23:48:42 executing program 1: socket(0x0, 0x80804, 0xd855) 23:48:42 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x3, 0x29, 'MDI', 0x3}) 23:48:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7ff}) 23:48:42 executing program 3: socketpair(0x0, 0x80000, 0x5, &(0x7f0000000000)) 23:48:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x1, r1}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") 23:48:42 executing program 1: socket(0x0, 0x80804, 0xd855) 23:48:42 executing program 0: socket$inet6(0xa, 0x6, 0x5) 23:48:43 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x6, 0x5) 23:48:43 executing program 1: socket(0x10, 0x0, 0xd855) 23:48:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x1, r1}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") 23:48:43 executing program 3: socketpair(0x0, 0x80000, 0x5, &(0x7f0000000000)) [ 313.153349][ T9698] Bluetooth: hci0: command 0x0401 tx timeout 23:48:43 executing program 0: socket$inet6(0xa, 0x0, 0x5) 23:48:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x15, 0x5, 0x807, &(0x7f0000000000)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) socketpair(0x1d, 0x80000, 0x7f, &(0x7f0000000040)) [ 313.713287][ T20] Bluetooth: hci4: command 0x0401 tx timeout 23:48:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x1, r1}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") 23:48:43 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x3, 0x29, 'MDI', 0x3}) 23:48:43 executing program 3: socketpair(0x0, 0x80000, 0x5, &(0x7f0000000000)) 23:48:43 executing program 1: socket(0x10, 0x0, 0x0) 23:48:43 executing program 0: socket$inet6(0xa, 0x0, 0x0) 23:48:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x15, 0x5, 0x807, &(0x7f0000000000)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) socketpair(0x1d, 0x80000, 0x7f, &(0x7f0000000040)) 23:48:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x15, 0x5, 0x807, &(0x7f0000000000)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) socketpair(0x1d, 0x80000, 0x7f, &(0x7f0000000040)) 23:48:44 executing program 3: socketpair(0x15, 0x0, 0x5, &(0x7f0000000000)) 23:48:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x1, r1}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") 23:48:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x15, 0x5, 0x807, &(0x7f0000000000)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) socketpair(0x1d, 0x80000, 0x7f, &(0x7f0000000040)) [ 314.033615][ T9698] Bluetooth: hci3: command 0x0401 tx timeout 23:48:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x15, 0x5, 0x807, &(0x7f0000000000)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) socketpair(0x1d, 0x80000, 0x7f, &(0x7f0000000040)) 23:48:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x15, 0x5, 0x807, &(0x7f0000000000)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) socketpair(0x1d, 0x80000, 0x7f, &(0x7f0000000040)) 23:48:44 executing program 3: socketpair(0x15, 0x0, 0x0, &(0x7f0000000000)) 23:48:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x3, 0x29, 'MDI', 0x3}) 23:48:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") 23:48:44 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x15, 0x5, 0x807, &(0x7f0000000000)) socketpair(0x1d, 0x80000, 0x7f, &(0x7f0000000040)) 23:48:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x15, 0x5, 0x807, &(0x7f0000000000)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) socketpair(0x1d, 0x80000, 0x7f, &(0x7f0000000040)) 23:48:44 executing program 3: socketpair(0x15, 0x0, 0x0, 0x0) 23:48:44 executing program 0: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) 23:48:44 executing program 3: socketpair(0x15, 0x0, 0x0, 0x0) 23:48:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x15, 0x5, 0x807, &(0x7f0000000000)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:48:44 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x1d, 0x80000, 0x7f, &(0x7f0000000040)) 23:48:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 23:48:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") 23:48:45 executing program 3: socketpair(0x15, 0x0, 0x0, 0x0) [ 315.233337][ T20] Bluetooth: hci0: command 0x0401 tx timeout 23:48:45 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0x3, 0x29, 'MDI', 0x3}) 23:48:45 executing program 5: socketpair(0x1d, 0x80000, 0x7f, &(0x7f0000000040)) 23:48:45 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x15, 0x5, 0x807, &(0x7f0000000000)) 23:48:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x15, 0x5, 0x807, &(0x7f0000000000)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:48:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") 23:48:45 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0xb7a0, 0x0, 0x3, 0x5, 0x8c48}, 0xc) 23:48:45 executing program 5: socketpair(0x0, 0x80000, 0x7f, &(0x7f0000000040)) 23:48:45 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0x3, 0x29, 'MDI', 0x3}) 23:48:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x15, 0x5, 0x807, &(0x7f0000000000)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) [ 315.803050][ T9698] Bluetooth: hci4: command 0x0401 tx timeout 23:48:45 executing program 1: socketpair(0x15, 0x5, 0x807, &(0x7f0000000000)) 23:48:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, 0x0) 23:48:45 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") 23:48:46 executing program 1: socketpair(0x0, 0x5, 0x807, &(0x7f0000000000)) 23:48:46 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0x3, 0x29, 'MDI', 0x3}) 23:48:46 executing program 5: socketpair(0x0, 0x80000, 0x7f, &(0x7f0000000040)) 23:48:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x15, 0x5, 0x807, &(0x7f0000000000)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:48:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, 0x0) 23:48:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") 23:48:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) [ 316.115050][ T20] Bluetooth: hci3: command 0x0401 tx timeout 23:48:46 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x15, 0x5, 0x807, &(0x7f0000000000)) 23:48:46 executing program 5: socketpair(0x0, 0x80000, 0x7f, &(0x7f0000000040)) 23:48:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, 0x0) 23:48:46 executing program 1: socketpair(0x0, 0x5, 0x807, &(0x7f0000000000)) 23:48:46 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") 23:48:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 23:48:46 executing program 0: socketpair(0x15, 0x5, 0x807, &(0x7f0000000000)) 23:48:46 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, 0x0) 23:48:46 executing program 5: socketpair(0x1d, 0x0, 0x7f, &(0x7f0000000040)) 23:48:46 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") 23:48:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 23:48:46 executing program 1: socketpair(0x0, 0x5, 0x807, &(0x7f0000000000)) 23:48:46 executing program 0: socketpair(0x0, 0x5, 0x807, &(0x7f0000000000)) 23:48:46 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, 0x0) 23:48:46 executing program 5: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000040)) 23:48:46 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") 23:48:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x29, 'MDI', 0x3}) 23:48:46 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, 0x0) 23:48:46 executing program 1: socketpair(0x15, 0x0, 0x807, &(0x7f0000000000)) 23:48:46 executing program 0: socketpair(0x0, 0x5, 0x807, &(0x7f0000000000)) 23:48:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") 23:48:46 executing program 1: socketpair(0x15, 0x0, 0x0, &(0x7f0000000000)) [ 316.827417][T28059] can: request_module (can-proto-0) failed. 23:48:46 executing program 5: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000040)) 23:48:46 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, 0x0) 23:48:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x29, 'MDI', 0x3}) [ 316.923732][ T3232] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.930185][ T3232] ieee802154 phy1 wpan1: encryption failed: -22 23:48:47 executing program 1: socketpair(0x15, 0x0, 0x0, 0x0) 23:48:47 executing program 0: socketpair(0x0, 0x5, 0x807, &(0x7f0000000000)) [ 317.022548][T28077] can: request_module (can-proto-0) failed. 23:48:47 executing program 5: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000040)) 23:48:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") 23:48:47 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, 0x0) 23:48:47 executing program 1: socketpair(0x15, 0x0, 0x0, 0x0) 23:48:47 executing program 0: socketpair(0x15, 0x0, 0x807, &(0x7f0000000000)) 23:48:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") 23:48:47 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, 0x0) 23:48:47 executing program 5: socketpair(0x1d, 0x0, 0x7f, 0x0) [ 317.259261][T28094] can: request_module (can-proto-0) failed. 23:48:47 executing program 1: socketpair(0x15, 0x0, 0x0, 0x0) [ 317.313151][ T9698] Bluetooth: hci0: command 0x0401 tx timeout 23:48:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x29, 'MDI', 0x3}) 23:48:47 executing program 0: socketpair(0x15, 0x0, 0x0, &(0x7f0000000000)) 23:48:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) 23:48:47 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, 0x0) 23:48:47 executing program 5: socketpair(0x1d, 0x0, 0x7f, 0x0) 23:48:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151de22491ac6d5f306d8de6685f3af1c8de18e4e30fefad91f31834f67468238a7f99b639fc82e0c507449a4ed1999939ba1bd16eecc81f5c41ca827a694d03757dabe947535518a1e2344e3fdf8cfb8781986339b9963144a8362c9d47babac") [ 317.873788][ T20] Bluetooth: hci4: command 0x0401 tx timeout 23:48:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) 23:48:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) 23:48:48 executing program 0: socketpair(0x15, 0x0, 0x0, 0x0) 23:48:48 executing program 5: socketpair(0x1d, 0x0, 0x7f, 0x0) 23:48:48 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, 0x0) 23:48:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) [ 318.203152][ T20] Bluetooth: hci3: command 0x0401 tx timeout 23:48:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, 'MDI', 0x3}) 23:48:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) 23:48:48 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, 0x0) 23:48:48 executing program 5: socketpair(0x15, 0x0, 0x807, &(0x7f0000000000)) 23:48:48 executing program 0: socketpair(0x15, 0x0, 0x0, 0x0) 23:48:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) 23:48:49 executing program 0: socketpair(0x15, 0x0, 0x0, 0x0) 23:48:49 executing program 1: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, 0x0) 23:48:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:48:49 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, 0x0) 23:48:49 executing program 5: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000040)) 23:48:49 executing program 3: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000040)) [ 319.139943][T28173] can: request_module (can-proto-0) failed. [ 319.246855][T28180] can: request_module (can-proto-0) failed. [ 319.403189][ T9698] Bluetooth: hci0: command 0x0401 tx timeout 23:48:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, 'MDI'}) 23:48:49 executing program 1: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, 0x0) 23:48:49 executing program 0: socketpair(0x0, 0x5, 0x807, &(0x7f0000000000)) 23:48:49 executing program 5: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000040)) 23:48:49 executing program 3: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000040)) 23:48:49 executing program 1: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, 0x0) 23:48:49 executing program 3: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000040)) [ 319.900772][T28197] can: request_module (can-proto-0) failed. [ 319.909432][T28195] can: request_module (can-proto-0) failed. 23:48:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, 0x0) 23:48:50 executing program 0: socketpair(0x0, 0x5, 0x807, &(0x7f0000000000)) 23:48:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:48:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, 'MDI'}) 23:48:50 executing program 5: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000040)) [ 319.962920][ T20] Bluetooth: hci4: command 0x0401 tx timeout 23:48:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, 0x0) [ 320.109259][T28210] can: request_module (can-proto-0) failed. 23:48:50 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 23:48:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:48:50 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) [ 320.185339][T28218] can: request_module (can-proto-0) failed. 23:48:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, 0x0) 23:48:50 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) [ 320.282856][ T20] Bluetooth: hci3: command 0x0401 tx timeout 23:48:50 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 23:48:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 23:48:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 23:48:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:48:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, 'MDI'}) 23:48:50 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 23:48:50 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 23:48:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 23:48:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:48:51 executing program 3: socketpair(0x1d, 0x0, 0x0, 0x0) 23:48:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:48:51 executing program 5: socketpair(0x1d, 0x0, 0x0, 0x0) 23:48:51 executing program 5: socketpair(0x1d, 0x0, 0x0, 0x0) 23:48:51 executing program 3: socketpair(0x1d, 0x0, 0x0, 0x0) 23:48:51 executing program 3: socketpair(0x1d, 0x0, 0x0, 0x0) [ 321.482983][ T20] Bluetooth: hci0: command 0x0401 tx timeout 23:48:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151") 23:48:51 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:51 executing program 5: socketpair(0x1d, 0x0, 0x0, 0x0) 23:48:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:48:52 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000300)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7ff, 0x3}) 23:48:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:48:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000080)="23183f91492ad8dd93dd0512536159db6f07035167c0226053788af9a5191b52d74df5cde48bd3463b55fb055349eba280feca14295e683b62b1290508") r1 = socket(0x6, 0x5, 0x2) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x9, 0x40, 0x2f, 0x7}, {0x4, 0x7, 0x9, 0x5}, {0x75b, 0x5, 0x4, 0x80000001}, {0x3e54, 0x80, 0x6, 0x9}]}, 0x10) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000140)=r2) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 23:48:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)='g') [ 322.046072][ T3145] Bluetooth: hci4: command 0x0401 tx timeout 23:48:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151") 23:48:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:52 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:48:52 executing program 3: setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151") [ 322.372764][ T20] Bluetooth: hci3: command 0x0401 tx timeout 23:48:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:48:52 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:53 executing program 0: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)) 23:48:53 executing program 3: setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151") 23:48:53 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:53 executing program 5: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151") 23:48:53 executing program 3: setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:53 executing program 1: setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:48:53 executing program 0: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)) 23:48:53 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) [ 323.553503][ T3145] Bluetooth: hci0: command 0x0401 tx timeout 23:48:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:48:53 executing program 5: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151") 23:48:53 executing program 1: setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:53 executing program 0: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)) 23:48:53 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:53 executing program 5: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151") 23:48:53 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)) 23:48:53 executing program 1: setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:53 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:48:54 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:54 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151") [ 324.442640][ T20] Bluetooth: hci3: command 0x0401 tx timeout 23:48:54 executing program 4: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)) 23:48:54 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)) 23:48:54 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 23:48:54 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:54 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151") 23:48:54 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)) 23:48:54 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 23:48:54 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:54 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151") 23:48:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151") 23:48:55 executing program 4: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)) 23:48:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)) 23:48:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 23:48:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 23:48:55 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)) 23:48:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 23:48:55 executing program 4: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)) 23:48:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151") 23:48:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x5, 0x8c48}, 0xc) 23:48:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:48:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)) 23:48:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 23:48:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x8c48}, 0xc) 23:48:55 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)) 23:48:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)) 23:48:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a4275afa0620ac2da0269bba45b70a2debb5578377a692d983c8eb3767b9dbbc9162057888e761e51a6bbacf21c72043151") 23:48:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x5, 0x8c48}, 0xc) 23:48:55 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)) 23:48:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) 23:48:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8c48}, 0xc) 23:48:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) [ 325.634068][ T3145] Bluetooth: hci0: command 0x0401 tx timeout 23:48:56 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)) 23:48:56 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x5, 0x8c48}, 0xc) 23:48:56 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, &(0x7f0000000100)) 23:48:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) 23:48:56 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080), 0xc) 23:48:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) 23:48:56 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x5, 0x8c48}, 0xc) 23:48:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) 23:48:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) 23:48:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)) 23:48:56 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)) 23:48:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000000100)=0xe8) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000001e80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000180)="e90de0a80b056da9d1b11cbde2ecec579bb1bc3c573a8b222858731d43ee78e0aabe76b0de808a57dc3a93f3ea27137e29ee7221b9fe70e5b86bad1657c573589cfdeb379f25d1cde5ddb11cadf195291c921caadc01046f37d91cd5ec5a25cfe143f3465c788bd9f6f88e67ef10ee3ac1d1d45b2286d179b46f04abb959961ce9e6125615e485788b43f85715d3c93490fe870ceddcb396f0ae2fb1aa92e5c38dd5412471356525ffd36513da9b9abc102bdfb1a5e85a42648b3dd007457080f8875843b46b1c36403a846a63e74bca6f27453589047d2c", 0xd8}, {&(0x7f0000000280)="34519de9976912e0e46b8e89e8e334360d81c3943eb4831014a691ad5d99ba3815f9ca9593dcbefe4d54ccfd41d326c2e88e9dcc4f69cba8643a64ab298f4991373ea21c02a67c3e1724feb0c8275cfd5b11b3ceb04f0166a431cc0b7d2842454eefd8f2b73b80c94b113d406fca58da4c89e9e31f32a9ebff855a42b50a741e239d1efe9bcfbc07d5297b8af06f065c59e40b1cb921f17e90378987992c59b123633f75f8166d0b43036aa9a914f4ed463d00dbd2681511481a7806e28e7619e5347a310d75fb9844", 0xc9}], 0x2, &(0x7f00000003c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x8001}}, @rthdr={{0x38, 0x29, 0x39, {0x2b, 0x4, 0x2, 0x20, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x3a, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r1}}}, @rthdrdstopts={{0x150, 0x29, 0x37, {0x89, 0x26, '\x00', [@jumbo={0xc2, 0x4, 0x6e}, @ra={0x5, 0x2, 0xfffa}, @enc_lim={0x4, 0x1, 0x7f}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x8001}, @generic={0x5, 0xe1, "63d4c04c9c4a77be9ee6898ec541734f6114c20a440bb05878d0544db16deb45ecbf3f92c6d7c9a34ea091a574463f3edaa82d2f92d0d06e0e62f3c3bb4e118c0411e0cca0d3a471b8141d73cab8c1d84229120c5dfb460d79335a70d87e8a7bed5daa403bc6fda008213f6d7b1bf7e6d12cd7a732c2e26d7fc803db9629bb2bc870d9c02d93c2417c69d84fc7f4008663edb13c2383a871fb0743daf15756d426e47a9562c717b12aabe0349de570a2c21de816b279fd562da5581c64d2c6d6d39787e19bc194d4259068485f068471f2a570ad6db65b3627f493c02e335ba167"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x208}}, {{&(0x7f0000000600)={0xa, 0x4e24, 0x8, @empty}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000640)="0e463f3654160e3bc9de3cd3291c3f0aa61a0f3b743d2ff91fb0d5a00381e319baef0f932eefd08a21bb54d20bafa15061dd622fe5d565730aa867cef0d02fade10586149eed899000e184fa44d6abb85dc2032fe0499d882620607634616aed3717584a5dd719768f45a38a51856c0963768f75b5f80b1504b984a749bfc6f72bd14e52d1ef026efc27d9614937d47c2d229d76658a058a94100a3f2782ba94c49153ec1413f5b915cadddef5b971860f0a6ec9cf3f3a6a8a381e79edc5ee4ab8a518135d6b", 0xc6}, {&(0x7f0000000840)="cb4c716a9b634a80eb7f08202dd1cdc3b274efa304e6e55fc1aee55eb9db21bd317ffacc19059892c555db1a6772382aabb76a01ee943b74bdd3732f65bf04540fcfe10b4d23cd9928443eccc523666f835312e8820877a21906d4dfbe73c46cf9173200972195415efe32e2f0bbfd9c72b159c50fc3097793de72b95b6fb2ff030677838e82789106a5ce718ab50127a23d95bc26397f79a95f4ea79ee88412b4e5a2ea84c27fb0425c64fbb550e9cadcf6117696722c49f63d673e5846aca7a92ecbe788996f245b641f2240fe6562c0e22873d53be55cf9c2701bd64319a808dbc2", 0xe3}, {&(0x7f0000000940)="e4a7d1ee4f33228d281485a35b6870a7cf30504534c770485baaf8b33a70d4961a2160d7daf6cbebb91cbe62752d9563d424401912cb62aa3aa6137968ef2967d4979be5328ecfb5e2659723d751a03fea1328281cf2cb911e195e489cdaa3b1b1248a704c718692655c7074a2a8e120bb557ac405d3a0ebb4cfb8e359975975aee85087bd2f15e667572c284b8ea2fee80b5191ab21801b53d313fe0c0ae2a22002d604809e4579863ea4216338005491bfd03cfae480c57fe0637667b2fb30e09988e5d3", 0xc5}, {&(0x7f0000000740)="0734e755e824cd9d7c6ebfd58a54cb4071a51eae02c117e7d409ac26233ca4cb50540e781e9b16357b75ab70020cabd0ff46e6ba27ff1e8e99a86029a2b9b85f6939097f10236bedfcfb001b4c274c981c6eb810f4e1d57a0b45c0c5fa2cd3854c152e9ffdf937cbc2ec70b2a8caf839e8e1f620abac011291f6c1b67e9dd0ed3f4bb052a0ebaabd2c66eb88fa468489caac42761891c226", 0x98}], 0x4, &(0x7f0000000a80)=[@dstopts={{0xe0, 0x29, 0x37, {0x0, 0x18, '\x00', [@enc_lim={0x4, 0x1, 0x5d}, @jumbo={0xc2, 0x4, 0x400}, @generic={0x90, 0xa6, "d583e433a46daf6643a8865e7d3fd4709736e5770a37a398d727f464943b91ad602cab1294b945fe8b7d00fb9f1d17ded64933e65e49cd950d862cb05bceeeba030f08bf08e6350233765ee9bb73d3faa05cc492ff9a05004c19567f4563dfdb6df1b87a10c9dce45778741284215f67e81ee07fac56cb545b86fcad1d8fc7811b79e28dc2adf8a1847c774d399e074207aed041a23c711e1fab6994e6ea9d3e576516017736"}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x3}, @pad1, @ra={0x5, 0x2, 0x4}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x2, 0xa, 0x2, 0x80, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private1]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x6, 0x0, '\x00', [@ra={0x5, 0x2, 0x9}]}}}, @dstopts={{0x100, 0x29, 0x37, {0x1d, 0x1c, '\x00', [@generic={0x8, 0xdd, "df14c2e0ac97afc652d77055cac4b42ced9c3bbcae7895a47e4eb9d67d1f77a4b3d2a4472758a3ac5041a24f23baba79c3a63d09af2e0ed01624697e08e2a8abbcb6eee58c0db85e695c24815d8cda7866f1322897a8f97e2d6e306d18133996639df0e3638256b4a523356c68bc26f832947075bfbefc02ae4e97be155e6253418d5b18eb2f727e19388f28db3aa7d9a971587408cf363263595c14e2b9e241e8dc81a8678a9e73270b6f28a664a81fc3d43c6e62959dbb0e1c9c8e539c80b9c8a48263ea1eb20f8190d0b45beb89b44a239ec63797be8ead8a6518a0"}, @pad1]}}}, @dstopts={{0x38, 0x29, 0x37, {0x2, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x20}, @jumbo={0xc2, 0x4, 0x94d6}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2c}}]}}}], 0x2b8}}, {{&(0x7f0000000d40)={0xa, 0x4e21, 0xc5a7, @mcast2, 0x40}, 0x1c, &(0x7f0000001040)=[{&(0x7f0000000d80)="3df699dfb1d4403abbf472cfabced94cacc10a0a7c7d89219117a77e401ddb1c59eff44e20e8ed3a3a71bdf9ec623b86165a23f9966ceb8bf833d9f45a66d497111cffc8591dfc3c", 0x48}, {&(0x7f0000000e00)="cf5d182ba8f2db62286ee35e2173cc83f97fa04f1a6fc5c8a2f6a26f1acbf06951a6c6d566488844c0d276d4eae65214d8ecec6d3941dfaabd72ca881599113ec74ecd5cc9ab1ecd33f91c790fbfd28ff38e092610ffeb182fc26a10b22d8290381570e05e2eb26a28ffda38575017c4977e859c8ec62668424a2fcb7da92bece2ca2fa2d83e17e97f1fe6cfd2b5c7465a3e6a87560d1be6e2083b8efd27c6d91f0f51c0abea6e35c0d2e8bfb3f8f7bd8e4368936509ca635138682148d1d2f00dfcb36ce4f5db45e97d905d79cb1294ac8564367dd58cd6157cc5", 0xdb}, {&(0x7f0000000f00)="a1e1d596", 0x4}, {&(0x7f0000000f40)="381524876c2f5d8e1a8b527de13baa19652a1d03a62e1bb2ddcfa32ebe1f1b0084ae57bb77d1b2a1bb82c8b24c7d90d05cc580aa4fc6870b72b56ed21c395ac9de1603d25224b04030ef5ae75a886f8023fe77294de02f33534276953679c6e5a03311d3551bc306430842acdf6206f22c480fb0967b722eb5e308fb5c4b2f1e", 0x80}, {&(0x7f0000000fc0)="8dee806712617b1a4e4d74d233a0bc0d82132e4db67189a7ec73b92c7637377edc4b1966fee0038800c48311e4c11a9892e6aa8442fac0376f01a213a71ae15755459dd94a0c43636773abd27a748ef198aaf19acf3588c772ea2e", 0x5b}], 0x5, &(0x7f00000010c0)=[@hopopts={{0xc8, 0x29, 0x36, {0x84, 0x15, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x40, {0x1, 0xe, 0x81, 0x4, [0xdcb5, 0xd9b7, 0xfffffffffffffffe, 0x101, 0x3, 0x2, 0x4989831b]}}, @generic={0xfc, 0xc, "6e952e52738025ca3c9166cf"}, @calipso={0x7, 0x40, {0x0, 0xe, 0x81, 0x5, [0x8001, 0x6, 0xc4, 0x8, 0x9, 0x20, 0x8000]}}, @enc_lim={0x4, 0x1, 0x74}, @ra={0x5, 0x2, 0x8}]}}}], 0xc8}}, {{&(0x7f00000011c0)={0xa, 0x4e22, 0x4, @private2, 0xe075}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000001200)="08856294d8e0f36d55e2f5f1a7d32fff101fcad7cd214cbc028f4d91ae5fba44158ab3c67828b31292321119bf555006cd9c7c", 0x33}, {&(0x7f0000001240)="0a002cdeb6f072e349ebe6f92046f787bcb96d196fb35a534cd0dbe23e01375036fa38be90528bfdcffa2904fe686468bffe3f5556a3c6ade46c2418f231b06c244af841f69a6185ea39dc7f80e0524ecc64a8", 0x53}, {&(0x7f00000012c0)="9aa687415a95a38e4febb35e343c070a9aed31d88129dad8d8b7a39fc9677c4cc2af5cebba05efca", 0x28}], 0x3, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x60}}, {{&(0x7f00000013c0)={0xa, 0x4e24, 0xa1, @mcast2}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000001400)="de8976e09fcb225db2284983a3fe19340ecac0281c6c767f1b980d9fc694a066b64b0c6ada720752cbaa39d3147904123fe40d218d6f271d860f11a746f6a7edc0ff9a2768b282e7eacaedaa87aabc3a61ca1ec09aba748de5930023fdf4f0ecf6bbcdc0522dd463e302844934f814d15077fc103fcaba6173000a780fd9e096aa9b41a0f7f0b0887f65dc82e698d9eadaa18bfb551fc2a3f16a0f45957c9111c369f7c1567d9d919d51ec0b0c886f66e23507df4fef7bab24ba41cadb111364f29a33080d9abedc649b43e23185c59056210894fd906b14ed2630ded2e4059f2bceddad3a90e0", 0xe7}, {&(0x7f0000001500)="c5596f02b31363ec2b48128841cd525248e6926ccd8e4d619a2c342429d117fbf118aa2d18190b9ac9d5cc51ba0ca4fcbe59097f441242a4042d508399ad5117a31e77c8349cd1a79d6462f091def191b544cce309758fd3daab0888a804a522bb77462a02de3fef5e355a6c7d50a8feedc8c5448e391a5ab237f4a340d722be74f39153d7e6dd9d8efcc0624c9e3ab124d10537876263fed7b75455546e27eb28be8aa10bf1af6af092a6c48d2c0157b9e68313768fda4c84d4e63b19e3e9e8f1ccfe039501c51dbd44923160db93d5a123054546ffb86d32d6", 0xda}, {&(0x7f0000001600)="7913892200c81b666907b847187432b2b10d1408672d2ac6bb2bb7a6f3cdd90febf43f74fd427b7ee7c8c67564ef95258317f5c578b8a43fbb1efdda5c2194b21ca62b09ec865bd449da1010f618ee29199b99a26aa8730a73ea5eb29850435526d627f06eceb9788eb17f55ef77478df4a3422eafb4fe2191100d4b9177ddcf62020ee691ab8b324236d4efdbbaa5f0b3fd67182fbdfa12e167b5d0fd017cca2f78f28291c6df789c04db83cea36b225b6f2f5e3a8832ba8d31ea08696fc7b418497485384a0a4ac747712064277b73da7d39926fb4318fcbf14a91594529ac77f6ee0140903f4dd75af90d1e8f5bc9ff76e9", 0xf3}], 0x3, &(0x7f0000001740)=[@pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r1}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x2f, 0x1, '\x00', [@ra={0x5, 0x2, 0x6}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x200}}, @dstopts={{0x20, 0x29, 0x37, {0x4, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1f}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts={{0x20, 0x29, 0x37, {0x8b, 0x0, '\x00', [@pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffa}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x8, 0x4, 0x2, 0xd7, 0x0, [@mcast1, @remote]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x19}, r1}}}, @hoplimit={{0x14, 0x29, 0x34, 0xd2}}], 0x150}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f00000018c0)="841f7967320c3101c1cf32ebbeeadd9e4298d4ce294b8f9e72bf05d0f502e9240ea27d79954d6dd2c7f5020151a2dc8cd3e59a617bf5dcff039552bb8ad1d01a027596efede18b99372c7366ea47d0820e0fd5525f0e041afd4369ba98762606164727c38f22fcb6a13f175360fae8be006403c77f2c258d504388d9a2bd45a9feb6292f173be6c08839a64c83c104483fd1bc216bd1f31c25a5dbe72894e15442f1233083579978f2ccd6504dbe377ad3d2c3f390b4c6181229fd12a1525a28366748ff7c2eca", 0xc7}, {&(0x7f00000019c0)="e15f961da51a458998a33a96f77f1adf31bcb6a1c203d3244ee0998060c6472963a9b4909065dd4e96b6ae8afdd7cede837d8015686ed3ac9977848b4d81688ff3f246f8757da6fdbc7d42b6dbd56ce42ba11b1c2565d1fc2606b831b4fe6626d74e457a3a342f5869c4eab6b2944d3acf7f3ae31191bd62b18bab0c4e2129af0d48aa8c11615a4f4df0e9faff1af4002cea50f6369171fe9b91e53e1f7781938747d2b7", 0xa4}, {&(0x7f0000001a80)="2dde9e790d949d4a7ba59172622cc267b2750810d86b2eb20b75a0c339ad45b012", 0x21}, {&(0x7f0000001ac0)="ca37f951053afc5007cc7e1ccd130de2f39dd5aa4c68b0ea2966e27c4d1313556081e51531a4ad3842a435149399a801a9d257efddb6b2f01d2649963ac7ddf26fddf39737e82e679ce1f8ef9f2ef532672677d7ea1201255240746be5a9cb1cefde7a80f24b18f4a8088edef6ce3a87aeadfcbb44e6336d01d8c543e7ca15a90f289c3cf1ff1f299284868798b8fd854a892d1286589eb56af22722a1875bd5079c0dfe0dcd814dfecc5687af3204e507df9f64cd53ccb8ebbcab49cd316cdb2bf714e4a304832d60539681d3b780fd1afcc1ea26ecead52e95782a46cdc5dc74dc913687", 0xe5}, {&(0x7f0000001bc0)="bbdc5ae49ea774ebe6e05b924c7cf7334fee00a80113f0fdedd86fc405c700719354afba4701446771636e26c46c2443218adb8ef120721ce60d9a181306012611307d2aa411a33652", 0x49}, {&(0x7f0000001c40)="2c8505a82100a499185a18d42736239b77b6587036c725ffbf69df18d830662c3e846bf0", 0x24}, {&(0x7f0000001c80)="c9acc099c725844b1cb2d23b9607a783658e152c23b568d047564398d72b23db61", 0x21}], 0x7, &(0x7f0000001d40)=[@tclass={{0x14, 0x29, 0x43, 0xfffffffa}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @hopopts={{0xb8, 0x29, 0x36, {0x87, 0x13, '\x00', [@pad1, @hao={0xc9, 0x10, @private2}, @ra={0x5, 0x2, 0x6}, @jumbo, @calipso={0x7, 0x40, {0x1, 0xe, 0xe4, 0x9, [0x6, 0x1, 0x1, 0xe86, 0xf5, 0x2, 0x100000000]}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x4, 0x8, [0x7f, 0xfffffffffffffff9, 0x5582, 0x9, 0x3f, 0xe0]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x110}}], 0x6, 0x40000) 23:48:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) [ 326.522693][ T20] Bluetooth: hci3: command 0x0401 tx timeout 23:48:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) 23:48:56 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 23:48:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)) 23:48:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)) 23:48:56 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x5, 0x8c48}, 0xc) 23:48:56 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) 23:48:56 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) 23:48:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)) 23:48:56 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 23:48:56 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x5, 0x8c48}, 0xc) 23:48:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) 23:48:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:48:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 23:48:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x5, 0x8c48}, 0xc) 23:48:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)) 23:48:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)) 23:48:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) 23:48:57 executing program 3: setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) 23:48:57 executing program 2: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) socket(0x2, 0x80806, 0x7) socket(0x2, 0x80806, 0x7) 23:48:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x0, 0x8c48}, 0xc) 23:48:57 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0xb7a0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:48:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) [ 327.714763][ T3145] Bluetooth: hci0: command 0x0401 tx timeout 23:48:57 executing program 3: setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) 23:48:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x29, [0x6, 0x3], 0x1}, 0x10) 23:48:58 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x0, 0x8c48}, 0xc) 23:48:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x29, [0x6, 0x3], 0x1}, 0x10) 23:48:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x29, [0x6, 0x3], 0x1}, 0x10) 23:48:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:48:58 executing program 3: setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) 23:48:58 executing program 4: socketpair(0x0, 0x80000, 0x4000000, &(0x7f00000001c0)) [ 328.592399][ T9698] Bluetooth: hci3: command 0x0401 tx timeout 23:48:58 executing program 0: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) socket(0x2, 0x80806, 0x7) socket(0x2, 0x80806, 0x7) 23:48:58 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) 23:48:58 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x0, 0x8c48}, 0xc) 23:48:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ipvlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:48:58 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) 23:48:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ipvlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:48:58 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5}, 0xc) 23:48:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a42") 23:48:59 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x422e, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 23:48:59 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) 23:48:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ipvlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:48:59 executing program 0: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) socket(0x2, 0x80806, 0x7) socket(0x2, 0x80806, 0x7) 23:48:59 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5}, 0xc) 23:48:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ipvlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:48:59 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x5}, 0xc) 23:48:59 executing program 3: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) socket(0x2, 0x80806, 0x7) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:48:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:48:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a42") 23:48:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ipvlan0\x00'}) 23:48:59 executing program 4: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) socket(0x2, 0x80806, 0x7) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:48:59 executing program 1: socketpair(0x6, 0x80000, 0x4000000, &(0x7f00000001c0)) 23:48:59 executing program 2: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'ipvlan0\x00'}) [ 329.792421][ T3145] Bluetooth: hci0: command 0x0401 tx timeout 23:48:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72f10bd8544904c4d6c2aabcf283ea846551ab58bc85293a42") 23:48:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ipvlan0\x00'}) 23:49:00 executing program 1: clock_getres(0x4, &(0x7f0000000000)) socketpair(0x6, 0x80000, 0x4000000, &(0x7f00000001c0)) 23:49:00 executing program 2: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'ipvlan0\x00'}) 23:49:00 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0xb7a0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:49:00 executing program 4: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) socketpair(0x6, 0x80000, 0x4000000, &(0x7f00000001c0)) 23:49:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:00 executing program 3: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) socket(0x2, 0x80806, 0x7) socketpair(0x6, 0x80000, 0x4000000, &(0x7f00000001c0)) 23:49:00 executing program 1: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000300)={&(0x7f0000000100)=[0x0, r2, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7ff, 0x3}) 23:49:00 executing program 2: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'ipvlan0\x00'}) 23:49:00 executing program 4: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) socket(0x2, 0x80806, 0x7) socket(0x2, 0x80806, 0x7) socketpair(0x6, 0x80000, 0x4000000, &(0x7f00000001c0)) 23:49:00 executing program 0: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) socket(0x2, 0x80806, 0x7) socket(0x2, 0x80806, 0x7) socketpair(0x6, 0x80000, 0x4000000, &(0x7f00000001c0)) 23:49:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) [ 330.672294][ T3145] Bluetooth: hci3: command 0x0401 tx timeout 23:49:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ipvlan0\x00'}) 23:49:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:00 executing program 4: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) socket(0x2, 0x80806, 0x7) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) socketpair(0x6, 0x80000, 0x4000000, &(0x7f00000001c0)) 23:49:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ipvlan0\x00'}) 23:49:00 executing program 0: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) socket(0x2, 0x80806, 0x7) socket(0x2, 0x80806, 0x7) socketpair(0x6, 0x80000, 0x4000000, &(0x7f00000001c0)) 23:49:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ipvlan0\x00'}) 23:49:01 executing program 4: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x63c360f2, 0x4, 0x4, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000300)={&(0x7f0000000100)=[0x0, r2, 0x0], &(0x7f00000002c0)=[r3, 0x0, 0x0, r4, 0x0, 0x0], 0x7ff, 0x3}) 23:49:01 executing program 0: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x63c360f2, 0x4, 0x4, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000300)={&(0x7f0000000100)=[0x0, r2, 0x0], &(0x7f00000002c0)=[r3, 0x0, 0x0, r4, 0x0, 0x0], 0x7ff, 0x3}) 23:49:01 executing program 0: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x63c360f2, 0x4, 0x4, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000300)={&(0x7f0000000100)=[0x0, r2, 0x0], &(0x7f00000002c0)=[r3, 0x0, 0x0, r4, 0x0, 0x0], 0x7ff, 0x3}) 23:49:01 executing program 1: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x4004004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:49:01 executing program 4: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x63c360f2, 0x4, 0x4, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000300)={&(0x7f0000000100)=[0x0, r2, 0x0], &(0x7f00000002c0)=[r3, 0x0, 0x0, r4, 0x0, 0x0], 0x7ff, 0x3}) 23:49:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ipvlan0\x00'}) 23:49:01 executing program 3: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x4004004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:49:01 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 23:49:01 executing program 0: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x63c360f2, 0x4, 0x4, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000300)={&(0x7f0000000100)=[0x0, r2, 0x0], &(0x7f00000002c0)=[r3, 0x0, 0x0, r4, 0x0, 0x0], 0x7ff, 0x3}) 23:49:01 executing program 4: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x63c360f2, 0x4, 0x4, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000300)={&(0x7f0000000100)=[0x0, r2, 0x0], &(0x7f00000002c0)=[r3, 0x0, 0x0, r4, 0x0, 0x0], 0x7ff, 0x3}) [ 331.873948][ T3145] Bluetooth: hci0: command 0x0401 tx timeout 23:49:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae21f08699fbba45e8ab9f0e72") 23:49:02 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'ipvlan0\x00'}) 23:49:02 executing program 3: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x4004004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:49:02 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 23:49:02 executing program 0: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x63c360f2, 0x4, 0x4}) 23:49:02 executing program 4: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x63c360f2, 0x4, 0x4}) 23:49:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:02 executing program 0: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) 23:49:02 executing program 4: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) 23:49:02 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 23:49:02 executing program 3: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x4004004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:49:02 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'ipvlan0\x00'}) 23:49:02 executing program 4: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) 23:49:02 executing program 0: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) [ 332.762223][ T9698] Bluetooth: hci3: command 0x0401 tx timeout 23:49:02 executing program 3: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x4004004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:49:02 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 23:49:02 executing program 4: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:02 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'ipvlan0\x00'}) 23:49:03 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:03 executing program 0: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:03 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 23:49:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) 23:49:03 executing program 3: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x4004004) 23:49:03 executing program 4: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:03 executing program 4: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:03 executing program 0: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:49:03 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 23:49:03 executing program 3: syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) 23:49:03 executing program 0: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:49:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) [ 333.961984][ T3145] Bluetooth: hci0: command 0x0401 tx timeout 23:49:04 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 23:49:04 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:04 executing program 0: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) 23:49:04 executing program 3: syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) 23:49:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) 23:49:04 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 23:49:04 executing program 0: accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) 23:49:04 executing program 3: syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) 23:49:04 executing program 2: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:04 executing program 4: syz_open_dev$dri(0x0, 0x33, 0x101800) 23:49:04 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 23:49:04 executing program 0: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) 23:49:04 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) [ 334.832081][ T9698] Bluetooth: hci3: command 0x0401 tx timeout 23:49:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="677a12ec8702cafd89d98eae") 23:49:05 executing program 3: syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) 23:49:05 executing program 0: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:49:05 executing program 2: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:05 executing program 4: syz_open_dev$dri(0x0, 0x33, 0x101800) 23:49:05 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 23:49:05 executing program 0: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:05 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 23:49:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:05 executing program 4: syz_open_dev$dri(0x0, 0x33, 0x101800) 23:49:05 executing program 3: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x4004004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:49:05 executing program 2: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:05 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:05 executing program 0: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:05 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x101800) 23:49:05 executing program 3: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) 23:49:05 executing program 2: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:05 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:06 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x101800) 23:49:06 executing program 0: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) [ 336.032015][ T3145] Bluetooth: hci0: command 0x0401 tx timeout 23:49:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:06 executing program 3: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x63c360f2, 0x4, 0x4}) 23:49:06 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:06 executing program 2: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:06 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x101800) 23:49:06 executing program 0: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:06 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:06 executing program 3: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:06 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:06 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x0) 23:49:06 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:06 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:07 executing program 2: syz_open_dev$dri(0x0, 0x33, 0x101800) 23:49:07 executing program 0: syz_open_dev$dri(0x0, 0x33, 0x101800) 23:49:07 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x0) 23:49:07 executing program 3: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:07 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:07 executing program 2: syz_open_dev$dri(0x0, 0x33, 0x101800) 23:49:07 executing program 3: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:07 executing program 1: syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:07 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:07 executing program 0: syz_open_dev$dri(0x0, 0x33, 0x101800) 23:49:07 executing program 2: syz_open_dev$dri(0x0, 0x33, 0x101800) [ 338.121841][ T3145] Bluetooth: hci0: command 0x0401 tx timeout 23:49:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="677a12ec8702") 23:49:08 executing program 1: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:08 executing program 3: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:08 executing program 0: syz_open_dev$dri(0x0, 0x33, 0x101800) 23:49:08 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:08 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x101800) 23:49:08 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x101800) 23:49:08 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x101800) 23:49:08 executing program 1: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x63c360f2, 0x4, 0x4}) 23:49:08 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) 23:49:08 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:08 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x101800) 23:49:08 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x101800) 23:49:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="677a12ec8702") 23:49:08 executing program 3: syz_open_dev$dri(0x0, 0x33, 0x101800) 23:49:08 executing program 4: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 23:49:09 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x0) 23:49:09 executing program 1: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x63c360f2, 0x4, 0x4}) 23:49:09 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x101800) 23:49:09 executing program 4: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 23:49:09 executing program 3: syz_open_dev$dri(0x0, 0x33, 0x101800) 23:49:09 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x0) 23:49:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) r2 = socket(0x26, 0x2, 0x5d8542a) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)={0xffff0000}) r3 = socket(0x9, 0xa, 0x44d) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000080)=0x5222c192, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x10000000, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfffffffd, 0xffffffffffffff3e) 23:49:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:09 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) r2 = socket(0x26, 0x2, 0x5d8542a) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)={0xffff0000}) r3 = socket(0x9, 0xa, 0x44d) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000080)=0x5222c192, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x10000000, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfffffffd, 0xffffffffffffff3e) 23:49:09 executing program 4: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 23:49:09 executing program 3: syz_open_dev$dri(0x0, 0x33, 0x101800) 23:49:09 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x101800) 23:49:09 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) r2 = socket(0x26, 0x2, 0x5d8542a) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)={0xffff0000}) r3 = socket(0x9, 0xa, 0x44d) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000080)=0x5222c192, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x10000000, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfffffffd, 0xffffffffffffff3e) 23:49:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) r2 = socket(0x26, 0x2, 0x5d8542a) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)={0xffff0000}) r3 = socket(0x9, 0xa, 0x44d) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000080)=0x5222c192, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x10000000, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfffffffd, 0xffffffffffffff3e) 23:49:09 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:10 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:10 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x101800) [ 340.201827][ T9698] Bluetooth: hci0: command 0x0401 tx timeout 23:49:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) r2 = socket(0x26, 0x2, 0x5d8542a) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)={0xffff0000}) r3 = socket(0x9, 0xa, 0x44d) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000080)=0x5222c192, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x10000000, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfffffffd, 0xffffffffffffff3e) 23:49:10 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) r2 = socket(0x26, 0x2, 0x5d8542a) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)={0xffff0000}) r3 = socket(0x9, 0xa, 0x44d) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000080)=0x5222c192, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x10000000, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfffffffd, 0xffffffffffffff3e) 23:49:10 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x101800) 23:49:10 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) r2 = socket(0x26, 0x2, 0x5d8542a) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)={0xffff0000}) r3 = socket(0x9, 0xa, 0x44d) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000080)=0x5222c192, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x10000000, 0x4) 23:49:10 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 23:49:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) r2 = socket(0x26, 0x2, 0x5d8542a) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)={0xffff0000}) r3 = socket(0x9, 0xa, 0x44d) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000080)=0x5222c192, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x10000000, 0x4) 23:49:10 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x33, 0x0) 23:49:10 executing program 4: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 23:49:11 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) r1 = socket(0x26, 0x2, 0x5d8542a) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000000c0)={0xffff0000}) r2 = socket(0x9, 0xa, 0x44d) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x5222c192, 0x4) 23:49:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="677a12") 23:49:11 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) r1 = socket(0x26, 0x2, 0x5d8542a) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000000c0)={0xffff0000}) r2 = socket(0x9, 0xa, 0x44d) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x5222c192, 0x4) 23:49:11 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 23:49:11 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:11 executing program 4: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 23:49:11 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) r1 = socket(0x26, 0x2, 0x5d8542a) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000000c0)={0xffff0000}) socket(0x9, 0xa, 0x44d) 23:49:11 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 23:49:11 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) r1 = socket(0x26, 0x2, 0x5d8542a) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x9, 0xa, 0x44d) 23:49:11 executing program 4: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 23:49:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:11 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:11 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) r1 = socket(0x26, 0x2, 0x5d8542a) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000000c0)={0xffff0000}) socket(0x9, 0xa, 0x44d) 23:49:11 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:11 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:11 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) socket(0x26, 0x2, 0x5d8542a) socket(0x9, 0xa, 0x44d) 23:49:12 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:12 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) r1 = socket(0x26, 0x2, 0x5d8542a) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000000c0)={0xffff0000}) 23:49:12 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:12 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:12 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) socket(0x9, 0xa, 0x44d) 23:49:12 executing program 3: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) [ 342.281723][ T20] Bluetooth: hci0: command 0x0401 tx timeout 23:49:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:12 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) r1 = socket(0x26, 0x2, 0x5d8542a) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:49:12 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:12 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:12 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x9, 0xa, 0x44d) 23:49:12 executing program 3: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 23:49:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:12 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) socket(0x26, 0x2, 0x5d8542a) 23:49:12 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x8, 0x6, 0x4000003) socket(0x9, 0xa, 0x44d) 23:49:12 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 23:49:12 executing program 3: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 23:49:13 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) 23:49:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:13 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:13 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x9, 0xa, 0x44d) 23:49:13 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 23:49:13 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:49:13 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:13 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 23:49:13 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x8, 0x6, 0x4000003) 23:49:13 executing program 2: socket(0x9, 0xa, 0x44d) 23:49:13 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:14 executing program 2: socket(0x0, 0xa, 0x44d) [ 344.361507][ T9698] Bluetooth: hci0: command 0x0401 tx timeout 23:49:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)='gz') 23:49:14 executing program 0: socket(0x8, 0x6, 0x4000003) 23:49:14 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:14 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 23:49:14 executing program 2: socket(0x0, 0xa, 0x44d) 23:49:14 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 23:49:14 executing program 2: socket(0x0, 0xa, 0x44d) 23:49:14 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:14 executing program 0: socket(0x0, 0x6, 0x4000003) 23:49:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)='gz') 23:49:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)='g') 23:49:14 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 23:49:14 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:15 executing program 2: socket(0x9, 0x0, 0x44d) 23:49:15 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:15 executing program 0: socket(0x0, 0x6, 0x4000003) 23:49:15 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:15 executing program 2: socket(0x9, 0x0, 0x0) 23:49:15 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:15 executing program 1: socket(0x0, 0xa, 0x44d) 23:49:15 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:15 executing program 0: socket(0x0, 0x6, 0x4000003) 23:49:15 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x8, 0x6, 0x4000003) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x7, [0x140000, 0x8], 0x400}, 0x10) 23:49:15 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:15 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:15 executing program 0: socket(0x8, 0x0, 0x4000003) 23:49:15 executing program 2: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) r0 = socket(0x2, 0x80806, 0x7) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$inet6(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) socketpair(0x6, 0x80000, 0x4000000, &(0x7f00000001c0)) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4) 23:49:15 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:16 executing program 0: socket(0x8, 0x0, 0x0) 23:49:16 executing program 4: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 23:49:16 executing program 0: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) r0 = socket(0x2, 0x80806, 0x7) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$inet6(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) socketpair(0x6, 0x80000, 0x4000000, &(0x7f00000001c0)) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4) 23:49:16 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}]}) 23:49:16 executing program 2: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) r0 = socket(0x2, 0x80806, 0x7) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$inet6(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) socketpair(0x6, 0x80000, 0x4000000, &(0x7f00000001c0)) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4) 23:49:16 executing program 4: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) [ 346.431615][ T20] Bluetooth: hci0: command 0x0401 tx timeout 23:49:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)) 23:49:16 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}]}) 23:49:16 executing program 1: socketpair(0x22, 0x0, 0x0, &(0x7f0000000080)) 23:49:16 executing program 4: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 23:49:16 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffffffff0000000}]}) 23:49:16 executing program 2: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) r0 = socket(0x2, 0x80806, 0x7) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$inet6(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) socketpair(0x6, 0x80000, 0x4000000, &(0x7f00000001c0)) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4) 23:49:17 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}]}) 23:49:17 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:17 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:17 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffffffff0000000}]}) 23:49:17 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:17 executing program 3: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}]}) 23:49:17 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:17 executing program 2: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) r0 = socket(0x2, 0x80806, 0x7) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$inet6(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) socketpair(0x6, 0x80000, 0x4000000, &(0x7f00000001c0)) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:49:17 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:17 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffffffff0000000}]}) 23:49:17 executing program 3: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}]}) 23:49:17 executing program 5: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0x8, 0x40, 0x1b1b, 0x3, 0x1a90, 0x5}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7}, [@CTA_STATUS={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x10, 0x17, [0x8, 0x7ff, 0x1000]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf88b}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffc04}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0xc, 0xffffffffffffff73) 23:49:17 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:17 executing program 3: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}]}) 23:49:17 executing program 4: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 23:49:17 executing program 0: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffffffff0000000}]}) 23:49:18 executing program 5: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0x8, 0x40, 0x1b1b, 0x3, 0x1a90, 0x5}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7}, [@CTA_STATUS={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x10, 0x17, [0x8, 0x7ff, 0x1000]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf88b}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffc04}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0xc, 0xffffffffffffff73) 23:49:18 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}]}) 23:49:18 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 23:49:18 executing program 2: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) socket(0x2, 0x80806, 0x7) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) socketpair(0x6, 0x80000, 0x4000000, &(0x7f00000001c0)) 23:49:18 executing program 0: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffffffff0000000}]}) 23:49:18 executing program 4: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 23:49:18 executing program 5: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0x8, 0x40, 0x1b1b, 0x3, 0x1a90, 0x5}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7}, [@CTA_STATUS={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x10, 0x17, [0x8, 0x7ff, 0x1000]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf88b}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffc04}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0xc, 0xffffffffffffff73) 23:49:18 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}]}) 23:49:18 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 23:49:18 executing program 4: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 23:49:18 executing program 0: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffffffff0000000}]}) 23:49:18 executing program 5: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0x8, 0x40, 0x1b1b, 0x3, 0x1a90, 0x5}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0xc, 0xffffffffffffff73) 23:49:18 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}]}) 23:49:18 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 23:49:18 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffffffff0000000}]}) 23:49:18 executing program 2: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) socket(0x2, 0x80806, 0x7) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) 23:49:18 executing program 4: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) r0 = socket(0x2, 0x80806, 0x7) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$inet6(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) socketpair(0x6, 0x80000, 0x4000000, &(0x7f00000001c0)) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 348.511432][ T3145] Bluetooth: hci0: command 0x0401 tx timeout 23:49:18 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}]}) 23:49:18 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:18 executing program 5: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0x8, 0x40, 0x1b1b, 0x3, 0x1a90, 0x5}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0xc, 0xffffffffffffff73) 23:49:18 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffffffff0000000}]}) 23:49:18 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}]}) 23:49:18 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:18 executing program 5: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0x8, 0x40, 0x1b1b, 0x3, 0x1a90, 0x5}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0xc, 0xffffffffffffff73) 23:49:18 executing program 2: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) socket(0x2, 0x80806, 0x7) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:49:18 executing program 4: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0x8, 0x40, 0x1b1b, 0x3, 0x1a90, 0x5}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7}, [@CTA_STATUS={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x10, 0x17, [0x8, 0x7ff, 0x1000]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf88b}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffc04}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0xc, 0xffffffffffffff73) 23:49:18 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffffffff0000000}]}) 23:49:19 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:19 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}]}) 23:49:19 executing program 5: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0x8, 0x40, 0x1b1b, 0x3, 0x1a90, 0x5}, 0x1c) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000800)=0xc, 0xffffffffffffff73) 23:49:19 executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffffffff0000000}]}) 23:49:19 executing program 4: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0x8, 0x40, 0x1b1b, 0x3, 0x1a90, 0x5}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7}, [@CTA_STATUS={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x10, 0x17, [0x8, 0x7ff, 0x1000]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf88b}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffc04}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0xc, 0xffffffffffffff73) 23:49:19 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 23:49:19 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:19 executing program 5: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000800)=0xc, 0xffffffffffffff73) 23:49:19 executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffffffff0000000}]}) 23:49:19 executing program 2: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) socket(0x2, 0x80806, 0x7) socket(0x2, 0x80806, 0x7) 23:49:19 executing program 4: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0x8, 0x40, 0x1b1b, 0x3, 0x1a90, 0x5}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7}, [@CTA_STATUS={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x10, 0x17, [0x8, 0x7ff, 0x1000]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf88b}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffc04}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0xc, 0xffffffffffffff73) 23:49:19 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 23:49:19 executing program 5: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) 23:49:19 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:19 executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffffffff0000000}]}) 23:49:19 executing program 4: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0x8, 0x40, 0x1b1b, 0x3, 0x1a90, 0x5}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7}, [@CTA_STATUS={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x10, 0x17, [0x8, 0x7ff, 0x1000]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf88b}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffc04}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) 23:49:19 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 23:49:19 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:19 executing program 5: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) 23:49:19 executing program 2: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) socket(0x2, 0x80806, 0x7) 23:49:19 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:19 executing program 4: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0x8, 0x40, 0x1b1b, 0x3, 0x1a90, 0x5}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) 23:49:19 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:49:19 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:19 executing program 5: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) 23:49:19 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:19 executing program 5: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000800), 0xffffffffffffff73) 23:49:20 executing program 4: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0x8, 0x40, 0x1b1b, 0x3, 0x1a90, 0x5}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") 23:49:20 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:20 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 23:49:20 executing program 2: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) 23:49:20 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:20 executing program 1: socketpair(0x1e, 0x0, 0x7, &(0x7f0000000100)) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000800)=0xfffff7fc, 0x4) 23:49:20 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:20 executing program 4: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0x8, 0x40, 0x1b1b, 0x3, 0x1a90, 0x5}, 0x1c) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") 23:49:20 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}]}) 23:49:20 executing program 2: clock_getres(0x4, &(0x7f0000000000)) clock_gettime(0x7, &(0x7f0000000040)) 23:49:20 executing program 5: clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x7, &(0x7f0000000040)) 23:49:20 executing program 1: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0x8, 0x40, 0x1b1b, 0x3, 0x1a90, 0x5}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") 23:49:20 executing program 4: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0x8, 0x40, 0x1b1b, 0x3, 0x1a90, 0x5}, 0x1c) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") 23:49:20 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:20 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffff000}]}) 23:49:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 23:49:20 executing program 2: clock_gettime(0x7, &(0x7f0000000040)) 23:49:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x422e, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000140)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0xb7a0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) r4 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 23:49:20 executing program 4: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x200, 0x8, 0x40, 0x1b1b, 0x3, 0x1a90, 0x5}, 0x1c) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") 23:49:20 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:20 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) [ 350.591324][ T3145] Bluetooth: hci0: command 0x0401 tx timeout 23:49:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 23:49:20 executing program 2: clock_gettime(0x7, &(0x7f0000000040)) 23:49:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") 23:49:20 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 23:49:20 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 23:49:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 23:49:20 executing program 2: clock_gettime(0x7, &(0x7f0000000040)) 23:49:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x422e, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000140)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0xb7a0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) r4 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 23:49:21 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffff000}]}) 23:49:21 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") 23:49:21 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 23:49:21 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 23:49:21 executing program 2: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x7, &(0x7f0000000040)) 23:49:21 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x1e, 0x0, 0x0, &(0x7f0000000100)) 23:49:21 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") 23:49:21 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 23:49:21 executing program 5: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 23:49:21 executing program 2: clock_getres(0x0, 0x0) clock_gettime(0x7, &(0x7f0000000040)) 23:49:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x422e, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000140)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0xb7a0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) r4 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 23:49:21 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") 23:49:21 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") 23:49:21 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 23:49:21 executing program 5: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) 23:49:21 executing program 2: clock_getres(0x0, 0x0) clock_gettime(0x7, &(0x7f0000000040)) 23:49:21 executing program 3: socketpair(0x1e, 0x0, 0x7, 0x0) 23:49:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") 23:49:21 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 23:49:21 executing program 5: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) 23:49:21 executing program 2: clock_getres(0x0, 0x0) clock_gettime(0x7, &(0x7f0000000040)) 23:49:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x422e, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000140)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0xb7a0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) r4 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:49:21 executing program 3: socketpair(0x1e, 0x0, 0x7, 0x0) 23:49:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") 23:49:21 executing program 2: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) 23:49:21 executing program 0: clock_getres(0x0, 0x0) clock_gettime(0x7, &(0x7f0000000040)) 23:49:21 executing program 5: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) 23:49:22 executing program 3: socketpair(0x1e, 0x0, 0x7, 0x0) 23:49:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)="fb9efb1918d09b0dc2219d8f708dc0ea8290c878c935fb56") 23:49:22 executing program 2: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) 23:49:22 executing program 5: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) 23:49:22 executing program 0: clock_getres(0x0, 0x0) clock_gettime(0x7, &(0x7f0000000040)) 23:49:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x422e, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000140)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0xb7a0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) socket(0x2, 0x80806, 0x7) 23:49:22 executing program 3: socketpair(0x0, 0x0, 0x7, 0x0) 23:49:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) 23:49:22 executing program 2: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) 23:49:22 executing program 5: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) 23:49:22 executing program 0: clock_getres(0x0, 0x0) clock_gettime(0x7, &(0x7f0000000040)) 23:49:22 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) 23:49:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) 23:49:22 executing program 2: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x7, 0x0) 23:49:22 executing program 5: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) 23:49:22 executing program 0: clock_gettime(0x7, &(0x7f0000000040)) 23:49:22 executing program 3: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) 23:49:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x422e, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000140)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0xb7a0, 0x1, 0x3, 0x5, 0x8c48}, 0xc) 23:49:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) [ 352.671085][ T3145] Bluetooth: hci0: command 0x0401 tx timeout 23:49:22 executing program 2: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x7, 0x0) 23:49:22 executing program 5: clock_gettime(0x0, &(0x7f0000000040)) 23:49:22 executing program 0: clock_gettime(0x0, &(0x7f0000000040)) 23:49:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)) 23:49:22 executing program 3: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) 23:49:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x422e, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000140)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 23:49:23 executing program 5: clock_gettime(0x0, &(0x7f0000000040)) 23:49:23 executing program 2: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x7, 0x0) 23:49:23 executing program 3: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) 23:49:23 executing program 4: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x7, 0x0) 23:49:23 executing program 0: clock_gettime(0x0, &(0x7f0000000040)) 23:49:23 executing program 2: clock_gettime(0x0, &(0x7f0000000040)) 23:49:23 executing program 5: clock_gettime(0x0, &(0x7f0000000040)) 23:49:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) 23:49:23 executing program 4: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) 23:49:23 executing program 0: clock_gettime(0x0, &(0x7f0000000040)) 23:49:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x422e, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000140)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:49:23 executing program 2: clock_gettime(0x0, &(0x7f0000000040)) 23:49:23 executing program 5: clock_getres(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) 23:49:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) 23:49:23 executing program 4: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) 23:49:23 executing program 0: clock_gettime(0x7, 0x0) 23:49:23 executing program 5: clock_getres(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) 23:49:23 executing program 2: clock_gettime(0x0, &(0x7f0000000040)) 23:49:23 executing program 4: clock_getres(0x0, 0x0) clock_gettime(0x7, &(0x7f0000000040)) 23:49:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) 23:49:23 executing program 5: clock_getres(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) 23:49:23 executing program 0: clock_gettime(0x7, 0x0) 23:49:23 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x422e, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000140)) 23:49:23 executing program 3: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, 0x0) 23:49:23 executing program 2: clock_gettime(0x0, 0x0) 23:49:23 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) socketpair(0x29, 0x6, 0x136, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800)=0x4, 0x4) 23:49:24 executing program 5: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x0, 0x0) 23:49:24 executing program 0: clock_gettime(0x7, 0x0) 23:49:24 executing program 3: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, 0x0) 23:49:24 executing program 2: clock_gettime(0x0, 0x0) 23:49:24 executing program 5: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x0, 0x0) 23:49:24 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x422e, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000140)) 23:49:24 executing program 0: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x0, 0x0) 23:49:24 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) socketpair(0x29, 0x6, 0x136, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800)=0x4, 0x4) 23:49:24 executing program 3: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, 0x0) 23:49:24 executing program 2: clock_gettime(0x0, 0x0) 23:49:24 executing program 5: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x0, 0x0) 23:49:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0x3, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:49:24 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, 0x0) 23:49:24 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x1, 0x3, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0xb97e66d88500ee18}]}) 23:49:24 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x422e, 0x4) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000140)) 23:49:24 executing program 5: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000100)) 23:49:24 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) socketpair(0x29, 0x6, 0x136, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800)=0x4, 0x4) 23:49:24 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, 0x0) 23:49:24 executing program 5: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000100)) [ 354.750997][ T9698] Bluetooth: hci0: command 0x0401 tx timeout 23:49:24 executing program 2: socketpair(0x1e, 0x0, 0x7, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0xfffff7fc, 0x4) 23:49:24 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) socketpair(0x29, 0x6, 0x136, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:49:24 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, 0x0) 23:49:25 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x422e, 0x4) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000140)) 23:49:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0x3, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:49:25 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x0, 0x4, 0x7, &(0x7f0000000100)) 23:49:25 executing program 5: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000100)) 23:49:25 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) socketpair(0x29, 0x6, 0x136, &(0x7f0000000000)) 23:49:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 23:49:25 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x422e, 0x4) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000140)) 23:49:25 executing program 2: socketpair(0x1e, 0x0, 0x7, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0xfffff7fc, 0x4) 23:49:25 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000100)) 23:49:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 23:49:25 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair(0x29, 0x6, 0x136, &(0x7f0000000000)) 23:49:25 executing program 2: socketpair(0x0, 0x4, 0x7, &(0x7f0000000100)) 23:49:25 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000140)) 23:49:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0x3, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:49:26 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000100)) 23:49:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 23:49:26 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) socketpair(0x29, 0x6, 0x136, &(0x7f0000000000)) 23:49:26 executing program 2: socketpair(0x0, 0x4, 0x7, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0xfffff7fc, 0x4) 23:49:26 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000140)) 23:49:26 executing program 3: write$snapshot(0xffffffffffffffff, &(0x7f00000000c0)="bb59737fecd2fa525556cd6420a70529ab5ffe313987f31a23e55a4065945346becb37605d4063dc64d14e90", 0x2c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair(0x26, 0x6, 0x4, &(0x7f0000000080)) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800)=0x5, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 23:49:26 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000100)) [ 356.671285][ T20] Bluetooth: hci3: command 0x0401 tx timeout 23:49:26 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x29, 0x6, 0x136, &(0x7f0000000000)) 23:49:26 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000140)) 23:49:26 executing program 2: socketpair(0x0, 0x4, 0x7, &(0x7f0000000100)) [ 356.831317][ T20] Bluetooth: hci0: command 0x0401 tx timeout 23:49:26 executing program 5: socketpair(0x1e, 0x0, 0x0, 0x0) 23:49:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:49:27 executing program 4: socketpair(0x29, 0x6, 0x136, &(0x7f0000000000)) 23:49:27 executing program 3: write$snapshot(0xffffffffffffffff, &(0x7f00000000c0)="bb59737fecd2fa525556cd6420a70529ab5ffe313987f31a23e55a4065945346becb37605d4063dc64d14e90", 0x2c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair(0x26, 0x6, 0x4, &(0x7f0000000080)) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800)=0x5, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 23:49:27 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x22, 0xa, 0x7, &(0x7f0000000080)) 23:49:27 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000140)) 23:49:27 executing program 5: socketpair(0x1e, 0x0, 0x0, 0x0) 23:49:27 executing program 5: socketpair(0x1e, 0x0, 0x0, 0x0) 23:49:27 executing program 4: socketpair(0x0, 0x6, 0x136, &(0x7f0000000000)) 23:49:27 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x22, 0xa, 0x7, &(0x7f0000000080)) 23:49:27 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) socketpair(0x22, 0xa, 0x7, &(0x7f0000000080)) 23:49:27 executing program 3: write$snapshot(0xffffffffffffffff, &(0x7f00000000c0)="bb59737fecd2fa525556cd6420a70529ab5ffe313987f31a23e55a4065945346becb37605d4063dc64d14e90", 0x2c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair(0x26, 0x6, 0x4, &(0x7f0000000080)) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800)=0x5, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 23:49:27 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000140)) 23:49:28 executing program 0: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:49:28 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x22, 0xa, 0x7, &(0x7f0000000080)) 23:49:28 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) socketpair(0x22, 0xa, 0x7, &(0x7f0000000080)) 23:49:28 executing program 4: socketpair(0x0, 0x6, 0x136, &(0x7f0000000000)) 23:49:28 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000140)) 23:49:28 executing program 3: write$snapshot(0xffffffffffffffff, &(0x7f00000000c0)="bb59737fecd2fa525556cd6420a70529ab5ffe313987f31a23e55a4065945346becb37605d4063dc64d14e90", 0x2c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair(0x26, 0x6, 0x4, &(0x7f0000000080)) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800)=0x5, 0x4) 23:49:28 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) socketpair(0x22, 0xa, 0x7, &(0x7f0000000080)) 23:49:28 executing program 0: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:49:28 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000140)) 23:49:28 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:49:28 executing program 4: socketpair(0x0, 0x6, 0x136, &(0x7f0000000000)) 23:49:28 executing program 3: write$snapshot(0xffffffffffffffff, &(0x7f00000000c0)="bb59737fecd2fa525556cd6420a70529ab5ffe313987f31a23e55a4065945346becb37605d4063dc64d14e90", 0x2c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair(0x26, 0x6, 0x4, &(0x7f0000000080)) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:49:28 executing program 0: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:49:28 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) 23:49:28 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000140)) 23:49:28 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) [ 358.751639][ T9698] Bluetooth: hci3: command 0x0401 tx timeout 23:49:28 executing program 4: socketpair(0x29, 0x0, 0x136, &(0x7f0000000000)) [ 358.920921][ T9698] Bluetooth: hci0: command 0x0401 tx timeout 23:49:29 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:49:29 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:49:29 executing program 2: ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000040)) 23:49:29 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000140)) 23:49:29 executing program 4: socketpair(0x29, 0x0, 0x0, &(0x7f0000000000)) 23:49:29 executing program 3: write$snapshot(0xffffffffffffffff, &(0x7f00000000c0)="bb59737fecd2fa525556cd6420a70529ab5ffe313987f31a23e55a4065945346becb37605d4063dc64d14e90", 0x2c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair(0x26, 0x6, 0x4, &(0x7f0000000080)) socket(0x2, 0x80806, 0x7) 23:49:29 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000140)) 23:49:29 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:49:29 executing program 2: ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000040)) 23:49:29 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:49:29 executing program 4: socketpair(0x29, 0x0, 0x0, 0x0) 23:49:29 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:49:29 executing program 2: ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000040)) 23:49:29 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) 23:49:29 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000140)) 23:49:29 executing program 4: socketpair(0x29, 0x0, 0x0, 0x0) 23:49:29 executing program 3: write$snapshot(0xffffffffffffffff, &(0x7f00000000c0)="bb59737fecd2fa525556cd6420a70529ab5ffe313987f31a23e55a4065945346becb37605d4063dc64d14e90", 0x2c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair(0x26, 0x6, 0x4, &(0x7f0000000080)) 23:49:29 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) 23:49:29 executing program 5: ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000040)) 23:49:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 23:49:29 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000140)) 23:49:29 executing program 4: socketpair(0x29, 0x0, 0x0, 0x0) 23:49:29 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) 23:49:29 executing program 3: write$snapshot(0xffffffffffffffff, &(0x7f00000000c0)="bb59737fecd2fa525556cd6420a70529ab5ffe313987f31a23e55a4065945346becb37605d4063dc64d14e90", 0x2c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) socketpair(0x26, 0x6, 0x4, &(0x7f0000000080)) 23:49:29 executing program 5: ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000040)) 23:49:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 23:49:30 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) 23:49:30 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 23:49:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 23:49:30 executing program 5: ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000040)) 23:49:30 executing program 3: write$snapshot(0xffffffffffffffff, &(0x7f00000000c0)="bb59737fecd2fa525556cd6420a70529ab5ffe313987f31a23e55a4065945346becb37605d4063dc64d14e90", 0x2c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x26, 0x6, 0x4, &(0x7f0000000080)) 23:49:30 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) 23:49:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x4, "85f17d", 0xa6, 0x1}) 23:49:30 executing program 3: write$snapshot(0xffffffffffffffff, &(0x7f00000000c0)="bb59737fecd2fa525556cd6420a70529ab5ffe313987f31a23e55a4065945346becb37605d4063dc64d14e90", 0x2c) socketpair(0x26, 0x6, 0x4, &(0x7f0000000080)) 23:49:30 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) 23:49:30 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000040)) 23:49:30 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) 23:49:30 executing program 3: socketpair(0x26, 0x6, 0x4, &(0x7f0000000080)) 23:49:30 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000040)) 23:49:30 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) 23:49:30 executing program 3: socketpair(0x0, 0x6, 0x4, &(0x7f0000000080)) 23:49:30 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000040)) 23:49:30 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) 23:49:30 executing program 3: socketpair(0x0, 0x6, 0x4, &(0x7f0000000080)) [ 360.840816][ T3145] Bluetooth: hci3: command 0x0401 tx timeout [ 361.000751][ T3145] Bluetooth: hci0: command 0x0401 tx timeout 23:49:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0xa6, 0x1}) 23:49:31 executing program 5: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000040)) 23:49:31 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, 0x0) 23:49:31 executing program 3: socketpair(0x0, 0x6, 0x4, &(0x7f0000000080)) 23:49:31 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, 0x0) 23:49:31 executing program 5: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000040)) 23:49:31 executing program 3: socketpair(0x26, 0x0, 0x4, &(0x7f0000000080)) 23:49:31 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, 0x0) 23:49:31 executing program 3: socketpair(0x26, 0x0, 0x0, &(0x7f0000000080)) 23:49:31 executing program 5: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000040)) 23:49:31 executing program 3: socketpair(0x26, 0x0, 0x0, 0x0) 23:49:31 executing program 3: socketpair(0x26, 0x0, 0x0, 0x0) 23:49:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0x0, 0x1}) 23:49:32 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, 0x0) 23:49:32 executing program 3: socketpair(0x26, 0x0, 0x0, 0x0) 23:49:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0x0, 0x1}) 23:49:32 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, 0x0) 23:49:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0x0, 0x1}) 23:49:32 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, 0x0) 23:49:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0xa6}) [ 362.910684][ T9698] Bluetooth: hci3: command 0x0401 tx timeout [ 363.080580][ T9698] Bluetooth: hci0: command 0x0401 tx timeout [ 365.160640][ T3145] Bluetooth: hci0: command 0x0401 tx timeout [ 367.240491][ T9698] Bluetooth: hci0: command 0x0401 tx timeout [ 369.310546][ T20] Bluetooth: hci0: command 0x0401 tx timeout [ 371.400386][ T20] Bluetooth: hci0: command 0x0401 tx timeout [ 373.470361][ T20] Bluetooth: hci0: command 0x0401 tx timeout [ 375.550114][ T3145] Bluetooth: hci0: command 0x0401 tx timeout [ 377.644208][ T3145] Bluetooth: hci0: command 0x0401 tx timeout [ 378.351140][ T3232] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.357648][ T3232] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.709938][ T9698] Bluetooth: hci0: command 0x0401 tx timeout [ 381.799971][ T9698] Bluetooth: hci0: command 0x0401 tx timeout [ 383.879818][ T9698] Bluetooth: hci0: command 0x0401 tx timeout [ 385.951337][ T20] Bluetooth: hci0: command 0x0401 tx timeout [ 388.039536][ T9698] Bluetooth: hci0: command 0x0401 tx timeout 23:49:59 executing program 1: write$snapshot(0xffffffffffffffff, &(0x7f00000000c0)="bb59737fecd2fa525556cd6420a70529ab5ffe313987f31a23e55a4065945346becb37605d4063dc64d14e90", 0x2c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair(0x26, 0x6, 0x4, &(0x7f0000000080)) socket(0x2, 0x80806, 0x7) 23:49:59 executing program 4: write$snapshot(0xffffffffffffffff, &(0x7f00000000c0)="bb59737fecd2fa525556cd6420a70529ab5ffe313987f31a23e55a4065945346becb37605d4063dc64d14e90", 0x2c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x26, 0x6, 0x4, &(0x7f0000000080)) 23:49:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:50:00 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000140)) 23:50:00 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000140)) [ 390.109400][ T3134] Bluetooth: hci0: command 0x0401 tx timeout 23:50:00 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000080)='\'}C(\x00', 0x1) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000000c0)={0x1, 0x3, [{r2, 0x0, 0xfffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0xb97e66d88500ee18}]}) 23:50:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0xe1bb5932e6e39e22, 0xf94, 0x4, 0x7, 0x3, 0x8}}}, 0x15) 23:50:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0xe1bb5932e6e39e22, 0xf94, 0x4, 0x7, 0x3, 0x8}}}, 0x15) 23:50:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0xe1bb5932e6e39e22, 0xf94, 0x4, 0x7, 0x3, 0x8}}}, 0x15) 23:50:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0xe1bb5932e6e39e22, 0xf94, 0x4, 0x7, 0x3, 0x8}}}, 0x15) 23:50:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0xe1bb5932e6e39e22, 0xf94, 0x4, 0x7, 0x3, 0x8}}}, 0x15) 23:50:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0xe1bb5932e6e39e22, 0xf94, 0x4, 0x7, 0x3, 0x8}}}, 0x15) 23:50:00 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0xe1bb5932e6e39e22, 0xf94, 0x4, 0x7, 0x3, 0x8}}}, 0x15) 23:50:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0xe1bb5932e6e39e22, 0xf94, 0x4, 0x7, 0x3, 0x8}}}, 0x15) 23:50:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:50:00 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0xe1bb5932e6e39e22, 0xf94, 0x4, 0x7, 0x3, 0x8}}}, 0x15) 23:50:00 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0xe1bb5932e6e39e22, 0xf94, 0x4, 0x7, 0x3, 0x8}}}, 0x15) 23:50:01 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0xe1bb5932e6e39e22, 0xf94, 0x4, 0x7, 0x3, 0x8}}}, 0x15) 23:50:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, 0x0, 0x0) 23:50:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, 0x0, 0x0) 23:50:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, 0x0, 0x0) 23:50:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0x0, 0xf94, 0x4, 0x7, 0x3, 0x8}}}, 0x15) 23:50:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0x0, 0x0, 0x4, 0x7, 0x3, 0x8}}}, 0x15) 23:50:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0x0, 0x0, 0x0, 0x7, 0x3, 0x8}}}, 0x15) 23:50:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x8}}}, 0x15) 23:50:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}, 0x15) 23:50:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:50:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}}}, 0x15) [ 392.029444][ T9698] Bluetooth: hci3: command 0x0401 tx timeout [ 392.189286][ T9698] Bluetooth: hci0: command 0x0401 tx timeout 23:50:02 executing program 4: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:50:02 executing program 4: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:50:02 executing program 4: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:50:02 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:50:02 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:50:02 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x3, 0x4, "85f17d", 0xa6, 0x1}) 23:50:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 23:50:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 23:50:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 23:50:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x4, "85f17d", 0xa6, 0x1}) 23:50:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0xa6, 0x1}) [ 394.109371][ T9698] Bluetooth: hci3: command 0x0401 tx timeout [ 394.269318][ T20] Bluetooth: hci0: command 0x0401 tx timeout 23:50:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0x0, 0x1}) 23:50:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0x0, 0x1}) 23:50:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0x0, 0x1}) 23:50:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0xa6}) [ 396.189251][ T20] Bluetooth: hci3: command 0x0401 tx timeout [ 396.349197][ T9698] Bluetooth: hci0: command 0x0401 tx timeout [ 398.429116][ T3134] Bluetooth: hci0: command 0x0c20 tx timeout [ 400.509048][ T3134] Bluetooth: hci0: command 0x0401 tx timeout [ 402.588970][ T20] Bluetooth: hci0: command 0x0c20 tx timeout [ 404.668958][ T3134] Bluetooth: hci0: command 0x0401 tx timeout 23:50:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0x0, 0x1}) 23:50:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0xa6, 0x1}) 23:50:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 23:50:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0x0, 0xf94, 0x4, 0x7, 0x3, 0x8}}}, 0x15) 23:50:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, 0x0, 0x0) 23:50:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, 0x0, 0x0) 23:50:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, 0x0, 0x0) 23:50:16 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x49aa03) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000000c0)={r0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[r2, r0, r0, r0, r0], 0x3, 0x5, 0x2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="7665346830323000ccdfaf3fe2ec122eb0a87b1112ae2381899845c7d4960e16b6634fb860e89850d9a735164412d31122d614f840d9e85f223a53ab35788905136a698ad4ac0ff834de5d08b14bbf316c47f21d1d9f38d8c879945940f8b5923763e9af8a286d7591c34bc7"], 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x200000) add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r4, 0xc01064c1, &(0x7f0000000200)={r0, 0x1}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 23:50:16 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x49aa03) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000000c0)={r0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[r2, r0, r0, r0, r0], 0x3, 0x5, 0x2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="7665346830323000ccdfaf3fe2ec122eb0a87b1112ae2381899845c7d4960e16b6634fb860e89850d9a735164412d31122d614f840d9e85f223a53ab35788905136a698ad4ac0ff834de5d08b14bbf316c47f21d1d9f38d8c879945940f8b5923763e9af8a286d7591c34bc7"], 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x200000) add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r4, 0xc01064c1, &(0x7f0000000200)={r0, 0x1}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 23:50:16 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) socketpair(0x22, 0xa, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)={0x6000}) 23:50:16 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) socketpair(0x22, 0xa, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)={0x6000}) 23:50:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, 0x0, 0x0) [ 406.748831][ T20] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:17 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 23:50:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0xa6, 0x1}) 23:50:17 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 23:50:17 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) socketpair(0x22, 0xa, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)={0x6000}) 23:50:17 executing program 3: write$bt_hci(0xffffffffffffffff, 0x0, 0x0) 23:50:17 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x49aa03) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000000c0)={r0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[r2, r0, r0, r0, r0], 0x3, 0x5, 0x2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="7665346830323000ccdfaf3fe2ec122eb0a87b1112ae2381899845c7d4960e16b6634fb860e89850d9a735164412d31122d614f840d9e85f223a53ab35788905136a698ad4ac0ff834de5d08b14bbf316c47f21d1d9f38d8c879945940f8b5923763e9af8a286d7591c34bc7"], 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x200000) add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r4, 0xc01064c1, &(0x7f0000000200)={r0, 0x1}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 23:50:17 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 23:50:17 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 23:50:17 executing program 3: write$bt_hci(0xffffffffffffffff, 0x0, 0x0) 23:50:17 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x49aa03) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000000c0)={r0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[r2, r0, r0, r0, r0], 0x3, 0x5, 0x2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="7665346830323000ccdfaf3fe2ec122eb0a87b1112ae2381899845c7d4960e16b6634fb860e89850d9a735164412d31122d614f840d9e85f223a53ab35788905136a698ad4ac0ff834de5d08b14bbf316c47f21d1d9f38d8c879945940f8b5923763e9af8a286d7591c34bc7"], 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x200000) add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01064c1, &(0x7f0000000200)={r0, 0x1}) 23:50:17 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) socketpair(0x22, 0xa, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)={0x6000}) 23:50:17 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 23:50:17 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 23:50:18 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x49aa03) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000000c0)={r0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[r2, r0, r0, r0, r0], 0x3, 0x5, 0x2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="7665346830323000ccdfaf3fe2ec122eb0a87b1112ae2381899845c7d4960e16b6634fb860e89850d9a735164412d31122d614f840d9e85f223a53ab35788905136a698ad4ac0ff834de5d08b14bbf316c47f21d1d9f38d8c879945940f8b5923763e9af8a286d7591c34bc7"], 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x200000) add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) 23:50:18 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) socketpair(0x22, 0xa, 0x7, &(0x7f0000000080)) 23:50:18 executing program 1: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 23:50:18 executing program 3: write$bt_hci(0xffffffffffffffff, 0x0, 0x0) 23:50:18 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 23:50:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0xa6, 0x1}) 23:50:18 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) 23:50:18 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x49aa03) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000000c0)={r0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[r2, r0, r0, r0, r0], 0x3, 0x5, 0x2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="7665346830323000ccdfaf3fe2ec122eb0a87b1112ae2381899845c7d4960e16b6634fb860e89850d9a735164412d31122d614f840d9e85f223a53ab35788905136a698ad4ac0ff834de5d08b14bbf316c47f21d1d9f38d8c879945940f8b5923763e9af8a286d7591c34bc7"], 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x200000) 23:50:18 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) 23:50:18 executing program 1: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 23:50:18 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) 23:50:18 executing program 1: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 23:50:18 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) [ 408.838740][ T20] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:19 executing program 5: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0xa6, 0x1}) 23:50:19 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x49aa03) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000000c0)={r0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[r2, r0, r0, r0, r0], 0x3, 0x5, 0x2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="7665346830323000ccdfaf3fe2ec122eb0a87b1112ae2381899845c7d4960e16b6634fb860e89850d9a735164412d31122d614f840d9e85f223a53ab35788905136a698ad4ac0ff834de5d08b14bbf316c47f21d1d9f38d8c879945940f8b5923763e9af8a286d7591c34bc7"], 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:50:19 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) 23:50:19 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:50:19 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) 23:50:19 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 23:50:19 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 23:50:19 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) 23:50:19 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:50:19 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) 23:50:19 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x49aa03) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000000c0)={r0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[r2, r0, r0, r0, r0], 0x3, 0x5, 0x2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="7665346830323000ccdfaf3fe2ec122eb0a87b1112ae2381899845c7d4960e16b6634fb860e89850d9a735164412d31122d614f840d9e85f223a53ab35788905136a698ad4ac0ff834de5d08b14bbf316c47f21d1d9f38d8c879945940f8b5923763e9af8a286d7591c34bc7"], 0x8) 23:50:19 executing program 5: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0xa6, 0x1}) 23:50:19 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 23:50:19 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x49aa03) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000000c0)={r0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[r2, r0, r0, r0, r0], 0x3, 0x5, 0x2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:50:19 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) 23:50:19 executing program 5: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0xa6, 0x1}) 23:50:19 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) socket$inet6_icmp(0xa, 0x2, 0x3a) 23:50:19 executing program 2: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="77b3e3373a0104000000000000323800"], 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 23:50:19 executing program 1: socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 23:50:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @link_local}, 0x10) 23:50:19 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x49aa03) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000000c0)={r0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000140)={&(0x7f0000000100)=[r2, r0, r0, r0, r0], 0x3, 0x5, 0x2}) 23:50:19 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x840000, 0x0) 23:50:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @link_local}, 0x10) 23:50:19 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0xa6, 0x1}) 23:50:19 executing program 1: socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 23:50:19 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x49aa03) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000000c0)={r0}) 23:50:19 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x840000, 0x0) 23:50:19 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0xa6, 0x1}) 23:50:19 executing program 1: socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 23:50:20 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x49aa03) 23:50:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @link_local}, 0x10) 23:50:20 executing program 2: socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 23:50:20 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0xa6, 0x1}) 23:50:20 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x840000, 0x0) 23:50:20 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0xa6, 0x1}) 23:50:20 executing program 2: socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 23:50:20 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x49aa03) 23:50:20 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x840000, 0x0) 23:50:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @link_local}, 0x10) 23:50:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 23:50:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x3, 0x0, 0x0) 23:50:20 executing program 2: socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 23:50:20 executing program 0: syz_open_dev$dri(0x0, 0x3ff, 0x49aa03) 23:50:20 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:50:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 23:50:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x3, 0x0, 0x0) 23:50:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:50:20 executing program 2: socket$packet(0x11, 0x3, 0x300) 23:50:20 executing program 0: syz_open_dev$dri(0x0, 0x3ff, 0x49aa03) 23:50:20 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:50:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 23:50:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x3, 0x0, 0x0) 23:50:20 executing program 2: socket$packet(0x11, 0x0, 0x300) 23:50:20 executing program 0: syz_open_dev$dri(0x0, 0x3ff, 0x49aa03) 23:50:20 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23:50:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0x0, 0x1}) 23:50:20 executing program 2: socket$packet(0x11, 0x0, 0x300) 23:50:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) socket(0x2, 0x80806, 0x7) 23:50:20 executing program 1: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) 23:50:20 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x49aa03) 23:50:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:50:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0x0, 0x1}) 23:50:21 executing program 2: socket$packet(0x11, 0x0, 0x300) [ 410.918650][ T20] Bluetooth: hci0: command 0x0401 tx timeout 23:50:21 executing program 1: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) 23:50:21 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x49aa03) 23:50:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:50:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0x0, 0x1}) 23:50:21 executing program 1: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) 23:50:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:50:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0x0, 0x1}) 23:50:21 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x49aa03) 23:50:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:50:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0xa6}) 23:50:21 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) 23:50:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:50:21 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x0) 23:50:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:50:21 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/44) 23:50:21 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) 23:50:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:50:21 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:21 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x0) 23:50:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) socket(0x2, 0x80806, 0x7) 23:50:21 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) 23:50:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:50:22 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:22 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x0) 23:50:22 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/44) 23:50:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:50:22 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/44) 23:50:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:50:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "85f17d", 0x0, 0x1}) 23:50:22 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:50:22 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/44) 23:50:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:50:22 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000800), 0x4) 23:50:22 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/44) 23:50:22 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="77b3e3373a0104000000000000323800"], 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 23:50:22 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:22 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:22 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/44) 23:50:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:50:22 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/44) 23:50:22 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/44) 23:50:22 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:50:22 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:22 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/44) 23:50:22 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:22 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/44) 23:50:23 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/44) [ 412.988563][ T3134] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:23 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) getgid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) getgid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) getgid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getgid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) getgid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:24 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 3: getgid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) getgid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:24 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:24 executing program 3: getgid() openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:24 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:24 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:25 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:25 executing program 3: getgid() openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:25 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:25 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:25 executing program 5: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:25 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) [ 415.078576][ T20] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:25 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:25 executing program 3: getgid() openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:25 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:25 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:25 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:25 executing program 5: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:25 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:25 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:25 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:25 executing program 5: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:25 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:25 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:25 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:25 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:25 executing program 5: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:25 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) getgid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:25 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:25 executing program 4: ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:25 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:25 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:25 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:25 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:25 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:26 executing program 4: ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:26 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:26 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b2282, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x2) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 23:50:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0x40, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 23:50:26 executing program 4: ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:26 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23:50:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0x40, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 23:50:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0x40, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 23:50:26 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:26 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0x40, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 23:50:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x2) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 23:50:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:50:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0x40, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 23:50:26 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:26 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:50:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800)=0x40, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 23:50:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x2) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 23:50:26 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x28, 0x800, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x5, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:50:26 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:50:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:50:26 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xf, 0x80806, 0x7fffffff) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)=0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) 23:50:26 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xf, 0x80806, 0x7fffffff) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)=0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) 23:50:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x28, 0x800, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x5, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) 23:50:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x2) r1 = socket(0x2, 0x80806, 0x7) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 23:50:27 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xf, 0x80806, 0x7fffffff) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)=0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) 23:50:27 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xf, 0x80806, 0x7fffffff) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)=0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) 23:50:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:50:27 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xf, 0x80806, 0x7fffffff) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)=0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) 23:50:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x28, 0x800, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x5, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000800), 0x4) [ 417.158505][ T3134] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:27 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xf, 0x80806, 0x7fffffff) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)=0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) 23:50:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 23:50:27 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xf, 0x80806, 0x7fffffff) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)=0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) 23:50:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x28, 0x800, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x5, 0x4) 23:50:27 executing program 2: r0 = getegid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r3 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r4, &(0x7f00000000c0)=""/122, 0x7a) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r5], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r6, r7, 0x0, r8], 0x1}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 23:50:27 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xf, 0x80806, 0x7fffffff) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)=0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) 23:50:27 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 23:50:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:27 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xf, 0x80806, 0x7fffffff) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)=0x1) 23:50:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x28, 0x800, 0x8, &(0x7f0000000000)) 23:50:27 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xf, 0x80806, 0x7fffffff) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)=0x1) 23:50:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x7, 0x1, &(0x7f0000000800), 0x4) 23:50:27 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 23:50:27 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:27 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xf, 0x80806, 0x7fffffff) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x7, 0x1, &(0x7f0000000800), 0x4) 23:50:27 executing program 5: socketpair(0x28, 0x800, 0x8, &(0x7f0000000000)) 23:50:27 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xf, 0x80806, 0x7fffffff) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:27 executing program 1: getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 23:50:27 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:27 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xf, 0x80806, 0x7fffffff) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:28 executing program 5: socketpair(0x0, 0x800, 0x8, &(0x7f0000000000)) 23:50:28 executing program 1: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 23:50:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x7, 0x1, &(0x7f0000000800), 0x4) 23:50:28 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xf, 0x80806, 0x7fffffff) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:50:28 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:28 executing program 5: socketpair(0x0, 0x800, 0x8, &(0x7f0000000000)) 23:50:28 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xf, 0x80806, 0x7fffffff) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:28 executing program 1: r0 = getegid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r3 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r4, &(0x7f00000000c0)=""/122, 0x7a) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r5], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r6, r7, 0x0, r8], 0x1}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000003c0)) 23:50:28 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xf, 0x80806, 0x7fffffff) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:50:28 executing program 2: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x7, 0x1, &(0x7f0000000800), 0x4) 23:50:28 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:28 executing program 5: socketpair(0x0, 0x800, 0x8, &(0x7f0000000000)) 23:50:28 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0xf, 0x80806, 0x7fffffff) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:28 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0xf, 0x80806, 0x7fffffff) 23:50:28 executing program 1: socketpair(0x0, 0x800, 0x8, &(0x7f0000000000)) 23:50:28 executing program 2: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x7, 0x1, &(0x7f0000000800), 0x4) 23:50:28 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:28 executing program 1: r0 = getegid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r3 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r4, &(0x7f00000000c0)=""/122, 0x7a) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r5], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r6, r7, 0x0, r8], 0x1}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000003c0)) 23:50:28 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0xf, 0x80806, 0x7fffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:28 executing program 0: socket(0xf, 0x80806, 0x7fffffff) 23:50:28 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:50:28 executing program 2: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x7, 0x1, &(0x7f0000000800), 0x4) 23:50:28 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:28 executing program 0: socket(0x0, 0x80806, 0x7fffffff) 23:50:28 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:28 executing program 5: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:28 executing program 1: socketpair(0x0, 0x800, 0x8, &(0x7f0000000000)) 23:50:28 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x7, 0x1, &(0x7f0000000800), 0x4) 23:50:29 executing program 0: socket(0x0, 0x80806, 0x7fffffff) 23:50:29 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:29 executing program 5: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:29 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:29 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x7, 0x1, &(0x7f0000000800), 0x4) 23:50:29 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:29 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:29 executing program 0: socket(0x0, 0x80806, 0x7fffffff) 23:50:29 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 419.228740][ T20] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:29 executing program 5: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:29 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x7, 0x1, &(0x7f0000000800), 0x4) 23:50:29 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:29 executing program 5: socketpair(0x28, 0x0, 0x8, 0x0) 23:50:29 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:29 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:29 executing program 0: socket(0xf, 0x0, 0x7fffffff) 23:50:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x7, 0x1, 0x0, 0x0) 23:50:29 executing program 5: socketpair(0x28, 0x0, 0x8, 0x0) 23:50:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) 23:50:29 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:29 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:29 executing program 0: socket(0xf, 0x0, 0x0) 23:50:29 executing program 5: socketpair(0x28, 0x0, 0x8, 0x0) 23:50:29 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:29 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) 23:50:29 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:29 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:29 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0xf, 0x80806, 0x7fffffff) 23:50:29 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:29 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) 23:50:30 executing program 4: r0 = getegid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r3 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r4, &(0x7f00000000c0)=""/122, 0x7a) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r5], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r6, r7, 0x0, r8], 0x1}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000400), 0x9, 0xa0000) 23:50:30 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:30 executing program 5: r0 = getegid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r3 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r4, &(0x7f00000000c0)=""/122, 0x7a) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r5], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r6, r7, 0x0, r8], 0x1}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000003c0)) r9 = syz_open_dev$dri(&(0x7f0000000400), 0x9, 0xa0000) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r9, 0xc01064c5, &(0x7f0000000480)={&(0x7f0000000440)=[r5, r5, r5], 0x3}) 23:50:30 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:30 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:30 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:30 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 23:50:30 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:30 executing program 5: r0 = getegid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r3 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r4, &(0x7f00000000c0)=""/122, 0x7a) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r5], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r7, r8, 0x0, r9], 0x1}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000003c0)) r10 = syz_open_dev$dri(&(0x7f0000000400), 0x9, 0xa0000) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r10, 0xc01064c5, &(0x7f0000000480)={&(0x7f0000000440)=[r5, r5, r5], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r10, 0xc01064c2, &(0x7f00000004c0)={0x0, 0x0, r6}) 23:50:30 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:30 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 23:50:30 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 23:50:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:30 executing program 5: r0 = getegid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r3 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r4, &(0x7f00000000c0)=""/122, 0x7a) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r5], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r7, r8, 0x0, r9], 0x1}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000003c0)) r10 = syz_open_dev$dri(&(0x7f0000000400), 0x9, 0xa0000) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r10, 0xc01064c5, &(0x7f0000000480)={&(0x7f0000000440)=[r5, r5, r5], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r10, 0xc01064c2, &(0x7f00000004c0)={0x0, 0x0, r6}) 23:50:30 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:30 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 23:50:30 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 23:50:30 executing program 5 (fault-call:0 fault-nth:0): socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:50:30 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:30 executing program 2: socketpair(0x28, 0x0, 0x0, 0x0) [ 420.687344][T31583] FAULT_INJECTION: forcing a failure. [ 420.687344][T31583] name failslab, interval 1, probability 0, space 0, times 1 [ 420.774048][T31583] CPU: 1 PID: 31583 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 420.782519][T31583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.792803][T31583] Call Trace: [ 420.796291][T31583] dump_stack+0x202/0x31e [ 420.800701][T31583] ? show_regs_print_info+0x12/0x12 [ 420.805895][T31583] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 420.811684][T31583] ? __fs_reclaim_acquire+0x30/0x30 [ 420.817028][T31583] ? __might_sleep+0x100/0x100 [ 420.821961][T31583] should_fail+0x384/0x4b0 [ 420.826410][T31583] ? __anon_vma_prepare+0x66/0x480 [ 420.831516][T31583] should_failslab+0x5/0x20 [ 420.836059][T31583] kmem_cache_alloc+0x6b/0x340 [ 420.840927][T31583] ? rcu_lock_release+0x5/0x20 [ 420.845720][T31583] __anon_vma_prepare+0x66/0x480 [ 420.850753][T31583] do_huge_pmd_anonymous_page+0xbf7/0xce0 [ 420.856824][T31583] ? count_memcg_event_mm+0x2e4/0x330 [ 420.862278][T31583] ? do_swap_page+0x2300/0x2300 [ 420.867132][T31583] ? vma_thp_gfp_mask+0x170/0x170 [ 420.872377][T31583] handle_mm_fault+0x207e/0x2620 [ 420.877682][T31583] ? finish_fault+0x670/0x670 [ 420.882582][T31583] ? __init_rwsem+0x160/0x160 [ 420.887450][T31583] ? vmacache_find+0x4e3/0x5d0 [ 420.892317][T31583] ? vmacache_update+0x9f/0xf0 [ 420.897310][T31583] do_user_addr_fault+0x8ce/0x1120 [ 420.902765][T31583] exc_page_fault+0xa1/0x1e0 [ 420.907446][T31583] asm_exc_page_fault+0x1e/0x30 [ 420.912698][T31583] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 420.918649][T31583] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 420.938994][T31583] RSP: 0018:ffffc90017da7df8 EFLAGS: 00010297 [ 420.945151][T31583] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 420.953401][T31583] RDX: 1ffff92002fb4fa8 RSI: 0000000000000000 RDI: 0000000000000000 [ 420.962005][T31583] RBP: ffffc90017da7ef0 R08: dffffc0000000000 R09: fffffbfff1c2cd1e [ 420.970320][T31583] R10: fffffbfff1c2cd1e R11: 0000000000000000 R12: 0000000020000000 [ 420.978287][T31583] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000005 [ 420.986452][T31583] __sys_socketpair+0x138/0xde0 [ 420.991649][T31583] ? __ia32_sys_socket+0x80/0x80 [ 420.996671][T31583] ? vtime_user_exit+0x2b2/0x3e0 [ 421.001834][T31583] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 421.007899][T31583] __x64_sys_socketpair+0x97/0xb0 [ 421.013093][T31583] do_syscall_64+0x3f/0xb0 [ 421.017587][T31583] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 421.024134][T31583] RIP: 0033:0x4665f9 [ 421.028133][T31583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 421.048224][T31583] RSP: 002b:00007f12676bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 421.056779][T31583] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 421.065004][T31583] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000028 23:50:31 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) [ 421.072975][T31583] RBP: 00007f12676bb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 421.080959][T31583] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.089052][T31583] R13: 00007fff5e85f4bf R14: 00007f12676bb300 R15: 0000000000022000 23:50:31 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 23:50:31 executing program 2: socketpair(0x28, 0x0, 0x0, 0x0) 23:50:31 executing program 3 (fault-call:1 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:31 executing program 4: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:31 executing program 0: socketpair(0x28, 0x0, 0x0, 0x0) 23:50:31 executing program 2: socketpair(0x28, 0x0, 0x0, 0x0) [ 421.308654][ T3134] Bluetooth: hci0: command 0x0c20 tx timeout [ 421.357190][T31606] FAULT_INJECTION: forcing a failure. [ 421.357190][T31606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.433054][T31606] CPU: 1 PID: 31606 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 421.441706][T31606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.452416][T31606] Call Trace: [ 421.455844][T31606] dump_stack+0x202/0x31e [ 421.460379][T31606] ? show_regs_print_info+0x12/0x12 [ 421.465672][T31606] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 421.471397][T31606] ? __might_fault+0xb8/0x110 [ 421.476136][T31606] should_fail+0x384/0x4b0 [ 421.480727][T31606] _copy_from_user+0x2d/0x170 [ 421.485653][T31606] ucma_write+0x15b/0x400 [ 421.490018][T31606] ? ucma_get_global_nl_info+0x70/0x70 [ 421.495645][T31606] ? rw_verify_area+0x1b8/0x370 [ 421.500551][T31606] ? fsnotify_perm+0x63/0x4d0 [ 421.505313][T31606] ? ucma_get_global_nl_info+0x70/0x70 [ 421.510960][T31606] vfs_write+0x289/0xc90 [ 421.515223][T31606] ? file_end_write+0x220/0x220 [ 421.520418][T31606] ? __fget_files+0x34f/0x380 [ 421.525192][T31606] ? __fdget_pos+0x1d8/0x2f0 [ 421.529957][T31606] ? ksys_write+0x72/0x2a0 [ 421.534396][T31606] ksys_write+0x171/0x2a0 [ 421.538850][T31606] ? __ia32_sys_read+0x80/0x80 [ 421.543709][T31606] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 421.549686][T31606] ? lockdep_hardirqs_on+0x8d/0x130 [ 421.554982][T31606] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 421.560961][T31606] do_syscall_64+0x3f/0xb0 [ 421.565394][T31606] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 421.571413][T31606] RIP: 0033:0x4665f9 [ 421.575302][T31606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 421.595862][T31606] RSP: 002b:00007fdc402ed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 421.604461][T31606] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 421.612437][T31606] RDX: 0000000000000090 RSI: 0000000020000000 RDI: 0000000000000003 [ 421.620493][T31606] RBP: 00007fdc402ed1d0 R08: 0000000000000000 R09: 0000000000000000 [ 421.628704][T31606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.637276][T31606] R13: 00007fffa43bcf1f R14: 00007fdc402ed300 R15: 0000000000022000 23:50:31 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:50:31 executing program 1 (fault-call:2 fault-nth:0): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:31 executing program 0: socketpair(0x28, 0x0, 0x0, 0x0) 23:50:31 executing program 4: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:31 executing program 2 (fault-call:0 fault-nth:0): socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:31 executing program 3 (fault-call:1 fault-nth:1): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) [ 421.802969][T31619] FAULT_INJECTION: forcing a failure. [ 421.802969][T31619] name failslab, interval 1, probability 0, space 0, times 0 [ 421.824705][T31620] FAULT_INJECTION: forcing a failure. [ 421.824705][T31620] name failslab, interval 1, probability 0, space 0, times 0 [ 421.826203][T31623] FAULT_INJECTION: forcing a failure. [ 421.826203][T31623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.860045][T31619] CPU: 0 PID: 31619 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0 [ 421.869060][T31619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.879314][T31619] Call Trace: [ 421.882706][T31619] dump_stack+0x202/0x31e [ 421.887101][T31619] ? show_regs_print_info+0x12/0x12 [ 421.892350][T31619] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 421.898182][T31619] ? __fs_reclaim_acquire+0x30/0x30 [ 421.903579][T31619] ? __might_sleep+0x100/0x100 [ 421.908382][T31619] should_fail+0x384/0x4b0 [ 421.912828][T31619] ? __anon_vma_prepare+0x66/0x480 [ 421.918180][T31619] should_failslab+0x5/0x20 [ 421.923010][T31619] kmem_cache_alloc+0x6b/0x340 [ 421.927901][T31619] ? rcu_lock_release+0x5/0x20 [ 421.932677][T31619] __anon_vma_prepare+0x66/0x480 [ 421.937634][T31619] do_huge_pmd_anonymous_page+0xbf7/0xce0 [ 421.943579][T31619] ? count_memcg_event_mm+0x2e4/0x330 [ 421.948970][T31619] ? do_swap_page+0x2300/0x2300 [ 421.954121][T31619] ? vma_thp_gfp_mask+0x170/0x170 [ 421.959164][T31619] handle_mm_fault+0x207e/0x2620 [ 421.964224][T31619] ? finish_fault+0x670/0x670 [ 421.969159][T31619] ? __init_rwsem+0x160/0x160 [ 421.973866][T31619] ? vmacache_find+0x4e3/0x5d0 [ 421.978941][T31619] ? vmacache_update+0x9f/0xf0 [ 421.984341][T31619] do_user_addr_fault+0x8ce/0x1120 [ 421.989635][T31619] exc_page_fault+0xa1/0x1e0 [ 421.994274][T31619] asm_exc_page_fault+0x1e/0x30 [ 421.999170][T31619] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 422.005093][T31619] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 422.025464][T31619] RSP: 0018:ffffc90017fa7df8 EFLAGS: 00010297 [ 422.031868][T31619] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 422.040199][T31619] RDX: 1ffff92002ff4fa8 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.048374][T31619] RBP: ffffc90017fa7ef0 R08: dffffc0000000000 R09: fffffbfff1c2cd1e [ 422.056994][T31619] R10: fffffbfff1c2cd1e R11: 0000000000000000 R12: 0000000020000000 [ 422.065332][T31619] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000005 [ 422.073430][T31619] __sys_socketpair+0x138/0xde0 [ 422.078500][T31619] ? __ia32_sys_socket+0x80/0x80 [ 422.083679][T31619] ? vtime_user_exit+0x2b2/0x3e0 [ 422.088764][T31619] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 422.094778][T31619] __x64_sys_socketpair+0x97/0xb0 [ 422.099833][T31619] do_syscall_64+0x3f/0xb0 [ 422.104389][T31619] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 422.110583][T31619] RIP: 0033:0x4665f9 [ 422.115026][T31619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 422.134856][T31619] RSP: 002b:00007f7e266d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 422.143372][T31619] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 422.151531][T31619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000028 [ 422.159700][T31619] RBP: 00007f7e266d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 422.168281][T31619] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.176645][T31619] R13: 00007fff192c956f R14: 00007f7e266d9300 R15: 0000000000022000 [ 422.185284][T31620] CPU: 1 PID: 31620 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 422.193789][T31620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.203911][T31620] Call Trace: [ 422.207294][T31620] dump_stack+0x202/0x31e [ 422.211909][T31620] ? show_regs_print_info+0x12/0x12 [ 422.217259][T31620] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 422.223096][T31620] ? __fs_reclaim_acquire+0x30/0x30 [ 422.228317][T31620] should_fail+0x384/0x4b0 [ 422.232967][T31620] ? getname_flags+0xba/0x640 [ 422.237810][T31620] should_failslab+0x5/0x20 [ 422.242685][T31620] kmem_cache_alloc+0x6b/0x340 [ 422.247477][T31620] getname_flags+0xba/0x640 [ 422.253204][T31620] do_sys_openat2+0xba/0x460 [ 422.259103][T31620] ? __context_tracking_exit+0x7a/0xd0 [ 422.264640][T31620] ? do_sys_open+0x220/0x220 [ 422.269420][T31620] __x64_sys_openat+0x243/0x290 [ 422.274278][T31620] ? __ia32_sys_open+0x270/0x270 [ 422.279295][T31620] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 422.285630][T31620] ? lockdep_hardirqs_on+0x8d/0x130 [ 422.290942][T31620] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 422.297019][T31620] do_syscall_64+0x3f/0xb0 [ 422.301662][T31620] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 422.307670][T31620] RIP: 0033:0x4196e4 23:50:32 executing program 4: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:32 executing program 5: socketpair(0x2, 0x0, 0x8, &(0x7f0000000000)) [ 422.311932][T31620] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 422.332164][T31620] RSP: 002b:00007f9f7ccb90b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 422.340669][T31620] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004196e4 [ 422.348851][T31620] RDX: 0000000000000000 RSI: 00000000004bed15 RDI: 00000000ffffff9c 23:50:32 executing program 0: socketpair(0x28, 0x0, 0x0, 0x0) [ 422.357297][T31620] RBP: 00000000004bed15 R08: 0000000000000000 R09: 0000000000000000 [ 422.365671][T31620] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 422.373756][T31620] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 23:50:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:32 executing program 0 (fault-call:0 fault-nth:0): socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) [ 422.523718][T31623] CPU: 1 PID: 31623 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 422.532191][T31623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.539291][T31641] FAULT_INJECTION: forcing a failure. [ 422.539291][T31641] name failslab, interval 1, probability 0, space 0, times 0 [ 422.542868][T31623] Call Trace: [ 422.542882][T31623] dump_stack+0x202/0x31e [ 422.542907][T31623] ? show_regs_print_info+0x12/0x12 [ 422.542926][T31623] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 422.542945][T31623] ? __might_fault+0xb8/0x110 [ 422.542971][T31623] ? rcu_read_lock_sched_held+0x87/0x110 [ 422.585994][T31623] should_fail+0x384/0x4b0 [ 422.590441][T31623] _copy_from_user+0x2d/0x170 [ 422.595177][T31623] ucma_bind+0x9a/0x5b0 [ 422.599483][T31623] ? ucma_query+0x1b80/0x1b80 [ 422.604829][T31623] ? __might_fault+0xb8/0x110 [ 422.609516][T31623] ? __lock_acquire+0x6040/0x6040 [ 422.614812][T31623] ? __might_fault+0xb4/0x110 [ 422.619487][T31623] ? ucma_query+0x1b80/0x1b80 [ 422.624176][T31623] ucma_write+0x303/0x400 [ 422.628528][T31623] ? ucma_get_global_nl_info+0x70/0x70 [ 422.634070][T31623] ? rw_verify_area+0x1b8/0x370 [ 422.638925][T31623] ? fsnotify_perm+0x63/0x4d0 [ 422.643594][T31623] ? ucma_get_global_nl_info+0x70/0x70 [ 422.649063][T31623] vfs_write+0x289/0xc90 [ 422.653412][T31623] ? file_end_write+0x220/0x220 [ 422.658269][T31623] ? __fget_files+0x34f/0x380 [ 422.662979][T31623] ? __fdget_pos+0x1d8/0x2f0 [ 422.667753][T31623] ? ksys_write+0x72/0x2a0 [ 422.672706][T31623] ksys_write+0x171/0x2a0 [ 422.677307][T31623] ? __ia32_sys_read+0x80/0x80 [ 422.682073][T31623] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 422.688143][T31623] ? lockdep_hardirqs_on+0x8d/0x130 [ 422.693360][T31623] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 422.699348][T31623] do_syscall_64+0x3f/0xb0 [ 422.703933][T31623] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 422.710172][T31623] RIP: 0033:0x4665f9 [ 422.714072][T31623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 422.734121][T31623] RSP: 002b:00007fdc402ed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 422.742739][T31623] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 422.750711][T31623] RDX: 0000000000000090 RSI: 0000000020000000 RDI: 0000000000000003 [ 422.759028][T31623] RBP: 00007fdc402ed1d0 R08: 0000000000000000 R09: 0000000000000000 [ 422.767174][T31623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.775272][T31623] R13: 00007fffa43bcf1f R14: 00007fdc402ed300 R15: 0000000000022000 [ 422.798247][T31641] CPU: 1 PID: 31641 Comm: syz-executor.0 Not tainted 5.12.0-syzkaller #0 [ 422.806877][T31641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.817327][T31641] Call Trace: [ 422.820625][T31641] dump_stack+0x202/0x31e [ 422.824978][T31641] ? show_regs_print_info+0x12/0x12 [ 422.830291][T31641] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 422.836119][T31641] ? __fs_reclaim_acquire+0x30/0x30 [ 422.841538][T31641] ? __might_sleep+0x100/0x100 [ 422.846334][T31641] should_fail+0x384/0x4b0 [ 422.850791][T31641] ? __anon_vma_prepare+0x66/0x480 [ 422.856009][T31641] should_failslab+0x5/0x20 [ 422.860962][T31641] kmem_cache_alloc+0x6b/0x340 [ 422.865748][T31641] ? rcu_lock_release+0x5/0x20 [ 422.870800][T31641] __anon_vma_prepare+0x66/0x480 [ 422.875766][T31641] do_huge_pmd_anonymous_page+0xbf7/0xce0 [ 422.881639][T31641] ? count_memcg_event_mm+0x2e4/0x330 [ 422.887035][T31641] ? do_swap_page+0x2300/0x2300 [ 422.892385][T31641] ? vma_thp_gfp_mask+0x170/0x170 [ 422.897445][T31641] handle_mm_fault+0x207e/0x2620 [ 422.902608][T31641] ? finish_fault+0x670/0x670 [ 422.907667][T31641] ? __init_rwsem+0x160/0x160 [ 422.912449][T31641] ? vmacache_find+0x4e3/0x5d0 [ 422.917251][T31641] ? vmacache_update+0x9f/0xf0 [ 422.922070][T31641] do_user_addr_fault+0x8ce/0x1120 [ 422.927401][T31641] exc_page_fault+0xa1/0x1e0 [ 422.932194][T31641] asm_exc_page_fault+0x1e/0x30 [ 422.937164][T31641] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 422.943075][T31641] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 422.962922][T31641] RSP: 0018:ffffc90017fc7df8 EFLAGS: 00010297 [ 422.969010][T31641] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 422.977000][T31641] RDX: 1ffff92002ff8fa8 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.985509][T31641] RBP: ffffc90017fc7ef0 R08: dffffc0000000000 R09: fffffbfff1c2cd1e [ 422.993696][T31641] R10: fffffbfff1c2cd1e R11: 0000000000000000 R12: 0000000020000000 [ 423.001684][T31641] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000005 [ 423.010138][T31641] __sys_socketpair+0x138/0xde0 [ 423.015108][T31641] ? __ia32_sys_socket+0x80/0x80 [ 423.020071][T31641] ? vtime_user_exit+0x2b2/0x3e0 23:50:33 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) [ 423.025122][T31641] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 423.031132][T31641] __x64_sys_socketpair+0x97/0xb0 [ 423.036180][T31641] do_syscall_64+0x3f/0xb0 [ 423.041085][T31641] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 423.047140][T31641] RIP: 0033:0x4665f9 [ 423.051052][T31641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:50:33 executing program 1 (fault-call:2 fault-nth:1): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 423.071110][T31641] RSP: 002b:00007f4c996ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 423.079638][T31641] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 423.087826][T31641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000028 [ 423.095822][T31641] RBP: 00007f4c996ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 423.103899][T31641] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.112099][T31641] R13: 00007ffff867e97f R14: 00007f4c996ae300 R15: 0000000000022000 23:50:33 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:33 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:33 executing program 5: socketpair(0x2c, 0x0, 0x8, &(0x7f0000000000)) [ 423.252258][T31651] FAULT_INJECTION: forcing a failure. [ 423.252258][T31651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.267259][T31651] CPU: 1 PID: 31651 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 423.275701][T31651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.285866][T31651] Call Trace: [ 423.289149][T31651] dump_stack+0x202/0x31e [ 423.293475][T31651] ? show_regs_print_info+0x12/0x12 [ 423.298849][T31651] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 423.304828][T31651] ? __might_fault+0xb8/0x110 [ 423.309784][T31651] ? rcu_read_lock_sched_held+0x87/0x110 [ 423.315692][T31651] should_fail+0x384/0x4b0 [ 423.320122][T31651] strncpy_from_user+0x32/0x350 [ 423.324966][T31651] getname_flags+0xf0/0x640 [ 423.329571][T31651] do_sys_openat2+0xba/0x460 [ 423.334348][T31651] ? __context_tracking_exit+0x7a/0xd0 [ 423.339797][T31651] ? do_sys_open+0x220/0x220 [ 423.344492][T31651] __x64_sys_openat+0x243/0x290 [ 423.349343][T31651] ? __ia32_sys_open+0x270/0x270 [ 423.354456][T31651] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 423.360823][T31651] ? lockdep_hardirqs_on+0x8d/0x130 [ 423.366192][T31651] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 423.372530][T31651] do_syscall_64+0x3f/0xb0 [ 423.377118][T31651] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 423.383099][T31651] RIP: 0033:0x4196e4 [ 423.387084][T31651] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 423.406787][T31651] RSP: 002b:00007f9f7ccb90b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 423.415366][T31651] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004196e4 [ 423.423868][T31651] RDX: 0000000000000000 RSI: 00000000004bed15 RDI: 00000000ffffff9c [ 423.432147][T31651] RBP: 00000000004bed15 R08: 0000000000000000 R09: 0000000000000000 [ 423.440109][T31651] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 23:50:33 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) [ 423.448515][T31651] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 [ 423.461196][ T3134] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:33 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0xd, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:33 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:33 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:33 executing program 2: socketpair(0x2, 0x0, 0x0, &(0x7f0000000000)) 23:50:33 executing program 0: socketpair(0x2, 0x0, 0x0, &(0x7f0000000000)) 23:50:33 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x16, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:33 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 23:50:33 executing program 1 (fault-call:2 fault-nth:2): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:33 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa07, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:33 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) [ 423.977179][T31685] FAULT_INJECTION: forcing a failure. [ 423.977179][T31685] name failslab, interval 1, probability 0, space 0, times 0 [ 424.070102][T31685] CPU: 0 PID: 31685 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 424.078697][T31685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.088941][T31685] Call Trace: [ 424.092225][T31685] dump_stack+0x202/0x31e [ 424.096600][T31685] ? show_regs_print_info+0x12/0x12 [ 424.101833][T31685] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 424.107637][T31685] ? __fs_reclaim_acquire+0x30/0x30 [ 424.112844][T31685] ? __lock_acquire+0x147f/0x6040 [ 424.117956][T31685] ? __lock_acquire+0x147f/0x6040 [ 424.123064][T31685] should_fail+0x384/0x4b0 [ 424.127477][T31685] ? __alloc_file+0x26/0x2f0 [ 424.132062][T31685] should_failslab+0x5/0x20 [ 424.136557][T31685] kmem_cache_alloc+0x6b/0x340 [ 424.141335][T31685] __alloc_file+0x26/0x2f0 [ 424.145740][T31685] ? alloc_empty_file+0x49/0x1b0 [ 424.150667][T31685] alloc_empty_file+0xa9/0x1b0 [ 424.155443][T31685] path_openat+0x119/0x39b0 [ 424.160269][T31685] ? unwind_get_return_address+0x48/0x80 [ 424.165912][T31685] ? do_filp_open+0x460/0x460 [ 424.170589][T31685] ? alloc_fd+0x583/0x620 [ 424.174905][T31685] ? rcu_read_lock_sched_held+0x87/0x110 [ 424.180534][T31685] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 424.186791][T31685] do_filp_open+0x221/0x460 [ 424.191475][T31685] ? vfs_tmpfile+0x230/0x230 [ 424.196217][T31685] ? alloc_fd+0x583/0x620 [ 424.200557][T31685] ? __lock_acquire+0x6040/0x6040 [ 424.205592][T31685] ? do_raw_spin_unlock+0x134/0x8a0 [ 424.210891][T31685] ? _raw_spin_unlock+0x24/0x40 [ 424.215761][T31685] ? alloc_fd+0x583/0x620 [ 424.220178][T31685] do_sys_openat2+0x124/0x460 [ 424.224865][T31685] ? __context_tracking_exit+0x7a/0xd0 [ 424.230327][T31685] ? do_sys_open+0x220/0x220 [ 424.235083][T31685] __x64_sys_openat+0x243/0x290 [ 424.239939][T31685] ? __ia32_sys_open+0x270/0x270 [ 424.244871][T31685] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 424.250935][T31685] ? lockdep_hardirqs_on+0x8d/0x130 [ 424.256212][T31685] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 424.262195][T31685] do_syscall_64+0x3f/0xb0 [ 424.266600][T31685] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 424.272479][T31685] RIP: 0033:0x4196e4 [ 424.276362][T31685] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 424.296156][T31685] RSP: 002b:00007f9f7ccb90b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 424.304660][T31685] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004196e4 [ 424.312796][T31685] RDX: 0000000000000000 RSI: 00000000004bed15 RDI: 00000000ffffff9c [ 424.320754][T31685] RBP: 00000000004bed15 R08: 0000000000000000 R09: 0000000000000000 [ 424.328732][T31685] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 424.336785][T31685] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 23:50:34 executing program 5: socketpair(0x28, 0x2, 0x8, &(0x7f0000000000)) 23:50:34 executing program 2: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000000)) 23:50:34 executing program 0: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000000)) 23:50:34 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:34 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) 23:50:34 executing program 1 (fault-call:2 fault-nth:3): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:34 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000000000)) 23:50:34 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:34 executing program 0: socketpair(0x28, 0x2, 0x0, &(0x7f0000000000)) 23:50:34 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) 23:50:34 executing program 5: socketpair(0x28, 0x3, 0x8, &(0x7f0000000000)) 23:50:34 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x7, @in={0x2, 0x0, @broadcast}}}, 0x90) [ 424.613412][T31707] FAULT_INJECTION: forcing a failure. [ 424.613412][T31707] name failslab, interval 1, probability 0, space 0, times 0 23:50:34 executing program 5: socketpair(0x28, 0x4, 0x8, &(0x7f0000000000)) [ 424.676985][T31707] CPU: 0 PID: 31707 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 424.685644][T31707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.695732][T31707] Call Trace: [ 424.699234][T31707] dump_stack+0x202/0x31e [ 424.703772][T31707] ? show_regs_print_info+0x12/0x12 [ 424.709016][T31707] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 424.714851][T31707] ? __fs_reclaim_acquire+0x30/0x30 [ 424.720465][T31707] ? __lock_acquire+0x147f/0x6040 23:50:34 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x700, @in={0x2, 0x0, @broadcast}}}, 0x90) [ 424.725529][T31707] ? __lock_acquire+0x147f/0x6040 [ 424.730614][T31707] should_fail+0x384/0x4b0 [ 424.735061][T31707] ? __alloc_file+0x26/0x2f0 [ 424.739732][T31707] should_failslab+0x5/0x20 [ 424.744349][T31707] kmem_cache_alloc+0x6b/0x340 [ 424.749230][T31707] __alloc_file+0x26/0x2f0 [ 424.753695][T31707] ? alloc_empty_file+0x49/0x1b0 [ 424.758663][T31707] alloc_empty_file+0xa9/0x1b0 [ 424.763450][T31707] path_openat+0x119/0x39b0 [ 424.767987][T31707] ? unwind_get_return_address+0x48/0x80 23:50:34 executing program 5: socketpair(0x28, 0xa, 0x8, &(0x7f0000000000)) [ 424.773866][T31707] ? do_filp_open+0x460/0x460 [ 424.778579][T31707] ? alloc_fd+0x583/0x620 [ 424.783359][T31707] ? rcu_read_lock_sched_held+0x87/0x110 [ 424.789047][T31707] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 424.795073][T31707] do_filp_open+0x221/0x460 [ 424.799618][T31707] ? vfs_tmpfile+0x230/0x230 [ 424.804233][T31707] ? alloc_fd+0x583/0x620 [ 424.808690][T31707] ? __lock_acquire+0x6040/0x6040 [ 424.813774][T31707] ? do_raw_spin_unlock+0x134/0x8a0 [ 424.819039][T31707] ? _raw_spin_unlock+0x24/0x40 23:50:34 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0xa, 0x0, @broadcast}}}, 0x90) 23:50:34 executing program 5: socketpair(0x28, 0xf, 0x8, &(0x7f0000000000)) [ 424.823934][T31707] ? alloc_fd+0x583/0x620 [ 424.828297][T31707] do_sys_openat2+0x124/0x460 [ 424.833101][T31707] ? __context_tracking_exit+0x7a/0xd0 [ 424.838716][T31707] ? do_sys_open+0x220/0x220 [ 424.843368][T31707] __x64_sys_openat+0x243/0x290 [ 424.848250][T31707] ? __ia32_sys_open+0x270/0x270 [ 424.853247][T31707] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 424.859363][T31707] ? lockdep_hardirqs_on+0x8d/0x130 [ 424.864766][T31707] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 424.871034][T31707] do_syscall_64+0x3f/0xb0 [ 424.875476][T31707] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 424.881828][T31707] RIP: 0033:0x4196e4 [ 424.885760][T31707] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 424.905385][T31707] RSP: 002b:00007f9f7ccb90b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 424.914535][T31707] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004196e4 [ 424.923262][T31707] RDX: 0000000000000000 RSI: 00000000004bed15 RDI: 00000000ffffff9c [ 424.931550][T31707] RBP: 00000000004bed15 R08: 0000000000000000 R09: 0000000000000000 [ 424.939630][T31707] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 424.947719][T31707] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 23:50:35 executing program 1 (fault-call:2 fault-nth:4): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:35 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x1b, 0x0, @broadcast}}}, 0x90) 23:50:35 executing program 5: socketpair(0x28, 0x10, 0x8, &(0x7f0000000000)) 23:50:35 executing program 2: socketpair(0x28, 0x3, 0x0, &(0x7f0000000000)) 23:50:35 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) 23:50:35 executing program 0: socketpair(0x28, 0x3, 0x0, &(0x7f0000000000)) 23:50:35 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) [ 425.196152][T31742] FAULT_INJECTION: forcing a failure. [ 425.196152][T31742] name failslab, interval 1, probability 0, space 0, times 0 [ 425.225373][T31742] CPU: 1 PID: 31742 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 425.234546][T31742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.245042][T31742] Call Trace: [ 425.248325][T31742] dump_stack+0x202/0x31e [ 425.252667][T31742] ? show_regs_print_info+0x12/0x12 [ 425.257878][T31742] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 425.263946][T31742] ? __fs_reclaim_acquire+0x30/0x30 [ 425.269425][T31742] ? __might_sleep+0x100/0x100 [ 425.274187][T31742] ? rcu_lock_release+0x5/0x20 [ 425.279360][T31742] should_fail+0x384/0x4b0 [ 425.283857][T31742] ? proc_self_get_link+0xdc/0x170 [ 425.289088][T31742] should_failslab+0x5/0x20 [ 425.293599][T31742] kmem_cache_alloc_trace+0x6a/0x350 [ 425.298876][T31742] proc_self_get_link+0xdc/0x170 [ 425.304062][T31742] ? proc_setup_self+0x2f0/0x2f0 [ 425.309008][T31742] step_into+0x1142/0x1ee0 [ 425.313479][T31742] ? set_root+0x430/0x430 [ 425.317802][T31742] ? smack_inode_rename+0x310/0x310 [ 425.323268][T31742] walk_component+0x2f2/0x740 [ 425.327953][T31742] ? try_to_unlazy+0xcb0/0xcb0 [ 425.332720][T31742] ? generic_permission+0x158/0x5b0 [ 425.337931][T31742] ? bpf_lsm_inode_permission+0x5/0x10 [ 425.343532][T31742] ? security_inode_permission+0xda/0x110 [ 425.349245][T31742] link_path_walk+0x687/0xcf0 [ 425.354010][T31742] ? set_root+0x3b7/0x430 [ 425.358497][T31742] ? nd_jump_root+0x198/0x440 [ 425.363182][T31742] ? path_init+0x11d0/0x11d0 [ 425.367779][T31742] path_openat+0x26e/0x39b0 [ 425.372295][T31742] ? do_filp_open+0x460/0x460 [ 425.377228][T31742] ? alloc_fd+0x583/0x620 [ 425.381548][T31742] ? rcu_read_lock_sched_held+0x87/0x110 [ 425.387194][T31742] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 425.393352][T31742] do_filp_open+0x221/0x460 [ 425.397935][T31742] ? vfs_tmpfile+0x230/0x230 [ 425.402533][T31742] ? alloc_fd+0x583/0x620 [ 425.406873][T31742] ? do_raw_spin_unlock+0x134/0x8a0 [ 425.412132][T31742] ? _raw_spin_unlock+0x24/0x40 [ 425.417145][T31742] ? alloc_fd+0x583/0x620 [ 425.421481][T31742] do_sys_openat2+0x124/0x460 [ 425.426155][T31742] ? __context_tracking_exit+0x7a/0xd0 [ 425.431949][T31742] ? do_sys_open+0x220/0x220 [ 425.436537][T31742] __x64_sys_openat+0x243/0x290 [ 425.441385][T31742] ? __ia32_sys_open+0x270/0x270 [ 425.446581][T31742] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 425.452572][T31742] ? lockdep_hardirqs_on+0x8d/0x130 [ 425.458121][T31742] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 425.464101][T31742] do_syscall_64+0x3f/0xb0 [ 425.468504][T31742] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 425.474488][T31742] RIP: 0033:0x4196e4 23:50:35 executing program 0: socketpair(0x28, 0x4, 0x0, &(0x7f0000000000)) 23:50:35 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) [ 425.478480][T31742] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 425.498248][T31742] RSP: 002b:00007f9f7ccb90b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 425.506659][T31742] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004196e4 [ 425.514731][T31742] RDX: 0000000000000000 RSI: 00000000004bed15 RDI: 00000000ffffff9c [ 425.522690][T31742] RBP: 00000000004bed15 R08: 0000000000000000 R09: 0000000000000000 [ 425.530752][T31742] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 425.538707][T31742] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 23:50:35 executing program 5: socketpair(0x28, 0x41, 0x8, &(0x7f0000000000)) 23:50:35 executing program 2: socketpair(0x28, 0x4, 0x0, &(0x7f0000000000)) [ 425.570524][ T3134] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:35 executing program 0: socketpair(0x28, 0xa, 0x0, &(0x7f0000000000)) 23:50:35 executing program 1 (fault-call:2 fault-nth:5): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:35 executing program 4: socketpair(0x28, 0x10, 0x8, &(0x7f0000000000)) 23:50:35 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x7, @broadcast}}}, 0x90) 23:50:35 executing program 5: socketpair(0x28, 0x300, 0x8, &(0x7f0000000000)) 23:50:35 executing program 2: socketpair(0x28, 0x7, 0x0, &(0x7f0000000000)) 23:50:35 executing program 0: socketpair(0x28, 0xf, 0x0, &(0x7f0000000000)) 23:50:35 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x700, @broadcast}}}, 0x90) 23:50:36 executing program 2: socketpair(0x28, 0x8, 0x0, &(0x7f0000000000)) 23:50:36 executing program 5: socketpair(0x28, 0xa00, 0x8, &(0x7f0000000000)) 23:50:36 executing program 0: socketpair(0x28, 0x10, 0x0, &(0x7f0000000000)) 23:50:36 executing program 4: socketpair(0x28, 0x10, 0x8, &(0x7f0000000000)) [ 426.011653][T31771] FAULT_INJECTION: forcing a failure. [ 426.011653][T31771] name failslab, interval 1, probability 0, space 0, times 0 [ 426.097456][T31771] CPU: 1 PID: 31771 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 426.106104][T31771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.116273][T31771] Call Trace: [ 426.119752][T31771] dump_stack+0x202/0x31e [ 426.124199][T31771] ? show_regs_print_info+0x12/0x12 [ 426.129427][T31771] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 426.135178][T31771] ? __fs_reclaim_acquire+0x30/0x30 [ 426.141005][T31771] ? __might_sleep+0x100/0x100 [ 426.145810][T31771] should_fail+0x384/0x4b0 [ 426.150415][T31771] ? new_inode_pseudo+0x79/0x220 [ 426.155409][T31771] should_failslab+0x5/0x20 [ 426.160030][T31771] kmem_cache_alloc+0x6b/0x340 [ 426.165089][T31771] new_inode_pseudo+0x79/0x220 [ 426.169886][T31771] __ns_get_path+0x1df/0x5d0 [ 426.174617][T31771] ? _raw_spin_unlock+0x24/0x40 [ 426.179511][T31771] ns_get_path+0x5d/0x90 [ 426.184153][T31771] proc_ns_get_link+0xdc/0x1e0 [ 426.189289][T31771] ? proc_ns_instantiate+0x100/0x100 [ 426.195141][T31771] ? step_into+0xc1b/0x1ee0 [ 426.199753][T31771] ? bpf_lsm_inode_follow_link+0x5/0x10 [ 426.205438][T31771] ? security_inode_follow_link+0xdd/0x120 [ 426.211272][T31771] ? proc_ns_instantiate+0x100/0x100 [ 426.216615][T31771] step_into+0x1142/0x1ee0 [ 426.221075][T31771] ? set_root+0x430/0x430 [ 426.225447][T31771] path_openat+0x1796/0x39b0 [ 426.230094][T31771] ? do_filp_open+0x460/0x460 [ 426.234802][T31771] ? alloc_fd+0x583/0x620 [ 426.239166][T31771] ? rcu_read_lock_sched_held+0x87/0x110 23:50:36 executing program 5: socketpair(0x28, 0xf00, 0x8, &(0x7f0000000000)) [ 426.244943][T31771] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 426.251326][T31771] do_filp_open+0x221/0x460 [ 426.256034][T31771] ? vfs_tmpfile+0x230/0x230 [ 426.260734][T31771] ? alloc_fd+0x583/0x620 [ 426.265820][T31771] ? alloc_fd+0x583/0x620 [ 426.270315][T31771] do_sys_openat2+0x124/0x460 [ 426.275187][T31771] ? __context_tracking_exit+0x7a/0xd0 [ 426.280686][T31771] ? do_sys_open+0x220/0x220 [ 426.285312][T31771] __x64_sys_openat+0x243/0x290 [ 426.290199][T31771] ? __ia32_sys_open+0x270/0x270 [ 426.295262][T31771] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 426.301355][T31771] ? lockdep_hardirqs_on+0x8d/0x130 [ 426.306665][T31771] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 426.312673][T31771] do_syscall_64+0x3f/0xb0 [ 426.317108][T31771] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 426.323015][T31771] RIP: 0033:0x4196e4 [ 426.327018][T31771] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 426.347097][T31771] RSP: 002b:00007f9f7ccb90b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 426.355526][T31771] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004196e4 [ 426.363508][T31771] RDX: 0000000000000000 RSI: 00000000004bed15 RDI: 00000000ffffff9c [ 426.371689][T31771] RBP: 00000000004bed15 R08: 0000000000000000 R09: 0000000000000000 [ 426.379679][T31771] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 426.387765][T31771] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 23:50:36 executing program 5: socketpair(0x28, 0x2000, 0x8, &(0x7f0000000000)) 23:50:36 executing program 4: socketpair(0x28, 0x10, 0x8, &(0x7f0000000000)) 23:50:36 executing program 0: socketpair(0x28, 0x28, 0x0, &(0x7f0000000000)) 23:50:36 executing program 1 (fault-call:2 fault-nth:6): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:36 executing program 2: socketpair(0x28, 0xa, 0x0, &(0x7f0000000000)) 23:50:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x8) 23:50:36 executing program 4: socketpair(0x0, 0x10, 0x8, &(0x7f0000000000)) [ 426.656768][T31799] FAULT_INJECTION: forcing a failure. [ 426.656768][T31799] name failslab, interval 1, probability 0, space 0, times 0 [ 426.741931][T31799] CPU: 1 PID: 31799 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 426.750434][T31799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.760678][T31799] Call Trace: [ 426.764142][T31799] dump_stack+0x202/0x31e [ 426.768467][T31799] ? show_regs_print_info+0x12/0x12 [ 426.773654][T31799] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 426.779483][T31799] ? fs_reclaim_acquire+0x79/0xd0 [ 426.784917][T31799] ? __might_sleep+0x100/0x100 [ 426.789703][T31799] should_fail+0x384/0x4b0 [ 426.794143][T31799] ? security_inode_alloc+0x32/0x1d0 [ 426.799425][T31799] should_failslab+0x5/0x20 [ 426.803935][T31799] kmem_cache_alloc+0x6b/0x340 [ 426.808696][T31799] ? from_kuid_munged+0x3b0/0x3b0 [ 426.813809][T31799] security_inode_alloc+0x32/0x1d0 [ 426.819023][T31799] inode_init_always+0x3b9/0x9f0 [ 426.823964][T31799] new_inode_pseudo+0x90/0x220 [ 426.828724][T31799] __ns_get_path+0x1df/0x5d0 [ 426.833319][T31799] ? _raw_spin_unlock+0x24/0x40 [ 426.838178][T31799] ns_get_path+0x5d/0x90 [ 426.842511][T31799] proc_ns_get_link+0xdc/0x1e0 [ 426.847281][T31799] ? proc_ns_instantiate+0x100/0x100 [ 426.852591][T31799] ? traverse_mounts+0xba/0x690 [ 426.857551][T31799] ? step_into+0xc1b/0x1ee0 [ 426.862062][T31799] ? bpf_lsm_inode_follow_link+0x5/0x10 [ 426.867615][T31799] ? security_inode_follow_link+0xdd/0x120 [ 426.873414][T31799] ? proc_ns_instantiate+0x100/0x100 [ 426.878698][T31799] step_into+0x1142/0x1ee0 [ 426.883288][T31799] ? set_root+0x430/0x430 [ 426.887634][T31799] path_openat+0x1796/0x39b0 [ 426.892410][T31799] ? do_filp_open+0x460/0x460 [ 426.897079][T31799] ? alloc_fd+0x583/0x620 [ 426.901395][T31799] ? rcu_read_lock_sched_held+0x87/0x110 [ 426.907107][T31799] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 426.913179][T31799] do_filp_open+0x221/0x460 [ 426.917705][T31799] ? vfs_tmpfile+0x230/0x230 [ 426.922290][T31799] ? alloc_fd+0x583/0x620 [ 426.926809][T31799] ? alloc_fd+0x583/0x620 [ 426.931320][T31799] do_sys_openat2+0x124/0x460 [ 426.936049][T31799] ? __context_tracking_exit+0x7a/0xd0 [ 426.941603][T31799] ? do_sys_open+0x220/0x220 [ 426.946197][T31799] __x64_sys_openat+0x243/0x290 [ 426.951128][T31799] ? __ia32_sys_open+0x270/0x270 [ 426.956142][T31799] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 426.962802][T31799] ? lockdep_hardirqs_on+0x8d/0x130 [ 426.968080][T31799] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 426.974056][T31799] do_syscall_64+0x3f/0xb0 [ 426.978459][T31799] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 426.984524][T31799] RIP: 0033:0x4196e4 23:50:36 executing program 5: socketpair(0x28, 0x4000, 0x8, &(0x7f0000000000)) [ 426.988490][T31799] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 427.008255][T31799] RSP: 002b:00007f9f7ccb90b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 427.016741][T31799] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004196e4 [ 427.024743][T31799] RDX: 0000000000000000 RSI: 00000000004bed15 RDI: 00000000ffffff9c [ 427.032975][T31799] RBP: 00000000004bed15 R08: 0000000000000000 R09: 0000000000000000 23:50:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x20000090) 23:50:37 executing program 0: socketpair(0x28, 0x41, 0x0, &(0x7f0000000000)) 23:50:37 executing program 2: socketpair(0x28, 0xf, 0x0, &(0x7f0000000000)) [ 427.041374][T31799] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 427.049442][T31799] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 23:50:37 executing program 4: socketpair(0x0, 0x0, 0x8, &(0x7f0000000000)) 23:50:37 executing program 0: socketpair(0x28, 0x300, 0x0, &(0x7f0000000000)) 23:50:37 executing program 1 (fault-call:2 fault-nth:7): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x7ffff000) 23:50:37 executing program 5: socketpair(0x28, 0x4100, 0x8, &(0x7f0000000000)) 23:50:37 executing program 2: socketpair(0x28, 0x10, 0x0, &(0x7f0000000000)) 23:50:37 executing program 0: socketpair(0x28, 0xa00, 0x0, &(0x7f0000000000)) 23:50:37 executing program 4: socketpair(0x0, 0x0, 0x8, &(0x7f0000000000)) 23:50:37 executing program 2: socketpair(0x28, 0x28, 0x0, &(0x7f0000000000)) 23:50:37 executing program 5: socketpair(0x28, 0x18100, 0x8, &(0x7f0000000000)) 23:50:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xffffffffffffffff) [ 427.528919][T31832] FAULT_INJECTION: forcing a failure. [ 427.528919][T31832] name failslab, interval 1, probability 0, space 0, times 0 [ 427.570258][T31832] CPU: 1 PID: 31832 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 427.578736][T31832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.588808][T31832] Call Trace: [ 427.592628][T31832] dump_stack+0x202/0x31e [ 427.597072][T31832] ? show_regs_print_info+0x12/0x12 [ 427.602290][T31832] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 427.608011][T31832] ? __fs_reclaim_acquire+0x30/0x30 [ 427.613232][T31832] should_fail+0x384/0x4b0 [ 427.617700][T31832] ? __d_alloc+0x2a/0x700 [ 427.622193][T31832] should_failslab+0x5/0x20 [ 427.626774][T31832] kmem_cache_alloc+0x6b/0x340 [ 427.631526][T31832] __d_alloc+0x2a/0x700 [ 427.635683][T31832] ? __ns_get_path+0x2bb/0x5d0 [ 427.640470][T31832] __ns_get_path+0x363/0x5d0 [ 427.645254][T31832] ns_get_path+0x5d/0x90 [ 427.649498][T31832] proc_ns_get_link+0xdc/0x1e0 [ 427.654398][T31832] ? proc_ns_instantiate+0x100/0x100 [ 427.659765][T31832] ? step_into+0xc1b/0x1ee0 [ 427.664261][T31832] ? bpf_lsm_inode_follow_link+0x5/0x10 [ 427.669794][T31832] ? security_inode_follow_link+0xdd/0x120 [ 427.675595][T31832] ? proc_ns_instantiate+0x100/0x100 [ 427.681039][T31832] step_into+0x1142/0x1ee0 [ 427.685466][T31832] ? set_root+0x430/0x430 [ 427.689901][T31832] path_openat+0x1796/0x39b0 [ 427.694598][T31832] ? do_filp_open+0x460/0x460 [ 427.699276][T31832] ? alloc_fd+0x583/0x620 [ 427.703769][T31832] ? rcu_read_lock_sched_held+0x87/0x110 [ 427.709583][T31832] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 427.715589][T31832] do_filp_open+0x221/0x460 [ 427.720101][T31832] ? vfs_tmpfile+0x230/0x230 [ 427.724691][T31832] ? alloc_fd+0x583/0x620 [ 427.729018][T31832] ? alloc_fd+0x583/0x620 [ 427.733337][T31832] do_sys_openat2+0x124/0x460 [ 427.738012][T31832] ? __context_tracking_exit+0x7a/0xd0 [ 427.743656][T31832] ? do_sys_open+0x220/0x220 [ 427.748325][T31832] __x64_sys_openat+0x243/0x290 [ 427.753333][T31832] ? __ia32_sys_open+0x270/0x270 [ 427.758254][T31832] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 427.764481][T31832] ? lockdep_hardirqs_on+0x8d/0x130 [ 427.769843][T31832] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 427.775807][T31832] do_syscall_64+0x3f/0xb0 [ 427.780208][T31832] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 427.786344][T31832] RIP: 0033:0x4196e4 [ 427.790607][T31832] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 427.810647][T31832] RSP: 002b:00007f9f7ccb90b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 427.819231][T31832] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004196e4 [ 427.827371][T31832] RDX: 0000000000000000 RSI: 00000000004bed15 RDI: 00000000ffffff9c [ 427.835346][T31832] RBP: 00000000004bed15 R08: 0000000000000000 R09: 0000000000000000 [ 427.843652][T31832] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 427.852792][T31832] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 23:50:37 executing program 0: socketpair(0x28, 0xf00, 0x0, &(0x7f0000000000)) [ 427.866156][ T9698] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:38 executing program 2: socketpair(0x28, 0x41, 0x0, &(0x7f0000000000)) 23:50:38 executing program 4: socketpair(0x0, 0x0, 0x8, &(0x7f0000000000)) 23:50:38 executing program 1 (fault-call:2 fault-nth:8): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f00000000c0)={0x1b, 0x1, 0x100000000, 0xcc2, "83cca0"}) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) socket$phonet(0x23, 0x2, 0x1) 23:50:38 executing program 5: socketpair(0x28, 0x20000, 0x8, &(0x7f0000000000)) 23:50:38 executing program 0: socketpair(0x28, 0x2000, 0x0, &(0x7f0000000000)) 23:50:38 executing program 2: socketpair(0x28, 0x300, 0x0, &(0x7f0000000000)) 23:50:38 executing program 4: socketpair(0x0, 0x10, 0x0, &(0x7f0000000000)) 23:50:38 executing program 2: socketpair(0x28, 0x700, 0x0, &(0x7f0000000000)) 23:50:38 executing program 4: socketpair(0x0, 0x10, 0x0, 0x0) 23:50:38 executing program 5: socketpair(0x28, 0x200000, 0x8, &(0x7f0000000000)) 23:50:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:38 executing program 0: socketpair(0x28, 0x2800, 0x0, &(0x7f0000000000)) [ 428.309019][T31864] FAULT_INJECTION: forcing a failure. [ 428.309019][T31864] name failslab, interval 1, probability 0, space 0, times 0 23:50:38 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f00000000c0)={0x1b, 0x1, 0x100000000, 0xcc2, "83cca0"}) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) socket$phonet(0x23, 0x2, 0x1) [ 428.421560][T31864] CPU: 0 PID: 31864 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 428.430127][T31864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.440377][T31864] Call Trace: [ 428.443679][T31864] dump_stack+0x202/0x31e [ 428.448124][T31864] ? show_regs_print_info+0x12/0x12 [ 428.453513][T31864] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 428.459452][T31864] ? fs_reclaim_acquire+0x79/0xd0 [ 428.464597][T31864] ? __might_sleep+0x100/0x100 [ 428.469404][T31864] should_fail+0x384/0x4b0 [ 428.474188][T31864] ? tomoyo_realpath_from_path+0xd8/0x610 [ 428.480261][T31864] should_failslab+0x5/0x20 [ 428.485191][T31864] __kmalloc+0x89/0x380 [ 428.489367][T31864] ? trace_kfree+0x43/0xd0 [ 428.493800][T31864] ? kfree+0x2d/0x2d0 [ 428.497811][T31864] tomoyo_realpath_from_path+0xd8/0x610 [ 428.503381][T31864] ? memset+0x1f/0x40 [ 428.507396][T31864] tomoyo_check_open_permission+0x1f0/0x460 [ 428.513406][T31864] ? tomoyo_check_path_number_acl+0x270/0x270 [ 428.519879][T31864] ? rcu_read_lock_sched_held+0x87/0x110 [ 428.525741][T31864] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 428.531890][T31864] ? do_raw_spin_unlock+0x134/0x8a0 [ 428.537126][T31864] ? tomoyo_file_open+0xe6/0x170 [ 428.542095][T31864] security_file_open+0x50/0xc0 [ 428.546974][T31864] do_dentry_open+0x36b/0x1010 [ 428.551857][T31864] ? security_inode_permission+0xda/0x110 [ 428.557616][T31864] path_openat+0x28e6/0x39b0 [ 428.562272][T31864] ? do_filp_open+0x460/0x460 [ 428.566988][T31864] ? alloc_fd+0x583/0x620 [ 428.571432][T31864] ? rcu_read_lock_sched_held+0x87/0x110 [ 428.577085][T31864] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 428.583097][T31864] do_filp_open+0x221/0x460 [ 428.587714][T31864] ? vfs_tmpfile+0x230/0x230 [ 428.592353][T31864] ? alloc_fd+0x583/0x620 [ 428.596720][T31864] ? alloc_fd+0x583/0x620 [ 428.601074][T31864] do_sys_openat2+0x124/0x460 [ 428.605770][T31864] ? __context_tracking_exit+0x7a/0xd0 [ 428.611520][T31864] ? do_sys_open+0x220/0x220 [ 428.616140][T31864] __x64_sys_openat+0x243/0x290 [ 428.621089][T31864] ? __ia32_sys_open+0x270/0x270 [ 428.626481][T31864] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 428.632514][T31864] ? lockdep_hardirqs_on+0x8d/0x130 [ 428.637825][T31864] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 428.643830][T31864] do_syscall_64+0x3f/0xb0 [ 428.648354][T31864] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 428.654266][T31864] RIP: 0033:0x4196e4 [ 428.658209][T31864] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 428.678101][T31864] RSP: 002b:00007f9f7ccb90b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 428.686636][T31864] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004196e4 [ 428.694737][T31864] RDX: 0000000000000000 RSI: 00000000004bed15 RDI: 00000000ffffff9c [ 428.702872][T31864] RBP: 00000000004bed15 R08: 0000000000000000 R09: 0000000000000000 [ 428.710974][T31864] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 428.718974][T31864] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 23:50:38 executing program 1 (fault-call:2 fault-nth:9): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:38 executing program 5: socketpair(0x28, 0x810100, 0x8, &(0x7f0000000000)) 23:50:38 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f00000000c0)={0x1b, 0x1, 0x100000000, 0xcc2, "83cca0"}) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) socket$phonet(0x23, 0x2, 0x1) 23:50:38 executing program 0: socketpair(0x28, 0x4000, 0x0, &(0x7f0000000000)) 23:50:38 executing program 2: socketpair(0x28, 0xa00, 0x0, &(0x7f0000000000)) 23:50:38 executing program 3: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_int(r0, 0x107, 0x2, &(0x7f0000000140)=0x400, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000980)={0x7, 0x8}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r4, 0x3d}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) [ 428.860176][T31864] ERROR: Out of memory at tomoyo_realpath_from_path. 23:50:39 executing program 0: socketpair(0x28, 0x4100, 0x0, &(0x7f0000000000)) 23:50:39 executing program 5: socketpair(0x28, 0x3000000, 0x8, &(0x7f0000000000)) 23:50:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f00000000c0)={0x1b, 0x1, 0x100000000, 0xcc2, "83cca0"}) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) socket$phonet(0x23, 0x2, 0x1) 23:50:39 executing program 2: socketpair(0x28, 0xf00, 0x0, &(0x7f0000000000)) [ 429.032911][T31900] FAULT_INJECTION: forcing a failure. [ 429.032911][T31900] name failslab, interval 1, probability 0, space 0, times 0 23:50:39 executing program 0: socketpair(0x28, 0x18100, 0x0, &(0x7f0000000000)) [ 429.120803][T31900] CPU: 0 PID: 31900 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 429.129270][T31900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.139342][T31900] Call Trace: [ 429.142718][T31900] dump_stack+0x202/0x31e [ 429.147069][T31900] ? show_regs_print_info+0x12/0x12 [ 429.152288][T31900] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 429.158334][T31900] ? fs_reclaim_acquire+0x79/0xd0 [ 429.163471][T31900] ? __might_sleep+0x100/0x100 [ 429.168261][T31900] ? dynamic_dname+0x10f/0x170 [ 429.173315][T31900] should_fail+0x384/0x4b0 [ 429.177844][T31900] ? tomoyo_encode2+0x25a/0x560 [ 429.182801][T31900] should_failslab+0x5/0x20 [ 429.187553][T31900] __kmalloc+0x89/0x380 [ 429.191773][T31900] tomoyo_encode2+0x25a/0x560 [ 429.196474][T31900] ? ns_prune_dentry+0xa0/0xa0 [ 429.201363][T31900] tomoyo_realpath_from_path+0x5c3/0x610 [ 429.207289][T31900] ? memset+0x1f/0x40 [ 429.211481][T31900] tomoyo_check_open_permission+0x1f0/0x460 [ 429.217406][T31900] ? tomoyo_check_path_number_acl+0x270/0x270 [ 429.223789][T31900] ? rcu_read_lock_sched_held+0x87/0x110 [ 429.229537][T31900] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 429.235683][T31900] ? do_raw_spin_unlock+0x134/0x8a0 [ 429.241086][T31900] ? tomoyo_file_open+0xe6/0x170 [ 429.246061][T31900] security_file_open+0x50/0xc0 [ 429.251027][T31900] do_dentry_open+0x36b/0x1010 [ 429.255821][T31900] ? security_inode_permission+0xda/0x110 [ 429.261891][T31900] path_openat+0x28e6/0x39b0 23:50:39 executing program 2: socketpair(0x28, 0x2000, 0x0, &(0x7f0000000000)) [ 429.266728][T31900] ? do_filp_open+0x460/0x460 [ 429.272055][T31900] ? alloc_fd+0x583/0x620 [ 429.276410][T31900] ? rcu_read_lock_sched_held+0x87/0x110 [ 429.282151][T31900] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 429.288170][T31900] do_filp_open+0x221/0x460 [ 429.292803][T31900] ? vfs_tmpfile+0x230/0x230 [ 429.297417][T31900] ? alloc_fd+0x583/0x620 [ 429.302021][T31900] ? alloc_fd+0x583/0x620 [ 429.306739][T31900] do_sys_openat2+0x124/0x460 [ 429.311535][T31900] ? __context_tracking_exit+0x7a/0xd0 [ 429.317016][T31900] ? do_sys_open+0x220/0x220 [ 429.321655][T31900] __x64_sys_openat+0x243/0x290 [ 429.326623][T31900] ? __ia32_sys_open+0x270/0x270 [ 429.331731][T31900] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 429.338030][T31900] ? lockdep_hardirqs_on+0x8d/0x130 [ 429.343250][T31900] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 429.349335][T31900] do_syscall_64+0x3f/0xb0 [ 429.354126][T31900] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 429.360215][T31900] RIP: 0033:0x4196e4 [ 429.364132][T31900] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 429.384381][T31900] RSP: 002b:00007f9f7ccb90b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 429.392821][T31900] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004196e4 [ 429.400846][T31900] RDX: 0000000000000000 RSI: 00000000004bed15 RDI: 00000000ffffff9c [ 429.408839][T31900] RBP: 00000000004bed15 R08: 0000000000000000 R09: 0000000000000000 23:50:39 executing program 1 (fault-call:2 fault-nth:10): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:39 executing program 2: socketpair(0x28, 0x2800, 0x0, &(0x7f0000000000)) 23:50:39 executing program 0: socketpair(0x28, 0x20000, 0x0, &(0x7f0000000000)) 23:50:39 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) [ 429.416919][T31900] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 429.425085][T31900] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 [ 429.448780][T31900] ERROR: Out of memory at tomoyo_realpath_from_path. 23:50:39 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f00000000c0)={0x1b, 0x1, 0x100000000, 0xcc2, "83cca0"}) socket$phonet(0x23, 0x2, 0x1) 23:50:39 executing program 5: socketpair(0x28, 0x4000000, 0x8, &(0x7f0000000000)) 23:50:39 executing program 0: socketpair(0x28, 0x200000, 0x0, &(0x7f0000000000)) 23:50:39 executing program 2: socketpair(0x28, 0x4000, 0x0, &(0x7f0000000000)) 23:50:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) [ 429.654176][T31934] FAULT_INJECTION: forcing a failure. [ 429.654176][T31934] name failslab, interval 1, probability 0, space 0, times 0 [ 429.707941][T31934] CPU: 0 PID: 31934 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 429.716508][T31934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.726669][T31934] Call Trace: [ 429.729985][T31934] dump_stack+0x202/0x31e [ 429.734343][T31934] ? show_regs_print_info+0x12/0x12 [ 429.739663][T31934] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 429.745415][T31934] ? __fs_reclaim_acquire+0x30/0x30 [ 429.750723][T31934] ? __might_sleep+0x100/0x100 [ 429.755521][T31934] should_fail+0x384/0x4b0 [ 429.759969][T31934] ? create_new_namespaces+0x33/0xa00 [ 429.765529][T31934] should_failslab+0x5/0x20 [ 429.770050][T31934] kmem_cache_alloc+0x6b/0x340 [ 429.775054][T31934] create_new_namespaces+0x33/0xa00 [ 429.780500][T31934] ? __fget_files+0x34f/0x380 [ 429.785307][T31934] __se_sys_setns+0x2dc/0x15f0 [ 429.790095][T31934] ? __x64_sys_setns+0x60/0x60 [ 429.795249][T31934] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 429.801286][T31934] ? lockdep_hardirqs_on+0x8d/0x130 [ 429.806538][T31934] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 429.812550][T31934] do_syscall_64+0x3f/0xb0 [ 429.816988][T31934] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 429.822901][T31934] RIP: 0033:0x467bd7 [ 429.826809][T31934] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 429.846644][T31934] RSP: 002b:00007f9f7ccb9128 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 23:50:39 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$phonet(0x23, 0x2, 0x1) 23:50:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x1008, @broadcast}}}, 0x90) 23:50:39 executing program 5: socketpair(0x28, 0xa000000, 0x8, &(0x7f0000000000)) [ 429.855165][T31934] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000467bd7 [ 429.863158][T31934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000ef [ 429.871232][T31934] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 429.879493][T31934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.887499][T31934] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 [ 429.949193][ T3134] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:40 executing program 1 (fault-call:2 fault-nth:11): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:40 executing program 2: socketpair(0x28, 0x4100, 0x0, &(0x7f0000000000)) 23:50:40 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x311) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x107000, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r4) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @local}}}, 0x90) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@private1, @in6=@loopback}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xfffffffffffffcd7) 23:50:40 executing program 0: socketpair(0x28, 0x810100, 0x0, &(0x7f0000000000)) 23:50:40 executing program 5: socketpair(0x28, 0xf000000, 0x8, &(0x7f0000000000)) 23:50:40 executing program 4: socket$phonet(0x23, 0x2, 0x1) 23:50:40 executing program 5: socketpair(0x28, 0x10000000, 0x8, &(0x7f0000000000)) 23:50:40 executing program 2: socketpair(0x28, 0x18100, 0x0, &(0x7f0000000000)) 23:50:40 executing program 4: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_int(r0, 0x107, 0x2, &(0x7f0000000140)=0x400, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000980)={0x7, 0x8}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r4, 0x3d}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:40 executing program 0: socketpair(0x28, 0x1000000, 0x0, &(0x7f0000000000)) 23:50:40 executing program 5: socketpair(0x28, 0x40000000, 0x8, &(0x7f0000000000)) [ 430.280720][T31967] FAULT_INJECTION: forcing a failure. [ 430.280720][T31967] name failslab, interval 1, probability 0, space 0, times 0 23:50:40 executing program 0: socketpair(0x28, 0x2000000, 0x0, &(0x7f0000000000)) [ 430.352860][T31967] CPU: 0 PID: 31967 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 430.361507][T31967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.371942][T31967] Call Trace: [ 430.375233][T31967] dump_stack+0x202/0x31e [ 430.379584][T31967] ? show_regs_print_info+0x12/0x12 [ 430.384810][T31967] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 430.390555][T31967] ? __fs_reclaim_acquire+0x30/0x30 [ 430.395860][T31967] ? __might_sleep+0x100/0x100 [ 430.400654][T31967] should_fail+0x384/0x4b0 [ 430.405090][T31967] ? sock_alloc_inode+0x17/0xb0 [ 430.409956][T31967] should_failslab+0x5/0x20 [ 430.414477][T31967] kmem_cache_alloc+0x6b/0x340 [ 430.419254][T31967] ? sockfs_init_fs_context+0xa0/0xa0 [ 430.424646][T31967] sock_alloc_inode+0x17/0xb0 [ 430.429367][T31967] ? sockfs_init_fs_context+0xa0/0xa0 [ 430.434751][T31967] new_inode_pseudo+0x61/0x220 [ 430.439533][T31967] __sock_create+0x12b/0x8c0 [ 430.444310][T31967] __sys_socket+0x115/0x350 [ 430.448902][T31967] ? sock_create_kern+0x40/0x40 [ 430.453770][T31967] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 430.459764][T31967] ? lockdep_hardirqs_on+0x8d/0x130 [ 430.465160][T31967] __x64_sys_socket+0x76/0x80 [ 430.469944][T31967] do_syscall_64+0x3f/0xb0 [ 430.474384][T31967] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 430.480397][T31967] RIP: 0033:0x4665f9 [ 430.484315][T31967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 430.503945][T31967] RSP: 002b:00007f9f7ccb9128 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 430.512563][T31967] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 430.520556][T31967] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000024 [ 430.528557][T31967] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 430.536550][T31967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 430.544542][T31967] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 23:50:40 executing program 1 (fault-call:2 fault-nth:12): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:40 executing program 0: socketpair(0x28, 0x3000000, 0x0, &(0x7f0000000000)) 23:50:40 executing program 2: socketpair(0x28, 0x20000, 0x0, &(0x7f0000000000)) 23:50:40 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0xfff7, 0x80000001, {"cdd1491d34ac03384abeb749e2172202"}, 0x2, 0x6, 0x10001}}}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x541040, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:40 executing program 4: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_int(r0, 0x107, 0x2, &(0x7f0000000140)=0x400, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000980)={0x7, 0x8}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r4, 0x3d}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:40 executing program 5: socketpair(0x28, 0x41000000, 0x8, &(0x7f0000000000)) [ 430.773660][T31967] socket: no more sockets 23:50:40 executing program 2: socketpair(0x28, 0x200000, 0x0, &(0x7f0000000000)) 23:50:40 executing program 0: socketpair(0x28, 0x4000000, 0x0, &(0x7f0000000000)) 23:50:40 executing program 5: socketpair(0x28, 0xfeffffff, 0x8, &(0x7f0000000000)) [ 430.946864][T32014] FAULT_INJECTION: forcing a failure. [ 430.946864][T32014] name failslab, interval 1, probability 0, space 0, times 0 [ 431.000444][T32014] CPU: 1 PID: 32014 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 431.009108][T32014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.019653][T32014] Call Trace: [ 431.022960][T32014] dump_stack+0x202/0x31e [ 431.027318][T32014] ? show_regs_print_info+0x12/0x12 [ 431.032710][T32014] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 431.038452][T32014] ? fs_reclaim_acquire+0x79/0xd0 [ 431.043506][T32014] ? memset+0x1f/0x40 [ 431.047514][T32014] should_fail+0x384/0x4b0 [ 431.052216][T32014] ? security_inode_alloc+0x32/0x1d0 [ 431.057518][T32014] should_failslab+0x5/0x20 [ 431.062043][T32014] kmem_cache_alloc+0x6b/0x340 [ 431.066902][T32014] ? from_kuid_munged+0x3b0/0x3b0 [ 431.072106][T32014] security_inode_alloc+0x32/0x1d0 [ 431.077224][T32014] inode_init_always+0x3b9/0x9f0 [ 431.082168][T32014] ? sockfs_init_fs_context+0xa0/0xa0 [ 431.087630][T32014] new_inode_pseudo+0x90/0x220 [ 431.092419][T32014] __sock_create+0x12b/0x8c0 [ 431.097102][T32014] __sys_socket+0x115/0x350 [ 431.101612][T32014] ? sock_create_kern+0x40/0x40 [ 431.106491][T32014] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 431.112634][T32014] ? lockdep_hardirqs_on+0x8d/0x130 [ 431.118110][T32014] __x64_sys_socket+0x76/0x80 [ 431.122789][T32014] do_syscall_64+0x3f/0xb0 [ 431.127228][T32014] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 431.133110][T32014] RIP: 0033:0x4665f9 [ 431.137084][T32014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.157286][T32014] RSP: 002b:00007f9f7ccb9128 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 431.165882][T32014] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 431.174320][T32014] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000024 [ 431.182290][T32014] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 431.190376][T32014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 23:50:41 executing program 3: ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000001c0)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket(0x2, 0x6, 0x800) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x13f, 0x4}}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x10000, 0xe656, 0x2, 0x0, 0xfffffff7fffffffe, 0x200, r2}) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:41 executing program 0: socketpair(0x28, 0xa000000, 0x0, &(0x7f0000000000)) 23:50:41 executing program 5: socketpair(0x28, 0xfffffffe, 0x8, &(0x7f0000000000)) [ 431.198352][T32014] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 23:50:41 executing program 1 (fault-call:2 fault-nth:13): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:41 executing program 2: socketpair(0x28, 0x810100, 0x0, &(0x7f0000000000)) 23:50:41 executing program 4: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_int(r0, 0x107, 0x2, &(0x7f0000000140)=0x400, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000980)={0x7, 0x8}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r4, 0x3d}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:41 executing program 5: socketpair(0x28, 0x1000000000000, 0x8, &(0x7f0000000000)) 23:50:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0xffe1, 0x0, {"d02c9a8332f4466f5d0e094543798d6a"}, 0x4, 0x4, 0x5}}}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x3ff}}, 0x18) [ 431.346661][T32014] socket: no more sockets 23:50:41 executing program 0: socketpair(0x28, 0xf000000, 0x0, &(0x7f0000000000)) 23:50:41 executing program 2: socketpair(0x28, 0x1000000, 0x0, &(0x7f0000000000)) [ 431.528285][T32045] FAULT_INJECTION: forcing a failure. [ 431.528285][T32045] name failslab, interval 1, probability 0, space 0, times 0 [ 431.575024][T32045] CPU: 0 PID: 32045 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 431.583620][T32045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.593962][T32045] Call Trace: [ 431.597287][T32045] dump_stack+0x202/0x31e [ 431.601643][T32045] ? show_regs_print_info+0x12/0x12 [ 431.607039][T32045] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 431.612784][T32045] ? __fs_reclaim_acquire+0x30/0x30 [ 431.618008][T32045] ? __might_sleep+0x100/0x100 [ 431.622806][T32045] should_fail+0x384/0x4b0 [ 431.627278][T32045] ? sk_prot_alloc+0x57/0x230 [ 431.632011][T32045] should_failslab+0x5/0x20 [ 431.636832][T32045] kmem_cache_alloc+0x6b/0x340 [ 431.641630][T32045] sk_prot_alloc+0x57/0x230 [ 431.646250][T32045] sk_alloc+0x35/0x300 [ 431.650350][T32045] ieee802154_create+0xcc/0x290 [ 431.655363][T32045] __sock_create+0x59b/0x8c0 [ 431.659989][T32045] __sys_socket+0x115/0x350 [ 431.664619][T32045] ? sock_create_kern+0x40/0x40 [ 431.669968][T32045] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 431.676151][T32045] ? lockdep_hardirqs_on+0x8d/0x130 [ 431.681844][T32045] __x64_sys_socket+0x76/0x80 [ 431.686554][T32045] do_syscall_64+0x3f/0xb0 [ 431.690998][T32045] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 431.696916][T32045] RIP: 0033:0x4665f9 [ 431.700919][T32045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:50:41 executing program 2: socketpair(0x28, 0x2000000, 0x0, &(0x7f0000000000)) 23:50:41 executing program 5: socketpair(0x28, 0x2000000000000, 0x8, &(0x7f0000000000)) 23:50:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x23, 0x6, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) sendto$packet(r1, &(0x7f00000002c0)="ac73b8e5d191d202f7d64048ecbcbd7708971ea8c50e200534d2b49e80dc0041b012f752a66b4d9ebc3edb14f5e76ca84f30181183e4167d8014e69b5450b073fea2a67c2ed08fe30aa7c7ed179d3bae9af0b119788f12dd695a2dc7f5a53b982dcf9175b4eec078a4e37597e69f16d4519a3d95fa77e828df9946025293d3626feba0f1e7022de03ac3d18e5cb0fb76449c676cce69129985aab7bbaba688fc19c10eca420ccc983b3dfd3729272d9fd04e4642bcc01c8ffdc1b65c56cc1657a3ea82be", 0xc4, 0x2004c810, 0x0, 0x0) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, &(0x7f00000004c0)=0x1c, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x41, &(0x7f0000000240)=@fragment={0x32, 0x0, 0x2, 0x1, 0x0, 0x18, 0x67}, 0x8) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @remote}}}, 0x90) r4 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000500)=0x1c) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x885) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0x400200, 0x0) 23:50:41 executing program 0: socketpair(0x28, 0x10000000, 0x0, &(0x7f0000000000)) [ 431.720733][T32045] RSP: 002b:00007f9f7ccb9128 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 431.729170][T32045] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 431.737164][T32045] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000024 [ 431.745256][T32045] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 431.753648][T32045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 431.761830][T32045] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 23:50:41 executing program 4: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_int(r0, 0x107, 0x2, &(0x7f0000000140)=0x400, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000980)={0x7, 0x8}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) [ 432.038873][ T3134] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:42 executing program 1 (fault-call:2 fault-nth:14): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:42 executing program 0: socketpair(0x28, 0x28000000, 0x0, &(0x7f0000000000)) 23:50:42 executing program 2: socketpair(0x28, 0x3000000, 0x0, &(0x7f0000000000)) 23:50:42 executing program 5: socketpair(0x28, 0x20000000000000, 0x8, &(0x7f0000000000)) 23:50:42 executing program 4: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_int(r0, 0x107, 0x2, &(0x7f0000000140)=0x400, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000980)={0x7, 0x8}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x2) 23:50:42 executing program 2: socketpair(0x28, 0x4000000, 0x0, &(0x7f0000000000)) 23:50:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) 23:50:42 executing program 0: socketpair(0x28, 0x40000000, 0x0, &(0x7f0000000000)) [ 432.284420][T32094] FAULT_INJECTION: forcing a failure. [ 432.284420][T32094] name failslab, interval 1, probability 0, space 0, times 0 [ 432.335183][T32094] CPU: 0 PID: 32094 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 432.343719][T32094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.353838][T32094] Call Trace: [ 432.357226][T32094] dump_stack+0x202/0x31e [ 432.361709][T32094] ? show_regs_print_info+0x12/0x12 [ 432.366935][T32094] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 432.372681][T32094] ? __fs_reclaim_acquire+0x30/0x30 [ 432.378007][T32094] ? __might_sleep+0x100/0x100 [ 432.382820][T32094] should_fail+0x384/0x4b0 [ 432.387258][T32094] ? smack_sk_alloc_security+0xf7/0x250 [ 432.392824][T32094] should_failslab+0x5/0x20 [ 432.397344][T32094] kmem_cache_alloc_trace+0x6a/0x350 [ 432.402757][T32094] smack_sk_alloc_security+0xf7/0x250 [ 432.408168][T32094] security_sk_alloc+0x55/0xb0 [ 432.412961][T32094] sk_prot_alloc+0x10e/0x230 [ 432.417581][T32094] sk_alloc+0x35/0x300 [ 432.421696][T32094] ieee802154_create+0xcc/0x290 [ 432.426845][T32094] __sock_create+0x59b/0x8c0 [ 432.431468][T32094] __sys_socket+0x115/0x350 [ 432.435995][T32094] ? sock_create_kern+0x40/0x40 [ 432.440881][T32094] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 432.446918][T32094] ? lockdep_hardirqs_on+0x8d/0x130 [ 432.452229][T32094] __x64_sys_socket+0x76/0x80 [ 432.457021][T32094] do_syscall_64+0x3f/0xb0 [ 432.461485][T32094] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 432.467571][T32094] RIP: 0033:0x4665f9 23:50:42 executing program 5: socketpair(0x28, 0x81010000000000, 0x8, &(0x7f0000000000)) [ 432.471596][T32094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 432.491419][T32094] RSP: 002b:00007f9f7ccb9128 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 432.499860][T32094] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 432.507851][T32094] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000024 [ 432.516119][T32094] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 432.524207][T32094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 432.532631][T32094] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 23:50:42 executing program 2: socketpair(0x28, 0x7000000, 0x0, &(0x7f0000000000)) 23:50:42 executing program 0: socketpair(0x28, 0x41000000, 0x0, &(0x7f0000000000)) 23:50:42 executing program 1 (fault-call:2 fault-nth:15): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x800, 0x81, {"38094ca81269c18414be6f0cbf2c320e"}, 0x7ff, 0x7, 0x8}}}, 0xb5) 23:50:42 executing program 4: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_int(r0, 0x107, 0x2, &(0x7f0000000140)=0x400, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:42 executing program 5: socketpair(0x28, 0x300000000000000, 0x8, &(0x7f0000000000)) 23:50:42 executing program 2: socketpair(0x28, 0x8000000, 0x0, &(0x7f0000000000)) 23:50:42 executing program 0: socketpair(0x28, 0xfeffffff, 0x0, &(0x7f0000000000)) 23:50:42 executing program 3: clock_getres(0x3, &(0x7f00000000c0)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:42 executing program 5: socketpair(0x28, 0x400000000000000, 0x8, &(0x7f0000000000)) 23:50:42 executing program 2: socketpair(0x28, 0xa000000, 0x0, &(0x7f0000000000)) [ 432.914469][T32128] FAULT_INJECTION: forcing a failure. [ 432.914469][T32128] name failslab, interval 1, probability 0, space 0, times 0 [ 432.996621][T32128] CPU: 1 PID: 32128 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 433.005185][T32128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.015268][T32128] Call Trace: [ 433.018566][T32128] dump_stack+0x202/0x31e [ 433.022920][T32128] ? show_regs_print_info+0x12/0x12 [ 433.028220][T32128] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 433.034169][T32128] ? __fs_reclaim_acquire+0x30/0x30 [ 433.039400][T32128] ? rcu_read_lock_sched_held+0x87/0x110 [ 433.045142][T32128] should_fail+0x384/0x4b0 [ 433.049695][T32128] ? __d_alloc+0x2a/0x700 [ 433.054282][T32128] should_failslab+0x5/0x20 [ 433.058825][T32128] kmem_cache_alloc+0x6b/0x340 [ 433.063800][T32128] __d_alloc+0x2a/0x700 [ 433.068065][T32128] d_alloc_pseudo+0x19/0x70 [ 433.072563][T32128] alloc_file_pseudo+0x11d/0x300 [ 433.077605][T32128] ? alloc_empty_file_noaccount+0x80/0x80 [ 433.083484][T32128] ? _raw_spin_unlock+0x24/0x40 [ 433.088328][T32128] ? alloc_fd+0x583/0x620 [ 433.092670][T32128] sock_alloc_file+0xb4/0x240 [ 433.097362][T32128] __sys_socket+0x17f/0x350 [ 433.101881][T32128] ? sock_create_kern+0x40/0x40 [ 433.106840][T32128] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 433.112832][T32128] ? lockdep_hardirqs_on+0x8d/0x130 [ 433.118023][T32128] __x64_sys_socket+0x76/0x80 [ 433.122813][T32128] do_syscall_64+0x3f/0xb0 [ 433.127398][T32128] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 433.133369][T32128] RIP: 0033:0x4665f9 23:50:43 executing program 4: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_int(r0, 0x107, 0x2, &(0x7f0000000140)=0x400, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0xfff}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) [ 433.137276][T32128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 433.156987][T32128] RSP: 002b:00007f9f7ccb9128 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 433.165494][T32128] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 433.173497][T32128] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000024 [ 433.181673][T32128] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 23:50:43 executing program 0: socketpair(0x28, 0xfffffffe, 0x0, &(0x7f0000000000)) [ 433.189720][T32128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 433.197852][T32128] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 23:50:43 executing program 1 (fault-call:2 fault-nth:16): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:43 executing program 2: socketpair(0x28, 0xf000000, 0x0, &(0x7f0000000000)) 23:50:43 executing program 5: socketpair(0x28, 0xa00000000000000, 0x8, &(0x7f0000000000)) 23:50:43 executing program 0: socketpair(0x28, 0x1000000000000, 0x0, &(0x7f0000000000)) 23:50:43 executing program 4: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_int(r0, 0x107, 0x2, &(0x7f0000000140)=0x400, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:43 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e25, 0x8, @rand_addr=' \x01\x00', 0x400}}}, 0x90) 23:50:43 executing program 0: socketpair(0x28, 0x2000000000000, 0x0, &(0x7f0000000000)) 23:50:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x24, @long={0x3, 0xffff}}, 0x14, &(0x7f0000000300)={&(0x7f00000002c0)="0b0012972562bda30ff5e1", 0xb}, 0x1, 0x0, 0x0, 0x40810}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), r1, 0x3c4}}, 0x18) 23:50:43 executing program 2: socketpair(0x28, 0x10000000, 0x0, &(0x7f0000000000)) 23:50:43 executing program 5: socketpair(0x28, 0xf00000000000000, 0x8, &(0x7f0000000000)) [ 433.610019][T32168] FAULT_INJECTION: forcing a failure. [ 433.610019][T32168] name failslab, interval 1, probability 0, space 0, times 0 23:50:43 executing program 0: socketpair(0x28, 0x20000000000000, 0x0, &(0x7f0000000000)) [ 433.677409][T32168] CPU: 1 PID: 32168 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 433.685993][T32168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.696102][T32168] Call Trace: [ 433.699401][T32168] dump_stack+0x202/0x31e [ 433.703755][T32168] ? show_regs_print_info+0x12/0x12 [ 433.709427][T32168] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 433.715261][T32168] ? __fs_reclaim_acquire+0x30/0x30 [ 433.720485][T32168] ? __might_sleep+0x100/0x100 [ 433.725349][T32168] should_fail+0x384/0x4b0 [ 433.730115][T32168] ? __alloc_file+0x26/0x2f0 [ 433.734814][T32168] should_failslab+0x5/0x20 [ 433.739338][T32168] kmem_cache_alloc+0x6b/0x340 [ 433.744139][T32168] __alloc_file+0x26/0x2f0 [ 433.748574][T32168] ? alloc_empty_file+0x49/0x1b0 [ 433.753615][T32168] alloc_empty_file+0xa9/0x1b0 [ 433.758398][T32168] alloc_file+0x5d/0x4f0 [ 433.762657][T32168] alloc_file_pseudo+0x24a/0x300 [ 433.767603][T32168] ? alloc_empty_file_noaccount+0x80/0x80 [ 433.773583][T32168] ? _raw_spin_unlock+0x24/0x40 [ 433.778512][T32168] ? alloc_fd+0x583/0x620 [ 433.782855][T32168] sock_alloc_file+0xb4/0x240 [ 433.787526][T32168] __sys_socket+0x17f/0x350 [ 433.792386][T32168] ? sock_create_kern+0x40/0x40 [ 433.797226][T32168] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 433.803453][T32168] ? lockdep_hardirqs_on+0x8d/0x130 [ 433.808652][T32168] __x64_sys_socket+0x76/0x80 [ 433.813326][T32168] do_syscall_64+0x3f/0xb0 [ 433.817766][T32168] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 433.823645][T32168] RIP: 0033:0x4665f9 [ 433.827638][T32168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 433.847581][T32168] RSP: 002b:00007f9f7ccb9128 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 433.856350][T32168] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 433.864577][T32168] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000024 23:50:43 executing program 4: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_int(r0, 0x107, 0x2, &(0x7f0000000140)=0x400, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) [ 433.872558][T32168] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 433.880709][T32168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 433.889403][T32168] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 23:50:44 executing program 1 (fault-call:2 fault-nth:17): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:44 executing program 2: socketpair(0x28, 0x28000000, 0x0, &(0x7f0000000000)) 23:50:44 executing program 5: socketpair(0x28, 0x1000000000000000, 0x8, &(0x7f0000000000)) 23:50:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000000c0)) 23:50:44 executing program 0: socketpair(0x28, 0x81010000000000, 0x0, &(0x7f0000000000)) 23:50:44 executing program 2: socketpair(0x28, 0x40000000, 0x0, &(0x7f0000000000)) 23:50:44 executing program 4: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_int(r0, 0x107, 0x2, &(0x7f0000000140)=0x400, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:44 executing program 5: socketpair(0x28, 0x4000000000000000, 0x8, &(0x7f0000000000)) [ 434.117678][ T3134] Bluetooth: hci0: command 0x0c20 tx timeout [ 434.166283][T32196] FAULT_INJECTION: forcing a failure. [ 434.166283][T32196] name failslab, interval 1, probability 0, space 0, times 0 [ 434.225877][T32196] CPU: 0 PID: 32196 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 434.234467][T32196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.244900][T32196] Call Trace: [ 434.248204][T32196] dump_stack+0x202/0x31e [ 434.252653][T32196] ? show_regs_print_info+0x12/0x12 [ 434.257879][T32196] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 434.263631][T32196] ? __fs_reclaim_acquire+0x30/0x30 [ 434.268859][T32196] ? __might_sleep+0x100/0x100 [ 434.273661][T32196] should_fail+0x384/0x4b0 [ 434.278193][T32196] ? security_file_alloc+0x32/0x1f0 [ 434.283641][T32196] should_failslab+0x5/0x20 [ 434.288233][T32196] kmem_cache_alloc+0x6b/0x340 [ 434.293131][T32196] security_file_alloc+0x32/0x1f0 [ 434.298359][T32196] __alloc_file+0xca/0x2f0 [ 434.302799][T32196] alloc_empty_file+0xa9/0x1b0 [ 434.307765][T32196] alloc_file+0x5d/0x4f0 [ 434.312367][T32196] alloc_file_pseudo+0x24a/0x300 [ 434.317332][T32196] ? alloc_empty_file_noaccount+0x80/0x80 [ 434.323198][T32196] ? _raw_spin_unlock+0x24/0x40 [ 434.328079][T32196] ? alloc_fd+0x583/0x620 [ 434.332456][T32196] sock_alloc_file+0xb4/0x240 [ 434.337278][T32196] __sys_socket+0x17f/0x350 [ 434.341985][T32196] ? sock_create_kern+0x40/0x40 [ 434.346890][T32196] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 434.352902][T32196] ? lockdep_hardirqs_on+0x8d/0x130 [ 434.358239][T32196] __x64_sys_socket+0x76/0x80 [ 434.362941][T32196] do_syscall_64+0x3f/0xb0 [ 434.367379][T32196] entry_SYSCALL_64_after_hwframe+0x44/0xae 23:50:44 executing program 2: socketpair(0x28, 0x41000000, 0x0, &(0x7f0000000000)) 23:50:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x2, 0x3, {"bb428a0361ba2b5699bf2253b9f90a8f"}, 0x3, 0x8000, 0x3f}}}, 0x90) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f00000000c0)=0x1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x228400, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) [ 434.373301][T32196] RIP: 0033:0x4665f9 [ 434.377208][T32196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 434.396916][T32196] RSP: 002b:00007f9f7ccb9128 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 434.405374][T32196] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 434.413383][T32196] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000024 23:50:44 executing program 0: socketpair(0x28, 0x100000000000000, 0x0, &(0x7f0000000000)) 23:50:44 executing program 2: socketpair(0x28, 0xfeffffff, 0x0, &(0x7f0000000000)) [ 434.421548][T32196] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 434.429810][T32196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 434.437886][T32196] R13: 00007ffe661db16f R14: 00007f9f7ccb9300 R15: 0000000000022000 23:50:44 executing program 1 (fault-call:2 fault-nth:18): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:44 executing program 4: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_int(r0, 0x107, 0x2, &(0x7f0000000140)=0x400, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:44 executing program 5: socketpair(0x28, 0x4100000000000000, 0x8, &(0x7f0000000000)) 23:50:44 executing program 0: socketpair(0x28, 0x200000000000000, 0x0, &(0x7f0000000000)) 23:50:44 executing program 2: socketpair(0x28, 0xfffffffe, 0x0, &(0x7f0000000000)) 23:50:44 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r2 = memfd_create(&(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x1) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000002000000", @ANYRES32=r2, @ANYBLOB="bd0815f20000000000", @ANYRES32, @ANYBLOB="0000000000200000000000000000010000000000"]) 23:50:44 executing program 5: socketpair(0x28, 0x8000000000000000, 0x8, &(0x7f0000000000)) 23:50:44 executing program 0: socketpair(0x28, 0x300000000000000, 0x0, &(0x7f0000000000)) 23:50:44 executing program 2: socketpair(0x28, 0x1000000000000, 0x0, &(0x7f0000000000)) [ 434.876556][T32243] FAULT_INJECTION: forcing a failure. [ 434.876556][T32243] name failslab, interval 1, probability 0, space 0, times 0 [ 434.923015][T32243] CPU: 1 PID: 32243 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 434.931600][T32243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.941673][T32243] Call Trace: [ 434.944982][T32243] dump_stack+0x202/0x31e [ 434.949370][T32243] ? show_regs_print_info+0x12/0x12 [ 434.954694][T32243] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 434.960440][T32243] ? __fs_reclaim_acquire+0x30/0x30 [ 434.965760][T32243] ? __might_sleep+0x100/0x100 [ 434.970559][T32243] should_fail+0x384/0x4b0 [ 434.975280][T32243] ? create_new_namespaces+0x33/0xa00 [ 434.981909][T32243] should_failslab+0x5/0x20 [ 434.986657][T32243] kmem_cache_alloc+0x6b/0x340 [ 434.991540][T32243] create_new_namespaces+0x33/0xa00 [ 434.997037][T32243] ? __fget_files+0x34f/0x380 [ 435.002040][T32243] __se_sys_setns+0x2dc/0x15f0 [ 435.006845][T32243] ? __x64_sys_setns+0x60/0x60 [ 435.011730][T32243] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 435.017723][T32243] ? lockdep_hardirqs_on+0x8d/0x130 [ 435.022929][T32243] ? syscall_enter_from_user_mode+0x2e/0x1c0 [ 435.029262][T32243] do_syscall_64+0x3f/0xb0 [ 435.033689][T32243] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 435.039783][T32243] RIP: 0033:0x467bd7 [ 435.043666][T32243] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 435.063516][T32243] RSP: 002b:00007f9f7ccb9128 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 23:50:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r2, 0x107, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x7, 0x1, {"999939e8d594dead4eebb23312e32815"}, 0x7, 0x40, 0xa}}}, 0x90) [ 435.072097][T32243] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000467bd7 [ 435.080064][T32243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 435.088124][T32243] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 435.096216][T32243] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f7ccb96bc [ 435.104616][T32243] R13: 000000000000000e R14: 00007f9f7ccb9300 R15: 0000000000022000 23:50:45 executing program 4: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_int(r0, 0x107, 0x2, &(0x7f0000000140)=0x400, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:45 executing program 0: socketpair(0x28, 0x400000000000000, 0x0, &(0x7f0000000000)) 23:50:45 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:50:45 executing program 5: socketpair(0x28, 0xfeffffff00000000, 0x8, &(0x7f0000000000)) 23:50:45 executing program 2: socketpair(0x28, 0x2000000000000, 0x0, &(0x7f0000000000)) 23:50:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x41}}}}, 0x90) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000000c0)={0x5e, 0x6, 0x2, 0x9b, 0x0, [@mcast2, @mcast1, @mcast2]}, 0x38) 23:50:45 executing program 0: socketpair(0x28, 0xa00000000000000, 0x0, &(0x7f0000000000)) 23:50:45 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0xffffffffffffffff, 0x2, 0x0) 23:50:45 executing program 2: socketpair(0x28, 0x20000000000000, 0x0, &(0x7f0000000000)) 23:50:45 executing program 0: socketpair(0x28, 0xf00000000000000, 0x0, &(0x7f0000000000)) 23:50:45 executing program 4: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000000c0)={'filter\x00', 0xfe, "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"}, &(0x7f0000000200)=0x122) 23:50:45 executing program 5: socketpair(0x28, 0xffffffff00000000, 0x8, &(0x7f0000000000)) 23:50:45 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0xffffffffffffffff, 0x2, 0x0) 23:50:45 executing program 2: socketpair(0x28, 0x81010000000000, 0x0, &(0x7f0000000000)) 23:50:45 executing program 0: socketpair(0x28, 0x1000000000000000, 0x0, &(0x7f0000000000)) 23:50:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r3) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e1e, @loopback}}}, 0x90) 23:50:45 executing program 5: socketpair(0x28, 0x0, 0x28, &(0x7f0000000000)) 23:50:45 executing program 4: socket(0x2, 0x80806, 0x7) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:45 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0xffffffffffffffff, 0x2, 0x0) 23:50:45 executing program 2: socketpair(0x28, 0x100000000000000, 0x0, &(0x7f0000000000)) 23:50:45 executing program 0: socketpair(0x28, 0x2800000000000000, 0x0, &(0x7f0000000000)) 23:50:45 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x25, 0x3, 0xfffffff9) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 23:50:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:10 0', 0x1b) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:46 executing program 2: socketpair(0x28, 0x200000000000000, 0x0, &(0x7f0000000000)) 23:50:46 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x3, 0x0) 23:50:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:46 executing program 5: socketpair(0x18, 0x2, 0x80000000, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200c00, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080)) 23:50:46 executing program 0: socketpair(0x28, 0x4000000000000000, 0x0, &(0x7f0000000000)) 23:50:46 executing program 2: socketpair(0x28, 0x300000000000000, 0x0, &(0x7f0000000000)) 23:50:46 executing program 3: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth0_to_hsr\x00'}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:46 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x5, 0x0) 23:50:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:46 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0xf, 0x4, 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@initdev}, &(0x7f0000000100)=0x14) socketpair(0x1a, 0x4, 0x1f, &(0x7f0000000080)) connect$802154_dgram(r1, &(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14) [ 436.187612][ T9698] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:46 executing program 3: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in6=@remote, 0x4e24, 0xffff, 0x4e23, 0xff, 0x2, 0x0, 0x0, 0x2b, 0x0, r1}, {0x3, 0x5, 0x9, 0xcf, 0x5, 0xfffffffffffff1d9, 0x1, 0x6}, {0x6, 0x7, 0x8e7, 0x7}, 0x6, 0x6e6bb5, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x24}, 0x4d5, 0x3c}, 0xa, @in6=@private1, 0x3500, 0x4, 0x3, 0xb8, 0xc6df, 0x2, 0x2}}, 0xe8) r2 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r2, &(0x7f00000000c0)=""/122, 0x7a) keyctl$get_security(0x11, r2, &(0x7f00000000c0)=""/170, 0xaa) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) 23:50:46 executing program 0: socketpair(0x28, 0x4100000000000000, 0x0, &(0x7f0000000000)) 23:50:46 executing program 2: socketpair(0x28, 0x400000000000000, 0x0, &(0x7f0000000000)) 23:50:46 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x6, 0x0) 23:50:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:46 executing program 5: bind$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0), 0x14) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x6, [0x6, 0x9], 0x401}, 0x10) 23:50:46 executing program 2: socketpair(0x28, 0x700000000000000, 0x0, &(0x7f0000000000)) 23:50:46 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x8, 0x0) 23:50:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:46 executing program 0: socketpair(0x28, 0x8000000000000000, 0x0, &(0x7f0000000000)) 23:50:46 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0xa, 0x0) 23:50:46 executing program 2: socketpair(0x28, 0x800000000000000, 0x0, &(0x7f0000000000)) 23:50:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x242001, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000240)) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{0x7f, 0x5, 0x6, 0x3}, {0x1, 0x81, 0xff, 0x9}, {0xb6, 0x0, 0x8, 0x5}, {0x8000, 0x0, 0x81, 0x7fff}, {0x6, 0x2, 0x2, 0x1}, {0x7, 0x83, 0x6, 0x14559241}, {0xdf, 0x1, 0x7, 0x3}, {0x401, 0x7, 0x3f, 0x3ff}, {0x6, 0xb4, 0x6, 0x9}]}, 0x10) 23:50:46 executing program 0: socketpair(0x28, 0xfeffffff00000000, 0x0, &(0x7f0000000000)) 23:50:46 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:46 executing program 5: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000000c0)) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair(0x28, 0x80000, 0x8, &(0x7f0000000000)) 23:50:46 executing program 2: socketpair(0x28, 0xa00000000000000, 0x0, &(0x7f0000000000)) 23:50:46 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x18, 0x0) 23:50:46 executing program 0: socketpair(0x28, 0xffffffff00000000, 0x0, &(0x7f0000000000)) 23:50:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x1, @broadcast}}}, 0x90) 23:50:47 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:47 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x3d, 0x0) 23:50:47 executing program 2: socketpair(0x28, 0xf00000000000000, 0x0, &(0x7f0000000000)) 23:50:47 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:47 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:47 executing program 5: socketpair(0x3, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x29, 0x6, 0x4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x40}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x22}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x804) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000040)=0x1, 0x4) 23:50:47 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x2) 23:50:47 executing program 2: socketpair(0x28, 0x1000000000000000, 0x0, &(0x7f0000000000)) 23:50:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 23:50:47 executing program 0: socketpair(0x28, 0x0, 0x2, &(0x7f0000000000)) 23:50:47 executing program 5: connect$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x6, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) socketpair(0x1d, 0x1, 0x8, &(0x7f0000000000)) 23:50:47 executing program 3: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:47 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x3) 23:50:47 executing program 2: socketpair(0x28, 0x2800000000000000, 0x0, &(0x7f0000000000)) 23:50:47 executing program 0: socketpair(0x28, 0x0, 0x3, &(0x7f0000000000)) 23:50:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 23:50:47 executing program 5: ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000040)={{}, 0x2}) socketpair(0xb, 0x3, 0x8, &(0x7f0000000000)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000080)={{}, 0xe0}) 23:50:47 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x4) 23:50:47 executing program 2: socketpair(0x28, 0x4000000000000000, 0x0, &(0x7f0000000000)) 23:50:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 23:50:47 executing program 0: socketpair(0x28, 0x0, 0x4, &(0x7f0000000000)) 23:50:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x79}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x78}}, 0x10) 23:50:47 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x0) 23:50:47 executing program 2: socketpair(0x28, 0x4100000000000000, 0x0, &(0x7f0000000000)) 23:50:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) 23:50:47 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x5) 23:50:47 executing program 0: socketpair(0x28, 0x0, 0xa, &(0x7f0000000000)) 23:50:47 executing program 2: socketpair(0x28, 0x8000000000000000, 0x0, &(0x7f0000000000)) 23:50:48 executing program 3: r0 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r0, &(0x7f00000000c0)=""/122, 0x7a) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x64, 0x962d3e526db3e1ba, 0x35, 0x64, 0x65, 0x61, 0x37, 0x63, 0x32, 0x34, 0x61, 0x37, 0x34, 0x36, 0x35, 0x66]}, &(0x7f0000000140)={0x0, "326834fd0df3c2f8a26e6a1b6c2fe08af4a1d801088c8799c2886953d8ffebb3b14c097abd88d391f3d578398bc345062773cbf421f5f3979b3c9d9213e984d5", 0x11}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x19, 0x37, 0x35, 0x39, 0x33, 0x33, 0x38, 0x37, 0x64, 0x66, 0x35, 0x36, 0x36, 0x50, 0x61, 0x64]}, &(0x7f0000000240)={0x0, "f31a8aad266440e173a5b746de3e6bbab59a75ab040011efa4dfdf00000000000000003a00", 0x29}, 0x48, 0xfffffffffffffff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x3}}, 0x20) 23:50:48 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x6) 23:50:48 executing program 5: socketpair(0x9, 0x0, 0x7dff, &(0x7f0000000000)) 23:50:48 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:48 executing program 0: socketpair(0x28, 0x0, 0xf, &(0x7f0000000000)) 23:50:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x3}}, 0x20) 23:50:48 executing program 2: socketpair(0x28, 0xfeffffff00000000, 0x0, &(0x7f0000000000)) [ 438.107488][ T20] Bluetooth: hci5: command 0x0405 tx timeout 23:50:48 executing program 5: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$packet(r1, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x1, 0x80, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) r2 = socket$inet6(0xa, 0xf, 0x9) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0xffff8000, 0x8, 0x1000, 0x9, 0x1, 0xff, 0x20}, 0x1c) getpeername$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000001c0)=@req={0x7fff, 0x8, 0x7, 0x4}, 0x10) socketpair(0xa, 0x0, 0x7, &(0x7f0000000000)) 23:50:48 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x7) 23:50:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x1, 0x4, {"1abda579632331a512e79f2f2975b903"}, 0x800, 0x8, 0x9}}}, 0x90) 23:50:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x3}}, 0x20) 23:50:48 executing program 2: socketpair(0x28, 0xffffffff00000000, 0x0, &(0x7f0000000000)) [ 438.277716][ T20] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:48 executing program 0: socketpair(0x28, 0x0, 0x10, &(0x7f0000000000)) 23:50:48 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x8) 23:50:48 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000380)=ANY=[@ANYBLOB="bb000000020000002000000000000000fb0b0000000000000427cc450b590198b3cf0d6073b29a9559a5323d9e52aed25cbf610ab145770b663598b1f6a0f8aa04ee7e69e90d2067dc73538cc85b6cd19089b9aee1e745a93e66e1f9d6b7c4229d9a031b8258f14e4ee5d0067e4e3c8db340592fe8b0244ddaf8e8996906f8a36f7f111850c33389f2228d581cb8c555d062b5285be1404c004890ee80772d080902c829e5edd117de3408c13e166228e0483fe50036dddb0807f8cf1710b97cac3200"]) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) r3 = socket(0x2, 0x80806, 0x7) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r7], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r8, r9, 0x0, r10], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000580)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000600)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, r4, r5, 0x0, 0x0, 0x0, r6], &(0x7f00000005c0)=[r10, r11], 0xa}) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2, 0x9, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x404c010) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2, 0x4}}, 0x10) 23:50:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0x3}}, 0x20) 23:50:48 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:48 executing program 0: socketpair(0x28, 0x0, 0x28, &(0x7f0000000000)) 23:50:48 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x9) 23:50:48 executing program 2: socketpair(0x28, 0x0, 0x2, &(0x7f0000000000)) 23:50:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0x3}}, 0x20) 23:50:48 executing program 0: socketpair(0x28, 0x0, 0x41, &(0x7f0000000000)) 23:50:48 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xa) 23:50:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000100)=0x3) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x20, 0x2, {"77a69f98460a75bf6f0574c7506b39a5"}, 0x10001, 0x3b8, 0x4}}}, 0x90) write$snapshot(0xffffffffffffffff, &(0x7f0000000140)="426d949d9799e4ea97929938162c5fe9425dfcacfdb4a99c272fba1db2d7dbc63ff42a64614171d36c7ce74fceacca3129d831acafd25c264f24e9d4afcb8c8ba757e08676d522a77617d4cd649d8d4c88d1b786dc1fad3c198c086b409868a985c14b8a48a9e4a1b4e344c7e118d864eea36a8e0597f14c5a75784525ad0d09d229d9ba96076c996c898fff0cd8cc2c98250cf78eb053e71f", 0x99) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10) 23:50:48 executing program 5: time(&(0x7f0000000000)) time(&(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x10001, 0x8000) time(&(0x7f0000000100)) time(&(0x7f0000000040)) 23:50:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0x3}}, 0x20) 23:50:48 executing program 0: socketpair(0x28, 0x0, 0x300, &(0x7f0000000000)) 23:50:48 executing program 2: socketpair(0x28, 0x0, 0x3, &(0x7f0000000000)) 23:50:49 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xb) 23:50:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0004}, 0x2004c091) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x8, 0x6}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 23:50:49 executing program 5: ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000040)) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:50:49 executing program 2: socketpair(0x28, 0x0, 0x4, &(0x7f0000000000)) 23:50:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f}}, 0x20) 23:50:49 executing program 0: socketpair(0x28, 0x0, 0xa00, &(0x7f0000000000)) 23:50:49 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xc) 23:50:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x48e3, 0x8, {"d2de92bfbf4bfe67be5a444b89f81a23"}, 0x8000, 0x1f, 0xd5}}}, 0x90) 23:50:49 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @remote, 0x80000000}, 0xffffffffffffff41) 23:50:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0004}, 0x2004c091) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x8, 0x6}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 23:50:49 executing program 2: socketpair(0x28, 0x0, 0x7, &(0x7f0000000000)) 23:50:49 executing program 0: socketpair(0x28, 0x0, 0xf00, &(0x7f0000000000)) 23:50:49 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xd) 23:50:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) bind$isdn_base(0xffffffffffffffff, &(0x7f00000000c0)={0x22, 0x18, 0x6, 0x9, 0xdf}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) 23:50:49 executing program 5: r0 = socket(0x2, 0x80806, 0x7) bind$packet(r0, &(0x7f0000000080)={0x11, 0x19, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e20, 0x225, @loopback, 0x20}, {0xa, 0x4e20, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x401}, 0x2b7e, [0x2, 0x5, 0x100, 0x0, 0x4, 0x7, 0x1, 0x4]}, 0x5c) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:50:49 executing program 2: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:50:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0004}, 0x2004c091) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x8, 0x6}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 23:50:49 executing program 0: socketpair(0x28, 0x0, 0x2000, &(0x7f0000000000)) 23:50:49 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xe) 23:50:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:49 executing program 2: socketpair(0x28, 0x0, 0xa, &(0x7f0000000000)) 23:50:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0004}, 0x2004c091) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x8, 0x6}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 23:50:49 executing program 0: socketpair(0x28, 0x0, 0x2800, &(0x7f0000000000)) 23:50:49 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x10) 23:50:49 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x90600, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x800, 0x101, {"a71532edbc93a8f3009bda9ed0d4e9a2"}, 0x10000000000, 0x0, 0x1}}}, 0x90) 23:50:49 executing program 2: socketpair(0x28, 0x0, 0xf, &(0x7f0000000000)) [ 439.789644][ T3232] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.796634][ T3232] ieee802154 phy1 wpan1: encryption failed: -22 23:50:49 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000040)) 23:50:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0004}, 0x2004c091) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x8, 0x6}, 0x10) 23:50:49 executing program 0: socketpair(0x28, 0x0, 0x4000, &(0x7f0000000000)) 23:50:49 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x11) 23:50:50 executing program 2: socketpair(0x28, 0x0, 0x10, &(0x7f0000000000)) 23:50:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x16}}, 0x10) 23:50:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0004}, 0x2004c091) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x8, 0x6}, 0x10) 23:50:50 executing program 5: socketpair(0x1d, 0x5, 0x2008, &(0x7f0000000000)) 23:50:50 executing program 0: socketpair(0x28, 0x0, 0x4100, &(0x7f0000000000)) 23:50:50 executing program 3: ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000000)={0x7}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) 23:50:50 executing program 2: socketpair(0x28, 0x0, 0x28, &(0x7f0000000000)) 23:50:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x12) 23:50:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0004}, 0x2004c091) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x8, 0x6}, 0x10) 23:50:50 executing program 0: socketpair(0x28, 0x0, 0x18100, &(0x7f0000000000)) 23:50:50 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)) 23:50:50 executing program 2: socketpair(0x28, 0x0, 0x41, &(0x7f0000000000)) 23:50:50 executing program 3: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = accept4$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c, 0x40000) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@initdev}, &(0x7f0000000200)=0x14) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x1, @multicast2}}}, 0x90) 23:50:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x18) 23:50:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0004}, 0x2004c091) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x8, 0x6}, 0x10) [ 440.354650][ T9698] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:50 executing program 0: socketpair(0x28, 0x0, 0x20000, &(0x7f0000000000)) 23:50:50 executing program 2: socketpair(0x28, 0x0, 0x300, &(0x7f0000000000)) 23:50:50 executing program 5: socketpair(0x21, 0x2, 0xc, &(0x7f0000000040)) 23:50:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x25) 23:50:50 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0004}, 0x2004c091) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x8, 0x6}, 0x10) 23:50:50 executing program 0: socketpair(0x28, 0x0, 0x200000, &(0x7f0000000000)) 23:50:50 executing program 5: socketpair(0x11, 0x1, 0x20000a, &(0x7f0000000000)) r0 = socket(0x2, 0x80000, 0x1f) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c, 0x1000) 23:50:50 executing program 2: socketpair(0x28, 0x0, 0x700, &(0x7f0000000000)) 23:50:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x27) 23:50:50 executing program 0: socketpair(0x28, 0x0, 0x810100, &(0x7f0000000000)) 23:50:50 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x8, 0x6}, 0x10) 23:50:50 executing program 2: socketpair(0x28, 0x0, 0xa00, &(0x7f0000000000)) 23:50:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @in6={0xa, 0x4e21, 0x6, @loopback, 0x8}}}, 0x90) read$snapshot(0xffffffffffffffff, &(0x7f00000000c0)=""/186, 0xba) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x48) 23:50:50 executing program 0: socketpair(0x28, 0x0, 0x1000000, &(0x7f0000000000)) 23:50:50 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x8, 0x6}, 0x10) 23:50:50 executing program 5: socketpair(0xf, 0x6, 0x8000008, &(0x7f0000000000)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0xa, 0x6, 0x1, &(0x7f00000000c0)) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x800) 23:50:51 executing program 2: socketpair(0x28, 0x0, 0xf00, &(0x7f0000000000)) 23:50:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:51 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x4c) 23:50:51 executing program 0: socketpair(0x28, 0x0, 0x2000000, &(0x7f0000000000)) 23:50:51 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x8, 0x6}, 0x10) 23:50:51 executing program 2: socketpair(0x28, 0x0, 0x2000, &(0x7f0000000000)) 23:50:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}, 0x90) 23:50:51 executing program 5: clock_gettime(0x2, &(0x7f0000000040)) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:50:51 executing program 0: socketpair(0x28, 0x0, 0x3000000, &(0x7f0000000000)) 23:50:51 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x5c) 23:50:51 executing program 2: socketpair(0x28, 0x0, 0x2800, &(0x7f0000000000)) 23:50:51 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x8, 0x6}, 0x10) 23:50:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x8}}}, 0x90) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) getsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000100)=""/128, &(0x7f0000000180)=0x80) 23:50:51 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmmsg$inet6(r1, &(0x7f0000001780)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}, 0xffffffff}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000100)="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", 0xfe}, {&(0x7f0000000200)="a9ae86bd6bad824cf58865b108d350d194a89a1b9454056e36da9f409612792916ff333fdb12abbf80ec7b92c2029fe1d42cb6bf96ca3e80", 0x38}, {&(0x7f0000000240)="16be487b72fdc6d881d474b283fbab831e4766b75fefe83a2771305573d9bd9b2be563bb8be9f3748e8270b92c90609a640f9a332f4707ffec708142970751dc8d4cbf12f893a3d62d42d9e68f611d69c3cd284e4cc1ec5a1e1bde209201ae1533e04db8d6abfd1908fce241aa9b47f5bdd5218835c9b2b97424799ff1328e022210137a12ecbaed2c664d5d1ac22eb1cb1f7d8938227ceaf9c286be994d530be6bea6753d062c030349e39e20f406ebbf749e8692c250fc97a69d617691fdb321e0", 0xc2}, {&(0x7f0000000340)="187b85d46c768c160872a7", 0xb}, {&(0x7f0000000380)="6511405b2a4d9771d35ccf730125f9402a6665d7d20bdc621185b6b228377550a4232ac11a96f64207bcd774092eced8cca4175a6d6458c25c0bfd942f7fb64b68e48be307ed441d7477dad88e00f945eff5aee2bcc8d7e63972906efac23ecb32c8afe85caa61c116bdef759a3a171125f77fa960457831be1f8f3756", 0x7d}, {&(0x7f0000000400)="161d7d08e5492b3ad4e753a1549cd94957d6ef78b4", 0x15}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="eb9b94", 0x3}, {&(0x7f0000001480)="48741506d1c77be1899ac59600ce11030deb5f878d1941a56aad86c2f9dd2e93be91a47be334268b581e2d87549d0e2136723518b8f5ff394f74c20355da46db9a503cd21be59d4fb3ad002a2430a1046cee484bc54d326c5131443e21c6a50731a184ef78266ac197a25297f68e244dbc575050a6e0e740c8c3696b130a4fd81f6418a10a80c2f304eba444d3965d590999188f180e539c9e182825596fb643fbd6008dee14b1630a93189c766b77740ce4da1b0d30858200343535ff6fee6b8b54eedd429f05e4f6b37d83d07a3d5a507363395f494c49cf1aef37", 0xdc}], 0x9, &(0x7f0000001640)=[@hopopts={{0x30, 0x29, 0x36, {0x89, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x11}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffa}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xc7a2}}, @hopopts={{0x78, 0x29, 0x36, {0x21, 0xb, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x53, 0x8000, [0x5, 0x2, 0x400, 0x800, 0x80000001]}}, @ra={0x5, 0x2, 0x1f1}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0xc, "2d2a23dfc60e0e3f7216857f"}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x800}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x120}}], 0x1, 0x0) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x40, 0x8, 0x7, 0x4}, 0x6) bind$isdn_base(r0, &(0x7f0000000080)={0x22, 0x3f, 0xc7, 0x1, 0x4}, 0x6) 23:50:51 executing program 0: socketpair(0x28, 0x0, 0x4000000, &(0x7f0000000000)) 23:50:51 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x68) 23:50:51 executing program 2: socketpair(0x28, 0x0, 0x4000, &(0x7f0000000000)) 23:50:51 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x8, 0x6}, 0x10) 23:50:51 executing program 0: socketpair(0x28, 0x0, 0xa000000, &(0x7f0000000000)) 23:50:51 executing program 2: socketpair(0x28, 0x0, 0x4100, &(0x7f0000000000)) 23:50:51 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x6c) 23:50:51 executing program 4: socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x8, 0x6}, 0x10) 23:50:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)={r2}) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x181880) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000180)={r3, 0x0, r1, r1, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[r2], &(0x7f0000000200)=[r1, r1], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f00000002c0)={&(0x7f0000000280)=[r3], &(0x7f0000000340)=[r1, r1, 0x0, r1, r1, r1, r1, r1, 0x0, r1], 0x0, 0x1, 0x2, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000440), 0xff, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r7, 0xc02864ca, &(0x7f0000000400)={&(0x7f0000000140), &(0x7f00000003c0)=[r4, r5, r6, r1, r1], 0xff, 0x0, 0x2}) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:50:51 executing program 2: socketpair(0x28, 0x0, 0x18100, &(0x7f0000000000)) 23:50:51 executing program 3: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x11) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:51 executing program 0: socketpair(0x28, 0x0, 0xf000000, &(0x7f0000000000)) 23:50:51 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x74) 23:50:51 executing program 4: socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x8, 0x6}, 0x10) 23:50:51 executing program 2: socketpair(0x28, 0x0, 0x20000, &(0x7f0000000000)) 23:50:51 executing program 5: write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000080)) 23:50:52 executing program 0: socketpair(0x28, 0x0, 0x10000000, &(0x7f0000000000)) 23:50:52 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x7a) 23:50:52 executing program 2: socketpair(0x28, 0x0, 0x200000, &(0x7f0000000000)) 23:50:52 executing program 4: socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x8, 0x6}, 0x10) 23:50:52 executing program 5: socketpair(0x28, 0x0, 0xd6, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000080)={0x9, 'syz1\x00'}) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000040)) 23:50:52 executing program 0: socketpair(0x28, 0x0, 0x28000000, &(0x7f0000000000)) 23:50:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0xfff9, 0x401, {"6565510d5f20d2c8ad90be815ddbc0e3"}, 0x401, 0x1000, 0x7f}}}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x4}}, 0x20) 23:50:52 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x300) 23:50:52 executing program 2: socketpair(0x28, 0x0, 0x810100, &(0x7f0000000000)) 23:50:52 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) 23:50:52 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r0, 0x30, 0x0, @ib={0x1b, 0x9, 0x7, {"51a8ae02a864922c6907b09b83189951"}, 0x4, 0xfffffffeffffffff, 0x6892443a}}}, 0x90) socketpair(0x25, 0x0, 0x8, &(0x7f0000000040)) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000000)) 23:50:52 executing program 0: socketpair(0x28, 0x0, 0x40000000, &(0x7f0000000000)) 23:50:52 executing program 2: socketpair(0x28, 0x0, 0x1000000, &(0x7f0000000000)) 23:50:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x0, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:52 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x500) 23:50:52 executing program 0: socketpair(0x28, 0x0, 0x41000000, &(0x7f0000000000)) 23:50:52 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) [ 442.447582][ T9698] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xc}}, 0x10) 23:50:52 executing program 2: socketpair(0x28, 0x0, 0x2000000, &(0x7f0000000000)) 23:50:52 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x600) 23:50:52 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = memfd_create(&(0x7f0000000040)='$\'+\'\x00', 0x0) r1 = memfd_create(&(0x7f0000000080)='-]+.\x00', 0x8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{r0, 0x0, 0xfffffffffffff000, 0x10000}, {r1, 0x0, 0x2000}]}) 23:50:52 executing program 0: socketpair(0x28, 0x0, 0xfeffffff, &(0x7f0000000000)) 23:50:52 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) 23:50:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x9, @mcast1, 0x3}}}, 0x90) 23:50:52 executing program 5: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@srh={0x2f, 0x4, 0x4, 0x2, 0x5, 0x0, 0x8000, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, 0x28) clock_getres(0x7, &(0x7f00000001c0)) clock_getres(0x6, &(0x7f0000000300)) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) clock_getres(0x0, 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40085) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b00000000201010400000000000000000300000414000680080002006401010108000100e000000224000e80060003400004000006000340000100000600034000000000060003400001000044000f80080003400000003f08000140000002000800034000000008080003400000004f55000140000100010800024000000200813e0800034080000001080001400000007f2000068008000200ac1414bb1400050000000000000000000000ffffac1e0001"], 0xb0}, 0x1, 0x0, 0x0, 0x4004001}, 0x84) 23:50:52 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x700) 23:50:52 executing program 2: socketpair(0x28, 0x0, 0x3000000, &(0x7f0000000000)) 23:50:52 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req={0x0, 0x3, 0x8, 0x6}, 0x10) 23:50:52 executing program 0: socketpair(0x28, 0x0, 0xfffffffe, &(0x7f0000000000)) 23:50:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:52 executing program 2: socketpair(0x28, 0x0, 0x4000000, &(0x7f0000000000)) 23:50:52 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x900) 23:50:52 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) r2 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$packet(r2, &(0x7f0000000180)={0x11, 0x1a, r1, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x14) 23:50:53 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req={0x0, 0x3, 0x8, 0x6}, 0x10) 23:50:53 executing program 0: ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000440)={{&(0x7f00000003c0)={'Accelerator\x00', {&(0x7f0000000100)=@adf_dec={@normal='NumberDcInstances\x00', {0x7ff}, {&(0x7f0000000040)=@adf_str={@normal='NumberDcInstances\x00', {"1ffb261b5bc5d1dad61b783bfedbd378d58c37e23a27ea686f4e9828a272a213398879f35349711bc2f24149a07d998d87812b092d26ccce946e756183bf2c24"}}}}}, {&(0x7f0000000340)={'Accelerator0\x00', {&(0x7f0000000280)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingTimerNs\x00'}, {0x80000000}, {&(0x7f00000001c0)=@adf_str={@bank={'Bank', '5', 'CoreAffinity\x00'}, {"9bef734e636c7ab4d5222afebe0056c76da71e37bb7e61acedbd55b7c565973bae1ac6cb87213a54d934126da0aaf97bd007d0dc4f28bd7b25a63ce34191f439"}}}}}}}}}, 0xe1}) read$snapshot(0xffffffffffffffff, &(0x7f0000000480)=""/123, 0x7b) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000780)={{&(0x7f0000000700)={'GENERAL\x00', {&(0x7f00000005c0)=@adf_hex={@format={'Cy', '1', 'BankNumber\x00'}, {0x40}, {&(0x7f0000000500)=@adf_hex={@format={'Cy', '2', 'RingAsymRx\x00'}, {0x10000}}}}}, {&(0x7f0000000680)={'Accelerator1\x00'}}}}, 0x21}) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) 23:50:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x5, @private0, 0x3}}}, 0x90) 23:50:53 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xa00) 23:50:53 executing program 2: socketpair(0x28, 0x0, 0x7000000, &(0x7f0000000000)) 23:50:53 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req={0x0, 0x3, 0x8, 0x6}, 0x10) 23:50:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x3}, 0x8) 23:50:53 executing program 5: socketpair(0x1d, 0x80000, 0x7, &(0x7f0000000000)) 23:50:53 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000100)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socketpair(0x28, 0xe, 0x1, &(0x7f0000000000)) 23:50:53 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xb00) 23:50:53 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x0, 0x8, 0x6}, 0x10) 23:50:53 executing program 2: socketpair(0x28, 0x0, 0x8000000, &(0x7f0000000000)) 23:50:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x800, @broadcast}}}, 0x90) 23:50:53 executing program 5: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="3b02020900000000fc653f0326ad1303960ca16b0e398b2c000000000000000000000000000001"], 0x18) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) 23:50:53 executing program 2: socketpair(0x28, 0x0, 0xa000000, &(0x7f0000000000)) 23:50:53 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xc00) 23:50:53 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000000c0)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@empty, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x0, 0x0, 0x0, 0x167, 0x40140041}) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e24, 0x6, @mcast2}, {0xa, 0x4e21, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x5, [0x40, 0x8, 0x2, 0x1, 0x400, 0x7fffffff, 0x3f, 0xd8a7]}, 0x5c) 23:50:53 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x0, 0x8, 0x6}, 0x10) 23:50:53 executing program 3: sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="b538b2339946b523f88b008cf08d1312aac3751bb57d161fb334d5047493cc46891cbe1711a9b4064044ee8eb6d77126ee135668d1e47727d7a0da2399f0d4d6ed1488835ed8df158c19acb375927cdcf99d5b1b44b9e90a9b8341", 0x5b, 0x801, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@void, @val={0x3, 0x0, 0x3, 0xab, 0x4, 0x2}, @ipx={0xffff, 0x1e, 0x20, 0x4, {@random=0xffffff00, @current, 0x40}, {@random=0x80, @broadcast, 0x1ff}}}, 0x28) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000100)) 23:50:53 executing program 2: socketpair(0x28, 0x0, 0xf000000, &(0x7f0000000000)) 23:50:53 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xd00) 23:50:53 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x0, 0x8, 0x6}, 0x10) 23:50:53 executing program 2: socketpair(0x28, 0x0, 0x10000000, &(0x7f0000000000)) 23:50:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000100)=0x7) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r2 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) 23:50:53 executing program 5: socketpair(0x28, 0x800, 0x8, &(0x7f0000000000)) 23:50:53 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xe00) 23:50:53 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x11, 0x6, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) socketpair(0x22, 0x2, 0xffffffff, &(0x7f0000000080)={0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_int(r1, 0x29, 0x34, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 23:50:53 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3, 0x0, 0x6}, 0x10) 23:50:54 executing program 2: socketpair(0x28, 0x0, 0x28000000, &(0x7f0000000000)) 23:50:54 executing program 5: socketpair(0x23, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYRES64=r1]) 23:50:54 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x1100) 23:50:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r3) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000000c0)) 23:50:54 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3}, 0x10) 23:50:54 executing program 2: socketpair(0x28, 0x0, 0x40000000, &(0x7f0000000000)) 23:50:54 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x1200) 23:50:54 executing program 0: socketpair(0xf, 0x1a172c3822a71cfc, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000240)=""/51, &(0x7f0000000280)=0x33) socketpair(0x2c, 0x80000, 0x7f, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000300)=0x1c, 0x0) r3 = socket(0x22, 0x80000, 0x8) bind$802154_dgram(r3, &(0x7f0000006600)={0x24, @short={0x2, 0xffff, 0xfff0}}, 0x14) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000340)={0x24, @none={0x0, 0x1}}, 0x14) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmmsg$inet6(r5, &(0x7f00000064c0)=[{{&(0x7f0000000380)={0xa, 0x4e21, 0xfffffffc, @private0, 0x4}, 0x1c, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="6b50700d4f9d99fa185fa4386190cd05b0f8223177597471f0fe3c99bf5d56bf114279cd8d16eeec8f3cf98df8f426d301743265d6bd04217e4ad4e25f01e73ad13784caf1ab2a540a4feff2673955663821d6c3f4864bf3db7a81f7333684b56595be4988c07a1073106cf619743b28dd028e", 0x73}, {&(0x7f0000001440)="d9bb6b262b155bdb1891ada96f8852ffcc183f900ff8f2cafa8242970ef8bb7e4a0301f6aa4863daa897f48d9daa2b9ba85039e1e3c1a2d4b540", 0x3a}, {&(0x7f0000001480)="cb91f53cf0e2bbbbe8f68750eab4dd04b1b91a20a0cb33ccc6b26e8562a4265da529fc69843368c7a2dbaa42fd27f8a0e65988c23ae91dc5461e33a2628a51e144526af135a11cacf7343949016875cc3dd10e2f59ba9cc3d7f9f34db99fadee70d6ef115a894c66b1dc8000c2d558e97dff4ef4a963857f7517e5ce3c5de095f653ba72a0f272b3e26012d6ad1b8a45a9c4a88850ddf9016b0b6fc1f6d42617b3164a714fb504629b2656197c37", 0xae}, {&(0x7f0000001540)="d22a1e62a81a98a8e95e2d771783f0d56b8025a8b8488055ae9861530cfae878eb4725d2797118a2cc915a1ffa298a611e6101837e85f4e7136f2698faf801db295103bcbe5488dd2a7499d9bd12407f8cbd5c57d63fef373c4ce3908e8cd90b", 0x60}], 0x5}}, {{&(0x7f0000001640)={0xa, 0x4e24, 0x8, @mcast1, 0x3a2}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000001680)="8ce3dca26eb2e6f7af53c7d1d350afff46633a5b5eddc56caaf2aea936efef1060759c7b50aee4b2ff1e08aa22eaaa3fe613ee23eb025d680e30e0cd167e3e990d3bed3c6b187fcfd3e08365feb5edd79b9ea7", 0x53}], 0x1, &(0x7f0000001740)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x18}}, {{&(0x7f0000001780)={0xa, 0x4e23, 0x8, @empty}, 0x1c, &(0x7f0000003cc0)=[{&(0x7f00000017c0)="44d29003980d9f36519e1f4fe45be32d4645336751af4489ae5a3dc32bf45bca75593a16ba479c0f61e5b35806401d3fba90517dec596cb4e4b2d57949d46c62c73f5fbf35ef69a41c4e5377a4b4cc2b577ff47b0c49b50bd26e775b2068d65eb9d0bcf5627445df363f4bbb14ae2aff6e7b5cc93f06cdcf68423609ac7874c1921db835451fa2a7c05515c8bb90ab8611f10f6499fc98aeba84f7251e87651f397caaa276f957c8c77d9813d9eefa2ee9fc88f1085242e78a19b192e415b585a3fe7976a83b0eeb65ddd2a1c637fda300efb417822fd1ab00e344f108939d9263c9bda9cc3c64b7cdc657c982de9bcfe5", 0xf1}, {&(0x7f00000018c0)="73abe0c7d83c5d254519b41e39f4174398da5ce13480ed3ce7da031366110f6112c76759d314761842321482db34b50a56620acdd6150b19442cb631225ed63964aff0ff94e05bcb3dd57d7b1f5087a4385ef95e269894368c1f8188ec0de82467bd3f469d1eb95ee765aaa0516e330ac57d986b1034099eb23ae40d6758318e2080d7eef9cee83519412641835f51c74964ae8617e897e4a10dcb81bb7b95a47d6bf11c18d8f8e25915b0a6b09c522dc69a7f1733ae6b0b95441f5f173b57d4f37ab6151c4f5bc38773c8b841297b14af64a918277a51eddfc7a644127d0abf5de4d538ead2bd4bbb9fa080291289e397f15845aa3336d1d4e5", 0xfa}, {&(0x7f0000006640)="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", 0x100}, {&(0x7f0000001a40)="c3eca7b8ec1998b1c448c0df426967169af2d11dd2bd914e117e70cb7976cd542d4525383711c65a7c11803207f491e5bd6d9eb9ca92f0e585d584ba0a0747c54df735920d045a67a16eebd6bc9038d3ad26ef763781e1d2d4dd3d20b6189339ed62e0b80e7092c01b3aca94e60f0e6a6c4f9c9626410725a5185f777ca55285ab0a8b", 0x83}, {&(0x7f0000006740)="d930d431b9493959ec55680b6f72b27337349ef3bb1b7c33115b5d83fd6554883961cbb350dfff8b958e009a79dc6726b172397722e02f9f12c9a25855593a046f88f0ec3666545cd6b5a190a08d26eb23f7359df7622f08df2f675a31d35066380447944f53708ce95d9e80870b4d79fddecadafc4d629e95611d02b717f1c3d1485803d0c64f9295cfdb8c6e8654bbff1b18bfbc6bbf0941a474bf37ebd2f0f7856655174a285aaa4e42692cff3c4a77d76ade23489961c7a65bd5b0d0ce4d6d259b8f2ce7c4d8dd5dd0673c62483e26b83ddad29ac6bc24182e7864c4f3b2a0315979159c1a153f2bce24ee003a965da0a83fa288d42dad2c24ca360241c6937658afdddd10e7b5868f49bcc5587909326263513a202752ba3d9d24b199f3f79785653c1fc9034bfaf242240b30d544b4f66f30bbd01ba46d86e2f48e8c0dd74ec5663dbc6046d3c134aded99799a1caae0c4dfb11c6a79261064181456de2d4d724a4c5b0c483059815439f8799578b50e07f13428a877bc1ae93c26abcda31068ad71eda6a849c998eed79c4cfd081c09c50064d4879a12957ab82bc14f68aa0a29acddc0d6c009f1325a1880d8be162d7eb7b9cfa7268a0e16b903fc2b603a51897016dd1739d854df28e13f4ee7c729247a06afcd5ba049781f287ce1f0eb01feba15042ed2bf0a009536818501b2b0ca458e12e86a6c71f35c251100f0dab12871a97d65126a9ac384019532ac184bdd6ae8e457ac037ec4dccacab2e0aaa04d390ecb59fb00e12c135b327ac5cb74c386f3385d3c385cd3fa337cc3955fefc10317cbde8610bd23791acf94337c6624deb962b2cc7eccc021593b52cbf1db9a0e180a09bfe13180d7ca878e13cb402d65c98f1da38edc7fba8d81b3f643685ee6f1bfbe37785693c5a34d5d3fdc888a8ea18db972ec22ed4811a1bb85f908402b54c1aa3c3ba23608df17e4469e48028bdbe69f0628632205ab7eb8dc05aa7cd12845b804c40a9522067cfa0a2a154dd7d3b5737957db0bf61aa411973fcbfaeac998449d372cb8fe73e47bfd08aabd69791e46d3477e41ec6827790a6707c7156de9bc36acd69ef3997088d75bb8d4710a0b440b6e3f4a94534e025748a877c42fc0c2b57d6aba272509f16b1e8573e800caef712a7845f0070ed3ab1f45895fa00877880b5d4bd334c9d9633d9e924ad745790babdbf426bae1630a8c2c4401eea118385bc8888679d245842d542cd52f405dc3fc7e553170bd7f2598307d4d2eccdb1896d0018aea62c668edb3991ab70d642bbd5a4b2252b024ab0443c547eee8607ba6991086c1acbd6566bee8f148be3ad14da0ba4a5ebd4432b8e8945d982317f8877d9c1b7f40f76deb0d9cb0fad0bd741fad47bcced31f0b72d8873b7e7bff3d1146b2a84317ad2da004cb5fbf51335733b1e5e3bfc24c260731569a2a50df4fc479d95a6c40e58f37e5be80e4150f4744c38fa1f0c4d1c329e428eb4f22451d5f4e682bd4a136ca816d227e74fd1c63fef689e3a307f9dc6c1c4088ec2e9dae7c2a0e7b728c0f855be98a18718972e4fafeb971e534bab31566103cc73c57e3a56f60f5bbec8e7b5669962ce6464e1cb620a453502cb3f0257a8d3aa0883b5da42892b164ea824b995cb770858c09147569cb3406adf72557afb7b0e5969474e9e1d465f2e6e3a11229217faaa0b4df4767ba69c21377ae4100cc00fc517d1c02cd7785d2edd00f73e64d5dedb6c7a5d506372a9d33363bd649f38e70b80735cbb373ea092b13fb93fc6729c837edeb5ffe8ec449fe9da635e1301f206a8d6ef969bac4faa409ea6e09bd3281c95607b3e77f84d8241deb3ab4b7e7c69d1ad452dae5951debcffcd876bbfba0c29c9cf96b4482d0e53876967c58ec17b89a5390b6f4fdc71e0402862986baa73201e42dbd1702000000778c23fef7012ebf1fbb98f253e16d0c156bead71b470c48c623f003b343be44d723cd2ec5eca8fbcc867147c95c4197d17698628d058ff965d5e91999bf3796a19023bb5879fd151471c03dfffde01134c4eaf98ff55ea13f50dd078e4755f16fcd562b0f21c3d910a7d0ed343c0798a4036dd6fb4159157a9b57ffe84251126940f1337c2ac8ce5d76d791228c639b24ee6f64aa9bd5e4c59016d5c59b2ed7183f5944551129b394856f854f70066403641ed379de5a3bdb0fb4b419823fd7c2d30267565698c2dd845002ffc4d09108f8d665b1b7831139829996b3693df641d460b139779f00ade2ab13889a7d13d97b61db183d4a10ce05759ab4c014450c34ddc4b00a8782c65e061883b7887acf5c4ba4e20d117504e24a39e317b33135fa94d5263d8c2aa7148c1cd7547a89c644464ca2c3080cf9c21054ead0561d03edb6214fbca23e7590e4658b26cfbcf28b1a3b2de1ece10f132b322234b893279bd426c1cc4d4247aeb0d3c37bd5d048d9638211556fdf90304b233e60eff8bd1e90a876837cb7baa22d0963d3c59cabc6f762b90834dc43c7410b98cf8488f3d3a5204a402f49cda7647cc7ac7fcfe94160d9eef6c608fbfb3fd94863e7b5a504311fcfcb5c773da886398606534e4aa82160540c1d3d98e3bc7a9f32fa0b6852ec65d669bfb9ddecf583a0df7c388a3d3b897a71648b5fac70705c87372449baab81fb82cbb90938bf399558c9ffb316f20f457a608e35adde8bf0a7d473b48314326a7f27e5c8dfc7e056cee6af0aacb59076e9d9282313590fedbd8df01f429d33635b5d5c9cb0b60d1c09d458a42d7470c881bd866c33a75b0777bd4649168a123d5ca10b9ca7067e149041cdff1172ef6dce14146638b2631681c0acf41507296fba503b65017815807ff7c16e56811ead067de28da4bcc7c89b69672ccf814fdbb61e494d0404410978e1b94dddcd3416a8e26f9aabaff3c31d9eef9c406c6ffab1cfd7afcbe974154ffb8bb813da2d6028e1d61295a86f7cd718bc8e3cdc9d8b1dda7ab36f75de0702ce1ffad7b69600ab4e8549f4c2ba1ecfb69578e482919ba325f910cf31c0e163eb3b89678d255f56bea6c8beecd8bbd42f8bd2b67d4865de3d3d1386afde4fc139dd6c8be9c5eaee91606761767b4993c528846a5def0715e9870bcf27e1a96bd1666b801eb571ad6b2c61114b6ace304ee18d81f2247a4f0383e5724b2a128ff18da395ba6c1f4fd2a6eee7e0e996c7c277c794e7992dfaf8bc28f3558ab8900a86f13b61aaed77c64afe755662e5d69dfbaf2477d0da4f44f372710948ee97585cf2470baf31c8982d5d78362775c10c085421038f0064eb291e4a7e726f99eee6c800c27ec56a906007fbef27d40548b9aa49bc51b1dce09b79409e0c424174c482869e95a6bff91d42f57b0dae8b8bc1f2a0f700d730f51c2dae7089679d9ea0d6d8bd708861ac20f450a87923c8199140ba865cf1bccdfb4f4ff872de0e237a34f316d254821bd521d0014f114acda12f58f0bf2faaa76f4d5ce4165ac6cc4f66c0f3d8616ca049337c3f8368e18f1a20170119373c667564214ae0c3983002f77f90389fdade3931c3fd3cd2e703a610b7c825ec46349a85b6c737b77d76cc237d245d8207231bcf81024248458129c98e6ec5064ad362fbb483736cba2f412923943f5298d6b0271acc11bfacdea1727c59490bd2d434d463f64ab8b78f0b1ac610715d15785262d1ae95f42f46e2fcd02a313915a6f6627f106fa6ccc6b60f2c676a572ebe6d40350767a7aca8a19404d67a4cc4094721463685858f44d89ebfd50ea9b9a08fc7dca134a6058c3be04348b82258385bebddc4bec91e54d2a51be8e685d292e091f8be744af7cbb2b71191a2ef2ffdcf4496ae0852df69c779e6eff16b7d30f1630f1703e5105c4433e8518f7b8765b019653c20e7541d1982ae3c6170f5e32e3450f906b5f32402b875c7f616dc18f2c0e0a24dfe0bc57032fa7cb2137ea79cfbfb3111ca7ca5fa37816d2c726c8e2eebf663acad19acecaae743df7272773574461f52a4bb9bbcc31b480f8f551cbb237244dfa1b13981372de97998de78c21cb44c8c117a2e56a001603d6b56d1a145b75b6626feb5381d5e7b1702fb14186cb9e2f64643c875db86fd42ba9c2231de497ef6ffff089ae89fb40842e4f266bf586eac47929899faa24ed67295e3beda454f10bf94eb553ca3c20d23b2b84057db0499c412d8ff1b626c99c3656e0b20300400b5bfbc4e3855a63861e94d3fc5c0a45c94dea05b6870e7c62161995da0d4997ea184b1321df158d9f027a75901c2df5fe900e65dd4080b2d1d3ef1337d2cc3d815d86e58f6cf471c7932b13ac2c12fb397cbadf5c822baac5dbbeef4f9e0118cd897cc0bba2b59cf9813b6c1aa2a7acb8e3d34cc03ab017b1cd8e8db56bf26e2ead4bd933b5454e7e96e8f4d7f21af17c7a4584a38ff52d6bfcc78fe78e3eb0409884651d4c45ee2448e71a02348f9a3aca7287fc68c2381627d625b59f02c4eb07585f29970c64fda914d494bab5a3da2dda17b1742e8c0da1619c6cab6a22663d69eb25f0a13acebeae7458f88da43401577e72567d5fb23c9a91ac0674bab668bc8e72c83cdc4c782d2ae412897acad5e6050530fcff3fd6b306f86fb452aecd9b63f1b3d7e917fc1f1613a410940842ec0917665a97a3229839337c580a87e3ed28c78bcef9000af1e832c3ca00ed0e08a25698871374b7701f6d071ca8292009326dbb713262a8dad520310e4f79d34dbfff30cbad556fdc4cf27e64b6220ab57b67b3f0d717100071c2c50c5dbd60ed77508034a6ac302604f2d216ead228c148a44b5b16655676973f9aaf5b681af827ed341f0d14fd3bd5d9786f4a7bd5893d2660a6b95f4dab2d6a17842d00a4c31480ee17f56a5f64c71bb908afcefdb5fd8a900bb809e53d8357b1743b4a0912d3eb4bf487f02bc8b2dfcebef0142f54d9545a17f7efb836e15d3a25d91ef2e01a46d2ac58761e9b4b1f8c01e97abb6f849ef071711d8efd2f0c7f5a78cbc8572b1e16913f1266280cba68952d8d46f83fc343872cc2dea6ada6e3c5e45ba563eeeeee555b3f66fbb3fb3303d56cd8c2fc27b10c0d32198b7c7b675ce5e60325cfb97c37d3587c4eb4d279d8f857c4e67f8f04be6abfcfd57c5910646356306092bbf866d2aaf63338548f029dab44467cd454f1fc39c753c23115dd40678cf81ddacff610f22435b62540b36cd4d4dba3da92c1089e505956787125283e5f125967e6785876edcb50996c85b2ca5c7e06d9c62c869c43543cc926ba752a0472697d8fbd67a4d16525119671c4d3ce7e3010312a28d0d735dae75f68f9ba86a7414216922e1fb5ddfc80500f10e0775209a14347a9f18ae33ff5c53fec1754d31108bd7c8f228f2b59ca76a1b0b625a38d1bbf515fedb0ea7105481cd92ee4c57a96409339696d6052a42bae8c5d0833d6b71bbaa1d35c91efd674bdceab42edc82d14a04bd3e52073ec2fb9fbb37177178381654fddd13b33ce0de5e9ac618d580908f8b12afc474369282e8af176edacee65fc1e9fef9bb3e69d156b6876b3b9e6b0d95dbdf66070cf65d94c0258b9ccf965f733803d402294dad4963016686aad5bc4dd374722e3ca8a0d68bd9f78775f8e25a5ba4323b7c3de870e7cc8c6b258471ee0118cadeb5d26a4c8a622ce2b68a4bfc0e1d9dfcbf66b642f3e4f261cad1f4346a9d4cf33c3ddb1e8dfe16bbae34804147d1fb5b38be2e7b948a20966520ee90e74fed9cd426da1046586645012731b3eb1ebc9d8f98ecfa539bb925ece4fd0a124b917c6a4b45d422a05b7d94b3416a223a1b56b0bc821dd20ff1399c1268d42de21edd3f46064039cc425b2f9b42a3dfe0a0e7fe3e0a1499e571ad1dfbbea42783e03a22f1746bf198cd086b680c5656a45c375487cbc356ad3588b58c50814d71adcd0aa0434099746d388c79fc0b76aa8e82c239a7cfbe7817874ae267a3130e7cfc4f1ea991ad7a32e3d71136085008b7861cd6ac0c8c744844df342df9e0a5fa4b88b8bd1e828d544595a6e51fcbaefe74d6c4e3a03d39bc16b7655b4263290debb0bce15c9b7a000b56f60ef8b8fd1018cb072ea5e34db78aea1c116c5640c5a5fdda594cf8ad841fb0b00f5edc9cb726d32994d0174082d3feeb11acd0fd4bba9aa838924b1a57ef181219a878fff38ca318f07dc098dd84dc2ede295d5c1262a9f799113ba7b9c5d38a3e5a3e672784054644d9622c0db773b9e7ead960195b8d498398073603f43dcd3603d4917193859ee8a8d507c2202886f441a76a1d43ea195c84bc2dab384f3b33a5feaec1761012a1c83edb4618dbb22d8a425b0f6945ecf8006bd3c59a79997f17f2bce6eaaa83f7841fa724a655c193a7692621dfba8745b07839000000000000da9ff5d22cf9f025c1f6d82e1f275647fa6aaccfd2bad6898147eb9569d804ed036f16084b13dc6614e4c906721b019032f54cd5395a91e564219f186c9381d6e0f3564d0503bbe33f19383cef53c017c5527f75a044831e8b7cda1e879a53e95c92247510f855faeac2d91d5e7e3a820b8f03f0347ffb5d8461580c70e036cf97e6844d4c72c1a909610fd6f75f1ae8aa80ca1e901f080a0f720dd6bd5e246d", 0x1253}, {&(0x7f0000002b00)="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", 0x1000}, {&(0x7f0000003b00)="2e6d543a21032df4d59d7d4206cd70d6f4d344e9492bb3507b8c1cc933dc53e406d6c7f8d6d3921b04fa0f64061540828102549ae00cd5d64763116dcd5e19498c743f1e0a1a60f263ac323b28d3bde343ff7ea91916c6854c1210394c09fe418c4228201853ff639689744ad8f670d12c28745ddd769eb23835093880280f494344b68d8413256bc192f0bf3d112ba4e84a80713b242608433b0b5e68c21942c874e034d3bb88d2aff9c341c176384711ced716c4b3388ddef36328b57aa3394501a7", 0xc3}, {&(0x7f00000019c0)="f5c2a482bbd9b24dc08b8d13c3c37cedacf9808b3616d54d3b212a5f62c59aa726e8cb755c2ebc86ea5c930000", 0x2d}, {&(0x7f0000003c40)="f53d31acd42e83019aa8ba05b6023630535dda38b5ed0373d3a8559bc883979da68e54e85ddc9e6cc31effbc979606000000dae7b6df62e3b5caf2150bcf14a8a484a849747cd289b8fd5bd0e29200000000000000", 0x55}], 0x9, &(0x7f0000003d80)=[@rthdrdstopts={{0x58, 0x29, 0x37, {0x8d, 0x7, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x28, {0x6, 0x8, 0x1, 0x2002, [0x8, 0x6, 0xd3, 0xa9e00000000000]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x6c, 0xc, 0x0, 0x2, 0x0, [@mcast1, @mcast2, @private0, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @remote]}}}, @hoplimit={{0x26, 0x29, 0x34, 0x77c669c0}}], 0x110}}, {{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000003ec0)="e3afec7d5983674ade4761589478643effa27103da10be253b76f64056a953dfe8c4ffdb3e70ae3df9d0d34b213d", 0x2e}, {&(0x7f0000003f00)="43e971fdc69758b52dbf33f4630ca3bf4b319c8ff086a19ca02cbdb2d0158b38c86f844d04f4078f1b32f026c8d436b05f163f31d64efb202fc748a6ca3e81110f1689fe8878dd23a57d75fd89107a8dd9ba80b2a1c8ac85f8334196931ffe50e7bf5ef131ff55d29d497c9bdcf5d2d322a96317a3619052904d219c71000928fdb7f9b363c86e328b64215c7fa90f0ef90989f59c6250ce1e65f4", 0x9b}, {&(0x7f0000001b00)="caa30995c67d520d915f3765f4f908b83f6ee1898210b4768ddbba4e5a8e1deabf90db4a6a3be11d0b15259dd7cee5330bf96887626b37cdc5033cc34cb0cf5ec873993c70917fee29dcce079f6ac01d4d887f14ac270119016147d55e026feb1c53c9f9d396c6425d37bd1194c2598563017259ae243553764b195574ad989c52a467c071c484b22b235779df1d725ca29fc3c83298e0b68eaeb96f1e759d66c7e3c286ff0aa6327db7a61923dce8489f774e41c35d2c0b7a78cb", 0xbb}, {&(0x7f00000079c0)="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", 0x1000}, {&(0x7f0000005080)="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", 0x1000}, {&(0x7f0000006080)="52aa1ab0bc7b38ed5b9014ec97f612142df40c6464eeecff419efd7f6c92e2054793218ccad2939ba6dae69ae282a23aacdec7cb7afd31a80e89bcc73d45876c8ce6c5abdc3f5a99fff70de2094fd2260cd402c38050e8dce5a2e0212a08c39e5fe18c79e379ea1ba14ffee9c1f0f34d17cac99375c637532e00b7c2", 0x7c}, {&(0x7f0000006100)="16ddb9c081e48ade693a3de7e9d8c0c505710579d0eb9b6d", 0x18}], 0x7, &(0x7f0000001bc0)=ANY=[@ANYBLOB="18000000000000002900000039000000330000000000000024000000000000002900000032000000fc020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="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"], 0x188}}, {{&(0x7f0000006400)={0xa, 0x4e21, 0x2, @mcast2, 0x4c0}, 0x1c, &(0x7f0000006480)=[{&(0x7f0000006440)="60c988c16aa100e04b", 0x9}], 0x1}}], 0x5, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r8 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xffffffffffffff10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@empty, @rand_addr=' \x01\x00', @loopback, 0x6, 0x8, 0x8c, 0x100, 0x4315, 0x2000000, r9}) 23:50:54 executing program 2: socketpair(0x28, 0x0, 0x41000000, &(0x7f0000000000)) 23:50:54 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req={0x1000, 0x3}, 0x10) 23:50:54 executing program 5: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket(0x2, 0x80806, 0x7) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000180)=0x40, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x8, 0x0, 0xc79, 0x2, 0xfffffff9, 0x80, 0xfc2}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f0000000040)=""/176, &(0x7f0000000100)=0xb0) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:50:54 executing program 3: ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket(0x1e, 0x800, 0xfffffffb) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000380)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@initdev, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x80000000}, 0x8) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xfe) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000440)={&(0x7f0000000400)="1d2fafa67c5ed18c0366dbeccb01ec4428b7b6af2dc7ab80fc4e9b14f8e46aad2b", 0x21}, 0x1, 0x0, 0x0, 0x1}, 0x0) 23:50:54 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x1800) 23:50:54 executing program 2: socketpair(0x28, 0x0, 0xfeffffff, &(0x7f0000000000)) 23:50:54 executing program 4: socketpair(0x23, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYRES64=r1]) 23:50:54 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x2500) 23:50:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{0x9, 0x7f, 0x1, 0x6}, {0x1f, 0x7, 0xbb, 0x400}, {0xac, 0x0, 0x7f, 0x80000001}, {0x800, 0x80, 0x4, 0x2e1}, {0x8, 0x9, 0x1f, 0x6}, {0x8, 0x1, 0x44, 0x23e9f84f}, {0x4, 0x5, 0x3, 0x98f8}, {0x2, 0x1, 0xff, 0x3}, {0x1, 0x80, 0x2, 0x80000000}]}) [ 444.507375][ T20] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:54 executing program 2: socketpair(0x28, 0x0, 0xfffffffe, &(0x7f0000000000)) 23:50:54 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x2700) 23:50:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0xfff, 0x40, {"2df19e46492919381608d064f609b0cd"}, 0x9, 0x4, 0xa32}}}, 0x90) 23:50:54 executing program 4: socketpair(0x23, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYRES64=r1]) 23:50:54 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x3, 0x4) 23:50:54 executing program 0: socketpair(0x15, 0x0, 0x0, &(0x7f0000000000)) 23:50:54 executing program 5: socketpair(0x28, 0xa, 0x200008, &(0x7f0000000000)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x1, [@random="d8937983cbf6"]}) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x1, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x800}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x56fc}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 23:50:54 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x3f00) 23:50:55 executing program 4: socketpair(0x23, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYRES64=r1]) 23:50:55 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000100)) write$snapshot(r0, &(0x7f0000000180)="95f2f74d72e2274ea700ea17130d65f10d91d2265cd0a82cf7029855124a63cf0aafaff073451cc4c2815244ca6679fbb1f66a5299f1aa81eab0c6017a51b731b16450cad26f19a08caebf637a5ea85ded4d5b578fb9bf5fab9a50f2644077ee3909eb6d7e9d6cd7e660c6814a9fc89708354cdfff38cb9ee6ef975f452939a11e36211dcd0f2de63fe4b81610fef4f7fc66103470191052dde3e782b46128cdb554a0829fa2f655e27b21ff560f523394ca11755bc48c46f0d681f439debceb9c19d178d5afba6059c917ef9661849e043212fc657f46d9b9dfbe54a0cd68358dfcd220c5", 0xe5) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000140)={0x22, 0x1f, 0x6, 0x48, 0x42}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:55 executing program 0: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)=""/1, &(0x7f0000000080)=0x1) socketpair(0x0, 0x5, 0xfd6, &(0x7f0000000000)) 23:50:55 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x4800) 23:50:55 executing program 4: socketpair(0x23, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) 23:50:55 executing program 2: socketpair(0x27, 0x2, 0x20006, &(0x7f0000000000)={0xffffffffffffffff}) socket(0x10, 0xa, 0x5) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) socketpair(0x2c, 0x6, 0xffffff80, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000001", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fddbdf25620000000600b300000000000600b300000000000600b300030000000600b300030000000600b40054010000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) 23:50:55 executing program 3: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:55 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x4c00) 23:50:55 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000040)={0x2e, 0x1da0}) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000080)={0x74}) 23:50:55 executing program 4: socketpair(0x23, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 23:50:55 executing program 0: socketpair(0x23, 0x800, 0x3, &(0x7f0000000000)) 23:50:55 executing program 2: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f00000000c0)="0255c6710476617c3b7d3db3efad10397685982cb8ea8aa2ce7ea70c9eba0274a9827fb5b6de4ad070419eddd0b4ecccf8e9b5c99176338f69f94394f1ada8869d9b9e6e67e77f8175fc325067381d6248aebc33638ed6106812cae88057cf5b94a4018f9e01fb061555f4510958b0122aa6a1b15110dfc83d5a64d3321a57dd936e02643a6d6b03f716705437dccf693c7e59c529861fa3465b55c2f3bf45a61d51bcbc9d757b35924095fad397f122ba28d8418ac098c3e07f89d0ed0577169fbab8c1fbc58934f08772823c95440ab9fdc88447e5f059179f2bcd4ca7867ed8d733c6da9c7d829b714a07b0b8988323b967c73e887fbc") r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:55 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002c40)={{{@in=@remote, @in=@private}}, {{@in=@broadcast}, 0x0, @in6=@private2}}, &(0x7f0000000140)=0xe8) sendmmsg$inet6(r1, &(0x7f0000002b80)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast1, 0xff}, 0x1c, &(0x7f0000001480)=[{&(0x7f00000001c0)="789c14aa5f6ad2871249359a58f7a00dc8718afcb23a7bd0e71e8c0f637d09302c699cb0bf66fdef60412761bb2c0446e3f256bc4ba34916d473005856dd5af96a37fe61d2b18d54c83183b41adca84a51c80b19a14c", 0x56}, {&(0x7f0000000240)="354ed6a091471890b66f2020fc718976ccd9df91613e7bc03829de832de69111297aff7739af0905175107471f443ca573ade69a388c114efa88756623d18232357d7506561cc14b8641ad8a78116f13c2e1e88cb6ff25d19be9c4a5b9d2b13bf97e2f60137793af1dcd705a61282f74d5747c22de3f35940f20623a407f23cd62c060138a9ee9f9a0b74605ed7bba36a3402833bddfc2a751b4715382837b631fadded0526ca9243066235db44867a22d235191e8976ebe50a3e08d0a258aba498957882e42b66b7571332398623bfe66c699e2ab8f10f35b8c548f8756f0f874", 0xe1}, {&(0x7f0000000340)="e812acb1c7c38f3aebcc7ea818bfcc1861b9f9febca2c993ffb6f1cba30f19141309f04e796a2314184126cda1507f51078dc15538010960e089a814e5c88bd304c752549510850b4f143266a444241d995783ddaaf6600af829db166bbdae3b432baf5921ce0a422a03432411003e7eb7eb43f9b6f42ae5e6da0ad8ca5b05c3b06966a118b6d184cb7c7c6346f120360d40fb6b349af7923f9d9f6d70ae97ea04ed37beaea2651415a5515ecc3bd3032972186f781b3b8d2e357adbe606df1b2aeb613fb6361cfba1cf3e6d0e3f2f762592d603fdd2f15c216406e2984f94fa96b81ac8587587d18188b7a18df34fc45380c27a80332e1f73429fb49ec2ae5f878d0237bad53680a866c6868a7bc69385d1ad4bb41361b2d289ff2563e74a07f0b73195136601346586c83b003d6810b420d162d9751d5e8fe8294559b1b4fc5b37b92bf2e9c16f5dd0e9e93b4783b7d84baa44aa525c295566e9a567fd9a017892c2bbdb0bc911974cf10d9a1fd88ae48d7c77653a7057afefe57872e7a1d0c5d07bfa68d61527566f50d6b2a9ed66012c299ecbf73afe6a5d8ea5dd456959e6174613bd3be117d77b43121b5749cf77163c3246240889e697d787dc41412920eabe9fb026a6b39e9d493dbccf92961b4fbcfc287bdbd5ce530a38ec3da042eeb842f4d16e2d528450d8dc561471733acc4c29e9bbb0c851a4561a62ed07d9623c796331c6391b9b2e7842f5c6f66c3e493553eb2b29b90424cae633684b18ff2ff6ddb1d77115fa392c2c48b579329e5f768239f3f40c59ef4111c458c696536b8c47d30c99b6c0cae68f0bf2935f8c6b2b15b8477848c64ec95deefbd86cca85fc72073a8d47f5d30e01653315fcba72917f5da59fc8c88917951db334eb94d5dcf5e2894e8898d6bc86c8f238a85d8725b4fc7236f6b0fe84369f3d7df12d5380bfaf510289139cc432ea026303b169f5f1091d46d940b392aecfc9938cfb266f5d015166328c29bce9881abff81464e47494db0b8c8da9761399c29242ff82f1d5b3faffa7514ab750290c73ae83ea24768ec9006cf023be498aedff7661728bfbcb4fd0c56da203225535f1304b7bacf27f6c54675116095f48d5e220589f88eb890827cb884291d82663df71abd632f3b0a333927a011bc47cddb010eab828cff8c1c576941191cf05131d1a1715e50c7b012c0df85f7f8551ba511aed8ea3e5eaeec721af8dd453d8b48e5d3e78d0b08569ec5fd0f5f872e9af3b06b3ec08a4e55ed9044f90c418d385c3e90c6637b56bffe7de71c11b16387def94e017b3179dbde294c699e8bf7e23f5553cd8982b120b7a57effc422b308503dc957324d0fcd32fdd2632c02ccea854771a789ed59871a8162271a22fd129eb85c8905e4c4ba90261fcde8028bd8628936e2921bdcdedf86a04e0f0949693655ac6cafee1b26fe0d7e83336d9a0d4bd768c9ea4d21fd4d8b65d452adf64965e121a091a5d182520f3049a54c62eda6bfe70159cb16765ddf51e937a7e16c6a6ce29eecb0461ddf5b8e252de72d9ee50eadc37e2118aa989161aea2bf3bd0ced7f57907916d3b41dc83b71a1754c4826906422e28f1114a8cc46797308bc24cd8e8c34568287f77fe799fc22412862e2d9652a6f4297da6a33f490a289719a1c165499ae0ac204b6a8a957512708cbdd7bff0c2c6b5f1506a8e28ff6d6ba5690c0da394aa0659f52702bfdfda75f4581bd4e27f381769b9bf7673dc8dedf0293e84df66d815ee7f941ecdff86b210ad1480dee445abf82a0b35f80151f663a7856e7efe9d00fd0760b07c812da97fa9617c3bbbb08fef849218a7ae105a33460b89dfcfba523850765e0192eb3fa248f7376ff7eae3824b1ad9c7baeed88c01d6b8062ea4fab660c2f40d5e3a48a8a7429b94d6459cd624ae5dca09c695fd864b25d6832ae615b6ef6b91e0c8029af3c38fa0383f982271b6ede45d1e94a2e687f30ed0d6c9739df300ed852996b9b957864bf280625bb89f9e8b5c19e1ed872cc928df968035c50fe448560a89c8eb4332c39a5290bee11ae0729dda3e15ae6ca0aa2f1175a2637b635b7e2cf8a49b4ce38abe9d00952ff2365236fe7569a4b34aa57ccd8e04fa0ea872b569b64a3eba04f84abd98146c66a0208f530e8109eb15fc006e118a117664c473f94425b8fb42e801bfbdc8928660849f4425f9ad62b8ae88bb7db2dd66f544ba6afadf7ab7a303cd29416cb9b29d7824800dce5a95803d54cc9573b85ad8c1ca36b74b1548c94a11fb83da4d1110f306a7a37f0e43bf3b72e17c9ae393219127a3d3d1c4ff150013a51823911cc3ce3fd701687c1574115609c1ea21a2008320cffc3b52dd994cc9e75d2742ffec489566860116abf662fc38ae41b746b4bc7279b8c6fc34f04759f83118c736be86f791db5890e0bc4a64f79de29b64d20a89e29eb08ea4aeced31032b02f37d2fa9bf9ef358d740038e2d71c788399820876598493874b15e199964b34a83947b29b4c73680ba403afd8f6ddd37ee70c25430fefcc58c9dbd8c2c65f71e4afaf6431efaebd21b6aed7920819a2efa536305f15488e05825537d69025376243dad1c2986b141e0f9719ebd307c100c8808d0ed690aae2eb646472f0b4cf8eee52da13b09a5ec073b7b7d722e88b3b0d8da220b0174cd07a7f6aebf2d1013d0c4acfa181d719ed5edee4ca65dd7899ff1e66b97f894a6fb3857c0c399c0d050b79bb62095bfe121ae3b7f1c4adbdfa46fd3a82ee1f2d53b230dcb8991ec2e01500ce8308674f12120b8372300df80832c89f5efa2ccf2c2090f479fd2a0fa979593f192e85854871a38fa59c83d0a33015582432a3a88d03cff2c95532d5181224de2268370bc05073e58819cc10349c81adbd15156eab4e779e0279a5cefe6f5999ff71258e38f9640afa3868c2ed480b1d812a9439fa15415d74929d399526077d3ed48efd415027c1f564a52f461ac6903b88e299de22f7d1c773e76427b0f91fe01d57aa8608e774c2948ac635e3b2d6d367e6535a136bb97794eb8b019b822cf656b9c4bf9928f81669a5ae782250f53a9c6151d190529c0e1bd2973b377742e6b73dd3efeff0da3891bd5467eddd33f229546146db64f5a3759efadf0b4a03e2265d1d7102eda3be3534026601a6386256da3c4e27222f289a63af04dbf10876606298e49041e6fe4be75bb1aa0c89ff1569e852d1ce7d66f2b3d6c09f78babeaa43ca447376cc3b7796ea1bdcdea747db2f2340c0a7cdedc9329346e323793f986db64f6788ec95905c4123d069e37c9e31b432e7b8372b3ce897fab0429717705011bdfa5e2434911b20d3273e8dc6b36816385741c15830a95d589dcd51ecbee0ee4de1d2d0c8a557564b23d64c2fcfd9a06461d1aa3b12067f75d547e4b682151809f8eafdc18137db2037dbe1423ed4bf4704d10f984ba117f25304139d95b08f5168aa4e7f05dce36fcbc47619875220bf544463daed613c32cac7e0f49c7814e4fe934c189bf0d9f86cbd6ab409733d97e06dd9969f36611ea0d147ba3970c78b1d0bec950602fd9e2332ba77ffbac25c6a1c4e109a48fc672b657e835b037bf33689b03214b0ae1dcdc9fba8cdd7977c75402f655a3a86ff2c9b61afbf2a41454c441a0debb14ac60f8282735c6789d6d05c02e9cfa005ba7d0f8311f2137a25e6675dd3bf0d9bd8101876d9cb28ed158dfd27896776234307f550e5fdcf3876bc4cc9eb2440dde9da3b8a76f22d9c3cc58fd54a7e6455b5a4bdd5bd455e12a9c87cdbd2a3d4f3c770f2d91f5abc0f3d4b566f906ecadcf127b51ab5c12c261f6ed6c6743d6ae732b8e34f9c703f9ea2594a71b2567a049468dba4837131e829a6c9170865b3972ff591ab48eaefd22850b80ad10416f2658a89a3b17dce32c6b0e884434c3dae936f960be41b9b4257edb909f8679d4e2515661961a5c3aab24d4444efddeeb0ea346f5797e7cc5a57583c2d25d10f8fb957d1bc21f5eb48aa6a290e64996ca098a5550db889fb6868676b7cb4618ab616c707f8e2e5f54c2a18c75a4ed11b61bfc7070e987bea764bf453de408785de2b50cac7111d856d509c4a389f2041920021af4d3c152100091e8a2a831db797c11d537b12e4b86cf3b5a21565a6bf98262f983a73eef990fa520f9808cb3bcfa40a180a596f6c6a099b7f8af0ab8f9df43fa57bce2dd7647d61302f071d9ab375001ad00e8d6e8d70752a031719bcc5287aa4fb746d21965a0b40f4290ed5297c77da582d6df2f9db134e898c08df473a417bdbe2962d053797c080cfe4643001978333a1a49afcab022c281fd55b0d09f98b8fa0c3c682ff06b12f22410a217ba22553e41ffca148ea9454b926ab07ec66c295b5a53373391843bf9d9afa8b4169fd1f473941767574540072c76f28e949717fe8adb841b63666d7f497cd728d15358a59abf7ddacd5a495e30135a39bf55c6394f8b501e2a0cbaf92d9a740be9b835f0c5656765c4d38881634588d97539fd6c78a7e8f4d5fc88be515ac7a1535b2aa3c87692f7751bfd347166713dfcc70e1d5725c81e806b308f276ded2a5f9909b799d664e10ca2b1b5357fb749da08a91d22c199b43005a74818b6f7269e6506240d27fcb6ec6d713980df29caa6f50e9a2d96d30452182eee846e5d07eef5c319d0ebc4c740e6e34ce2acb96f8e4d72fa3d1334d45e573ee8e99d9ef65e59e1ef0d2bbe039b81db984e5e82a171d4d7e3ed3e224f200e56558d0191082761a740383d7fa34119c870bdb498deae775d12ad27ba9643e8e5c681005943e5f62e325bc486a9f0a8b46a5e348a7a6fc7cdd7225f64f35e8f2da66f280ff0b6db17e6970415f6c0bbf2048ff7a4fe613994bd8f7ceceddc7c9ece990fa6f44af4c82bcccc6a8a804ba175cf0775c311c444b1616fdb513cb30006adce48274aa93920f5aefbd1e323f42294408def45546cca0aa9d6f6c9af4be391aefcc91f11bad768a991d40e515b01b411395920220c4513a637a2d7e6eefeed3cda6a6b279aa591f4366cbb4bc738a67e4ea00246b2a6f747329adb43d755258ee309703c4d5ad025eb3c27ff89af83b5f026a0ae1127c127905eb7abc46c85a1f5491f1757adc31cdcd48408a717e281753520e41fd0a20991f91f4a26c6b601b4b156e1b1785c5cf26ab80669e21b31d0f8dc9df03a6fc4f37614029ad97b004c459cc4060ed6ec74f29da3dbbf111fa7d55cdf377239cf37a67afcb4cbb337abbb9e322d0752a6e443331c83ca458c9e3a8c61f3530751e8cef1eecaeaf2a72f47176a6adf70de4aa8ab861230190707087c11e289ab46cd25de9e1d21bd094c77a87a443230710f9bc95230af28198771021c7e327f519d67d1960fac5c7bb28db54ac5d4bba59dadbdd41a5f645f7ad6327944f2ca5913b6d7ecdbefa693a9ad390bfd4c7c5c293f3d8cf90cd5dcd8be111a596f1c69d91b41ce47a1667bdc8f8ba7d21e4fbdde7dcc29e4444bae6b9b3e2db2844396202eecb2f72c863f88642be3fef0bb67d0d1e0039609736f7043ffc8dbef8c903151c2f7ee527fba282f52bd8cfe662ec78ff8f09ae937fea2bd1a74a8f34df93c9500f4f869c1a228ce37041f6fafb97279c0436d72804c165932fb45db2f0d3d272b18e305ca9ed08331ba944f178dfad876a559281f7c219f0fe4418c3fd4d2a838d82d815929f7bee494f87a8dc03c8de0d0a2ac186108adb03c38d3ae1c5feb176821cabfcf0ed266cb484affeadb1eb272", 0x1000}, {&(0x7f0000001340)="d23fc451f9fb264496f7da60bedac72ead86c4806b9a3aa1c62bf7dacc0e6f2f3383ee01a6d607f65352f2ee896f8abbd1a6f7d0ccf2c118ae3ee86d9dd0fcb3a0d5fcb197ece6c5865fb563bb27d2812619d6c3d9d343797a03dc7ab4eb9dabd4e08aaade89f538ee01ac15b759bb975778e17f4c23ac1477cd59504ba672086fe0c9dd63e54d26f68d7e3abc5c1f8a2d48c1d471216b0f29cec19ea80cdbea36d848b257d4c27840b392c3e60a237335fe6d", 0xb3}, {&(0x7f0000001400)="a1372177f52d94fafe379b96ac2022f503140b040fda117fd4296bc2be6316f31879b3c76f4b13983ea100fe539e1b06314ac467b78a959c56e4c41da6e0de448a7a935f92079b3266565d0a9a335a1e4f9ce7b8cd0c7c5dfe86e319562ebbd96c058e3ea36072eff4cf36b502d663f545806eeb", 0x74}], 0x5, &(0x7f0000001500)=[@hopopts_2292={{0x30, 0x29, 0x36, {0x61, 0x2, '\x00', [@generic={0x6, 0x13, "4eff7112b615107f7d492c77652e8a46766ca7"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x48}}, {{&(0x7f0000001580)={0xa, 0x4e23, 0x9, @loopback, 0x4}, 0x1c, &(0x7f0000001800)=[{&(0x7f00000015c0)="a72a0651612e3f380ec42e986f158afbd8bc3f16ee930e2898ed0dede4fe6b70b082340b047359a71f00a7cef5c887ef86f665023058ba7495d4921b739a042cb04890294912949659ef7d93e378fd3617d3003269723aec1be779b95fcbe86aad205b31db9bfcff75fab6d3cc29dc320c094011b549c763447d59e1c9cf3657bd8bb6ebbd3e28faf7071ca2fb1e50a226ba7398b7ba", 0x96}, {&(0x7f0000001680)="a0fd0427e03b55c8a936dd96c02e7266a57c7ba882293a6f471841d737767c8df4481dc6f49997cedd8206bdfcccd938a4072e80295b68a0198723d7f0078466e9f868b115a9745c99fe5beed4c7828b5cfdfeb6297f84429db13e833d94dc64454838b7c07db7ea426d64c8840ba7d7c4d3c5b44284bf6caf2059a4541dc8a8987fff3e67e557ed9ad5ed55d700abf894a0aec2e0b0035c9648bb6bbad614cff181cee7cc8c60c3ca6fdf050cd26f5f338067fbfe44e2b5a6807f2bf5284cef1587d40cc4f84a59c3e878ffc2c385938eefe99928a84c4ffb4752bf5ad5b85b9584e31b8dfe4e547819", 0xea}, {&(0x7f0000001780)="e7706f20678fb912828e2c8003f69f4f010e051b7b51a068593416c7f1950face81fa5e9d7999ad3015d4bcbbd42e1a69b3ff23bcee83d66e63f2d87c0cc0846828a14cc95491c1a92b59d0028476d748662758e89cb4b260a3aac2b931a826af8a2b7cc3f55734c480392ab35e613bbe144df8ae3e118", 0x77}], 0x3}}, {{&(0x7f0000001840)={0xa, 0x4e22, 0x5, @loopback, 0x5}, 0x1c, &(0x7f0000002ac0)=[{&(0x7f0000001880)="1a0296a33d4f70e0abca9873282549c0993b01413cc243e77b34565eac8b0365567ef5250c06dc4c2727700422abef8944542f5a237ccb321d932d6167fd10e1d42812f165d4ea1494ec0cbcf8e1ae6b2e36101dadf7ea96c0d10799d9d70b0eea5c73a17bd3e8059958cf84064cc51902f5b803637aaca27d8544b97a49c29aeb7d45023bdb2abd3f33d6bdaa4d0933e65bfe82ae5fca9e9e700816fa5b074a9904071ea23764833eaf7ea7fd99dddda5103aa80e9a111a99f3486e997615d0aac7076dad5f185372504053ebe585956f", 0xd1}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="b29c0e31aa9ca49cef72e2221930222b8c32f5aaf6fdb8c57c2c6083dca0dabaf7f07c30e678fb1dfadb029e0e0472f2ad546bdd5ab211da30d3aa249c7e12ca9442533f8ef873c5ac3df3fe8e53f6eaa4b094788588b2dd41827a57aa449062bcf749d76106c403cf6112ce4d2cbcd3382cc42205", 0x75}, {&(0x7f0000002a00)="69c083aac6e48631c4c13e153be33e47386d2e2b230e727d554bf5c03b832e73", 0x20}, {&(0x7f0000002a40)="aec8cde6bfcc88ae155014e5684cb2e374f08aff330234dd346af23e7360cad33c7c9c41ad1c8d5bde8222feb3afb2ee07cf4c5f54a8a928ce3f7ea59775eb0a09f6bae15d52ba94cbdb5c4d16fc79abf3b425c5057e3be88294615f32ce4908f547ce02c775ad969569b567e2da2f2f438b4bacc93499ab", 0x78}], 0x5, &(0x7f0000002b40)=ANY=[@ANYBLOB="1400000000000000290000003e00000009000000000000001400000000f9ff00290000003e00"/48], 0x30}}], 0x3, 0x1) 23:50:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$snapshot(0xffffffffffffffff, &(0x7f0000000380)="798a967e1b2f3a9f504d526059bad30493481a5954872364ff13e8ff3bd4760b17ceebd591f9d3bff748824db7d801350bffb53a776792e05c4c1ee64cedc4954d357f9d3a3a9905ba6cee8c243ff5ee7a3bb12a83676dea959353a3c92a6992aa1ac021fe937b5d99a3dbb609cb0b48cf11741f759d5e9b0240aa64c531312ae18233a8854be8a1c1f0a9ec1cd956a8900744157ef814b2640d76c0c4dc9bca1de2624690a7ae2e59e5bb19853eb475b4c10b2c197febba080d51faced4f8f83a9a0ad97cbb36630990bf004da1ed5e7e98f171d66261", 0xd7) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r2, 0x6f2}}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0xa702, 0x400, {"8991d8e292deaacf431bba10dd0c3123"}, 0x8000, 0x8, 0x3f}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x0, 0x0, @in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x90) 23:50:55 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x5c00) 23:50:55 executing program 0: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, 0x0, 0x0) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c, 0x800) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x5, [0x7, 0x4], 0x7}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000200)={&(0x7f00000001c0)=[r3, 0x0, 0x0], 0x3}) 23:50:55 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x11, 0x0, 0x10004, &(0x7f00000005c0)) r2 = accept4$packet(r1, 0x0, &(0x7f0000000300), 0x81000) r3 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in=@remote, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) sendto$packet(r2, &(0x7f0000000340)="885e5b7fd5b9ff46b686940125d91be2ba21dcdd4e569ebcc1a0e4a00b34a79e60be61b730362d11be8e8164399b01c3b9d40b91a15e97c856ed59427f129c3ec3464fe8eee088b6a66a0e2d85be1a85d492a711dadada7158a469484bc38b36bdb23097b8b2f5756098268367d266dadc5c6f0610f039b4ec357e18aab14e7426e8d2043538a65c024bffcaa1996c6f", 0x90, 0x20000004, &(0x7f0000000540)={0x11, 0x8, r4, 0x1, 0x9a}, 0x14) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000020901010000000000000000010000050900010073797a300007000008000340000000060900010073797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$802154_dgram(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000180)={&(0x7f00000000c0)="e93ccb27e8be14be6b28dc27b159ad5bb44466e7426846c7fdd340086c69585b827e5c820a9e0de300930ac9f15f9b96794f15ac3cfacbd360b4810a6985ea0eff4b4031ee1f1b63bfc36cd03dd8d6d06d13727c4cca84d4460f0872ca4cc87d0f7cb86ac9f8b9a25e87dc3b7f1b982348fcaf2788f848da68af5b279729a2cec40f140e782448e1fc012a39329d32c5de949d8a21ec8f8dcf62c189832ccdc7db57ba6bb58097cbabac7ced1f47e0a6a4aac315ffc189d9221a", 0xba}, 0x1, 0x0, 0x0, 0x10}, 0xc040) 23:50:55 executing program 4: socketpair(0x23, 0x0, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4) 23:50:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x602, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4000) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 23:50:55 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x6800) 23:50:55 executing program 0: accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x38, 0xb3e327369fc7b2ae) socketpair(0x28, 0x0, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x7, 0x0, 0x7, 0x495, 0xfff}, 0xc) 23:50:55 executing program 4: socketpair(0x23, 0x0, 0x1, &(0x7f0000000000)) 23:50:55 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x80000) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) socketpair(0x8, 0x0, 0x8, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x5, 0x1) sendmmsg$inet6(r1, &(0x7f0000002d00)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x10000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3f}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000200)="5ca8a270f688c2d72f9364", 0xb}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="e34c864b5a9fc1ec3b3c3a0c8c7d1fffad4e83b3f4f72cec46e9dec17839993e25c86c290aec95306b062360d404275851dec61bfa1ce62c4de2cd26a7c885949c4947fa105351be3078a66ce4f691293d7783242eea6dd7ebe6ae88404f", 0x5e}, {&(0x7f00000012c0)="df996f59ff9cb28f0702df3b5254d543f1701c908fdea6a83ec56b8ee0893fa0143ef9c4257b2ee9ed536b7e1ba6b7ba45ac4ef63f3c2a5bb89847287e7c421ed374ab4200fe31b9e9aea456caa442f268b4487690a032", 0x57}, {&(0x7f0000001340)="54c2543550246c58f49cdcd40cd32cc24e565f3a95976dc3099e39826c48af324155123b9fadd42adab5456041699bc9c55c8c7d981c46065fffbc807f2565ebfd984e023976d7b40e6ac3e5249129465f6b8b799e6aa87b00dda61e698842611d34ba417ce15efe1fbcb3eb48bdc2ae4f56496c9277ef7ce79f0c3ab1f25bcf3730d3511188964678c698b4c3e13087f4a376c58222274dec0a", 0x9a}], 0x5, &(0x7f0000001480)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x3, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x14, 0x4, [0x7f]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x30}}, {{&(0x7f00000014c0)={0xa, 0x4e21, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x48146dd3}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000001500)="25a29a285f6981bae1d8c66f3214d808aaf67b01dc893105616f3cfd6ae7f56ab707f12e7516d26d26041fe318fc30ffcf9582203722447d9bfadb7a68a91f418734a2b973c76d8f86574ffc57d7c35032d2c10a336714b991b8dc65cab62622", 0x60}, {&(0x7f0000001580)="21bdf00e9dc245f7dc924e8420799887f1930c021e6ab8cc7631e639f2be933bf2add9cd1d3692a52799342c0fd080720cf481ae1674f1ceb58e1e1f738a52b62784f7553c1a5c2a1e51090b49838cee956867e8060a260572e58162277073eed5a9cea972a88bccb8ede62f2e044c7c5de163c5b817353f92d1a3fddadf456bd318ae", 0x83}], 0x2, &(0x7f0000001680)=[@dontfrag={{0x14}}], 0x18}}, {{&(0x7f00000016c0)={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x1c, &(0x7f0000002b40)=[{&(0x7f0000001700)="517ecb651f45624014441c33c465d7eda6e8cc459e5a19c36048f9931459bc22a15e610cee8c71ead4a5095cc7716787eefeb5e2c68b56c29b8eb01ec2c14b603e42c075096356fc8bbfa2db5973b874bb86c59379570f700a79b14e032906dbc0fc91b60e1eb465ca79cc3cc61426a4561453e5292810e8d9e3cdced816ff64f6bb478cd84a5ea887481dced18a1b9dd7bc6f15126f49666d64e3bc12bac9ab88ccb9520f1f2ae7e4d017d04f43cafdb53cd7dda943b6f509e1d28e280c3f1cf670ce0b2a030fc7c193fbec8d3f524aaa504eaa35402f484d62be8ef83f3f61e575cb21885094514c31", 0xea}, {&(0x7f0000001800)="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", 0xfd}, {&(0x7f0000001900)="7aed55d6d74481b0a66f08dc9fe84f35f5a044453659da672d247a6175c93b5d5b05dfabed9dc1be1f865265c708fd77fcf9c1e76228036af54496df5bed0032accc231161f92129a3ba4e5f149eb005278c4c12eef07ba1232d81432d72783d329ef9d9b3be575cdbb75212086d5462b74e6938a5b7c11bc1e31efb3e611f3012b09c", 0x83}, {&(0x7f00000019c0)="eb8fdf5290611394080ce7affc6a9e3b271b91e0e8c4262e326b1a65d592803ef9c255e8f49e688d27af515b99bec166a0244b7ef55fd297444afa0cb330e9c285c37c5a3d134a8f2a17f5558f7ecff7b73dd12b10c6b5b91a4eb5e5a87c13e15cdb7fe1a1bb3c7041da2199041acd3c158f9bb9c54aa3249f77b604e32cef5207e68dd0dba3fc8ae8864c2676218f2a54a1da8e54d8f470379300f255801c14031e1e232e5c3403f2489d77fc4f79f9c7c4cee748e560b4953cc946a312360c5e439a3d91f99ee9e640710eb299dd838271bef5077f88c59c", 0xd9}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="1d3a30f058dea532e75bf027f9307e339dc8a2e07cebd24f33646c2dc7da62ef82bb54d501b0d0ea34610b1c6b92cbc3b55b12fe902c5b10abfa95dafec79132337b79c1bbcb2dd965d70ec6e96e4c223b9516b3c6935a59426877a874a262693a71ca84a70d1b450843", 0x6a}], 0x6, &(0x7f0000002bc0)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x4, 0xe, 0x2, 0x1, 0x0, [@remote, @private1, @private0, @mcast2, @mcast2, @mcast1, @loopback]}}}, @dstopts={{0x58, 0x29, 0x37, {0xff, 0x7, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x81, 0x7, [0x5, 0x1]}}, @pad1, @enc_lim={0x4, 0x1, 0x7f}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x80}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x0, 0x6, 0x2, 0xca, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3d}, @mcast2]}}}], 0x140}}], 0x3, 0x800) socket$inet_icmp(0x2, 0x2, 0x1) 23:50:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e21, @broadcast}}}, 0x90) 23:50:55 executing program 0: sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x304, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40180}, 0x40000) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000011c0)={0x8, 0x120, 0xfa00, {0x3, {0x1, 0x50, "7200b8fe79328f6955971ee01554938dd742fe78b1392fbc1c79e714ea1c573fb3b6821feb2b41875fc683acceacf07568e51ff7a41844be247826da7f439577781d4c9b8aebd48a19a3c75f2ff2325a285eb654f0f34e20f63c43d4f0eaab1df9a5f6ba5ec1918351a517e781bbddfa43d3e80928169698c4471842a265f736cc90015bb2c5bc0e6c6cfb7395468e5fff7379d96692af4c1ba4fa4584f4321a1eb7049835c4ac3e2c43ec031573d6382bb30c367c53353448ae8f539bb28079b2ed8b22a9d9ff9eee8d0a9f3f42a6f1003b9b3aa6fd5178243c1b1433d05fde2393e83cb23ae239eb107d491c21cd431458d4aed855f4bbdca930e1f9e00eda", 0x7f, 0x1, 0x0, 0x11, 0x1, 0x3f, 0x1}}}, 0x128) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}, {0xa, 0x7, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x15, [0x763, 0xfff, 0xfffffffb, 0x1, 0x3, 0x7, 0x40, 0x9]}, 0x5c) write$snapshot(0xffffffffffffffff, &(0x7f00000001c0)="3e4331c0e2bfdcad98b8d8bfbe431449ae94c3d5dc164b4357371032e62d7f9599280d4dd9985298f9264423387ed8cf6365b3f34d4a276b09adf82633bb2e2dcad2f310ebe2346aa402e8f8ae668a12fbff87379f508d8ce875b5428f67edbf3f167fe8ca9e1ec892a517aa00729ec63461d02791f360cf74d7cbc9eba73cece320682eea4d3f526f2e05d7fa9c3aeff362a012e842cc4cbd960e9680af54dcf8f666f372485892bebd116c570aee96696e47d239f518767e9595845bd06fab29a824a9c7a85914f44fb2409d3bea0b54c5ca7bc4beb826433011d007de74d4ced2b0cd25a44e5ce4fbfb63f42867952ddd40f785efd2b098e21cf5a570222ba7c2e17eb7f46af942c99e2d173c51accd5c094b5e50a39a76e16166dfdd9b5175bbedf30e90590865c8cb7deb9f384c9913150c268898f2a5e042306a7ed8234b7a410ccd35a510b2f1777b7ff9e3ae39a2e38c34d3bd20b0e9fc515fef708930b52f795c7fe3c25875ac516c10ff20aa1f14c1d6e81f8fe6c0444f6c8825bcf4054acb034b884b172c3528ff11596d0cc5f435530da7353666c6759635ea64fc50ad62b7294a0e0bfa510158d4146b02ebbf90c3a1bef636fadc9f3d8c7f20b6287fd08794751ee39fa1d0d89490bfc70ff1b84c0b60d9396716b1de212a0a50a75014ebd0aa00f04eb476fb27e2f44de3c70891435a1bb0e3fee719c94e2b3dd8053b0e810e5d57882a4b6b47d01b0ff7e4fca819b45620ce4a8a060011f63811ce1ccb71074dbe5189df50c040199e8d509acc6c59cbce54baae6edacf946d8b074d62432021f5fbce4c47d9411130e62f0da325482349eb13e12ed98422f26a63c54c108056d888a9ba9474391f1ef48b0b8fa8c23af968a8927feca59948b86cee59298119b52be37ccd45588822a8f898152ab691f90f5268e32e3e234000d6df1887784b381e5f75db2148e66483884db245b63383c13ce1694694538181d4892ee169519c4da5dd11db53b482865011c4e864e9f5ae698c78158173df303edb068b5ecf083e3f104e18101d6cf1b93957b81d6796fee435254f03dbebb4d63a50e9d619d9c14f55f1075fb89985aa3f3026f88cf2ed0c851bdaf3fac434a0aca4012da8a6d20fe7c5f10c65bc028d93db83974a7ed02191bec4950feb4e5b753e1bc83ec6cab7afd6d670fd72ad838d3c34f3b80312f073bc6904e9d41165e6010d1e8aede7192b1e8086527efbb5c116efabf7373aee889830c6aedb0be7999ce8b12802c4e69332b7383fac5dc59276f21c27f9f85c4efba668a40363b5c5cebb3b6983718ad261c7dc77c6238c0ab2d5a82835346fbf644cab799b94fde4cc95070ea93013a9f168663f729542ab724e705011e19c1266379848bacd52535c4c347c162bd6699dd1838d38d46691e9adc19436ceb3d546387d0d6e1a537063a1c62962e8003d0a39ba06c6aa4499db0fdf0c14b5608de1712815e0195632d4a645db2c94bde51aab99bb09b5ededb705db670fbd84ed08f0fb5c0c0d1778638684879832461db8a0b8e2f2b356ecb999377821c4b1d1782501aed677e9910f4b914b412d5d5bbb8d8414e0b80e0d00b5643e5937721f2c2f76be634c1881321d3d6a48c0193e49d849643c2ca5b306f6b3807dbd72556e024ca5cbb4aa27d697131122c744a3273db8988a337058ea16de85559653b9abe6e9cfe229e9d81b332b81b0deef04339d6cc96d27a08c8d8fd0007751c392959701aef7de839cd5f367267cf55e6a57bebfbaf0b265677e13dd2e8b6993ba97dcf5c38d0fb47e1962f9f9b296438ff78f1ee291f66706b519d44aea9ec969839e8d3c879b33737b45607c5ab99372683525ab9b302a1a1b38903b89952035fb9c1e79eb4891f47815d5e4a54fced206190e674ec6466e3181ee1b867d676c6cbc7ba397c9eda7d690b31039711aa3d8d7dd9b3381b71ab807d784394db37836ae8748498164b30f2e5e0b11681f3710389432c0f1dff405ca68bc3a6a52d703dee834b398a1e4cfce347a4a356c492bde00be534e41e75cca4f1624133b010d2c268caaef1a726609a1cb6c6ec27139313867ca98ea00c8c62b62bb9f678734f94c48d455c13d753fb8d3c55ee5f64aced7ae0bbc71fa8ff11a601ed8435910bf63c31ea6783423b97d609f163bf5817454bbe71a196754c18b2f2d2155a8dba208ba778edb349cbd287d7afd48bbd1e9deffd2ca46a5c1ec96715df7cbf9a9017ddf78ed8387674fb4a66660febe077e29564d52da7ba23aa90bb35924140b84267c81a237a90ff7aa500386ba71a627c2424ddc62c9b6b59dc7c69afefb1401edbeb58ab48bc0fde30318f633cd23d06991fe376e1cb9eb956ec8955628270c95a140d869437a895201ef81870a78bbc1dae70a855b7d0646563efc06e56f2d8cd6363de05132ee169044816ff68e91410744b9fd1a27cb48fa03de8defa1aff09cb4e21a1d1e06317423d5deb0607d5d89747909c73329bf359037b353f89774a262b6e44791a2033d28637c6b97c858eef78fff634a013ed2f7f3cfe6db6a4336e4d1f3349a80423c0d1d258946476b76e1171a68c36dbda0cf3e90de52d397d6de56671b9928121266bb6123b869bc6d92de55029b457d400ffa1a969bfc41b76501d0f3de9b335ca2f7e81ba42966b872e9a9ecc3e44294efcdef3d10336449dd814fdd0f1632f7805a0c673139ad88efdfa5cfc450396c99392c2e6a424955d98f2be7328ecf3abd96675d413574e36786469bc468a5d87e57eef4c6f35f59a3d5b15beb301780c8589fdfbc4cc8c057ed5798580a724fdef7faa5a515da8b89a96c0c4986d7596322169e2836e2b18d94d61fe887c36bde75ade18f48b21121165ed89568a30a6bfd81df31f855c7f1a49e4111e1b9275064648998be5403de1201656ceccdab40ba65091813d10dcfcfd1bcfbc6e2fedb74a45a8292903fcba25590a87b4082ffb434daac2981a3935050f60db48831ebaa1572e21c2dda140a1378bc18a61d574aef9b0aefb728d27f6825b569ca617df79fc4bdace4de464d1d45a9ec61bd923788c127ef333614242610caa5888fef4c53b669ae19257673670c1f79f79fcc98f733ac939997a7b30bcd21dc9a8294e2ab72e168b1f5869e3056936fb8a85f38c9941c8935ac35069f681189f8dd1ac754b3e1a90b7d4a0c7917963b0e8a4512c51e760fa6d8c2f7c526f7def49feeba4a3daabed72289f7d751a93a88b2ed6680259c51239a1ba671dbdfdcbfe20671e2f00cbecf8c04d1f5d12f2772fda9bf5af31bd9c599bcdb2d2931b4e6d08aceaa06b908af85f0e9edf0c32d3a06d4b92505d8e01b04b9d46989b968b1d1bab2072c7220cbe45a7797e29910f1b1946716ac3b3b0a2569136e5e7afaea9e112731ca054e269cf9c5b403a5f8a5d87ea380e50c2923c5f561b6e1b2678d31fb2215da95bfc5118c7b3fc039dcb8ef4a516f0c1f251cab04cc7502529db90699e62e922fee4bff9978a6e96954383c797dfe4f9c482024df2f8bf33ad504a8764f76dac881d3132d84e4ae7f43817938272e85ed8e32fa5defdb3d68cfa8a7c371402f60bf658068eddef7b4c719b13656178b731ea23fa9d0929cb94e13060adb5b4719fbaac770cd025d0cf65c873ba6519f3dd57e277a5c694edba17651f5a3650009f5644e4229e876af080e4af2a16dd23c9cba3d1ac709d5778698197b819bb44d8af13d1a17adfff15c721ccf3b913925c8e8bc88f8b8a9c352374115f9f1ae6b903ee8376b78db4a47a62b58763049ded75bf56ccb81b0c988f6814d23fe03789c68ef684af15e5df3ea8ce52ffdc20417625962dd714d74c20da49960c452284d0030b61745311af8bb115189813982e6171d7e019d5c5234b6b6331941bcfc80266671fc7435e09c9396e0fe119dc9fcb7e7375495ae5407d270c58bdd983307b3a96dc5fcfbb6606f7540bba5edc3f9560c3373bb00d34e49ad93e2c9f9f4251428ded926250b72f7723ed37078d04ea8dfcd0f3513e704d4774e8f5a32494853c933f474008aea2bbc63bac2db10b0cd2746074fe054a3a8fc043ddf189014bf4334f119b210ff39867ffba6370571250de48cf38cdbb03f798eb22b9ef7f554ed8e7dcae8d13650e00170ec0c873029fbc46594a990311831fa037dea528e5c4cdf59bb44dd048eca3a7228d6e394a022c3d1d4aac60ec5a53fed5c6fe2d0fbbdd1f9bf0b5d6673a20caf0dff8e33726a432575c02c0596cc3882548787a88310e232054254f80c345ab4fe4ee520461cc727de279d6dcd8eb9f6d9a65c8f0e44637715ce8b0df61dc13598fdbe4fb2b876e2c74e987067095b6e4ed4dc0ef8f085da5c24540b8ac32a913265421449f4576acd61fb0f1a6ec1b4ae39f9a462d664b2beb557687d0c9e7d1548c07b43b0b90f31ddd03291ef2ea4e9229b7530351525fe04a76d54de531cc8523732536814c68ed20123064361db43c033af3895dae6eaff8238387a20df516973761ccf49f7cca689488745846770f501ec7f6c25acdb43b29e7b0ad267d5ba860ccb7614e82f33cb761d094cd5267660d5d1bb3971d1c607392b94e1d1278237ca8d83b68aa3835d94a7899bfd5d788fcd1ba9d5bc00c007d331ef4369cc325ee39eefdc64e2cfca4a79595858b877ea4e0fae67b8863b1b88fab3beb6b8debdbfe97022d5c4899099b1907e8588c14abe8069d0bb14e2465382b892dda8d0bbf32c77f22336af580bc2bedc6c4d2fe6697abaf0cc9fadfd8ea6fb6dd2527835b18b992bfa6013bc2ad843987c15494f7425b076b50ae83d40a8d1aad392ad1cf28264a8d025d252f11be8c11c15bc784b5b32423aec9945f9964417d254130edc8f05a410fad10456af860a7a119ab1c63f50c3bdf85690b504eaff464281a5cf13c673758c30e65a9a8048b27f66ce455000682d9a3f3304fc9d05f30d2be885e2b5472dfdad7746b2b9460d6f1f778cb71b01807274baad75a9f9880ae5a9b9c8df0e696690f120042bf2c0531ec1bb307d4898a9c0d45915b3cb812e9b0c8b70d3803b634d4ae02d39a11b269aaeb97cba69e1e021ef043bbe3f8b8516f4bd29c38e467b40e8dd20ba3be7652f793e040faaf7668ba7653f1c73dbba334f2c8542e2cff43d1bcb1c5ff14779ae0843f5ef1040c9eb21b3489a793079d399022d9b933e04a259a44a0340f8a86ebc15e2073f05f47addddb4457af48258d1c140b29c0f9ce7a9606757f9c50b4db770b2f4b863c5513982634d0320c3d216f477f85ff59ac88922a4328fe969ddf6d60428eb7279339d3b39ee9c1105b69922ae64c7f7009c6339475e7949b341db201bbd9c312c80e5afc1d2999876e395945b0013ce26fbbd41f3f9106a7d0cd22825ee8ceaac182e6c2bd792c77ada2b8d32446678cb7436f1636189f2f88f71dd46aa4451016a8675750f0ac89d5e643c3d32440d653db5978dd7bc9d0315e31067fe7f8f06831319cc63240719c413172ee0748cc731d520be98742b52a4815fdaedfb690a0fc5157fdb16a925376ef1b317c4d4ca5a85d343c62001f2c492196cfd57a7214bf6db5ddde1e8c96361e88cd42a76b44d85a09b91b2c82369c14b7c307e3cbd9a754f5bd42a4c3d40ff430addee1877827c12c5fbca186912463ba5edae69ddd80831f34f06219785cf783aadf91044cc25b923fa0ab2ce7d02f454f09fb3914595f97e5f30cd5cc21d6b26c0cd960230d79435cb4dab3328a9d5e41f", 0x1000) 23:50:56 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x0, 0x7, 0x9, 0x100, 0xfffffffffffffffb, 0x20}) accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) getsockopt$inet6_buf(r1, 0x29, 0x4b, &(0x7f0000000140)=""/133, &(0x7f0000000200)=0x85) connect$packet(r0, &(0x7f0000000240)={0x11, 0x1b, 0x0, 0x1, 0x3, 0x6, @broadcast}, 0x14) 23:50:56 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x6c00) 23:50:56 executing program 4: socketpair(0x0, 0x0, 0x1, &(0x7f0000000000)) 23:50:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x20, @private2, 0xc14}}}, 0x90) 23:50:56 executing program 0: request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='\\@&\x00', 0xffffffffffffffff) r0 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r0, &(0x7f00000000c0)=""/122, 0x7a) request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000001c0)='R\xec\x98\x01\x01\x89\xa7\xe8^#B\xa9A\xfb\x14h\xb4\x9f2\xc6\xb8\x8an\xefG\xbf\x89\x10/L\xc2P\xfcw\xd4\x01\x1eAo\x05\xcb\\\xe8~^s2=\x06d\x029\x15\xcbS\xe2U\x06\x9c\xe6\xa2', r0) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:56 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x7400) 23:50:56 executing program 2: socketpair(0x28, 0x0, 0x200000, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000080)) bind$isdn_base(r0, &(0x7f00000000c0)={0x22, 0x5, 0x73, 0x40}, 0x6) 23:50:56 executing program 4: socketpair(0x0, 0x0, 0x1, &(0x7f0000000000)) 23:50:56 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x3, "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", 0x4, 0x1f, 0x1, 0x4c, 0x9, 0x7, 0x5}}}, 0x128) 23:50:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r1 = socket(0x2, 0x80806, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000002c0)={'veth0_to_team\x00'}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r2, 0x8001}}, 0x18) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) 23:50:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) socketpair(0x28, 0x0, 0x6, &(0x7f0000000000)) 23:50:56 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x7a00) 23:50:56 executing program 4: socketpair(0x0, 0x0, 0x1, &(0x7f0000000000)) 23:50:56 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$inet6(r0, &(0x7f0000000e00)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000d80)=0x1c, 0x80000) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000dc0)={0x80000001}, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) r3 = memfd_create(&(0x7f0000000d40)='/dev/snapshot\x00', 0x3) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000f00)={0x1, 0x1, [{r3, 0x0, 0x1000000, 0x100000000}]}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="ffff0000", @ANYRES16=r2, @ANYBLOB="bc5966d9c39ee3a900082bbd700000000000", @ANYRES32=0x0, @ANYBLOB="c5017f0007d4b29b858598e7c30b41f065b349a039b09348e6f412c8c7b1de67735e8a56989d10ee0cc80349cc026b80a622ef8d02a2979f46e7d0c8ff5864a957a2bd1afca3fe8bae84e1492a1e750a4feed698659ca56306b43fbffdc68a3abe3275ea2cb76e1007a40c3d2ffc58b4cc6afb5a945668a1a6d2615d9e0b919a56b8805af1f947a927256bbe79bbeb9b1bca6820e46969e17102ac5a2787d9f1bcb4e2b9e73a41472d3f9550e9cb8ad9718a151c5d8496c16dd16b56dd53c3110f385c2a1aa6b4416f6fb2ea8852c1319c1fbe80f9d26bd56abb8c10c50f28d77d1a5e80d66d4fda54aed38837c01405546842da7f863344e05a3ae6d232ea75ac354802e00895734944c91a1c45011e61d175570336e639a597990f1366b41dbca09a96c4206ba32969760b9a9c391688ccd1ccd48ee3413a049b3ce0b105060110bd61615fe0b9c82a0b0ae0a65b9d239f0116945d7360ad40df949157a1eed68d09c0f4c7bf5abbcf04206a32759b1a5c2b7cde45e1761066e4d58e1abea12f8977a44da4ff643320b6dc020598c4619a5a0219b34691ea72cc04687161a0fa588dbb3c2ae4d7151c5366a47948944f7c82deef6cc4a37e15c40805080211000000f9ffffff4d00000000080000000000d80080007206030303030303bd0608021100000184550005400802110000000000000008021100000126004008021100000002000000ffffffffffff20000008021100000106000000220040080211000000f8ffffff0802110000003e0000ffffffffffffff0f000026003e01027516000094000300be9f8d62259d1e6117d6cc9301a61a7401048616e00c0406033f200005007e15138000080211000000000000000400000006000000822b4002817355000008021100000100100000080211000000fe0000000800000001050802110000000000cc1a44020e80ed00030046909fa5dea8fab5e9bbd68bf24438f2c7a0dbc7b835ed41a598a910488a4812571e241194285312a654e02f8e9919280842fd89c73a5c92708b0e31ec745909f9026a5d4c82ce9d2a395b42c8dcd288514f36fa23e58663a2b9a5ec8eb3f37ae289a1f37a31ec7cbfb01af744cc5cb7b8578df6a6f97a35fbb4430ad80c6b03ce6b72f82f7f2d2d0962695396cc603e146dfeec92e4e85b6b8c8d123864cec42986266305c731b23fc49c7fb5f4cf4bb8977c84513e50345d76671cbd8f052f59cae129205268b63290746febe4570316c93e398981d4c1368ce6e7407a0da3000000b800030093529edbc32c7187d2b67f2e4e79ca943f88d8123d6485a479a42558ed8e4efeffe02a457b2e41b1f5c7756789014b9e40d7eba98c46397d19db22c459e69addc987b2fc1b9e459c8742d866ccb8ee4e6b67a778a1692dc816c6c2ba45721e0678a8ce0c588960a1eb503bb160cf1d29aeadcb79c1143b6b94740426913a4361e7657418802789dc049dc3377d2382561b5dd0c5960fb38134041e7dfd5caf0e008f3992047e4d5a399ca05629118592a5cb4c6b0a00030058895f24844b000087000200a351e877ac53d54c45a1e0862f1469102312b08452c1d7db6a2ac6a5ca276fdff769bc81cbc4f0a062869c7063b6363eb4be08b42693c2b9ef6e5246f21d486d70242d8363afb31c3f6a522865a6eb6957bddb36124da25e283592b8d2af7a088ebf658024b51f8788ad656ae6465882d24a6e314a71c526fef8b879572e71bebf8d31000400010043012a002d1a0100190000000000000000ff001f00110000000800f727000009bd06ffffffffffff710700ffff00010960dde80c3696cccb004e46507d321ea0374a0baddc80c968dce0b77dd4e460c25a0d3248ec636c8aec3dbc20208fb4a6d3cc0acc0b14fc1d21247f549dd7cabdd3802f80d13ee956098a13b8e4711c92ec0125a15e260994ce8fd2f49d7969f02e3acb389893eebf4a06df40daf06398fa5bb54366294e84fa88ab4fa7d2b9ef063e16b239cd31619cc58342fc6aeac75020c7ce1827840d0320055b829825b23d32a3cebe1864556d5ec24b9e1ae8784ec3a12cb379dd000db0c8ef4348e7ddf914d86c751a5833f177fb09f94cde6b02a524f24501df5cbf4aabb365a812ea91d74316264f4b3cf78b8f7e1585097f080211000000b400000081000000001000006804ff07000104060080f90001000301ac00cf0491001b55a7814904a061fbe9b35003d3d1b9b596aadfd6585ac4f74ca6561248b40eab5c56a56a3d1e641e33189e19c3a15415b9843ba641c77661c74f30996a016fde7418bc419abefa19ac0c4eab86d6675095114fe2c2ad4f92506e3c8a1e8bf45d975ba67f2d901551f762b83b318d2498880b8ce64af80484cebea645747621aa2872d3d6c6e7fcc23e0c6ad342ad3b53398ebebfd2a122c23b065f3679c0d3d7b0e7503804503fd40829daf2e1d65663bc70f52ba92d1919fce2687455391d851f6688a4e3e19192898d7cbdbe65c0dc85cbb3044d1d9cf7fba92c0867086c93b182c794af74e9b1c6c84e2c9244a84eca05ed9fd5732c458ee1184f7f2807589e18958de296e1965ea9be90281ea8f772e52b04540f50c7daae955c3a699d84b6e4f130548b78652f96b204efc87e76883c0e233f217f2778414be706260ede01f6415bc7d07b1c349459fda47ffe8c00999811df7188b8ec2d3ccf7cc4bfbd5a1f2408c633c9e17f5293dee84594892b262d9a1da7f90680322ef1d3c57ce4e28feaccc03b5c9c7e2974eaac9dc4a6a5b01d227e99a1ecc97c221c0d652b08d1ff1101bc3c8bea135cce2d4fa044e0dbd1edabbb9d75f2113acda8b1f93aabd11b3340cac3159168bf849427cf171d92cf2f77e82cc96f8b9e66e832d9bef3cefcc7bcfe9afb07faa1ce1e4e69e7c853fb2d7bf95887d4429d0b6452e190e5465695126be5289bc201b23be15d20a73d9ef3662d2597dcdf2566a73ed8855e3c5aaff2e846807446399b0145749d2d863356bad7ed1b67cafdef7133014d665c627975b01495187bd7cecb8a2b261cbf1845830d8d2b7c2e81a084f37d9a543381e39db2416d716b3d310fa0367a55683af67d638b2b1587d664dc92f7f1f0dfd1916ab982c52d1e1e4bf19327da35681e352b93369c23ebafc2dfec1b7c39be61f2b7e078b34ef91727a9f274b5c01a20e1d4ae0bcedc5850e7ecb944fedb3b81501b3bd0ee6d54ca76fe36d591c3b65d017e39cf48e4500e05f80b497a3f8f66a6f55fe5ee077bf571fee2d90df7828cbb995d205d370e59d748df214097b0a33431cb382c8ffe1c90ed3ba8454c563b823e4084ff247e2a760775ffe23f0ec543d648bfb7206a5be2250cfeb40a2af05ffd10843e7c1e73420309b1084eb04ec8052fc19ee12f182981b6db4f176c49024fe9dd5923f993264df49284c53554a52719ef238926ed11c8a29c750c395e8537ad0309472001996b793eba303a596a4b08dbf05bab39da54a4106d792dedf5d08c38a93e6f69055218a106dc2ca979fdfc0f53d0b745ad675eeba77cd25773d22969319f7c36e7a46eb23210e03e29a70878ec4d2eec2ed0324ecd2a02691c6ec235d76e9f82bc49c4b2ba7452a12ac1b9956bc60dc4f9b196d0ef1ff0ad89248f01d2b8849d117e630de2def7938d77d5e90b7194dc8727e924021b699d4fefce402b3ecacbc441e675541667897b4c02561667e402bf9ed78c1c750f3d3d2c02112e42bed04415fecaf28306f2ac5d970c8c381ded92906cf0795c4addc9c25db795e17f3b7d7c6246c1966e015c6d3412781c25accf08ab1439c16428bbd34cb0cc03af8d9450a128fab267e9516d7d2e775081bc03dfe0176c4164901441382343bb589bab0d55f177cadca763a5e4225124163d358f7d3ebec5f5712d878b278c815257caa0e5f840dbfdb5f4251496da9dddad0003012a0026d6800002d6f08763f58deb744f719fe8239288ccbef756b85776d0a4e5cc1209ae81e3646a9d424fcbd0ac4604f219cefcffd8683c83a4c563c17bc8406be7003d9dbab88bc0bdad800840cafa1778390b746807b51b4a3a6675e9fbcae751cbacdcb5339c11f119a93730ce26ef0bc2740fc28b0a7ef5449a92f53571b2ac8829ff7e0f94fb8a4694fd0f28b825a89318d1f0409df23336f7469bb445078e544887a7fe039203d1365f92b2a14e563225a2c6e662f2bcaa96c3c3bf0d91e9661c8f2c964302d70572d4821c61e9a509e314def64d833e822501000200020000ffffffffffffff000000010000000400000001050802110000000700000000f7ae3d17a13be9c117989820d4fa9ac6c7d0a996dbb86a3975f332d28e6c4de09f759b809e876cf84d592a47f27cffc99cccb2c67008ff68a6e9bf8536044e2bda8c90a1d9d75cbaa078fb949de8c31046528b78e5e5389ee736665ba5680248f9b0eda740379f71caf52910e31ceec12e5980b69aa31144f10175fe57c75e62"], 0xc18}, 0x1, 0x0, 0x0, 0x1}, 0x440c0) write$snapshot(r2, &(0x7f0000000e40)="67853364aa02588d2d6f1003f5d121dc9dd0e118b961e5f32e6b7dc0d5ca97bc2fb6e8fca359a173b31987bcb9c706d88634452f09eee97e412cb694d60a24283bc30d68250e3f5e95f3a106abcd4dc592a34b0f1ad800e9c97912f2f2a50218c85dae3349efe3267a37322276afe7e33c4f66aa694bf932ed1eb369f2b9f5e2672d1557094b1a", 0x87) 23:50:56 executing program 4: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) 23:50:56 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000100)={0x1}, 0x4) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)="5289ea8752a56ac3911618157f3714fe30530325ccd631ed08fa17") r3 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x80}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000140)="f50c7f29ef27f6e6168af1e7de47") r6 = getgid() ioctl$TUNSETGROUP(r4, 0x400454ce, r6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f0000000240)="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") r7 = getgid() ioctl$TUNSETGROUP(r4, 0x400454ce, r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa0080, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'veth1_virt_wifi\x00'}) 23:50:56 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) 23:50:56 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xff00) 23:50:56 executing program 3: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000000070000080c000480080001400000000008000640000000000800054000000016180002001400018008000100e000000108000200ac1e01465bae4a8bc4010c00048001400000000200"/91], 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x8800) socket(0x37, 0x800, 0x5) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x9, 0x800, {"efd48484433fe667683770b231128087"}, 0x4, 0x251, 0x8}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000002c0)={0xf, 0x8, 0xfa00, {r2, 0xd}}, 0x10) 23:50:56 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) [ 446.587369][ T9698] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:56 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14) socketpair(0x6, 0x800, 0x2, &(0x7f0000000040)) 23:50:56 executing program 4: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) 23:50:56 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x3, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r2], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r3, r4, 0x0, r5], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r6], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r7, r8, 0x0, r9], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0], &(0x7f0000000180)=[r1, 0x0, r5, r9], 0x7}) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:50:56 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x80000) 23:50:56 executing program 2: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x81, 0x90, 0x5, 0x9}, 0x6) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:57 executing program 4: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) 23:50:57 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000440), 0xffffffffffff0000, 0x42502) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000000400)={&(0x7f00000003c0)=[r2], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r2], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r3, r4, 0x0, r6], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000000c0)={r0, r1, 0x0, r6}) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:50:57 executing program 0: socketpair(0x28, 0x5, 0xfffffffd, &(0x7f0000000000)) 23:50:57 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x1000000) 23:50:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0xfffffffffffffd8f}, 0x10) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @private=0xa010102}}}, 0x90) 23:50:57 executing program 5: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14, &(0x7f0000000140)={&(0x7f0000000080)="1a662ae05b32e6fabc200ce4bad2e473b1b97d55f7cbf21f661a522425ca1a4ec9f37d2b96797a62da9846e3493acf1d85c79951b429fd18d687d898824b5d849c4d235916612060f33c5d7b254861a96ce3b0d022a0c875028df2d125dbb5bac2a3ae8e39bb1e296344e3342cb42e518ff08cd277b6d366480e6960d8baf71c2824d75e69ee80f53477da9841727d573dd59eab74a038979b55e4102280cbe3a46246652b990008b59ce02891", 0xad}, 0x1, 0x0, 0x0, 0x45}, 0x0) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 23:50:57 executing program 3: r0 = socket(0x2, 0x80806, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:57 executing program 2: socketpair(0x28, 0x8000a, 0x0, &(0x7f0000000000)) 23:50:57 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x2000000) 23:50:57 executing program 4: socketpair(0x23, 0x0, 0x1, 0x0) 23:50:57 executing program 0: socketpair(0x2b, 0x4, 0x0, &(0x7f0000000000)) 23:50:57 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x3000000) 23:50:57 executing program 4: socketpair(0x23, 0x0, 0x1, 0x0) 23:50:57 executing program 2: socketpair(0x2c, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000040)="e2b8b1551333c7748b4780093f8ebd87875d3552be8a995cb0bebd90cf8c722366e7323ad6024db7a36cee1b5ee7604d2fec6836b430e2") 23:50:57 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x4, @private2}, {0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}, 0x80, [0xb8c, 0x9, 0x802b, 0x2, 0x3, 0xaa85, 0x8, 0x3f]}, 0x5c) 23:50:57 executing program 5: socketpair(0xf7ea73878c0ea29d, 0x0, 0x1ff, &(0x7f0000000000)) 23:50:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x3, 0x4, {"a23ea6ff89600a03fa31fa92980ced9c"}, 0x0, 0x6, 0x3f}}}, 0x90) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, {0xa, 0x4e24, 0xffffd1ba, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0xf7d2, [0x200, 0x10000, 0x6, 0x7f, 0x8, 0x0, 0x1, 0x7ff]}, 0x5c) 23:50:57 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x4000000) 23:50:57 executing program 4: socketpair(0x23, 0x0, 0x1, 0x0) 23:50:57 executing program 5: socketpair(0x28, 0x6, 0x1ff, &(0x7f0000000000)) 23:50:57 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f8, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x74}}}}, [@NL80211_ATTR_BEACON_TAIL={0xb2, 0xf, [@prep={0x83, 0x25, @ext={{}, 0x0, 0x20, @device_b, 0x1, @device_a, 0x9, 0xfffffffa, @device_b, 0xffffffab}}, @supported_rates={0x1, 0x2, [{0x9}, {0x36}]}, @challenge={0x10, 0x1, 0xbf}, @random={0x3, 0x62, "2764b25bca6f22dd2f5c11cef915450500568252ce891df532c81b612e7790ec2856bf16f6e14d94f1ea9a385a0f9e0a57555a69bd7da0e4f8843f93a4823a26bae14d186e24d35f82499c9afb8f5c73b734d80ba70ef6d6b97f4b4288ad5bca2f1f"}, @ht={0x2d, 0x1a, {0x20, 0x1, 0x1, 0x0, {0x3, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x8, 0x100, 0x6}}]}, @NL80211_ATTR_BEACON_TAIL={0x123, 0xf, [@fast_bss_trans={0x37, 0x11d, {0x0, 0x9, "33f8fc3c0728f7cce3176cb6bb706b87", "78180d60f2a4182e0dcef7143e416262a8ad7134108cb904247352e9e5c4c4f8", "1dd5d26df34a5a9557c6fa044d84ec571d64a05ba860dd8ac81f8aa6f9b9331f", [{0x3, 0x1, '\x00'}, {0x2, 0x14, "298c43d3d5d3b6b0b401c9f4929337298f68061a"}, {0x3, 0x21, "dc9d49312ba5bef593d896c2b86f6e8c2449a346982c7e515669ff05a8f187ce24"}, {0x3, 0x28, "0dd0b25e66d550fc5bb5b0bb4442f78462fbe3f14a277f4214a5e80a20082c43223ae98a8e95269c"}, {0x4, 0x4, "1803fec7"}, {0x2, 0x1d, "34175ec7f8d2ae82dd0bb0f040c3065dfd7309936810de7f7e2675df29"}, {0x2, 0x18, "9b61df1fec36baa7889a6b5c23c63b235451e3c46b14af81"}, {0x3, 0x13, "64b6f82190ab581bbc014c894f0341e654b504"}, {0x4, 0xf, "e5101ddbe60ffb90b53d56d069fd20"}]}}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x1}, 0x4) 23:50:57 executing program 0: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$packet(r0, &(0x7f0000000040)={0x11, 0x11, 0x0, 0x1, 0x3, 0x6, @local}, 0x14) accept$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000280)=0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@private2, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xffffffc2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x68, 0x0, 0x8, 0x1, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x471a, 0x17}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x924}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x637}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000000) socket$inet6(0xa, 0x0, 0x7) 23:50:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x2}, 0x4) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x401, 0x3, {"ed559d719b0fda65e5cfc8fed0696639"}, 0x3f, 0x8, 0xb8}}}, 0x90) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x108880, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000980)={0x7, 0x8}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) 23:50:57 executing program 5: r0 = socket(0x2b, 0x80000, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socketpair(0x3, 0x0, 0x8, &(0x7f0000000000)) 23:50:57 executing program 4: socketpair(0xf7ea73878c0ea29d, 0x0, 0x1ff, &(0x7f0000000000)) 23:50:57 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x5000000) 23:50:57 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x4}, {0xa, 0x4e22, 0x21f4000, @mcast2, 0x713d}, 0x2, [0x40, 0x400, 0x3, 0x80, 0x6, 0x0, 0xffff, 0x5]}, 0x5c) r2 = accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000100)=0x1c, 0x0) r3 = socket(0x2, 0x1, 0x1007) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x6, 0x6, 0x9, 0x4}, {0x3, 0x5f, 0x8, 0x2}, {0x9097, 0x81, 0xff, 0x71}, {0x0, 0x7, 0x8, 0x9}, {0x595, 0xad, 0x6d, 0x651e}]}) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffd}, 0x1c) r4 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$packet(r1, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14) sendmmsg$inet6(r4, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="3cf6fecda61c12477a31fe7ec325f4bc1ff9d28835439d6bbd7734318be2f731ebb48df55fbb54de66155cb325d8e058bfa09faf2d1b227e16b8767d594eb3ae510304a9141c0da7000224ab6edcbd582534220299b44abcf86f579aa19d9505e1a511e6596e6fb49ef3a0ee97e1c38710c55c5b419f4dc2c8adc9c874c195b86d6199a3304299", 0x87}, {&(0x7f00000003c0)="abe3f88113c2f8d7e3", 0x9}, {&(0x7f0000000400)="2afa6989d4281d7ae525025edd335b9da401dbc87d5131a5dde0cf13327212b1c0694b2a69fe15b6f51355ef478c1a6d014c327622441611e209a10ccc4a43e9371faa260cec66977498294e73a02af40813ebbcca8e0a169368a1ea1c227dc78801b8f6ab16fc77b1db66db936584c17f75f344f47ad4a9bf13ea350bda0176f32db323217225e559fc3430df7b836a6d208c1538403de37167b051ae1c81a37bcbaa75ccbe3c7b6e33403e509626060fd9ef7c6ebebb434b27", 0xba}, {&(0x7f00000004c0)="c135d07561ce91267e5eab90ec1941d8d83e6da3c87ac32d5d1573dfd588e11095533688b6ecf7ffa83d658d2593fb4087113a89552160a3fbc392f70ddb3339ce4748dc10", 0x45}, {&(0x7f0000000540)="34a938e8553ca10e0164b8971be4244b071833fa9a61c97a9e0d1007e9c283825c961cca9ede8c8e32a420b42d9c732c827bd887d26f45349e43f33e536a2b8afbbb7c6be022", 0x46}], 0x5, &(0x7f0000000640)=[@rthdrdstopts={{0xf0, 0x29, 0x37, {0x3b, 0x1a, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x51}, @generic={0x42, 0x5e, "a2ac7c7fc806816ff306eb5186aaf07d69897e8ba2342395b3f97979be01da8269f49945941b08e685dabcef105ffe21e81ccf5700ed2414019c54dc0754ceec1c340ea8a787c64710e96189253882a046cdccc99b5ed385cb871df9aaec"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x4d, 0x40, "aef4b9400da5ca8915d66f51a815efcb49aa24811dbe4dc532aa6da234b89f0d98ddfc4977404811e0dd4eea54efdd12a519b51066910d895fa3a8b6ae74908a"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xb32f}}, @flowinfo={{0x14, 0x29, 0xb, 0x7ff}}, @tclass={{0x14, 0x29, 0x43, 0x3f}}], 0x150}}], 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x15, &(0x7f0000000140)="a61b978da39c21898ac795a78ab1f31ebb8685964f888ecbc3e73c2e3cc5c15d6a7163b126044aeb3905315786e1bbba70b5dca87f71ec962a986d440b6037a95cb20ee271591a4db140979af1d79b949e7aae4ca06caf38235e2808f0a8e26ffe77cc173349ecabd1b49a5aab8d5e2e2a55f6f02baf93cadd85fadb5bbda51e0a5e547e1b6579dd6ee65fed712e2be14408c886e259c7d04b4d4d41451b9a607ea794706c5635aab6fb2b467f7652ba15aa2014687adcca6fa6bfc9ac87c4d07f6bdaf8322a78616c5187ffd4e46c0d57b9d840c60bd777e17d81f2232f8f362cb0d59219ba4ce48895f251a7beac40194ab06f5bd0760e", 0xf8) 23:50:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2349c0, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r5 = getgid() ioctl$TUNSETGROUP(r4, 0x400454ce, r5) r6 = getgid() ioctl$TUNSETGROUP(r4, 0x400454ce, r6) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000080)=""/137) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 23:50:58 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x6000000) 23:50:58 executing program 4: socketpair(0xf7ea73878c0ea29d, 0x0, 0x1ff, &(0x7f0000000000)) 23:50:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:58 executing program 5: socketpair(0x10, 0x2, 0x8, &(0x7f0000000040)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) 23:50:58 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x7000000) 23:50:58 executing program 0: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x27fb7d2293a5c6f3, 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@empty}, &(0x7f0000000080)=0x14) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r1, 0x29, 0x2e, &(0x7f0000000100)="7149dcead10710d8cb85269b5926a5a6b966d7e8450fa837cc6b6d1079bbdb0979b84f267781f23d25772dc1164fcd27645c0d2ba08378b79263ae837c9b9a81b5f80ba298079c160bdb7b29ada6f8f59dc9247f3f41cdf12ce76e3ef7f950d04a30a7a0bf71e6d846b5279e60a668a762fe20afd26b0564b65dfa346ed6c69980f45f496fd9", 0x86) 23:50:58 executing program 4: socketpair(0xf7ea73878c0ea29d, 0x0, 0x1ff, &(0x7f0000000000)) 23:50:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r1, 0x926}}, 0x18) 23:50:58 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000140)=0x52e) accept$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001440)={{{@in6=@private1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000001540)=0xe8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x2, @private0, 0x7ff}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000240)="75cc13b43e35cefd509ce0c4674d788afc657779ee329db174561b38325712cc74c0659708e6a0f051ff8b16c8d174b20ea71c7b569940959e3b2557a1121f5fb6bd6e38237860a152aa4f6238e2155977ee53b898d4608482c1bd5009030a9533b29ddc0baf7fcb7f37d5a3c2f90a5b4704dd7f61ff343b1e6c296dd630adbdedbbdba44ab8bc65237b04c6079b6e60440f95bbfc11efaac7b8e597f94a42a455ffd4b1d92197d8bf0b027495688d869a64610368f9b7444af18e2ad12194554533c78a9d8b35b0e6c10d4e53c033f3f8", 0xd1}, {&(0x7f0000000340)="da792bcd3bfdb8ff2f5877c96d340d21022958ab8aadf4e292aae3be046b55f3c04012f37e0ec74b9fdf27638b94c5b4f56705bb8b122f7c2aad2eccc60f11a7d0471c53d80c8cf124666f60a6cbbd786713479f4ec933238d00442f0182680c1fce2eb0dab289b14e4b72bb80da70b7d9291e0b1dbb34d0437f5a374f498a7e22c7cbc8513896197054beeebbb89d4872d8e2054f0cd694c05aab1f84fefb47018dcc3e1845698011652dc3fa559cba7bab767583304c06bc", 0xb9}, {&(0x7f0000000400)="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", 0x1000}], 0x3, &(0x7f0000001e00)=[@tclass={{0x14, 0x29, 0x43, 0xd3}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @local}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r4}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @hopopts={{0x120, 0x29, 0x36, {0x1, 0x20, '\x00', [@ra={0x5, 0x2, 0x1f}, @calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0xfbff}}, @ra={0x5, 0x2, 0x7}, @enc_lim, @generic={0xfa, 0x20, "0d17e374fc00df3d0ae8de253d2ea790dffd52d68ff94f978d7ba8485effab72"}, @generic={0x5e, 0xc9, "fa59294e0c6a5c63f351636a3bde1e07683f7392875f177702ebe2e7daac02f9281048a99762577fc3a28052ea9e454ead8e54ccfb1df787b9abaee7622c6d7d5248aa9f06cec3203a691ce8f62ea12c66ff6ef804df338f7004aa3e20f778a48c6102240bd7e4f61272adf75704118d18cdc8a7a47097536b998ac850754b615d50bc42ea86146b230decc61acb8e9763ea5275b72c618ea6c76db06e8ebbbc0dbd1e5a52f0fd629fe2312d770829d2329df3a7853b9df5bf4333f7cf321f1c3dfe05255049d70ee1"}]}}}], 0x1b8}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001640)="b3dc95221ad89058fd4b31bfbfa17ec472f5854e104e2a2f1d9786be3e3263f6d7212bfdfb201097da124b7c0742cb2cb12b0b1a972489a265d327f0b7d76edafabf772ca6a1c5d4cf74f8bf61d64de59585ea16c45a25e3f39adeaa0604643c510a948d531c534543f418834ab6d5beac60acdf12bacc44b9dbb60872e1c6d5e1b6d0d28bc6b6393dc36fbc01cd89d53abe2471f8a849e198733684ae788f76c61667beda28c7498eb55f450dc32ad8f023dc4c0c75ce12329dc349e0f9170f06984b3dd9675aeb7e1243b24cba", 0xce}, {&(0x7f0000001740)="abf65b2c4ab1f2306e75ef3670bb87dac9e019f5c0d102745573f2c63bd56a3f4bededebc9442e2247bda8a5ac8621231ab80b461dbd8655bda01f5bef2e52c6c371a027b4528f5109b9379ddf3f579b2f3a2762d1438091ef44846f5065deef61ba84327d9fd036d514e3daa307b2288640da651b839610487f2904cf410ee77c18f9258c5d7669ba5577f0a6dd0b75137e687636fc", 0x96}, {&(0x7f0000001800)="6a5918446077a013451c8233f1c89bc4bfaf6ed645cefa4e81ed9b569b23b5c431f649614068eba4aea42537", 0x2c}, {&(0x7f0000001840)="22b04f9e2424b280ea4479b4aece4e199870e775054ad684428490fb61bc95d7cdc3e0282be303cedba56f6c5cca70687e04d37c00f5db5a3d3d530118ba7bfaf5da3c6a6417223590a6c4d0e21a9e45c3981c6234848b06693dc5a1da6994c108a46236d8d3a9d9196098d7591a491f31285782d3ecd4d98f1cfc62b2c4195dc8c1debb1fe65781508e3e1d0f66312ca6890564b2", 0x95}, {&(0x7f0000001900)="d629d5d7d4e002ead7dd9b325888920a9c1c92aa0a99a38132d21564478041ded9470e8deb6b1d254ee4251c419df4ea7c9f32d1b5e55ac2", 0x38}, {&(0x7f0000001940)="196f6b4f00fb618fb7a1661a1291eba98b7b3a37", 0x14}, {&(0x7f0000001980)="403d93caccdae740c7f23903f6f9056919", 0x11}, {&(0x7f00000019c0)="01f7ddb5e9cdb73b3b2763d05445eb0ce6cf8de11125ec0ab9376a0109d4d991c1e9f84377ebda419ce019d0d8ad4ea6ff89ef500e97fee990647abab72939a0834c1e8677b443d5d7922b0fc91ab851f83e69b2dc09f43951e05a029f6d1ac4b3117c474794f1aa4ba26d2818ed6923f749214db22661b0c4ccb5666c0ea56c4ce7e27b085199e2f26c24ccf564bd9e432ba17b0d99f6977d0277acbb89cf0196a0a195bf75203afcff19f01f95a9d755575ecaa3d607c3c8ddf789075cef38bcea3fda77c2eb69a35c97e48e2b4a72c1dbc66e40154a9364b85c1dc7e7244536647bd216f459c6067e3b22c461fa22f70957155af9f15a", 0xf8}, {&(0x7f0000001ac0)="5043bedc6301a2efcb1a6af9ec2c7c3adfce3495bb09497606b9b80fc623b7405cf5e1a36175a12405d2b703f77fcdb6d3773fd1559ced54525bbb4c52e1b02636520b9f1742c3499fbee5dccce3dee568560e", 0x53}], 0x9, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1400000000000000290000004300000002000000000000000779cf140000000000000029000000340000000300000000000000300000000000000029000000370000003b02000000000000040103c910ff0100000000000000000000000000010000001400000000000000290000000800006b0500000000000000240000000000000029000000320000002001000000000000000000000000000100c7163310", @ANYRES32=r3, @ANYBLOB="00000000a80000000000000029000000370000003a12000000000000c910ff01000000000000000000000000000107180000000204090100020000000000000001000000000000000728000000010806070001010000000000000700000000000000090000000000000008000000000000000738000000020c7f8000ff7f00000000000000000000010000000300000000000000008000000000000009000000000000000700000000000000280000000000000029000000360000000c010000000000000401f80502d097c20400000005000000"], 0x170}}], 0x2, 0x20020010) 23:50:58 executing program 4: socketpair(0x0, 0x0, 0x1ff, &(0x7f0000000000)) 23:50:58 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x8000000) 23:50:58 executing program 0: write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="7bcddb7ae5e94048c821e4385d1a248cf54689470b02bf19c47a99275128eb1ae3d760494465541cc9c000e7ab86702012474e2f78504e54a31ca6f81762f6cd82f655c40911dbe26b0cd53552142c104215a068baf9e71531ef93be18fd0cc20de54c1145434713ef2d9185cd32be937cf19d708e34c1be29869ab839c1fcef36eb37b7a29f145f2c744773", 0x8c) socketpair(0x28, 0x5, 0x0, &(0x7f0000000000)) 23:50:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e24, @empty}}}, 0x90) 23:50:58 executing program 5: socketpair(0x28, 0x5, 0x4, &(0x7f0000000000)) 23:50:58 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$phonet(0x23, 0x2, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$phonet(0x23, 0x2, 0x1) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000ec0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000002480)={0x1564, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x88, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x40, 0x3, "6f8c23c43d4c7dfc5fd3987c535b3862cf306e83dc63bef7472210c80e97f42003eefbe98aea942308b4675c3ed36c3156ed5657f5fe56b72fe63dd4"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x39, 0x3, "1645da120ec34843a611c66c5e1bac528da8b6b278b829eb8d0be3d5f460b756f51393bdbf9866c7ce0ffbb4dc7c97d00701ce818b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0x10, 0x2a, [@mesh_chsw={0x76, 0x6, {0x1, 0x3, 0x31, 0x9}}, @ibss={0x6, 0x2, 0x101}]}, @NL80211_ATTR_BEACON_HEAD={0x732, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x1}, @broadcast, @broadcast, @random="d9fb2badd259", {0x9, 0x80}}, @ver_80211n={0x0, 0x7ff8, 0x2, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x7, @default, 0x2, @val={0x0, 0xb, @random="9ca0cd5ad3699c6fa0989a"}, @val={0x1, 0x6, [{0x5, 0x1}, {0x24, 0x1}, {0x36, 0x1}, {0x30, 0x1}, {0x16, 0x1}, {0x16}]}, @val={0x3, 0x1, 0x74}, @void, @void, @val={0x5, 0xe2, {0x80, 0x1b, 0x0, "37de29ffbd3b1f7052100a7fdb988c883b1dd3266ec603b8bdc959191d895f8f994e1e9da9e8e79ed0d4a2dea1d3c276186b9f88c30eaff3f05f3747a2f5148da451bfbffc9b3fe059a9f49708c49c14a99318a2da8db71cbd978e2ce52f88d05f9b31d898948c69d57c4b3852bac6ea701dec6808feb182e7f8d6f999469ef2113de6ec9bd360a1c7c69cef7c72d7effbbc16ea478fd48b6a11e7dd898347d8aefa607ebac8affc59747628a4a0d7cc1382b3df22fa2205e603e35bc3f322eb470b81c792950f2563190f09e316f91e04857643d5095816cc1f956a6086e4"}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x1, 0x2c, 0x40}}, @val={0x2d, 0x1a, {0x1000, 0x0, 0x1, 0x0, {0x7, 0x20, 0x0, 0x263, 0x0, 0x0, 0x1, 0x3}, 0x400, 0x5, 0xa}}, @void, @void, @val={0x76, 0x6, {0x40, 0x9, 0x3b, 0x6}}, [{0xdd, 0xd0, "2a80359963e3f405c6cc8aa0ee3e951defba0be468303ffcad11675e8372aa643298cb6f67539370682cd1d5990ba0280645d829ca710259868da74972ed586b01654b736a5827d3bd780d82ccca6a466ac1d8b53119318a8db4020e4d51b6f34ecd4f8e633a35d7a3f5841d22e6eabd3b0dc321ab148b0376023ed52f7c4b0ed186d79295622ce2c43d79a88731a7b04e1b3376aad861acf38d7b39ced271df5352a4025c1d456c4a1b87e72375c780f435061dd6d1408baac7442ef9391584d9e8e44ba6e99f6bf2a18cec086dd239"}, {0xdd, 0xba, "c2af905c9f2f24dfbf1696141c042ac8b81dbcebfe1a85ecda6b4beeec738a5080a1c0a8cd12c995de8e9d9af754f3fcee74f4c1c69fc4d75b03be58eba80519c1229f00c82c34938d58ab07ef370d436a73017f5e9956f94efc54464c42d36b8ee580bf32f82c3b80c9896ad770a83becb66ec3c1188228e729cc974c030a2ae78714ec40769705c59e8961f87350f0608590b5626325498e7723cd012ca0871678d457223facf3369f09dec0b7d4536114bd5172ef11d59e77"}, {0xdd, 0x8d, "fd4df8af81901e42cc0bcc4e33f1438f8dd89f7b4e58d2c22bad552a352747e808f8f37cce70a0f84b6c15a9ec0a78abdcb72929081dddc2533d5c53545c52248dbdffde6aab6e15aec7abe403d48c67a308834487bbb68f47fe5642905c5019f2063236187ccde8b68cbd67337c81708c7f0c8f8cef84defccb074b61f45f3b273a33688ce0deb711ab05b6b6"}, {0xdd, 0x28, "47461770c888f2472703b08fa65643e4571373107114613bda53ad33c343dbcc66da9f2add667c00"}, {0xdd, 0xf0, "a024d00e87ce4fb1f9cf530dc95d5416942f0bf4c1cd38a48dca7c19b20d0037f30334a751b27e355991c58d6273ca83cd002187ff99f80fef690c44c04e10828d413f31e5068ffe1ed31616d8ff975a478bcf62444d48c06308a964dbbbd98d99189e37ad50668dd09580e35f762dbba37beb1b95b6588756b6044844edd08a378fd6c7b4b89fd9d43d942053c491138ccfa06a24aa654f9440968d3253276f3216aa85db83d77e2e1ce967a91cc3382415023ca46c96088f545ee818033e73e1dcfbfc75a6939ce261cd7b2fa541fa0184767839230c86da512c4bd0599e980e23891223f0a708c7012428216b07c3"}, {0xdd, 0xa7, "72480e20cc91cd5c127cc1c72d197fb2304e56b75b40eb85338eca5bc0353dbfc7627bcb3d25ed911aac8d34b01a5287f79cc7e6fac62dcb4446e7a08d909f0b23de5ff6e9a85b112327b96d198022476dcad30586f570283e3cec89914b17ac16a18d427cb48c96d82f5b287e8413221c654e77304878f4eadb73c19e2c227a96aafe40c712604ae24784c0bc32c648ed48363e6e002a0d2687f1e10629406e977e890c01ed92"}, {0xdd, 0x7c, "649a2f8a8312876871a315d1255ed9593e1f75a324593913b32253cc86efab935672ed6e4c5dea459d5f12d7fff456348519e75feb55a6d82dcfbca5003f90ce6c02944f5ed79b06f623eaf085c041f99805839be2aff0b62b73ec9082b7b37020c24a542376d5644f4156e50d9a44c9087e2e61950123bcce6347e7"}, {0xdd, 0xf6, "305ad1a7212a9cfaef9daf33ca06cc482b5893ea67f3cd7c3fe3df56c24e1f126c49972f34e6e3ef7af2d3075abdbc4cfe7a66a1ddc3fd13d4a5722f635bed29051d9329b51b2534e5f13f3b4b089960358372bdad8f08e4e99ef205fac592a6f7dbabb5a260cacb4829339958d7eeac5612088dbd544e488641462dd70c6ece7498736f486972539d0d872ad504a86807a7bfe1bb5ae557d5b032061d7b8a3a9533ccb98e415c068a7940f2e84c6a4f22c01216685a68f3a19d24b6c9db483944040f507736b20a5e7807a4f93a2092555f7f8f64efc9fb456c46b72b8712f2952107379946688b738eaaa1087aea60d03358e76056"}, {0xdd, 0x83, "fb58d0ab43f6b247077b5f0a5c9177c94f6b46a8b5ab9e0a7154d22b98a3d61efb238985f6519ca2caf0a10df006f16ce6eca658e777417d740d5e56f0582cfe9abf64d4b6cf390dc5a77f2190f44c6a8b00b31ae98f7bf360dec96775e387b0b02f6528dc2246ee69348c103587a5accf98b933c509d88e98693b54ae83a82a3f12dc"}]}}, @NL80211_ATTR_BEACON_TAIL={0x206, 0xf, [@perr={0x84, 0xcf, {0x4, 0xd, [@not_ext={{}, @broadcast, 0x7ff, "", 0x12}, @not_ext={{}, @device_a, 0x1, "", 0x23}, @ext={{}, @device_a, 0x7, @broadcast, 0x12}, @not_ext={{}, @broadcast, 0x0, "", 0x22}, @ext={{}, @device_a, 0x4, @broadcast, 0x3}, @ext={{}, @device_a, 0x3, @device_a, 0x30}, @not_ext={{}, @broadcast, 0x3, "", 0x4}, @not_ext={{}, @device_b, 0x1f, "", 0x2d}, @ext={{}, @broadcast, 0x200, @broadcast, 0x16}, @not_ext={{}, @device_b, 0x4, "", 0x1e}, @ext={{}, @broadcast, 0x7, @broadcast, 0x6}, @ext={{}, @device_b, 0x775, @device_b, 0x6}, @not_ext={{}, @broadcast, 0x4, "", 0x9}]}}, @prep={0x83, 0x25, @ext={{}, 0x9, 0x20, @device_b, 0x800, @broadcast, 0x3, 0x6, @broadcast, 0x5}}, @random_vendor={0xdd, 0xfe, "6c99b1b6f98fcc65084dad1895be8ebb2b978b2950c94e28dfdbac2a6506201bd54550cc125b35edd3d4fdc25fe99953dc4010b85d41590b7558a6d320303864992a41df86c4dc703a992bf9cef2710de3324fa576689d9554a204386c3e1b954efadff149d7b7d04a65f8ce4de29fef9e9467c4f6a0fd6e25ecb9f90af57f88cac39347483eca5988219cb1e242dd57d70b18d9de2f47b16712fd6a61e2ac3d064c677a9ad98a9c6a93fafd791614f8119b2138cd6c3cdfe6d1ed48544cc782dbf7146f6b1aba2720b8e2e707b8d3109ce8682242a0bdecfe65a69a7d0186147b9e8e2857312b97339897da8ece48e869f0bd91c8188f23618c87cf1ead"}, @peer_mgmt={0x75, 0x8, {0x0, 0x8, @val=0x1, @val=0x9, @void}}]}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x0, 0x400}}]}, @NL80211_ATTR_IE={0xc9, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates, @measure_req={0x26, 0x62, {0xd4, 0x6, 0x3f, "421459032656454bef65203f5b45145ab9adabe37dfa6075925d1b4a2219194bc8584bbad7b7b57afdfbc528db43749ac31a6db0facc724c73f54a2dc4c0fed436d2dbfdf3451a2bbc0f363a684ddcc24e0238ae0de803043a80434de02efe"}}, @peer_mgmt={0x75, 0x16, {0x1, 0x1ff, @void, @val=0x3, @val="d8516987ea2e3eabd31d9227af3a815b"}}, @link_id={0x65, 0x12, {@random="c603e03c8293", @broadcast}}, @ibss={0x6, 0x2, 0x1000}, @ht={0x2d, 0x1a, {0xc, 0x2, 0x0, 0x0, {0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}, 0x6, 0x1ff, 0x65}}, @peer_mgmt={0x75, 0x6, {0x1, 0xb6d0, @void, @val=0x10, @void}}, @mesh_chsw={0x76, 0x6, {0x52, 0x0, 0x2a, 0x2}}]}, @NL80211_ATTR_BEACON_TAIL={0x2d, 0xf, [@chsw_timing={0x68, 0x4, {0x6, 0x8001}}, @random={0x2, 0x3, "13eb67"}, @rann={0x7e, 0x15, {{0x0, 0xb}, 0x8, 0xff, @broadcast, 0x1, 0x100, 0x6}}, @supported_rates={0x1, 0x1, [{0x1b}]}, @ibss={0x6, 0x2, 0x5}]}, @NL80211_ATTR_PROBE_RESP={0x8de, 0x91, "63c2344658bbc8c5f919e6f675034e4cec9566c291b3825ce871fd4880b0bdca49e9d25befb3ed27e73dab5fa1ea3cb2a60843caf39d656f45b288ba180978ec40a36e545fa2226220aecaa0cfc56030b9c9abdace9f2dd41ed96fd0ab3af1dcd72ffc6072445fc0d116f77cdf1e5f3791f4c8da12c3e3ebfa6c3e297e6bc62dc8f6fb4f9c55bfaa5105344265a3ad65da2b65596baf607441a467af4eb960b80d2a3f0044334b93d3237423c5f95dbc3605a74890fafa7b14b182b3f9e3feb5d844619f983671ad65730a37526d2520dad6ea24f2d124bee6bc09d340a25b3a5799b5d03095d84ff6f58436918d013ffd0b456b9f187f384b1ce11966fd2197448c64c7974f8ec7a3725b50094954ae826eee9ea8f0e89e60f6a74f787aeb8a243efeeeadc0f12d30060324f8bb3218a843717104b5b7ce636ad10501318373110f1983e10035c1d229babc1f4fd841220de4162314ff1a1048b7900f35e0084f260f97da4f908962fb3f656656cbf8c72b66dc3cfd433449ee1823cc925fc0e0dee6de2a066b074c5d531c0a3713d2c18d8855899685b1e329bc6a7f35d0ef41964c9053c18dba4fbb64721c0c021651d00429fdeae2f99f8c435b3576f10f8b8ef6abeba6df3fb2217f47629656367d4dcb81d9ffd50e4aed5d1e22ba3ef4e3c4121732e0717f3d4f14189f988baa2b587ea6076965d56dd4708d2d2e84aaa1304186b96e4ab3c09f9f32bb008b43dfc9d8d2e1f8fa2b1a254bcb7a63fc4e5532c6fca9f927aadbc0e9d6b569a3c07ff79a5cf421b9f36c4b6cd516007ed51038203cee0453c6c77acc93a756282ea9dbda0c6f35141984b1a89b7a20f03b0456533dd1ecd9f833f73f2d945e81cc9db6e9a04b5cab79fa5f44c016232014e1998755902a242b71f54db90d084405c923a9da7c9075b1bad5186b25832353752fe1e8f7acf8a55fadca8c30df6689b9ec711b308095ab94be8c10ad0ee8d9464d30776d5caab4109609237995ae83035368096fce91daabf14bfeb229c41e2d799d68d699aa27147e2fc2c2cf1f1920491e7dc79355b323a5ff62d1005199d46a59c3da53fd39f9e1f736868aebbbb04879d280b3ea5f6542539916bab664874069710952a6609e255c9d389f83d6253f57b9cecdb80e66e593297911a4fb5935c7caf2cd70b0e9f181fe6217407ce056a4bf546d3d9ee2a9943290c8ee6cba0da3715bfefcb78cdf01b1e4cfcf73a9f3f5fc2dba8b3aefdb46b7a77fe9a60b9ba497613d8adb7ffe843c7b483bc957530a8b0b47f8889542fb4fea917c5515e2a78adab15148db749137bbfdc546605a4505fcf6c609ee163ed9c110e8b5b0c8844b6ac00af8a7d423f2677806b005ad2a6d75b190f4a228bad6b5d8568e62ea329310dbd6de37fe0d5535c5fc85abb6ce26fe5c4a8d50d1e8aff892be60b06cda713e544ea56e88181b6fd316a269d99456adbd4d9cc63d3c2dad789a7649a6f464785ff39c80e58ab62f6cf034b253c14371de61f04dfb437e577794679b37578a993f4cf55e7bfd32c205bbcf54d8dccf3458a2dd84597eae2ce7c2e1ac21dc5d2e9f20fd3e82dc4f331c0ccd3693df846a562a17dcd7aa7c15e01e24a570ef9ef5556566fbd8b2fc214b3f689da5f898b81a30f726ecd39b3df91d4b02778ff9905e0ebf0262d6a2a513bf2531efee17c0efcbd5f9830f0c57ab39c99cb49717f2d5effa002d44d23843dd856b9969cfa8163a0458eb943a15888ce8498c03ba9799dc02eaf0e2c8def9de1fb20bc4ae23868c91b34f6a33d9591971b58d9ec5d2f701aa3a1a5d188e5f1c784d22880af2d400e263fb99c52a58ad5def995101b258725d32cf60b5c25bfc9ecab2b064330a3a9e8ecbe33cdff48a1eae4fbc98dc1b05766e7cbe054d7791b4b0b9b51e1deff2709b5ddecf33139e9039ad9bb72331919cbf7c90053917a3722a25f45c1118fe8640911bf209ea81940e9f05e9d711b6c83c3974e21c99b74363fd29be6cad63cb4c8e022c0ec546999e656fea6629ca1ae8a8eb35b27d75fda2a736e466cdfdf1699695676b947f7a33d4614a15bca757b4fb35f4db261fe3bd91b0c5d27d10ded546e5eb5221e9e8211031ca0c33f1ba02dc280f825151e43b54180e028f227245e53fcc595b4ff30159969f6074ce6705448725319e9f7acbfb939abc9900f0c179f41e297714cc40d16ef3cafccca8b687ed003d3108b20a1906c6b2434d1486eda6158e18e95e88fd45c03f0ae8719d9b211802db7936d47c75baf527a95647572bb7980cd841218a2bf4736b9461f9b3794da249b5076acd03497570ce58d9fca93d7ed48eec191e896cbc04b57e6bca474b5ffa1f33e7d0e376c7380103c480b7cc5ab000527bba87c3fdb9a3c14749c1c531ca949a727a34a44308064f736757171d755e221f7e04658387ca3b7445e6c9847761b50e1359cba140d4842f5e784ad5f94bc453ad30a51a37e30bb788430636928a878e19a9e9e43d2a18a6d5786509a09d545bcb4da96d114f24d41c88e5df188080e3f070568e2b49c8eb1451dfd16a683b2e63128570ab93011e054b2d6107fc8066a9a11609050024934ac10288ca19513f0ed49e608e45370468b5850f6c389c6a4dac6846cc9b9bc108cffa721c4d2fc4734248b2f7d1e471a470ba16b4842563aa941dc8734ef85c9279a3a650a7a5a1bbcfb6a2e7cd012839b16c987a72589fc983bd77f6a3434a4e07263fe919cd83a469c092cdaf708083850443eb65b10c30d9a5b2f0293e1e2519f4d8cf5ace470e3257d6d5a5c6cb046c902fc0e8884813da157d810d0acc8f38efb3050b705514fc30dc570811bda34194e48c3daec27d6b9c537e03309ab9b451cc7c2b28ecfe040f12af5712c1910b2be37f9e3ffb92afb3776b02b8bb6983f3795f93b455443b86133682fec420092c06f04e25cddf29e4038189694803f09d4e4bf01e919774ae49fbbf0301bc5a4454daae55a6581cd62d82008b1d44340ee05f6039f601ec0cdc1533a0e0492d00991196192a570effe2b3e7925d66c39a312b80c5f7d19d5f19951c047f4992b6d4ae02b1bfa88282f9effc54eece4f408582d8fb55e48ac3c75f6841df6c670902b920ee4af85e5ee73b24f6c8ac3b1d111b2c873b37244c11475123f29873bb3e8ed7c59c4b57a7c8a42d7ec275"}, @NL80211_ATTR_BEACON_TAIL={0x192, 0xf, [@gcr_ga={0xbd, 0x6, @device_b}, @measure_req={0x26, 0xc7, {0x81, 0x2, 0x20, "69de5acd9174709b45e4dfb8694a406956f63f4a795b7ee51b61169da321a2471819ffcb7918a929a042a2bebd00f7323a41a676fea132086adb14a2c7ae10dcc6e8bab15c3c6bde2651b5a1d2fd85431ce78c41f18b0a2730d9d27e373a8158eb741465d97a2263e4f12e0a21f3028ae77da7d5a7a529142761df432a67587b3726de1fb53128fe6a014dc57c3ddd7faa75b40598a99325a12eace76f99e8a7641abab04f404c1a81ee0042bf9346e2113f2700bca3535facbd1e4349024dd18f62fb29"}}, @mic={0x8c, 0x10, {0xa84, "55b91f969b38", @short="419031d054edc05f"}}, @fast_bss_trans={0x37, 0xa1, {0x5, 0x5, "3478816c01fa8e96a555b874e1da65d8", "2a8ff78dbd774bc7dc3a1b8103a0bc97aaf91d92184edb511779b386aa95ebe9", "597f345e70925057b476305eacd678781dbde0cacfe6a9d9ea88cbead1981575", [{0x3, 0x7, "c3deec34cff977"}, {0x3, 0xb, "d8c21f1726faa5dcd7a35b"}, {0x3, 0x2, "d5f7"}, {0x3, 0x27, "79f5ea35633e2b98a374ba15358865ed6cb1ba24a340be5e2eeeb8271ba4a522e00034dffc0988"}, {0x3, 0xa, "bc6ca985a0f52f44a69b"}]}}, @mesh_chsw={0x76, 0x6, {0xe0, 0x9, 0x3a, 0x1}}]}]}, 0x1564}}, 0x8000) getsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000140)=""/211, &(0x7f0000000240)=0xd3) 23:50:58 executing program 4: socketpair(0x0, 0x0, 0x1ff, &(0x7f0000000000)) 23:50:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0xb67, 0x5, {"4a2659d69c2fa7753c56878ec60f2519"}, 0x7, 0xc89, 0x87f3}}}, 0x90) 23:50:58 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x29, 0x80000, 0x8) write$nbd(r0, &(0x7f0000000040)={0x67446698, 0x0, 0x23, 0x0, 0x46, "5655f36681e944751b0c3446da9e35f6adb12ec038af84e61a7363646d14790d2e9da5953cd8a9c3f7607959d8a561252985434c1380257ed2cba31badf95e0000000000002c92ed6ff39f03c3188c2d50cf8e00"/93}, 0x6d) 23:50:58 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x9000000) 23:50:58 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) socket$inet_icmp(0x2, 0x2, 0x1) [ 448.678105][ T9698] Bluetooth: hci0: command 0x0c20 tx timeout 23:50:58 executing program 4: socketpair(0x0, 0x0, 0x1ff, &(0x7f0000000000)) 23:50:58 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xa000000) 23:50:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x40) 23:50:58 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r1, r2, 0x0, r3], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x0, r3], 0x2}) 23:50:58 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0x28, 0x80000, 0xa1, &(0x7f0000000180)) setsockopt$inet6_buf(r0, 0x29, 0x45, &(0x7f00000000c0)="03cb823841c2cf6017f2216d0657b015f97389fc93a8026cde80d50f68c3e0294a445c8bd39643f592c33720b4a84c600c5f5506560f73ab5982ec2f98be39e2cb1f1da7ee11d3d0057a41e5570d75a613fd2f202db0aae16e9bd0719f52676b945faa1ce887b867369279cfb87a095a42a0a515f82f227f16a16d80e180cd771ee7d9f266e449e2eaeac42e730bc5a3a3bce37db9a537a228a5d299ac95cc0c", 0xa0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:50:58 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) accept4$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14, 0x800) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000040)={0x1}) 23:50:59 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xb000000) 23:50:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x20, 0x5, {"250b95a93260f3b4e860729a331a632e"}, 0x81, 0x40}}}, 0x90) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000280)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4e24, 0x7, 0x4e22, 0x3ff, 0xa, 0xa0, 0x80, 0xb9, 0x0, 0xee00}, {0x7, 0x4, 0x4, 0x2, 0xf16, 0x3f, 0x6, 0x7}, {0x4, 0x0, 0x5, 0x4}, 0xffffffff, 0x6e6bb3, 0x2, 0x0, 0x1, 0x3}, {{@in=@loopback, 0x4d6, 0x6c}, 0xa, @in6=@private2, 0x3500, 0x7, 0x1, 0x5, 0x0, 0x0, 0xffff}}, 0xe8) 23:50:59 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000040)={0x6, 'syz1\x00'}) 23:50:59 executing program 4: socketpair(0xf7ea73878c0ea29d, 0x0, 0x0, &(0x7f0000000000)) 23:50:59 executing program 0: socketpair(0x1, 0x800, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2, 0x80806, 0x7) r2 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendto$packet(r1, &(0x7f0000000140)="40c6f1fdae6f239d4d56ad93bc287566891b56e8a25fca65bbfdf9715c6bf47b7370e1a9fc95937f4742fe38667425ff332488b5ea6f2cd938e843cd2c130839303d0218e4f42315935e7f7bbac8b2965aad14bd7a62e135ed6ce32cda61d86ea2f15eb035b58eca372b3f9071158fcdd5ace690deaefdea0686cc0cb38a8875ba137cb27ec7d33e50432747a239ad91e0e713f2f9e0281c6d3c7059d42610533e03", 0xa2, 0x8081, &(0x7f0000000200)={0x11, 0xf5, 0x0, 0x1, 0x7f, 0x6, @broadcast}, 0x14) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000040)) 23:50:59 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r1, &(0x7f0000000100)={0x24, @none={0x0, 0x2}}, 0x14) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x46d, 0x7, 0xbf08, 0xfffffffd, 0xe2c, 0x6, 0x9}, 0x1c) 23:50:59 executing program 5: socketpair(0x29, 0x0, 0xb, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x11, 0x4, 0x7, &(0x7f0000000100)) r1 = socket(0x2, 0x80806, 0x7) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x4, @private0, 0x4}, {0xa, 0x4e23, 0x81, @private2, 0x9}, 0x5, [0x7, 0x5, 0x3, 0x496, 0x8000, 0x9, 0x4, 0x7ff]}, 0x5c) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 23:50:59 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xc000000) 23:50:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c, 0x80800) getpeername$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000180)=0x1c) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) 23:50:59 executing program 4: socketpair(0xf7ea73878c0ea29d, 0x0, 0x0, 0x0) 23:50:59 executing program 2: r0 = socket(0x2, 0xa, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:59 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xd000000) 23:50:59 executing program 4: socketpair(0xf7ea73878c0ea29d, 0x0, 0x0, 0x0) 23:50:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file1\x00'}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffe00, 0x27ad, 0xff, 0x3, 0x5, 0x6, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r1 = socket(0x2, 0x80806, 0x7) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000140)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000000040)=0xfffffe08) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="2c10020100000000fe8000000000000000000000000000aafc020000000000000000000000000001fe880000000000000000000000000101ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000ffff7f000001fc020000000000000000000000000001fc020000000000000000000000000001458360d1b246150b3d8714fde1641cc37aa0941cf8"], 0x88) [ 449.477859][ T1132] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 23:50:59 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14) 23:50:59 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xe000000) 23:50:59 executing program 2: socketpair(0x2b, 0x5, 0xfffffffe, &(0x7f0000000000)) r0 = socket(0x25, 0x0, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000080), 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) 23:50:59 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r2], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r3, r4, 0x0, r5], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r7], &(0x7f0000000340)=[0x0, 0x0, 0x0, r6, r10, r11, 0x0, r12], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5, 0x3, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5, 0x4, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000580)={&(0x7f0000000500)=[0x0, r1, 0x0, r7, 0x0], &(0x7f0000000540)=[r9], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f00000002c0)={&(0x7f00000000c0)=[r0, r1], &(0x7f0000000280)=[r5, 0x0, r12, 0x0, 0x0, 0x0, r13, r14], 0x8001, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)={r0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000400)={r2, 0x1, r8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000440)={r15, 0x0, r16}) 23:50:59 executing program 4: socketpair(0xf7ea73878c0ea29d, 0x0, 0x0, 0x0) 23:50:59 executing program 5: r0 = socket(0x2, 0x80806, 0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffffeeca, 0x3e}}}}, ["", "", "", "", "", ""]}, 0x28}}, 0x40000) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:50:59 executing program 4: r0 = socket(0x2, 0xa, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:59 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x10000000) 23:50:59 executing program 0: getegid() r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x1, {0x2, 0x6, "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", 0x2, 0x0, 0x1, 0x80, 0x1, 0x3, 0x3}, r1}}, 0x128) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:50:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @empty}}}, 0x90) 23:51:00 executing program 4: r0 = socket(0x2, 0xa, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:00 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x3ff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 23:51:00 executing program 0: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x101, 0x1, 0x4, 0xd24, 0x6}, 0xc) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket(0x2b, 0x800, 0xa8) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000090) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x2, 0x9, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x200}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x28}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) 23:51:00 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x11000000) 23:51:00 executing program 5: socketpair(0x1, 0x0, 0x8, &(0x7f0000000000)) 23:51:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x280000, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000280)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = getegid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r3, 0x62e5}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}, 0x90) 23:51:00 executing program 4: r0 = socket(0x2, 0xa, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:00 executing program 2: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, 0x1, 0x2, 0x201, 0x0, 0x0, {0xc}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x800) socketpair(0x28, 0x800, 0x4, &(0x7f0000000000)) 23:51:00 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x12000000) 23:51:00 executing program 5: socketpair(0x25, 0x80000, 0x8, &(0x7f0000000000)) write$smackfs_load(0xffffffffffffffff, &(0x7f0000000040)={'', 0x20, '@', 0x20, 't'}, 0x5) 23:51:00 executing program 4: r0 = socket(0x2, 0xa, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) 23:51:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x8, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x3, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x0, {0xfffffffa, 0x0, "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", 0x0, 0xfc, 0x3, 0x3f, 0x20, 0x81, 0x3f, 0x1}}}, 0x128) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {r2, 0x7}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @ib={0x1b, 0x8, 0x0, {"7dc616cb71429e02884fe7f100"}, 0xf0e9, 0xfffffffffffffff8}}}, 0x90) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x9, 0x4) 23:51:00 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x18000000) 23:51:00 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x7, 0x4) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:00 executing program 5: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x38) socketpair(0x1d, 0x0, 0x800c, &(0x7f00000000c0)) r1 = socket(0x2, 0x80806, 0x7) socket(0x25, 0xa, 0xfffffffb) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r3, 0xe}}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000100)={0xfff, 0x0, 0x0, 0xd6b, 0x200}, 0xc) 23:51:00 executing program 4: r0 = socket(0x2, 0xa, 0x7) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) 23:51:00 executing program 2: socketpair(0x32, 0x5, 0x37, &(0x7f0000000000)) 23:51:00 executing program 3: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000900)={0x3e8, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0xcc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_NAT={0x17c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xffffffffffffff25, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x82}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, @CTA_EXPECT_NAT={0x130, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xff81}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1ff}, @CTA_EXPECT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x840}, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000880)={{0xa, 0x4e21, 0xfff, @remote, 0x100}, {0xa, 0x4e22, 0x8e, @ipv4={'\x00', '\xff\xff', @rand_addr=0x3f}, 0x440}, 0x2, [0xfffffff8, 0x8, 0x1, 0x4e01, 0x7, 0x1, 0xbc53, 0x1]}, 0x5c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, 0x1ff}}, 0x18) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000f7dbdf257600000009080300420a5114ddc483aff677e8470e4e948a69db44568effbc7a02215af405fb84ffb6ca8ddafcd9a446359788e982debdef017703e2370a7597244bf10eb81167c1d0e6e697e7d315e052e077c759930d373f21a45bf245832cb43ee19edddf0085a68b288dd4b20c14d977b382bc7a7ce76e884ca9f059aa0b42c585f90f47726dd8b5b5d66dd3cf57b40e4fe946f09771df159ee4187c2ec4c24b124c6b04c37c30d776f66904b89075aafb50d11df59bd1b0e582a4de4d0fec3642b6b32f3797c1ac39be42b1b4cb7e350d", @ANYRES32=0x0, @ANYBLOB="0c0099007e0f0000770000000c0058005a000000000000000c0058006e000000000000000c0058007f000000000000000c00580011000000000000000c0058001500000000000000"], 0x64}}, 0x0) 23:51:00 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x25000000) 23:51:00 executing program 4: setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) 23:51:00 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0x5555555555550201}}}, 0x14) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:00 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) [ 450.757262][ T20] Bluetooth: hci0: command 0x0c20 tx timeout 23:51:00 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x27000000) 23:51:00 executing program 4: setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) 23:51:00 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)={0x23ab3051, [0x40000000, 0x80000001], 0x200}, 0x10) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x1, "069450", 0x2, 0x20}) socketpair(0xb, 0x6, 0xff, &(0x7f0000000000)={0xffffffffffffffff}) write$bt_hci(r1, &(0x7f0000000100)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x1}}}, 0x5) 23:51:00 executing program 0: socket$inet6_icmp(0xa, 0x2, 0x3a) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000180), 0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x2, 0x80806, 0x7) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f00000001c0)={0x1, 'syz1\x00'}) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in, @in=@local}}, {{@in6=@ipv4={""/10, ""/2, @local}}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) 23:51:01 executing program 5: ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x2, 0x80806, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000004c0)={0x7ff}, 0x4) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000440)) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket(0x1f, 0x5, 0x252) socketpair(0x26, 0x2, 0x80000000, &(0x7f00000002c0)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) openat$vfio(0xffffffffffffff9c, &(0x7f0000000480), 0x4a080, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x6, 0x0, 0x500, 0x9, 0x40001aa, r5}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000040)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x7, 0x4e23, 0x0, 0xa, 0x0, 0xa0, 0x6, r6, 0xee00}, {0x30, 0x3, 0x100000001, 0x3, 0x5, 0x8, 0x1, 0x1}, {0x0, 0x800000000000000, 0x9, 0x80000001}, 0x8, 0x6e6bb9, 0x2, 0x0, 0x1, 0x2}, {{@in=@empty, 0x4d4, 0x6c}, 0x2, @in=@remote, 0x3505, 0x0, 0x1, 0x0, 0x4, 0x7fe00, 0xffffffff}}, 0xe8) r7 = getgid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) r8 = getgid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000500)={'macvlan0\x00'}) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:51:01 executing program 3: openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x39, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfffffffffffffe9a) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x53, 0xfa00, {&(0x7f00000000c0), r2, 0xfffffffd}}, 0x18) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000300)="7cd8eb5b94eefd316ada24d370ee17c939fe1c88e5ae00cf1cd6d52670d90a7ffeb7a3e372b371186b61562344e1402d56375c6e523713b422e21456d2c15487218d816be1c5380a65b5ff64d017fc4eb2141fb056913e5b650296b0745b5876806a75b43fad152d7ab7e1dbc8247a3b118c2be251f8fa0b61bc8a8deb46f4970e7facfc236cbe72b412") r3 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e24, 0xfffeffff, @dev={0xfe, 0x80, '\x00', 0x28}, 0xef6}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x13f}}, 0x20) 23:51:01 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x3f000000) 23:51:01 executing program 4: setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) 23:51:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x6d61bab5411cbd40}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xfffffffffffffffc, 0x5, 0x6, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f0000000480), &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, r4, 0x0, r4, r5], 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, r6, 0x0, 0x0], 0xa337, 0x6, 0x6, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r6], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r7, r8, 0x0, r9], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000380)={&(0x7f00000001c0)=[0x0, 0x0, r1, 0x0, 0x0, r2], &(0x7f0000000340)=[r3, r4, r5, r9, 0x0, 0x0], 0x100000001, 0x6, 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x50200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000500)={&(0x7f00000000c0)=[0x0], &(0x7f00000003c0), 0x1}) ioctl$TUNSETVNETLE(r10, 0x400454dc, &(0x7f0000000100)=0x1) ioctl$TUNSETPERSIST(r10, 0x400454cb, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2000000000000045, &(0x7f00000003c0)=[{0x1, 0x1f, 0x1, 0xffffffff}, {0x8, 0xb, 0x4e, 0x3}, {0x1, 0x6, 0x3, 0x1}, {0x4, 0x7f, 0x6, 0x4}, {0x3, 0x58, 0x0, 0x8b23}, {0xfffe, 0xff, 0x8, 0x4}]}) socketpair(0x1, 0x1, 0x1ff, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 23:51:01 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x48000000) 23:51:01 executing program 4: r0 = socket(0x0, 0xa, 0x7) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) 23:51:01 executing program 5: socketpair(0xa, 0x4, 0x2b0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0900000004060104ee563d9b32756c140a000007090002701e797a300000000001000100070000000900020073797a30000000000900b3ea97e37a30000000000e758739694a391c63cbd92ffd38d97d32bc832425f0c669a5b65c8797f76518c508b288d059932685ad0c8b67cce4d29c5683d6ae8530fb4517353bc083c7800c8da088b19cec83c4ab105314c874f67b6c8ca3997a482d0000000019ebfc8964b43ee5540eb6e0a1eff8094414b675010f83dd815791a088be90e1872d4528335477e4b70bfbf3a1cc313b7bf98f56c5f1551b82c3bc4e255992346a27c2c90003d4d0e08a96df84bd9603c8"], 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x801) r1 = socket(0x2, 0x80806, 0x7) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @empty, 0x7ff}, 0x1c) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008840}, 0x448d0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1) 23:51:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6, 0x6, 0x9, 0x7d82}, {0x23, 0x1f, 0x80, 0x81}, {0x8000, 0x9, 0x1, 0x7}]}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000001c0)=0x372) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180), 0x14) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x4, @loopback, 0x81}}}, 0x90) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, 0x2, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_TUPLE={0x78, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xf8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000881}, 0x48881) 23:51:01 executing program 0: socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) 23:51:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x90) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0xcbb1ed536c653293}) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x9, 0x8000]}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 23:51:01 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x4c000000) 23:51:01 executing program 4: r0 = socket(0x0, 0xa, 0x7) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) 23:51:01 executing program 0: bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) socketpair(0x2, 0x0, 0x5, &(0x7f0000000000)) 23:51:01 executing program 2: socketpair(0x28, 0x0, 0xba, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 23:51:01 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x5c000000) 23:51:01 executing program 2: socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)) 23:51:01 executing program 5: socketpair(0x28, 0x3, 0x41, &(0x7f0000000000)={0xffffffffffffffff}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x3ff}, 0x1c) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x8001, @rand_addr=' \x01\x00', 0x2}, 0x1c) 23:51:01 executing program 4: r0 = socket(0x0, 0xa, 0x7) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) 23:51:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f00000000c0)=0x7, 0x4) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) 23:51:01 executing program 0: ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) 23:51:02 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$bt_hci(r0, &(0x7f0000000040)={0x1, @delete_stored_link_key={{0xc12, 0x7}, {@none, 0x4}}}, 0xb) 23:51:02 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x68000000) 23:51:02 executing program 4: r0 = socket(0x2, 0x0, 0x7) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) 23:51:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, {0xa, 0x4e20, 0x100000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff}, 0x40, [0x3, 0x7, 0x4, 0x8001, 0x1, 0x100, 0x1, 0xffffffff]}, 0x5c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x13, 0xfa00, {0x5, &(0x7f0000000240), 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x900, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x4010) 23:51:02 executing program 2: socketpair(0x28, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000040)=0xfee) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) 23:51:02 executing program 0: socketpair(0x28, 0x0, 0x80, &(0x7f0000000000)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000040)) read$snapshot(r0, &(0x7f0000000080)=""/85, 0x55) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 23:51:02 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x6c000000) 23:51:02 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140)=0x1, 0x4) r2 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 23:51:02 executing program 4: r0 = socket(0x2, 0x0, 0x7) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) 23:51:02 executing program 0: socket$packet(0x11, 0x3, 0x300) 23:51:02 executing program 2: ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f00000002c0)={{&(0x7f0000000240)={'Accelerator\x00', {}, {&(0x7f00000001c0)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_str={@normal='NumberDcInstances\x00', {"af66fc5f1a347a7444c31dbf78ae7551c4a01f53f8e20723c86006b20e4e02dc607a1fb05fe987aed74b2f00f63be1ec6736121c17db0cdfbb70324127e6345c"}, {&(0x7f0000000040)=@adf_str={@normal='NumberCyInstances\x00', {"15d0251c9a7cfe656bc55b43372ba7afd15cc2b842e6d0cb2cda2f07310fa47ad0e15075e1e7c28bf77bb49c8958c9f4404663da5509fce814ec25147bc4b44d"}}}}}}}}}}) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300), 0x6ca100, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000540)={{&(0x7f00000005c0)={'KERNEL\x00', {&(0x7f0000000400)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingTimerNs\x00'}, {0x35}, {&(0x7f0000000340)=@adf_dec={@format={'Cy', '3', 'NumConcurrentRequests\x00'}, {0x800}}}}}}}, 0x1f}) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000580)) socketpair(0xb, 0xa, 0x1, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000500)={0x1, 0x7f, "cf67b2", 0x9a, 0x8}) 23:51:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @private=0xa010100}}}, 0x90) r1 = socket(0x1f, 0x1, 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8fd}, 0x1c) 23:51:02 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x74000000) 23:51:02 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@remote}, &(0x7f0000000100)=0x14) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e22, 0xe6, @remote, 0xffff222a}, {0xa, 0x4e20, 0xea, @remote, 0x1573}, 0xa94d, [0x9, 0x3, 0x5, 0x1f, 0x2fe1, 0x8000, 0x99, 0x9]}, 0x5c) getsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f0000000140)=""/53, &(0x7f0000000180)=0x35) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={@loopback, @dev={0xfe, 0x80, '\x00', 0x24}, @remote, 0x10001, 0x0, 0x7, 0x400, 0x100, 0x80800002, r2}) 23:51:02 executing program 0: socketpair(0xb, 0x0, 0x5, &(0x7f0000000040)) 23:51:02 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x7a000000) 23:51:02 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x2a, 0x800, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x1, 0x3f, 0x81, 0xddec}, {0x9, 0x8, 0x20, 0x7}, {0x2, 0xc, 0xf8, 0x6}, {0x20, 0x14, 0x1f, 0x8}, {0x1, 0x20, 0x6, 0x4}, {0x2, 0x3, 0x7f, 0xfffff000}]}, 0x10) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, 0x0, 0x8000, 0x81, 0x400, 0x2}) 23:51:02 executing program 4: r0 = socket(0x2, 0x0, 0x7) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) 23:51:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x2, {0x5548, 0x7, "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", 0x5, 0x4, 0x2, 0x0, 0x56, 0x1, 0x4}}}, 0x128) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x4, {0x2, 0xaa05, "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", 0xdb, 0x8, 0x62, 0xff, 0x3, 0x1, 0x7}}}, 0x128) 23:51:02 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x5, 0x1, 0x4, &(0x7f00000000c0)) socketpair(0x3, 0x80000, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x8, 0x4) 23:51:02 executing program 2: socketpair(0x28, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000040)=0x1, 0x4) 23:51:02 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xebffffff) 23:51:02 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000040)) [ 452.827141][ T9698] Bluetooth: hci0: command 0x0c20 tx timeout 23:51:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x5, @multicast2}}}, 0x90) 23:51:02 executing program 0: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)={'wg2', 0x32, 0x33}, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'veth0_to_batadv\x00'}) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0)={'veth1_virt_wifi', 0x32, 0x39}, 0x12) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:02 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x1, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x4}]}, 0x78}}, 0x0) 23:51:02 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) 23:51:03 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xfeffffff) 23:51:03 executing program 0: socketpair(0x2a, 0x2, 0xfffffffd, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000000)={0x2, 'syz0\x00'}) 23:51:03 executing program 5: socketpair(0x0, 0x800, 0x9, &(0x7f0000000040)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x6, 0x4) 23:51:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x20, 0x2e944ed0, {"3f50cb84860d174b8c6d1a145e6cb9c4"}, 0x34dc4314, 0x9, 0x7}}}, 0x90) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xc}}, 0x10) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f0000000240), r2, 0xc0}}, 0x18) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) r3 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000003c0)=0x3, 0x4) 23:51:03 executing program 4: socket(0x2, 0xa, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) 23:51:03 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xff000000) 23:51:03 executing program 0: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) socketpair(0x28, 0x2, 0x1000ffff, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) memfd_create(&(0x7f00000000c0)='(&:{\x00', 0x4) 23:51:03 executing program 2: socketpair(0x1e, 0x80000, 0x20000, &(0x7f0000000040)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@private0}, &(0x7f0000000080)=0x14) 23:51:03 executing program 4: socket(0x2, 0xa, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) 23:51:03 executing program 0: socketpair(0x21, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14) 23:51:03 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xffffffeb) 23:51:03 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x33, 0xa, 0x83c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x7, 0x9, 0x7fff, 0x9}, 0x10) 23:51:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = getgid() getegid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() syz_open_dev$dri(&(0x7f0000000080), 0x3ff, 0x49aa03) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r3) 23:51:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) 23:51:03 executing program 4: socket(0x2, 0xa, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x5, 0x0, 0x81, 0x6, 0xbef}, 0xc) 23:51:03 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000140)=0xe8) 23:51:03 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xfffffffe) 23:51:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) 23:51:03 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$packet(r0, 0x0, &(0x7f0000000040)) 23:51:03 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x80, 0x1, 0x4}) 23:51:03 executing program 4: r0 = socket(0x2, 0xa, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 23:51:03 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x80000000000) 23:51:03 executing program 0: socketpair(0xa, 0xa, 0x3, &(0x7f0000000040)) 23:51:03 executing program 4: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) socketpair(0x28, 0x2, 0x1000ffff, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) memfd_create(&(0x7f00000000c0)='(&:{\x00', 0x4) 23:51:03 executing program 5: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = socket(0x27, 0x5, 0x9) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000400)={'security\x00', 0x88, "c13b3862fba4d07851adb05864b2e4e6164c813fcdc3f4ca79d4e464a99bd6dbb3b619983b2702db9e1d5d36f9075bda3bfd6278fa51240956317ddcd59f27a3b4821053516767f1cf5c5abc0cc4d072b19d858f9fecca8cc7a3acb011cfdc5178b00c866dec1d54c6360d3603e01156abe1016bb146272bef35b2a51c5beecfcf36bebd7f212b75"}, &(0x7f00000004c0)=0xac) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x500, 0x0) write$tun(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x256) connect$802154_dgram(r0, &(0x7f0000000500)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14) r4 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000540)=0xffffffff, 0x4) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:51:03 executing program 3: socketpair(0x2a, 0x2, 0xfffffffd, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000000)={0x2, 'syz0\x00'}) 23:51:04 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) getegid() 23:51:04 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x1000000000000) 23:51:04 executing program 4: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) socketpair(0x28, 0x2, 0x1000ffff, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) memfd_create(&(0x7f00000000c0)='(&:{\x00', 0x4) 23:51:04 executing program 3: socketpair(0x2a, 0x2, 0xfffffffd, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000000)={0x2, 'syz0\x00'}) 23:51:04 executing program 0: socketpair(0x28, 0x3, 0x0, &(0x7f0000000000)) r0 = socket(0x2a, 0xa, 0x400) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)={0x3a, 0x2, 0x2, 0x20, 0x0, [@private1]}, 0x6d) 23:51:04 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x100000000000000) 23:51:04 executing program 2: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)) socketpair(0x28, 0x0, 0x0, &(0x7f0000000040)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000080)="97600dbb0b4ac920d156cba7655b261eede5b79faedbdc67388148a40f9adf5967bb262e3b32133741d3756fc81e22a62755998683a09de3de3fe9073e1e9c8e3a4acf84eeeda306930d36fc378ba1456d4dc5aed72b453f174f88ef2c1a3fe3459280facb09ff112248366e81515bb8dcc8b5bb2fb448c6eb7d92a07355f23cfa974f3790ba52b3a30750c89b45d8fd9aecd520277dcfb363009d97482eb4e8d081a00b25efd8e0f95aa6253fe1d0d69ccf0eef1dcb3af1e780d6129cf0853636b68e7817804295dcf16464d3c19640a71ef492ba9e64cddb2de99742cf29d000a2d482ee29ab5805c2dc56c67a1825a61293a9ec5374b5fa212aa23f8fd69bd804196a060969609d961c01d62c1a831305c50a5d9ea1bba6375f3ba16d58019d2a2abe6b08f65fcaa5ed7867cb6856639c735da4602c7af9d5de4b669323e69eb0ee0898094ea6d278d3beabd3aa8f7f41b4bf6eef7d7d8bd5ec6d23eb549cae8b1abf43d8104307df546d5ac6c282bde56f4cc8d58f66e10dd9d3d2f4c74d5a991d1ebf78ed496d5eb09018191f1a219e6eb772590d2ea4cbed74b2f7bc8fee206ba0eb9d0aad649a9cea010ac3dcf045206b1e90c10dbdbfa86b4470bed5cd495202cbd8f71000d03a2a018a7bddeee7fdb4679aa0620b22cad03f807532ab8a427fd136abf306549d6346a81b83aa3a7ca96e4633946df0c5ef2ec9ef88051669abb47e24ca32ac56cf8d6ad652e9ea39ab6ec1c1dc5b8d721336674e162149f6693a6a94e729c2a6ade24e030dfa5beb587a515c37b1a99e10b7b11752e1dc3b6beca73e0849af3eb004ba33b30e72587730e075b7b026114be4562842ef8cfcc00937104fd4577c51c949094282652bc89b203f49c550846407391f2a3ee313aa7fdb0dd13a577ca2f1f49befa3f31fa0be5c5bcc885766eeaeb5a85a65f1225da41560a13bdac725ff543c2adcb3cf42cc30dc21fded8ac80441ed086e713feb751da2e456f42d29bd9f289b9e830481b7139ee38d9271ad80f4c776753e1f8e6eba4d44695bea6516187e0f1e80aa6afda0e90ff4a4ebe591fb91ec054b45a29946272cef141505d1ff9f8c5813068777ee6f0c4a08bef3c012a00d087862512cb0579ecebff245d5cda7f63516dcb0089f376f15135ae97c0c1e04afcededa8225a961fa8d00648ad0d7be65758627be605d382973527e3fdb560bb828dc5f809940134dcd27e778ffda3c47b597595eabf3b78733921dbe224ba66cac2496d1917f09eeb2c9eb306f9083c6b140b80bab5606a619a2e23515db3a9f92fbb8aa0d032e455b1511c15844279b1ab0904d2293ec762848eb1054f1ebb5f673121bdc74e400515ae48ec6c4aaeeddbd08c1048383f12fc7001e85ed8235bba1c4f9a45c0c413e238ac79f0ee914e4f692e77ce8f21057d09c5dd2a76c2f89219607084e4ea9908eecef55d7813125b663335b54e5ec977f5a7590d56cd5aa15d15f6fff70dc8433c07d3cf08ff5062ccaeccc1263c0989032c64aff52817796ade6b3933ec3b276a0919890c93e2b774c21b5ba1752bf7d2f2e7a58dcd4ce213aa6e32b8fe58043dfe9162d3ff5f2d34b2042769ca1c0e15e4fc715fc863e1fd1c4f2921d792de0746cc22f450158059ee82ec931b38dc2809d48c27260011c2c5f49b3a0b6e5c9a79d68c8eaacf7092c9820c4b45456a7fa68ea9a34b498dabac85e726743f279123519967350e1bf0e335a26393584b6611eaef1028d01883ce3ced6bdda6ed2b9f5b9749076545b60205571e563a82dd13f6ff974da37419aa8481d24cdd77dd0f099fd8420feccedc7e4294c3b3458922edd5e46f271112c80d53faad919c13df99e2c73efda2bcde5fe528d034e32b3b445b266cd14949a843a117cbeaafea64b44591dd22ce2944ed0c287e2ae98089c2284951483ce109248e2a92c67c44f2ecd06b0efda55992915ef7598a47303f1892336b75843fffb78e0455b9305b62bf6bd4a1362ef2770fc62a730d3165d818bc6de13df3287c4928fc3bfb4f14d50740627e8e629db8dbd82dd1308630982f3748012885689c6d93312827c3e1ff94326e2ea4bf23965bc15f99ad610383480c002207577919fb36414ebfe70e6d1ae32b7b4ceba93e83ad57dd67d5107ced0f31322710c066d2483b64079b9ef2a8397958e8bc88fbd3b34934c15c38d24e184b37b9311e7c93cc92a9e9619e759f2884c23af79d231035831daa01adfc2e720612e919e2572410a94cb26d8f953c32ec74ac3a77c166d2c21d48f475b79f2b189a7f3c3e99c9c1f6c18719b885d73a4b5bacbe6016be62dce41abc13adf033adb5a05acb5082886ccfacb64f140e219183de32230cc0edba0ddecc6cb012b483fc2a90fd5db033b265aa774a8f51154040a8b2c533d7ea9e2833ce31fc7a950dbf60921cfbeb84c675e57e74c1fb0336a72e5d477cc3c75d5d263da8de60f40ac21091db72bf8d98f267b4a7cfa63c6c25a25145fbf68e418a1ae7f0d2e942092b9d1fb19dd9bda8b62a024ee7096ba9f0a2c9ea52632d8d80de87321d9c5b84c2d694690ed2fa27886c628f8a7ba55d5943ba24542f075ffaf54f737954af5164eacec5da007c1339fac590f98367896b58af1bf7be3276e3cf8f817694d3708fe8c5e4fc43392f9f9515f38f57677d28873e18bcdc5e95aa17103ca66bbba9626cbf766d6ab9106e802e8bbd80b7629b586d291b35bb5891a2c7f1836f349e62dd17ea66ade8b9a4adc9211105a491b6ca43d5da69e8b1ed5f3af10cb7aa66987d89cbe9c1f28d549478b12edcd5940b54ca24ae5ae2ee40cd25bd9d643e7eac2b6e5d0efac82d168d71a0684a45a530e10318eb38ea00a633dd8cc07c042d9a28dadd8f14f2ca3cc93fbd08234bc0879e3ac88d65f79ee94c6a9a6e1e517cc2861b6647e5a455b544b086d64ffa8a2971fa2ac4c03283d4e96fe5c7968bc754b0bcc42f8a70460fe1f3ac9e5c701a9e4083fd497758498b0f0b428e08b499b08c2905fe3fe9968e7f5e7229b00e2c694c61b1c8bf9c7de0fbddf831a7929f3669a5babc797f087f1ba585cbcee08de46a09e296a2fdc6ca702e1aba3f96ca5bb53ab44d3beef80b0f326d3db64ba94aad44e94139700602992370b04c2e4f00f2f8edafac50ba48f717c0d84702f61356dd908a5c9ee69810b826b1527a9b4466201ab736c7a29b070c39bbcef5c24cee5e6b2dfcb4c5fbd2fa31b31cde41dfc1ee60c92efb4fbb1d7e6cedd5cc44c65cee0ea579b31afe0b0b3c379d30fb2129ab36b4123c7d8457c13c95714508ab2fcd882a1f32f17be2ed9ee7da4abc9acb5d6cea426924fb89913f9c03f2a179b5f6a8babdcbfa60f7d2d695d065abb7adf221c707201e638d4df25bf9a2b53c7a667b792bcd7a6505b17c0e8534c1030da57094b2d714da537b6873d6f4fbd2e08df9e9b3c969fdbe9f1eea7b204568a33fd3e302c627c1901117ae11b8f222fad132628fa2d2b79a80a8f20136db820092412c8a591fab188ca2c827c946d64f0ba5ca0e320ac15933be2c93e07562d2dd4b0b337d0d66b6ac75a768c515e3a19f3b50628f595553089fa8e05d689f64c8b51906a65973c4f41b4767ae850c23a7b8caa1d0d89ef60e8b24883c54c25018c7c0a7f707af76bc2a191d314c5feb4e598197008d3aaa156ea0d3eff124198ccc82e23c498efd8355d93d7f7bad9dd438a5d4530f58d90651bb90219cca448385cdad7808c390b4eb09d190fd39e2768f87bea6095ade27bc00bd66753b57d0be511d7172bf258c87cc090f6e430d286a40c746ac0e4a49430effae49ac8fb4ad8459f9d94be16b2d7b5a85ce95ec90895b4b4c4136dce29f1062ab698e5c00cf725c162152160cba69003d9017f3c25af0c8f84a1b7910be4a6ab6ffa07c09b82f3906b11666df0f8d0d11d4ef6cb563fdf90a378d94c156a53e3320cb2e65dc674f5a9a6887b03655e4899815e44e19fe990cb8e29735b45765b6bf87f50147652b5c19dfb6b6e6d2278e4fab9ff093246f9e8f28679d6d8c83a875a27005f58059499b8446d3c12da6962cdf7284aab937b8381c793f4662a77f5f4d8bfe9d5791141e2cd735f42787e4f7e9a85338ff70c86603cedcec783adcc216e5193aa1c43c2a611c0acd2d55b611a508dffacd941efd65acb4746206c59a29907a12bcb9ec32259f89d546f191280fa3386f5b40546ac12ec7f10de0f64d6c880e67807b59bfde74cf3e88c317e7d3f4c789fb3fc68b3703921b3fadc130adcd64571dd7ddd2ad86e184954f5699d02e75e36bf892f46fa585b97aad527a781f40a866c410dbd79eac7f685e30562b9c60c85c0a121224f930b2478cc01ba8b8356a9457a8b7d16f4a0ddc10ac8d0e93aacb45a7362d730364d37ac29ce11288eafbd6917cf535d4dd44d651999c1731bb56681fb29efe9cd67cb18b0f3581a8379da16f812bfd108486ae113c7b72f544c94f2879b3043b626a7c53eca758027023e0e68867dccff8e609a9773cbd654eaac1a24166c4767aab911d46da2b21c552dcf9dd9dfaf8f29db1d1826337fdc91fe71fb9450b3be14575688e6b7c8328f61cd359180b8609c1c29ede303fe31796162674b48e0630dfebff48433fb4a328a77cb285b0b39b5e144f0c143dc637b52e5483dc1ce6c9e0844399031984cbfa3d65c1eed5cad30113f06be86718989be3b30547b8ba3dccd213c7cea22c6bd324723b643831a399b2752ce81f7b0326238ca1b420e22d946893005d09085bca044c584c844202e1e08c978c5dd7ece8e4e0c8fa9a072b8273097264ca7d1e12a5b2ba1b26aec33c614b232519dfb23636be1863c322c4ebfc54c0b470743cb9e49b425969bb123481faa39847489594937f75a0df7a2d7579a22f29bcb36adef41b3dd5ada847a842274a265cafcc8e9a9531fa172a3f65353120dfff269b10b10b2de61c412018cd6a607803dfcc2866d5395ce6d862720caf60f525491db95a5250e5d098c36e25a210ed5c1faf60ccb66a18226537fd54d9d935b4a7e8e46f0a96a97ba6cc00d2157b98b651f4274a81c0930dadbbd0e21a4dd870757029074d62e3cc77f8c69fe9fbabb379b65702fb0d6277ca4ce34783b5caa583c2210e016f4f4b1276c2d3cf2ce07b7eebc7b2a730c7f21a0b7d9f33071f9bae7043ad05cca099367693d0b35f9df12b457a2cb7d4ef0457511ab92166cbdd4f3a469def65e9d31d30a10ca8e1df582b4f82511ac8b55cde9e8d072eebc61132347c260074ab75acbef3d7034e365b6809c2eea6ba2c628414f923515cdbde944d7dee1bc12f1aabb0ed7671ac93c533efda493ace22118eabac7caa11b87a73f3ad1eff4d162cefce7c2b73dc1e6a73f3ef5babb9155c4b44647b7c7c3c0f11728c6aaa5465112502e9dee73d11338dc7dff4285fa1e56cec31796080e82bef4810fa93a9cc19076f8e7fb04a7dcb880b965f8c01f0fa0d57e4b5d83d3b5056a25dc3c570be16031851225397e390dd38f08581ed7c3614f2fb167cd246754769292d84861682d51b1f7e0b2b7e28344a53f6b25d755ad70348a7a87201ca6cfe79fc582c0d10b7f1038fe6097636e0756dd34f9396cc00a199340cf5ead7a3f543deb9674d076fc07f19aeab499dfe1b296cff0b0eb2a12f320d497808b3697aaf85a8c1d0db25b08634468676ab80da742c068f8451df97ad4247362d1801fdd4759b8437ed23c33d97103268f11018871c84901c804a65381e5a9d88c") 23:51:04 executing program 4: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) socketpair(0x28, 0x2, 0x1000ffff, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) memfd_create(&(0x7f00000000c0)='(&:{\x00', 0x4) 23:51:04 executing program 3: socketpair(0x2a, 0x2, 0xfffffffd, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000000)={0x2, 'syz0\x00'}) 23:51:04 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x28, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf43, 0x7b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008810}, 0x6044084) 23:51:04 executing program 0: socketpair(0x28, 0x0, 0xfcd7, &(0x7f0000000000)) 23:51:04 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x200000000000000) 23:51:04 executing program 4: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) socketpair(0x28, 0x2, 0x1000ffff, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) memfd_create(&(0x7f00000000c0)='(&:{\x00', 0x4) 23:51:04 executing program 3: socketpair(0x2a, 0x2, 0xfffffffd, &(0x7f0000000040)) 23:51:04 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000040)=0x4) 23:51:04 executing program 0: socketpair(0x28, 0x80000, 0x40, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e22, 0x2, @mcast2, 0x10001}, {0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x0, [0xba, 0x3, 0x4, 0x523b, 0x7bf, 0x8, 0x9, 0x716]}, 0x5c) 23:51:04 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x300000000000000) 23:51:04 executing program 4: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) socketpair(0x28, 0x2, 0x1000ffff, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() memfd_create(&(0x7f00000000c0)='(&:{\x00', 0x4) 23:51:04 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0xbb8, 0x0, 0x1, 0x3f, 0xfffffffb}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x7, 0x0, 0x20, 0x20, 0x9}, 0xc) 23:51:04 executing program 3: socketpair(0x0, 0x2, 0xfffffffd, &(0x7f0000000040)) 23:51:04 executing program 5: ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:51:04 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x29, 0x3, 0x3d5, &(0x7f0000000040)) 23:51:04 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) connect$packet(r1, &(0x7f0000000200)={0x11, 0x3, r2, 0x1, 0x5, 0x6, @broadcast}, 0x6d) 23:51:04 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x400000000000000) 23:51:04 executing program 4: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) socketpair(0x28, 0x2, 0x1000ffff, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) memfd_create(&(0x7f00000000c0)='(&:{\x00', 0x4) 23:51:04 executing program 3: socketpair(0x0, 0x2, 0xfffffffd, &(0x7f0000000040)) 23:51:04 executing program 2: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c, 0x40000) getsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair(0x18, 0x4, 0x601, &(0x7f0000000040)) 23:51:05 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0xf, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@local, @local, @private2, 0x100, 0x0, 0x7, 0x400, 0xa6, 0x100080}) [ 454.907214][ T20] Bluetooth: hci0: command 0x0c20 tx timeout 23:51:05 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x500000000000000) 23:51:05 executing program 0: socketpair(0x28, 0xa, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000040)={0x8000, 'syz1\x00'}) 23:51:05 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = accept$inet6(r0, &(0x7f0000000140), &(0x7f0000000180)=0x1c) getsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000100)={0x5e, 0x20000000000000e1, 0x2, 0x40, 0x0, [@private1]}, 0x38) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@initdev, @in6=@ipv4={""/10, ""/2, @empty}}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) 23:51:05 executing program 4: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) socketpair(0x28, 0x2, 0x1000ffff, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) getgid() memfd_create(&(0x7f00000000c0)='(&:{\x00', 0x4) 23:51:05 executing program 5: sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040000}, 0x84) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet6(r0, 0x0, &(0x7f0000000080)) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@private1}, &(0x7f0000000100)=0x14) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x2, &(0x7f0000000040)=0x5, 0x4) socket(0x1d, 0x6, 0xe3e) 23:51:05 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/4096) 23:51:05 executing program 3: socketpair(0x0, 0x2, 0xfffffffd, &(0x7f0000000040)) 23:51:05 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x600000000000000) 23:51:05 executing program 4: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) socketpair(0x28, 0x2, 0x1000ffff, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) memfd_create(&(0x7f00000000c0)='(&:{\x00', 0x4) 23:51:05 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0x2a, 0x6, 0x7f, &(0x7f0000000200)={0xffffffffffffffff}) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f00000003c0)={0x0, "7e840318e5bbbc3f47fb34c908aae95b551d81c79be87def130986d0b7837f8ad5cd2ee3b117b019799e7d4d8ef07ab32d1fd8d70beaed075cb256af0b0a56f7", 0x19}, 0x48, 0xfffffffffffffff9) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000fa", @ANYRES16=r0, @ANYBLOB="00042abd7000ffdbdf25730000000c00990001000000610000000800ef00000000000500ee00030000000800ef00050000000500ee00400000000800ef00030000000500ee00980000000500ee00080000000800ef00040000000500ee005b000000"], 0x68}}, 0x46840) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'vxcan1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x280420, 0x0) write$tun(r2, &(0x7f0000000280)={@void, @void, @ipx={0xffff, 0x8d, 0x40, 0x1, {@current, @random="266a9048d93b", 0xfff8}, {@current, @current, 0xc31b}, "6b141e5d2561835139b4f61419d60eaa8b6efe6392b205690de1c11a4802e0ffa4cd060fdad619d8551b6fca0ddd1665c47246e9eb4e70df62f620c4e4bfca43fb3ef25b1a652e524d81e7e0438f9c17ebd01563bae3721f7b88dfe748d99917a69fddfc935dce63a6ddef479fb69d"}}, 0x8d) ioctl$TUNSETLINK(r2, 0x400454cd, 0x101) 23:51:05 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040), 0x4) sendmsg$802154_dgram(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14, &(0x7f0000000480)={&(0x7f00000003c0)="99564f83b28d49c2fc128fbe54eb5783e067d532680ecbe34cfdbce7f09e84df9d7f4eb2038819bce8f3d95f8d5a606dd40b90d5707910fb944c452415c45e43ab0eaf29fd5a9b7465666c6756175b91fd0ad010de7d17c32010a85f9a04eb910627ee21843906017cdffa981496d1d220de3c1a6f4daa0c80c592de6e878fb5ea496a1a8c1514c8459d12718a1b7cf68459ad2a2d", 0x95}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000000c0)) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000004060101000000000000000007000001090002007300020085797a30000000000000000000000000b17cf9929a849d262a05026f65f85b139c574e2705f99f27f07ad9de1ce30de498755a04eb5ad6044a5793c58413c3bc3b1e7fd00e7eb2ba5a58e8246a2a6f62ef98b9b4e90b4c35772908ffc39a1edb3cfff61ac8809b561d1e8c894600a774446da21b569ca56f6eae4416d715663611b23c5d8cf0f936cd756a216e48d73335dbf323f5d81c4da0753a03e560f295e9e965fd55b597cde66b968687f8a113830d37018478931dd8062c18d2821cfb064c0fd90ee3d0930b34f3a365095520cfa1af30072ac0806da7acea42fd62715b329c0440c09c0b58b941c24e680f7ebfa8058742886ec18d29f8e3002b5c5b5b3e"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000001) add_key(&(0x7f0000000180)='big_key\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="56f94247f81e7bb03b1a25f933a2078a41742af3e57b50e3691d", 0x1a, 0xfffffffffffffffc) 23:51:05 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 23:51:05 executing program 3: socketpair(0x2a, 0x0, 0xfffffffd, &(0x7f0000000040)) 23:51:05 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x700000000000000) 23:51:05 executing program 4: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) socketpair(0x28, 0x2, 0x1000ffff, &(0x7f0000000000)) memfd_create(&(0x7f00000000c0)='(&:{\x00', 0x4) 23:51:05 executing program 5: socketpair(0x1f, 0x800, 0x8, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@remote, 0x0}, &(0x7f0000000080)=0x14) socketpair(0x29, 0x6, 0x9, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000001c0)) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x6, r0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000100)=""/40, &(0x7f0000000140)=0x28) 23:51:05 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f00000000c0)={&(0x7f0000000080)=[r0, 0x0, 0x0], 0x3}) 23:51:05 executing program 0: socketpair(0x1a, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r2 = socket(0x2, 0x80806, 0x7) r3 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x4, 0x40, 0x4, 0x3}, {0xffff, 0x3, 0x7}, {0xfffd, 0x2, 0xe7, 0xffffffff}, {0x1, 0x1, 0x66, 0x80000001}, {0x40, 0xe6, 0x40, 0x81}]}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getpeername$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000200)=@req3={0x6a0, 0x3cd6, 0x0, 0x1, 0x0, 0x8001, 0x1}, 0x1c) keyctl$get_security(0x11, 0x0, &(0x7f0000000080)=""/45, 0x2d) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000040)={0x77}) 23:51:05 executing program 3: socketpair(0x2a, 0x0, 0xfffffffd, &(0x7f0000000040)) 23:51:05 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x800000000000000) 23:51:05 executing program 4: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) memfd_create(&(0x7f00000000c0)='(&:{\x00', 0x4) 23:51:05 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x4, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x41) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x155c}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4) 23:51:05 executing program 5: socketpair(0x28, 0x4, 0x8, &(0x7f0000000000)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000240)) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x68040, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000080)={0x1000000000000009, 0x6}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000100)) write$snapshot(r0, &(0x7f0000000140)="1ca119ca60940c688d65281bd8a9474abfd4b43434557962acd93f528e086915762e2dc9cee455ff4c5179a1123ddf7e8017d152cb80b4131cc0fb0b02d947998d904e0a0ada27301166696d33bdd3e9b4eab90ea9d5bbb252a2caf6d7315c136bc4e6a1873a6fd7afb1ff55c8e5aa2b1955dd815cbd46a2253d0d73c5dde8a68286700008707b58f896abb5bb7e066cb8468518de79f2fcfaeaf01470c858708f74e8f34e66f5b5f6b32d56b9fd36b81b0b6f8d46dc20e20b309755142ded401ff96f3a8478c1", 0xc7) 23:51:05 executing program 3: socketpair(0x2a, 0x0, 0xfffffffd, &(0x7f0000000040)) 23:51:05 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x900000000000000) 23:51:05 executing program 4: memfd_create(&(0x7f00000000c0)='(&:{\x00', 0x4) 23:51:05 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000180)={0x0, 0x1, r2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f00000001c0)={r1, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000200)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000280)={&(0x7f0000000240)=[r6, r1, r3, r7, r1], 0x5}) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4004902}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0xffffffffffffff3a, 0x2, 0x9}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x7, 0x1}}]}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8e0}, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)={r7}) 23:51:06 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000040)) 23:51:06 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xa00000000000000) 23:51:06 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c, 0x100000) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f00000000c0)) 23:51:06 executing program 4: memfd_create(0x0, 0x4) 23:51:06 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) socketpair(0x1e, 0x800, 0xffff, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 23:51:06 executing program 3: socketpair(0x2a, 0x2, 0x0, 0x0) 23:51:06 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xb00000000000000) 23:51:06 executing program 4: memfd_create(0x0, 0x4) 23:51:06 executing program 5: socketpair(0x26, 0x800, 0x2, &(0x7f0000000040)) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x26, 0x6, 0x80, &(0x7f0000000000)) 23:51:06 executing program 3: socketpair(0x2a, 0x2, 0x0, 0x0) 23:51:06 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a8, 0x2, 0x1, 0x306, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_MASTER={0x78, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffb}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffffff}, @CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3004}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x5}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xaa, 0x51}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xe9, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x20, 0x5}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xfa}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x76}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x4044081) 23:51:06 executing program 2: socketpair(0x28, 0x4, 0x0, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x16, "4357613ea4a1b1d906ac97a203bb06a0b4286d9e4c6b"}, &(0x7f0000000080)=0x3a) 23:51:06 executing program 4: memfd_create(0x0, 0x4) 23:51:06 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xc00000000000000) 23:51:06 executing program 3: socketpair(0x2a, 0x2, 0x0, 0x0) 23:51:06 executing program 5: r0 = socket(0x2, 0x80806, 0x7) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair(0x7, 0x2, 0xf77, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000140), 0x4) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000100), &(0x7f00000000c0)=0x66) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xffffffff, @empty, 0x5}, {0xa, 0x4e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20}, 0x4cf1, [0x0, 0x4, 0x5, 0x73, 0x3, 0x7, 0x8001, 0x7fffffff]}, 0x5c) 23:51:06 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r1, r2, 0x0, r3], 0x1}) r4 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000100)={0xffffffff}, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, r3, 0x0, 0x0], 0x3}) 23:51:06 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xd00000000000000) 23:51:06 executing program 4: memfd_create(&(0x7f00000000c0)='(&:{\x00', 0x0) 23:51:06 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000180)={0x0, 0x1, r2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f00000001c0)={r1, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000200)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000280)={&(0x7f0000000240)=[r6, r1, r3, r7, r1], 0x5}) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4004902}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0xffffffffffffff3a, 0x2, 0x9}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x7, 0x1}}]}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8e0}, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)={r7}) 23:51:06 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xe00000000000000) 23:51:06 executing program 2: socketpair(0x5, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000040)=0x1, 0x4) 23:51:07 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x21c002, 0x0) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000080)={0x2, 'syz0\x00'}) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) [ 456.986955][ T20] Bluetooth: hci0: command 0x0c20 tx timeout 23:51:07 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001300), &(0x7f0000001340)=0x4) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000012c0)={&(0x7f0000000040), 0xc, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYBLOB="dc110000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x11cc}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) r2 = socket(0x4, 0x80000, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = getgid() r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r7 = getgid() getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000001440), &(0x7f0000001480)=0x4) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) r8 = getgid() ioctl$TUNSETGROUP(r6, 0x400454ce, r8) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001400)) ioctl$TUNSETGROUP(r3, 0x400454ce, r5) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000013c0)) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000001380)={0x8}) 23:51:07 executing program 4: memfd_create(&(0x7f00000000c0)='(&:{\x00', 0x0) 23:51:07 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x1000000000000000) 23:51:07 executing program 0: sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x311f, 0x5a}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xa0) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:07 executing program 2: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x6, 0x1fc, {"42357a2bd298a799a55576ee4313d471"}, 0x6596, 0x4d, 0x4}}}, 0x90) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000002) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair(0x26, 0x4, 0x10000003, &(0x7f0000000040)) socketpair(0x1, 0x4, 0x8b6, &(0x7f0000000380)) 23:51:07 executing program 4: memfd_create(&(0x7f00000000c0)='(&:{\x00', 0x0) 23:51:07 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x1100000000000000) 23:51:07 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 23:51:07 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000180)={0x0, 0x1, r2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f00000001c0)={r1, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000200)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000280)={&(0x7f0000000240)=[r6, r1, r3, r7, r1], 0x5}) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4004902}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0xffffffffffffff3a, 0x2, 0x9}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x7, 0x1}}]}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8e0}, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)={r7}) 23:51:07 executing program 5: socketpair(0x18, 0x5, 0x4, &(0x7f0000000040)) 23:51:07 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x1000000000000000) 23:51:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0xcc, 0x56800) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[r4, r5, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000002c0)={&(0x7f0000000280)=[r6, 0x0, r7, r8, r9], 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000140)={r10}) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:07 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x1200000000000000) 23:51:07 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="33a98466ac1fab6d344d1b2bd9d13b935dfbd4d638241e89acde72fbecf29d4ad2a32f9bda2de8de91927243e6f2f9ae9efdab41e711db9df0d0b7f5736f3cb8563dee914136a28b84e082d35de7db9c1e750398cf95a37a33453c971dbb25e5a6527dfcaafd5667c4b34246c28dd9c3cf4125b8fb3847eb5fd3eb03a8f14cf10a32c51618c70c7532351748f26575695f4865de7b8bd14adb1d1b26705d87e28d0c0b5c79f084c02ebacd8f0faaa3b65d7e3aa83f021d12b4507e35e49d8dea373655ba747390219ba365c3d95f95357b9ab5") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111, 0x6}}, 0x20) 23:51:07 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x1800000000000000) 23:51:07 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x1200000000000000) 23:51:07 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f0000000180)=""/213, &(0x7f00000000c0)=0xd5) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000080)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x4014}, 0x1) r1 = socket(0x26, 0x5, 0x8) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$802154_raw(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000340)={&(0x7f00000002c0)="d9e113c1c4b0e0512014baf35f62c3ef6c3a03e228126f812752aadfed4d68e8cc3125f74310fadf44298bc083023d8c611ed5d85b31579c391c896d2b7c74cb2d6409eb4f236cfecc751ae67ff7c61ac614f20053fc10bc41d4", 0x5a}, 0x1, 0x0, 0x0, 0xc084}, 0x4000804) 23:51:07 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000180)={0x0, 0x1, r2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f00000001c0)={r1, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000200)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000280)={&(0x7f0000000240)=[r6, r1, r3, r7, r1], 0x5}) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4004902}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0xffffffffffffff3a, 0x2, 0x9}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x7, 0x1}}]}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8e0}, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)={r7}) 23:51:07 executing program 2: socketpair(0x28, 0x80000, 0x1, &(0x7f0000000000)) 23:51:07 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:08 executing program 2: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000000)) 23:51:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0xcc, 0x56800) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[r4, r5, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000002c0)={&(0x7f0000000280)=[r6, 0x0, r7, r8, r9], 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000140)={r10}) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:08 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x2500000000000000) 23:51:08 executing program 5: r0 = socket(0xf, 0x6, 0x3) sendto$packet(r0, &(0x7f0000000180)="32c3ae22f9eab41ce74601bfa0141c3167b40bf7e8c4b3e2e8d6bb0198b45d5eaef81955810048fb05b5d0589a", 0x2d, 0x48000, &(0x7f00000001c0)={0x11, 0xf7, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x1) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:51:08 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000180)={0x0, 0x1, r2}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f00000001c0)={r1, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000200)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000280)={&(0x7f0000000240)=[r5, r1, r3, r6, r1], 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)={r6}) 23:51:08 executing program 2: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80800) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) socket$inet6_icmp(0xa, 0x2, 0x3a) 23:51:08 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair(0x1d, 0x2, 0x3ff, &(0x7f00000001c0)) socketpair(0x0, 0xa, 0x3, &(0x7f0000000180)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast1}}, {{@in=@private}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) 23:51:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0xcc, 0x56800) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[r4, r5, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000002c0)={&(0x7f0000000280)=[r6, 0x0, r7, r8, r9], 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000140)={r10}) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:08 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x2700000000000000) 23:51:08 executing program 5: socketpair(0x1a, 0x5, 0x8, &(0x7f0000000040)) ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000080)={0x92, 0x2, 0x9, 0x8, "54c19851370d259aa30a474a4f8c6a0b9aa7cb1c6373d3ba7842ff027dd240c842b7c0d66f4b7e5dc22b131ac22d2dcb71c7684e8eaae02b3fd06028a3727dabf639cdddc7f8cab5093940a33ac712adfca924918a31d6698d436fcdd06a8b711774141655cff0659938649f799e4f4ba0856c9e3b84a5ab80b6"}) socket$phonet(0x23, 0x2, 0x1) 23:51:08 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000180)={0x0, 0x1, r2}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f00000001c0)={r1, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000200)={0x0, 0x1, r3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)={r4}) 23:51:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0xcc, 0x56800) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[r4, r5, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000002c0)={&(0x7f0000000280)=[r6, 0x0, r7, r8, r9], 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000140)={r10}) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:08 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x3f00000000000000) 23:51:08 executing program 0: socketpair(0x5, 0x5, 0x0, &(0x7f0000000000)) 23:51:08 executing program 5: socketpair(0x22, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee01) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, {0xa, 0x4e23, 0x1b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x40, [0x4, 0x2, 0x7, 0x5619, 0x6, 0x5, 0x1ff, 0x1]}, 0x5c) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) accept4$packet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x0) 23:51:08 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r4], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r5, r6, 0x0, r7], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000180)=[r0, r1, r2, r3], &(0x7f0000000280)=[0x0, r7, 0x0, 0x0, r8], 0x4}) r9 = socket(0x2, 0x80806, 0x7) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f00000003c0)=@req={0x10001, 0x6, 0x200, 0xfffffff7}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(r9, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$WPAN_SECURITY_LEVEL(r9, 0x0, 0x2, &(0x7f0000000040)=0x1, 0x4) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:08 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000180)={0x0, 0x1, r2}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f00000001c0)={r1, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)) 23:51:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0xcc, 0x56800) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[r4, r5, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000002c0)={&(0x7f0000000280)=[r6, 0x0, r7, r8, r9], 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000140)={r10}) 23:51:08 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x4800000000000000) 23:51:08 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)={0x87, 0x10, 0x1, 0x6, 0x0, [@private1, @mcast1, @private0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote]}, 0x88) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) 23:51:08 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000180)={0x0, 0x1, r1}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)) 23:51:08 executing program 2: socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)) 23:51:08 executing program 5: ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000040)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) 23:51:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0xcc, 0x56800) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[r4, r5, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000002c0)={&(0x7f0000000280)=[r6, 0x0, r7, r8, r9], 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1}) 23:51:08 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x4c00000000000000) 23:51:08 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000180)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)) 23:51:09 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c) 23:51:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0xcc, 0x56800) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[r4, r5, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000002c0)={&(0x7f0000000280)=[r6, 0x0, r7, r8, r9], 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:09 executing program 0: socketpair(0x23, 0x800, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair(0x5, 0x5, 0x9, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) bind$packet(r1, &(0x7f0000000200)={0x11, 0x6, r2, 0x1, 0x43, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x14) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x12a, 0x1}) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000000000)) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r4, 0x80044942, &(0x7f0000000100)) 23:51:09 executing program 2: socketpair(0x3, 0x0, 0x0, &(0x7f0000000000)) socket(0x29, 0x1, 0x9) 23:51:09 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x5c00000000000000) [ 459.076883][ T20] Bluetooth: hci0: command 0x0c20 tx timeout 23:51:09 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)) 23:51:09 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x6800000000000000) 23:51:09 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000040)) 23:51:09 executing program 5: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) 23:51:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0xcc, 0x56800) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[r4, r5, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000180)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000240)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000001c0)=0x3f) r3 = add_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="ddd891149412979789abf4eb7cf053cb6360aa240ee4e70fd9d641955bc48e48d627556fc1", 0x25, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='-K\'\x00', r3) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:09 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)) 23:51:09 executing program 2: socketpair(0x22, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) 23:51:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0xcc, 0x56800) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[r4, r5, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000180)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:09 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x6c00000000000000) 23:51:09 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)) 23:51:09 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:09 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in=@private, @in6=@mcast2}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0xb5a}, 0x4) 23:51:09 executing program 2: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2, 0x4, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req={0xff, 0x81, 0xfffffff7, 0x1d0}, 0x10) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="3e17a520296dc0abed993f7e5c478a0af8b9f845f6fe68445217e09ee754905adc364ca94c09a6da3eb83731aed9aff3c5d57484c859d5976942cb76cf438e89632a4cdeeb7f975403327416c6300494856e2b34391fdce20700d02d66", 0x5d) r2 = socket(0x2, 0x80806, 0x10000) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept4$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c, 0x80000) 23:51:09 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)) 23:51:09 executing program 0: socketpair(0x28, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x3, 0x3, 0x40, 0x57}, 0x6) 23:51:09 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x7400000000000000) 23:51:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0xcc, 0x56800) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[r4, r5, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000180)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:09 executing program 0: socketpair(0x28, 0x2, 0x0, &(0x7f0000000000)) 23:51:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0xcc, 0x56800) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[r4, r5, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000180)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:09 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)) 23:51:09 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x7a00000000000000) 23:51:10 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6(0xa, 0x1, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000000140)=0xe8) r4 = socket(0x2, 0x80806, 0x7) r5 = socket(0x2, 0x80806, 0x7) socket$packet(0x11, 0x2, 0x300) r6 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000380)={0x20}, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r7 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000200)={@initdev, 0x0}, &(0x7f0000000240)=0x14) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000180)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x8, 0x0, 0x22df, 0x400, 0x9, 0x200000, r3}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={@empty, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, 0x9, 0x1, 0xfff8, 0x100, 0x5, 0x80440004, r8}) 23:51:10 executing program 0: socketpair(0x28, 0x80b, 0x3, &(0x7f0000000000)) 23:51:10 executing program 5: connect$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x8, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) socketpair(0x27, 0x4, 0xfffffffd, &(0x7f0000000000)) 23:51:10 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)) 23:51:10 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xebffffff00000000) 23:51:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0xcc, 0x56800) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[r4, r5, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:10 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) connect$packet(r1, &(0x7f00000000c0)={0x11, 0x1, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) 23:51:10 executing program 5: socketpair(0x1f, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet6(0xa, 0x5, 0xffffffff) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0x80}}}, 0x5) 23:51:10 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xfeffffff00000000) 23:51:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)) 23:51:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000340), 0xcc, 0x56800) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000380)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000003c0)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48382, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r3) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:10 executing program 2: socketpair(0x2, 0xa, 0x200000, &(0x7f0000000000)) 23:51:10 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 23:51:10 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)) 23:51:10 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xff00000000000000) 23:51:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000340), 0xcc, 0x56800) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000380)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:10 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) 23:51:10 executing program 0: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)) socketpair(0x10, 0x0, 0x0, &(0x7f0000000000)) 23:51:10 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)) 23:51:10 executing program 2: socketpair(0x28, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3c) 23:51:10 executing program 5: r0 = socket(0x2, 0x80806, 0x7) r1 = socket(0xb, 0x5, 0x5) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x9) connect$packet(r0, &(0x7f0000000000)={0x11, 0x227f8590e1f97329, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 23:51:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000340), 0xcc, 0x56800) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:11 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0xffffffff00000000) 23:51:11 executing program 0: socketpair(0x1a, 0x2, 0x20100, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x4, 0x5}, 0xc) 23:51:11 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000002c0)) 23:51:11 executing program 2: socketpair(0x28, 0x0, 0x54ff, &(0x7f0000000040)) 23:51:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:11 executing program 0: socketpair(0x18, 0x80000, 0xfff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) connect$packet(r1, &(0x7f00000000c0)={0x11, 0x8, r2, 0x1, 0x80, 0x6, @broadcast}, 0x14) 23:51:11 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000000)="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") syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r1 = socket(0x4, 0xa, 0x3) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x2, 0x9, 0xba, 0x0, 0x7, 0x20}) r2 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000001080)=0x5, 0x4) [ 461.146736][ T9698] Bluetooth: hci0: command 0x0c20 tx timeout 23:51:11 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)) 23:51:11 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x9, 0x4, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r2], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r3, r4, 0x0, r5], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x4, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8ea, 0x9, 0x2, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r9], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r10, r11, 0x0, r12], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000400)={&(0x7f0000000080)=[0x0, r0], &(0x7f0000000380)=[r1, r5, r6, 0x0, 0x0, r7, r8, 0x0, r12], 0x7, 0x2, 0x4}) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:11 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000040)) 23:51:11 executing program 0: socketpair(0x15, 0x0, 0x3f, &(0x7f0000000000)) 23:51:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:11 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)) 23:51:11 executing program 5: socketpair(0x21, 0x80003, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2, 0x80806, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x1000}, 0x4) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r3 = getgid() getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$packet(0x11, 0x2, 0x300) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000040)) 23:51:11 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0xfffffc00, [0xa, 0x6]}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000140)) r3 = socket(0x1e, 0x3, 0xfffffffb) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 23:51:11 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x2, 0x80000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40814}, 0x20004000) 23:51:11 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)) 23:51:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:11 executing program 1: sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}}, 0x400c000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:11 executing program 2: socketpair(0x22, 0x0, 0x0, &(0x7f00000000c0)) write$nbd(0xffffffffffffffff, &(0x7f0000000140)={0x67446698, 0x1, 0x1, 0x4, 0x3, "11fddcf0c2e1187f907f10612e003cb4e57b641652862880f32fb76d9894c973b6672328ce18a18052e255129f500bc86c77bdb7848761c4707cd7e62e361bad292f464b0137a0f3bf781a7e836e80d65563b1be27e9a23f57ded5922cb424eeb2c56d7ef4812b9e8cff1406a00c0f838ec5bcae5fa8f7972adb9823da37a8"}, 0x8f) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4) 23:51:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) 23:51:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:11 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, r1, 0x0], &(0x7f00000000c0), 0x3}) 23:51:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x21f}}, 0x18) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="000009000180c20000ac0180c2000003bbbbbbbbbbbbffffffffffff5e46b3aa1d37aaaeaaaaaa1a0180c2000000e86ae181f1f6b9c7eb379ee3"]) socketpair(0x25, 0x80807, 0x3, &(0x7f0000000000)) 23:51:11 executing program 1: getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)=""/169, &(0x7f0000000140)=0xa9) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x4, 0x4, 'F8V', 0x81, 0x1}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) 23:51:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) 23:51:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:12 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x40143, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000d40), 0x40000, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000080)=0x7ff, 0x4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)) r3 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000ec0)=0xe8) sendmmsg$inet6(r3, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="c213828e7b24019c5634418aeff167d7c0d8d5a51e9f2385aeeb642d8f7a9937afc8ce5926408844b25397be2209becd5e55313269cd45138d10fc9ef1db12d8ada1464ba96d376167c8dd5f1cfdab1f02e0e6976903e9433cfd92e5864e66815a5f078876d44ab5960f4d6b38ff9399507ff1b29d5e084cd1af1ce34cf8a7fa42077f2858b7062a4ffc422f5c022dcea55eda", 0x93}, {&(0x7f0000000180)="ee331515d034fbf79197905c6e2cd77842f2ffb29c7c4949f903ac60fb1db98e5a7e4212c53a66836c6f6d68a0e4fcda32a4d7b1e30638bba2b7d105e850b5", 0x3f}, {&(0x7f00000001c0)="93e6378ea295a923b93013d0b0efc15cca1e9652a022b49493062799bf1e86490ad5271de0002d6f10f4a52fb4ef3024f33932bceb1f6dcdb58f1c9d1a4ea324125cb4ccb7aa2953eebe7c7bdeb8606a7ae48be6dcc66a14a2a1a0bdf67c931d02069fdd2cd16e82c81be1630c5a1d83e4f622c306abe323516d452910e7bd5f1f42", 0x82}, {&(0x7f0000000340)="57172364c35a7b0bde2d2c27b473bd24c0b15e7cf15ed45e51fdb642d13e582df6c16c24f2322712e5eadac70fc8c3e2f1447f8f0c783794327220549c37ff9891fce9602a8f893711d5ff711b2a6dae10ffd0e060238c7e27f5c80b16fc580e16e8992dbbaaea132688ba4a420a5a569865ec026e429410f26ecde8d26a8125917df9e6aecfe11470577c6e1739ec06cf9c", 0x92}], 0x4, &(0x7f0000000400)=[@dstopts={{0x88, 0x29, 0x37, {0x11, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x38, {0x2, 0xc, 0xfb, 0x6, [0x0, 0x8, 0x8, 0x4, 0x5, 0x400]}}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}}}], 0x88}}, {{&(0x7f00000002c0)={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x2}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000004c0)="c8695cab10dee3560b3ea537d4fbc04e1183149360cda3d0f92ed7fc3a69791b2f63dc178be20237bdf860274b4b8514e795af0ada8f6162ecc320c156249cf457f877ebc4aeb99ef5caf121d65722a4cc93dae932fb", 0x56}, {&(0x7f0000000540)="b1ffc947c2f98d215412fd0400b1bc14915a2fe7e89960c9dd8cd758813458a1af39191e6e47491c735a6a67265653fe93a8f482979a4c161cbeca2a01c78353602357c0", 0x44}, {&(0x7f00000005c0)="03a36c913e4c34e398672d4d2874270f5b12dfb7a3f325e8148a3982cf615ca836", 0x21}, {&(0x7f0000000600)="759fe1c1c11787fd60750ac51ea0719310393a508dacd7a48d3b0ebd85fadd547e9cd93f771e38fa1d08afc4c0188e49e2288f9264e1c924f7b73c360c5db7fb6954472b1909e1b29cae51af86ec5c96ddccca03c4d9f4355371160ff2369670482c854ef94c1d9679b547327b99dec0a372bec8a2d19b02c8084102a80497b6aab7bc32d16f8c3ba3ba31f611dadd6d0d87b46481191b5e6700680a622bb31d9d118dab136815c224c3cdd8ba4d7cc770c124716d730e4b8ebb47ea5e7f205d16b0af2a1a0dd42b4c45802d33f63a6a32", 0xd1}, {&(0x7f0000000700)="977d22b46db92cccbf37715a01299a59803dc14ee74a0774f7021587bcabfa45e369478d70b5f34f05231df5b4fb023bd1adb8f42dba748231f0ed91dbcff67927ad1af63ff586", 0x47}, {&(0x7f0000000780)="8944fe915fccce869385746f4f7e140169f58e6aa3a8db68d88049b521cea4c61f05258243162087b50dc611926043cb0d1c76a7a9f045aec972c0879b4e4968188f9873b6bf08637ede8edbbd8f59607da3a7f2fa80cdc25654954eb404f6a6e5b5b014220bfec0a1b87ee08e55afce45ce1dd4a256028e650cd96310f95f6e86ed4cf0dec0a32750ef59274e7a8d76bf13eb41e186daeb65502b9edefc3c966508a973f9e269ce9a599613d02e800e8afaed77129bee3acf2a50e83ad726abe1ff18ecc8fe11889ff90b8f5df8609a20a3555526df0a7f070811e0d728c8090019886d670ed63d982f750a", 0xec}, {&(0x7f0000000880)="91fb7677e854a3eb0ac6d662740390f58c5a54b73122f40ccfa19d8eda429c18f2b6b445c514b32cf2de5456", 0x2c}, {&(0x7f00000008c0)="228193a741c34e3b1009b601f571c47ce1847dc2f94a6b58a15909856e22bac803929c82bc57696a08cdac2ae8ca4db9efbbfc29c9d2c4446cdf070c199c99438a37b5fb3f8031729e05bd745c4413751c85", 0x52}, {&(0x7f0000000940)="40a687edc8e59870ba179bb267caaf226400bb5fe44001bb2a1297e6bb0563ba16f4a399975ca361703740b024e70740708fdad3f781de0573d05a961a57087a683b9bb304d06362d815783217c434b2a9aae30a7b7672e481df4bb20319ef87cd5149172de606f97499c02413b7bdb4e2013a4720422bccdeb9927645d070dbadded581e48926ebbdf5743d4cee122626136eb1bf36121ce3a2378730f78d7ec079ba722f830f56baa702d38a4cb8dee01e95f0ee41c59e5e4b875538094f533c0831a4589627b7e8c0caa0fe7a31befb863c06594e373fe3a5ebb9f023", 0xde}, {&(0x7f0000000a40)="d0901823c4ec1f6ec781a578fffbba299e92caff657b7b681bad44f32c4366e2290ddb778507297e13b73c3c8b144b2156c60ea3d5abaa031b5a66bf844056cc55456a2856008956795cfffe4b9dd771d6fd061776eb7f1fff90a12ec78efa3bf05c9d2a4b172cba77c6007ccf071c9d743a5c55bd4f43f02dc44778e5e1095400ac726f874fd6f57b3eba38f165e0668df471671d402e48ee2736e327a3fe9569db25ad706ec9aadbf528db4e7ae3d48f48a3", 0xb3}], 0xa, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1400000000000000290000004300000004c2a2c9d3000000"], 0x18}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="02a981e986fb56bac8e3692f0f7947be8b4212298f9fb4b3079cf42da20e04bf2914f7f752a675871491555191bcbb4ade6e3d870c32cda6ec5b9c75f11a139f7147cd30b1ac43739a781445dba974a7dd60bac052c6620adf745c2c45c1cfdccb85a953bc530bbb3e2ed89a6e06b41e391691797b78eefaf43bbaff845fb67af820182844ce64cc1eec02424098bf365d1216533ecbd60f6817fc2815709bb543dd0e238f87186289c8562a070e2cad8f625b9ea85b3f30944bf045ad47c3246102", 0xc2}], 0x1, &(0x7f0000000f00)=[@rthdr={{0x98, 0x29, 0x39, {0x87, 0x10, 0x1, 0xdc, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2a}, @private2, @mcast2, @loopback, @mcast2, @mcast2, @empty, @local]}}}, @hopopts_2292={{0xd0, 0x29, 0x36, {0x3b, 0x16, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @generic={0x33, 0xb1, "e2850f3e07495623c3315f07fd5962c62c3f9b90ccc3f86473c92742e3384aae9b182e8151307ee04d944e7bfbcb6fa2c49c232e1a0de4c9170d6d65de6ac1140a25e064cdbac66ef11a9e9310763827eeaa0ee5c392adb9306438b89bf3b6ebbd80e6f380526f4f68277350860f107a94f368504e80d70273ac9258b5e017f7e23e0f2e7f42428a9ef8a3c6a77cf49a90ea373a8906e862c8266ff76cd0d60590cf9e8a3305d8ed983126b6f2a0b0527e"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r4}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1000}}], 0x1a8}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="05c61af861edacf5338dcfc38ab95d0f8739cd1e1c06408dbf7b6f0e5ee57242ad48e8b34fe5141c4268df0c27924bd049551badf391acc9a5aa0b3ee92bbc0c402fa687727e65b0bc70c0c9711332a767a011ee62d32a0ca678ac6df2a7af4ac6e90eb647bce25abc", 0x69}, {&(0x7f0000001140)="9d31679a455878a140989156847ae8314eed52d0e7744a756f9e0b862cf4098039c0b04d658d831340ee5d5ee604bf34527188b92dd0b54a2696d9373d19894737b55394d25737373a95dc8d2518829816e8957a9788197b3ec4572da6060daf2acc03fed4b0c7136fbc57e9128ddc4b3acae91a9b95432f4d8354b36f76e5538f5a7938944ed112285e3b74806b9bdd3d51d9f1a80089e369a8b7b31b8805f34bd99a34ccceec8aefcebe83fac35c6e4dbebe35fc206bf3d40fa7f1e03e500b5cda6e59f6a7e1dbf8dc465a7ab68532de37d04d89d4f3cca31e5ec0768b4d0f29f792dacbf860", 0xe7}, {&(0x7f0000001240)="6c4438bdd617243eac3d6a2b313802de6a9d35abc6324e81e3b4b891ad92cfa462a0bdf5d0c8a69f6f3d048cc36a02ec53d44e35f3d71bb3a20b95d4e256ca9f77b363d6f5d8646ca9b16603bb38b10499dd851fda9a657d44a3be0974046085fad5b75925e4f5a8e28a083a23f9ac3c6875f1482768a1", 0x77}, {&(0x7f00000012c0)="93adefba2d632a1ff78baf029c7fcd1db8c0aed13884f4c091195efca375186c3b9741df3d161ea9a0947f809a4063b9625d248884f57049d1381eb6b8f07a6ff086ab3dc55e27", 0x47}], 0x4}}, {{&(0x7f0000001380)={0xa, 0x4e24, 0x0, @private2, 0x400}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000013c0)="04be6b4a7e75788a365664cfb748c556c98c5632dfca77f50662a056dc319d9ea3756198a0e6f1c2ed946c9fd1088061d1814d3477374a4e3f436b2a19a4b92517c0c491fda044fd78e3c1a5099c02f75af270b8922039b7fbafb5f9", 0x5c}], 0x1, &(0x7f0000001480)=[@rthdr={{0x78, 0x29, 0x39, {0x0, 0xc, 0x0, 0x9, 0x0, [@mcast2, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @local, @empty]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xbf56}}, @dstopts={{0x30, 0x29, 0x37, {0x2b, 0x3, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x76, 0x8000, [0x0]}}, @jumbo={0xc2, 0x4, 0x8001}]}}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x6c, 0x8, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x8, [0x9, 0x6, 0x40, 0xd700000000000000, 0x1, 0x7fff, 0x21]}}, @enc_lim={0x4, 0x1, 0x8}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x0, 0x80, 0x0, [@private2, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x158}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001600)="7eff3269ade09dbd15bcdee124e8773eaa2d668d70e091ab1767622e77ce1f8fb64a55e32b1f5de6354c686ab016ff8619ba39df7c3dd9be3e3b5b8ecfe02f2a40f98c86ecddd65a702b85cc699dd495b38bdb9b3c43cb417489f1fa3bc4a598d47d3c83b0f4fc777946eb1d64da4e25c9809c3a5e8f6024e39dac58dbe762859948b3a7ebde50e512e122e3b19529f7fff56a9e35eeffd0ed4d2d09d96f556cfe33", 0xa2}, {&(0x7f00000016c0)="84f3597467fa9febb42fb2d0ec4fb0f541ed6fec05b5e80dd15f1878dd703593429b86d674de88bc73c54c95febfe7c42f4c2b3b835984250977a78652897a31f379be079d227ab74eb9895b4e3bc37425820b36cb087f48b94c1b37595ebdd80c9658bb9c1d5808def322126e85dda6723fc58c", 0x74}, {&(0x7f0000001740)="f089856c5942d5ec9a5f048739f6c76dd57cc7297c0803734c6397616f1717e5c7b4d46bd0972fb169b3933d8df58321e5986d865c20c3037bf23f76b04c5d226a0d13362d5471cc5e29d738e04692725c0c45f3cc4cb587d1ef3868a193eba5427c9b12b6c721e037d67221c9ed39ae5036dad23e2c68ed5ee68d06df903a96c0b56ee9d93a32c5f20a1e4f051171cd70c406697d50ab288581600499ca99866c2cc9f7bd5db90e6cb785", 0xab}, {&(0x7f0000001800)="18f6aa232da33f5b5e4d9a25802e73c64e58fe116725e251dce2461d6836824f83656de85644da318e5c68f18a5c99ccee702b257be7cf973e1c2bea3cd067f9f4e4357fa7215148f3f31cf56e19ee1cf0ee8da82c5d34097886c7a88fcb94624ee5a3caf2203524a190e164a5108f54b272b147", 0x74}, {&(0x7f0000001880)="fe9eeadf39f0c2d66fe035f27f31cb6c69e7b75352255e22c848a9248d3beb858f8971e419b055328e2e810be24bbd6494e1e2adefd4ef9f437509417c9cfc3e2130e1a62ed56db40afd9bbb4202b4ccefa69d1d1095b15c257b098e7f601bcccab255ca3541fe32645da433944a2174b4d66e09be4b93d9f60bad91165cdbe7bad35b1d81f8d94b84e7fd61ba5193775997189dccdb696ad3ccf4de0ca9c7ebf3034a2beb0b920f95aa00ed2809661b4cef11d046ee5684af585cd5c3555478109703e15c4afec4936cd9245a", 0xcd}], 0x5, &(0x7f0000001a00)=[@hopopts={{0x58, 0x29, 0x36, {0x3c, 0x7, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0xaf, 0x401, [0x5, 0x40000000000000, 0x6, 0x9, 0xfffffffffffffff7]}}]}}}], 0x58}}], 0x6, 0x24000000) 23:51:12 executing program 2: r0 = socket(0x2, 0x9, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e24, 0xfff80000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa0000}, {0xa, 0x4e23, 0x3ca2b765, @empty, 0x123}, 0x7, [0x0, 0x2333, 0x45, 0x80, 0x0, 0x7f, 0x3, 0x1]}, 0x5c) r1 = accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in=@local}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x6, 0x1bec000, &(0x7f0000000040)) r2 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req={0x7f, 0x9, 0x5f3a, 0x4}, 0x10) 23:51:12 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000080)=0x4) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4) 23:51:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) 23:51:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000004c0)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:12 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x1f, 0x800, 0x6) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x1c, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e23, 0x9, @private2, 0xcf}, {0xa, 0x4e21, 0x7, @local, 0xf1}, 0x3, [0x2, 0x1ff, 0x100, 0x0, 0xc979, 0xff, 0x7fffffff, 0x8]}, 0x5c) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 23:51:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:12 executing program 3: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000080)=0x4) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4) [ 462.429942][ T2442] Unsupported ieee802154 address type: 0 [ 462.488546][ T2450] Unsupported ieee802154 address type: 0 23:51:12 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket(0x2, 0x80806, 0x7) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x2, 0x8000, "778fbc", 0x5, 0x6}) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) 23:51:12 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x9c2}, 0x4) 23:51:12 executing program 2: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x1, 0x0, 0x200}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r5 = getgid() ioctl$TUNSETGROUP(r4, 0x400454ce, r5) r6 = getgid() ioctl$TUNSETGROUP(r4, 0x400454ce, r6) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000140)) socketpair(0x15, 0x6, 0xc0000, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000100)=@req={0x1, 0x9, 0x3f}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x6, 0x0, 0x0, &(0x7f0000000000)) 23:51:12 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x1f, 0x800, 0x6) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x1c, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e23, 0x9, @private2, 0xcf}, {0xa, 0x4e21, 0x7, @local, 0xf1}, 0x3, [0x2, 0x1ff, 0x100, 0x0, 0xc979, 0xff, 0x7fffffff, 0x8]}, 0x5c) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 23:51:12 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:12 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) [ 462.915670][ T2474] Unsupported ieee802154 address type: 0 23:51:13 executing program 2: socketpair(0x28, 0x0, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_raw(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000080)="7f826d1b81bc5e9971c04b569d2aa80c970af3bd40dd9cbfead3bb7aedbeff", 0x1f}, 0x1, 0x0, 0x0, 0x50}, 0x4004000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)={0x0, 0x0, r1}) 23:51:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:13 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x1f, 0x800, 0x6) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x1c, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e23, 0x9, @private2, 0xcf}, {0xa, 0x4e21, 0x7, @local, 0xf1}, 0x3, [0x2, 0x1ff, 0x100, 0x0, 0xc979, 0xff, 0x7fffffff, 0x8]}, 0x5c) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 23:51:13 executing program 0: connect$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0xf7, 0x0, 0x1, 0x2, 0x6, @multicast}, 0x14) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x4, 0x1, "b63cd5", 0x3, 0x1f}) [ 463.186141][ T2499] Unsupported ieee802154 address type: 0 [ 463.239098][ T9698] Bluetooth: hci0: command 0x0c20 tx timeout 23:51:13 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_bt_hci(r0, 0xc000000d, &(0x7f0000000080)="f20359b6a82fee756a2d8a1cc82323") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:13 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:13 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:13 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:13 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x1f, 0x800, 0x6) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x1c, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e23, 0x9, @private2, 0xcf}, {0xa, 0x4e21, 0x7, @local, 0xf1}, 0x3, [0x2, 0x1ff, 0x100, 0x0, 0xc979, 0xff, 0x7fffffff, 0x8]}, 0x5c) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 23:51:13 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41020800}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x698, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x35}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@random={0x6, 0xa1, "f2b6426302b4d547a0a6ca78f36c19ac53fd97935bda53db5ee6e9a7e0b1ce1dcaac891888e391dcd6786060dc62280e95dc6e6ba4f5d6850eab77b69f79ace1d9f4f6a36b41b120916eddaad1e135e56697143cdcc5833c510444843ffc965e893ec5f1d7da69bf7d35a6fc2fb5ed598669edd911f4de8cab5cf21832bebe494caae220826e8c4856597ac5880ab1806a6792035913b4daa1c55aa721265f7039"}, @chsw_timing={0x68, 0x4, {0x5, 0x4}}]}, @NL80211_ATTR_PROBE_RESP={0x4a9, 0x91, "8807aa7c1208c8378781ca9d97a3a7a7a8e2a755f5ddbb39c4f884811528edce5ac898d4b01b987f1ad27d6ba632efb4f2a1a2dd4fd5812cec96fc877bb5538df826cb1bae6c7774a4d0348b30488e73fe189c925ab47d222cf42e94d43c331cea1521e47ac566f19daaf9854a3547d0c0ce2d02ab4ffdbfb5ba31f1392fb6f0eb6f28bdf3b57648522af958dd9881ec199fb83576a3e621997f2268462358784bac1bf2eb30111f91ec6342499d5186cd1983264f69921bcfbc5811b77becfd065971598836e552d5b66feb6f5bb8da4cb73e2e7bd7d0257b0716e4b267f94e05f2d9a6384a9f141d8a0ee88b5459feb2dc620acd43dcf2535f3305632a5cd44769f210f4852280f95c47c2bc0e28cd0cfe0d747d988181773de179cd3797a2d91e740ef98d6ebd273ac95dc92570357c9a08f95af49c92da91f7c1d41b7fadb887125a0f526e4e90a5a1796032f1298a54b610bf3d5d9753904f19ef23be6d8056224c9f9ac5ffc15736c44dca230b421ff6ab9f11e288ea3fae62131d40276c3b862a22464ab0492592bad010f2dc5552b8935223d8eb63a2278ef2ee208a19c009e347aaf3f3c4e28f5de81b150ebbafaecfc733d1b7ea0adfcf5bf6f04e1e60755e792bc77804769d09dfd44699871ee254ea640c5eb23692d1147df09548b75c340400e67c9c31a68f909341ed45a85d1b5759dc0ef2c75bef1e70baf112eeb8278d0994e137d89f2f9bc2b49a993840cc7ab3035727f68cfcb0169492bae51002530a44dd739070a03717844185faa1e29b41e3c738edc3d30e4a8fd7c880f41bad359561ed82b21d214454db23799520363be4446d93bc141c26e67a3034d1c9198774e4191e2de7bc96cb664f28ac18295bd48af745d94cec3b987dd4dbf3a6c73891fd5b67ab559503d133c80e19d5ffa372364645ac0e6f249dea03206d6600c9987cbc972e58d681621fa3b6536398c4cc20e7f27764991c37ff24dc9429952e256f61e38f2905a2c6b11d4c6221ad76eb7d333568d63996c53208afdbd50a61ad5e88ac8f706a956a0a3400edd3d7eb227ffbbe99edb2e80c8d9a619b494c68786dfb5509a58d6ff7870a961508901f25649d90e956ab88bfbaf40b92c9026005d90e96e1fb5869f0e04af9138bda242fbfe48a74220831668a345fa0d92d3a56005246d54e28684842b32a8ac15e8a28e9c1218715487d199b45158a89a658bcdda1b556782345f4f2783ea94e619a09eb21fa97fb1f5339a485c336a5a59718fcc4c1a3a2715d711518dcd44e9b63cb6c8f5229807014b08abadb6929286ef103dce8bf0d40614d283fb9312da35d61eb0c0cb01d7c95eee375c602f3fe5ec48e771eb7c52ebc287a1e1a88333a78b70fae1046a34746c933eca3768567f72634a2c5f038e72b721b84c0432ef9e24d1000b03a825f8b1f84cb3de4347dcadee6628b1c8208c7f6c73c4830627d1d1f6278da25649b7dbe15e880f48e3358982adb3a99c92ff12146d8d65f7c2e0fbfb80fa167f57949fe3898a72d188bc0a0ccf18b1904b6491fab33917af732094948c8ae36f3bfe3595b316c5217cbf36b5fc1605023d7fc18b2d485e1043ca9b0e3d42db1068fb7d8aed88841fd59a6787d7c929bcf13a495be9e26a6d2e689951b7fd9d008992b537791507cf8fe"}, @NL80211_ATTR_IE_PROBE_RESP={0x11b, 0x7f, [@supported_rates={0x1, 0x7, [{0xc, 0x1}, {0x6, 0x1}, {0x24, 0x1}, {0x16}, {0x6, 0x1}, {0x6c, 0x1}, {0x1b}]}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x5, 0x81, @device_b, 0x789, 0x2, 0x5}}, @random={0x1, 0xe7, "1103c1aac23a1ea17df94aeac5d9d9efb59f40c71aa4d171c691a28c814608042a07622fdc624ba1a1051ed5cb604311d25ff1242af6b4ac69dedb6e48649f11d28be3533339857a0503ae409b8a8b79cbedc2d6b90ccedbc660ab77449dd153c363b66a64f14675e237f05708efabb7fcac97b60dbd664ee4654282bf7ab5290a6f7f9823a8ec141c2188655d07f0b5a300792ec91d3f00d30c3c8ab197bfd6bd1a3543e8641fcd560cac1a87d97657b7c7de6035e98dd9a2f721ea5414ed112021271955bb075fe4e5be036375a03513c0edec810142c784c367cfae7d76f3dc0171dc52d929"}, @ibss={0x6, 0x2, 0xda}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xff}}, @ibss={0x6, 0x2, 0x4}]}]}, 0x698}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 23:51:13 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) [ 463.832839][ T2524] Unsupported ieee802154 address type: 0 23:51:13 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x1f, 0x800, 0x6) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x1c, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e23, 0x9, @private2, 0xcf}, {0xa, 0x4e21, 0x7, @local, 0xf1}, 0x3, [0x2, 0x1ff, 0x100, 0x0, 0xc979, 0xff, 0x7fffffff, 0x8]}, 0x5c) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14) 23:51:13 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:13 executing program 2: socketpair(0x23, 0x1, 0xffffffff, &(0x7f0000000000)) 23:51:13 executing program 0: socketpair(0x28, 0x3, 0x0, &(0x7f0000000000)) 23:51:14 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) [ 464.036709][ T20] Bluetooth: hci4: command 0x0401 tx timeout 23:51:14 executing program 1: clock_getres(0x0, &(0x7f0000000000)) clock_gettime(0x7, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x25, 0xc, 0x24b, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000180)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket(0x4, 0x80806, 0xffffffff) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = accept4$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f00000000c0)=0x1c, 0x80800) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000100), 0x4) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_enc_key_size={{0x1408, 0x2}, {0xc9}}}, 0x6) 23:51:14 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:14 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$inet6(0xa, 0x800, 0x2) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="880e020200000000ff020000000000000000000000000001fc00000000000000000000000000000000000000000000000000000000478e4dd2429507ea000000000000000000000020010000000000000000000000000000fe88000000000000000000000000010100"/120], 0x78) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@dstopts={0x2e, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x10) [ 464.085332][ T2549] Unsupported ieee802154 address type: 0 23:51:14 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x1f, 0x800, 0x6) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x1c, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e23, 0x9, @private2, 0xcf}, {0xa, 0x4e21, 0x7, @local, 0xf1}, 0x3, [0x2, 0x1ff, 0x100, 0x0, 0xc979, 0xff, 0x7fffffff, 0x8]}, 0x5c) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14) 23:51:14 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x8001, 0xa, 0x4}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121200, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'virt_wifi0\x00', @multicast}) socketpair(0x4, 0x0, 0x0, &(0x7f0000000040)) 23:51:14 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:14 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:14 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = accept$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1f) sendmsg$802154_dgram(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000180)="abdd96d78ee394ee31442a172fffac4ae193cc499c0f8161eba573f0009642cd02e99811c46818cd6d580117", 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x40) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f0000000280)) socketpair(0x1, 0xa, 0x43df, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e24, 0x5e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, {0xa, 0x4e24, 0xfffffffa, @private1, 0x400}, 0x5, [0xe60, 0x109, 0x1000, 0xa3, 0x6, 0x8000, 0x10001, 0x1]}, 0x5c) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xa8) 23:51:14 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x1f, 0x800, 0x6) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x1c, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e23, 0x9, @private2, 0xcf}, {0xa, 0x4e21, 0x7, @local, 0xf1}, 0x3, [0x2, 0x1ff, 0x100, 0x0, 0xc979, 0xff, 0x7fffffff, 0x8]}, 0x5c) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14) 23:51:14 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:14 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:14 executing program 2: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=[@rthdr={{0x28, 0x29, 0x39, {0x2, 0x2, 0x2, 0x8, 0x0, [@private0]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x32, 0x2, '\x00', [@ra, @enc_lim={0x4, 0x1, 0x3c}, @enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x1000}]}}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x33, 0x19, '\x00', [@enc_lim={0x4, 0x1, 0x1f}, @ra={0x5, 0x2, 0x100}, @pad1, @jumbo={0xc2, 0x4, 0x5}, @generic={0xf9, 0xbb, "414c1d3488282ba436b548132ec6e798f1a52a1b18a14d0dba7784f27b70427e66b02593b9891fc34bfe3a0d1a9ecdb48984e0f4b7f677480139e8df3c8a2c742a01298ed24587d3afb9536cfa27dbd3e2cc16d1727e16fd4db7fb062fbfbfdb70ce409bff3af000df7dfd95f0813681d9d94436ec4a7b61c24394012e3c703cdfaf2b4f7cd06503a5d05bb626bdee5d46f69bfe2582b765f4d58659d040a0163662edf2332dcca3d670671734a6d116f6eb042bbd284ac56a62e7"}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x2c, 0xa, 0x2, 0x1, 0x0, [@remote, @private2, @mcast1, @loopback, @loopback]}}}], 0x1a0}}, {{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @local, 0x1}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000280)="03aea1cb51ca5ff8a2684df7a0cefe177189983c5cb2863feb1e9513354548168050f84436dd837f7bb85672c475f6875119d318283a8472574ffc54e6829ecf7dfc4bd4bd86461d9cbd7b123fb16fdb96130c8dcfde89a434ec1e2fa0d0a67987ea05a7e9f15fc0a7c7c8883f81e39fd246277d4effe62306b2319f3f864f18a15a4a40ea65b493d054f1ca9545d51451bbefd27f181bb365e1088305eb040e4720225678accca65f4dd01031a37f9adcfaaafa17592773c3e6a98cecc29024bef8a528ff48ded4f2052c4e32a710", 0xcf}, {&(0x7f0000000380)="4bc799598db808a02d8ac95fa2e0d970203cc7929718fe5f6e1aa309c790a686a0c8049a9bbf601d3367c1fbda51b095ee527ee2ca5e4d7a94a339fee714d33e2fa5e04c114e6ffa3f4c7d98e59b73308e98b790a26e0cdf42892688487c1b97f8485151867b4a621b8597ede3ed9b96286417553d628df3188ae5e142d50a0701c01409b95d16c6e5f0bcac4ebecefd94b378bf7baab0ef2e6a4dd559", 0x9d}, {&(0x7f0000000440)="20bbf0fd1f25a73fb86db35a9a85ede0009f02417b57668519e2c4d23fd93764a5487bf87f526084de75ab89", 0x2c}, {&(0x7f0000000480)="99bc28ba5e55a6e0d90b0aac93bd4a961bcfdba9e5a6f381322f9c260315feb1da4862f51d89e6339e5678cd87c1ca15bed722269538600b73df069368935b947b608f5b9b88ca294580ddb619db7345dc16f1977eb954065ba664b5a12f4a470c7a754e5e6bdc5f76549655b32e071d546b5eba9616702f647080a765bc105f99a9928df73bed90df5101", 0x8b}], 0x4, &(0x7f0000000580)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x87, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x87, 0x0, '\x00', [@ra={0x5, 0x2, 0x3ff}]}}}], 0x40}}, {{&(0x7f00000005c0)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000600)="d2528a74025bc563bd86bfbbc3c0476739f066feff67c9460263af96ecd9209d715799747d9bdefeb27ce3aae2eb9ec1f929d986b3d3a663da006462a1bdd5833963cec2161b10dc961d271b6593e098278b0744028992fe09acda530c44359bc3b9cd09a54dbb4abb6e1d09a3e744d8589662dc419099643e95fe1ca063245fffc287da2909b5fc3e744b697de516834ddfa7764eedab32c885c8bb28239367338e9d642418a2d66bd70735", 0xac}], 0x1, &(0x7f0000000700)=[@hopopts={{0x20, 0x29, 0x36, {0x21, 0x0, '\x00', [@ra={0x5, 0x2, 0xfffc}]}}}], 0x20}}, {{&(0x7f0000000740)={0xa, 0x4e24, 0xfffffffc, @empty, 0xfe}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000780)="6a1b61f34760838cb8142eaf7446f82fbfeaf6cb2f38fa90ced7424ca4498866fc91154095bb79ddb41e1135caaa51b32abc5b5f628484b351b29f9cc3715605b03b1ea45637f0d6fff181096d0b470bcf29ecf813077119e5c2a820efc7fdf9844969c7977d82c625107e16e840c6beedbfe2a738acc4d7434e6c881f2de1f5cc53ca76da3490744ca04b83eeb279c06957823322b1715557b3b7ec2e4d8d73b86fc9b88e90c845775ad7dd33a816b24603683df5d7c7caa77abb072d", 0xbd}, {&(0x7f0000000840)="72eafe4736097fd2ac083dfc1d2fc6b73c74188506be3f6343dc744457a54bd27292db1d33ede68c55fcaf585c04cd1981d1c81ab0edabd8e5a300e0f9767c5662460bbb1312520e3abcde73e4d9890e9a21353d668c3c997d5092e7037aa29e94758b2615774575051d36ae2904c0dcfc51454348b20fe43b6fb527a6fa0ec234d221176fc11e2e45dfa9db895351a70601a2", 0x93}, {&(0x7f0000000900)="b33d72174dc9a22fb08ef8d4c87e6d030e44c196a8908b225bcd13ea8d74ab86e022f4907cdbee08c8491b660c92ecbb589629cec26ee4e5919f7b8b0e8e36229bca65b29e4aebb7f97c2319ed6e0d434fe2adf12734880d4c3ff09c19aca42c51c16f51e18ab0da0bf0b3ab6609facb5b012d763cd2223d6524b1990563db16a2a75eb44d3f86af2ed06416c825ca3b5a021c10e5199113f00740909c7e0578c53e22b7d9f1e8f5690baf7fed687dd54daa9a6d7e29e9ae73bbcaaeaf89a12a95a0ed", 0xc3}], 0x3}}], 0x4, 0x4080) r2 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) bind$802154_dgram(r0, &(0x7f0000000b80)={0x24, @none={0x0, 0x1}}, 0x14) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000e40)=ANY=[@ANYRESDEC, @ANYRES32=r3, @ANYRESDEC, @ANYRES32, @ANYBLOB="62f799919a9a7d6639feeef3f14ac9cd77dda6fda84507af02fa515ed764ef77bb7f42f0608a6100003397cc9d0dedcd3655cc69d06efe93dc87f446a09d94430672328e5c3cc0f3d5411528792cba0d3ad54346bde770b934c42f5c32d4c0401c44476b885116e604bbea5aa0475957af5b0f3f3c3ca37f1b39d7e54d85da54198088ee507e41903acd711b001e14fb89d31348d3", @ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 23:51:14 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 23:51:14 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x1f, 0x800, 0x6) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x1c, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e23, 0x9, @private2, 0xcf}, {0xa, 0x4e21, 0x7, @local, 0xf1}, 0x3, [0x2, 0x1ff, 0x100, 0x0, 0xc979, 0xff, 0x7fffffff, 0x8]}, 0x5c) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14) 23:51:14 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:14 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:14 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000140)={0x1, @write_voice_setting={{0xc26, 0x2}, {0xf403}}}, 0x6) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x40142, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) connect$packet(r2, &(0x7f0000000100)={0x11, 0xf7, r3, 0x1, 0x11, 0x6, @multicast}, 0x14) 23:51:14 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x6085) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:14 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x1f, 0x800, 0x6) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept4$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x1c, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14) 23:51:14 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:14 executing program 2: socketpair(0xbdf202090f33632c, 0x0, 0x0, &(0x7f0000000000)) 23:51:15 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:15 executing program 0: socketpair(0x26, 0x80000, 0xd75, &(0x7f0000000000)) [ 464.988078][ T2622] Unsupported ieee802154 address type: 0 23:51:15 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket(0x18, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:15 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = socket(0x1f, 0x800, 0x6) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14) 23:51:15 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x16, 0x0, &(0x7f00000000c0)) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000000)=0x1) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x83, 0x1c042) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000080)) 23:51:15 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) [ 465.067123][ T9698] Bluetooth: hci2: command 0x0401 tx timeout 23:51:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) 23:51:15 executing program 0: socketpair(0x28, 0x0, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$802154_raw(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000080)="f9d16d7f86a31c5260c861204f24d2d8a0e754e292f6e79547a3636517a191e7497a6201dd597770ea351d2ba371b6a79772c5c7c671309d83e8f338cd40920f31d1e0c67357e9ba577054555649328f45d2e0177e20fbcd653a589724d5dc9944ced907b8f95080f9a9094b87086bbb325f70e53edfaa94d7fe94b30f6b3ad3ada43acae549cd8c33763f1db4b411ab36d1286d8fbfff0639bd54b4ea55fa45896b5d47b0", 0xa5}, 0x1, 0x0, 0x0, 0x10440}, 0x1) [ 465.239741][ T2642] Unsupported ieee802154 address type: 0 23:51:15 executing program 2: socketpair(0x9, 0x0, 0x80, &(0x7f0000000040)) socketpair(0x4, 0x1, 0x63, &(0x7f0000000000)) 23:51:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) 23:51:15 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) socket(0x1f, 0x800, 0x6) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14) 23:51:15 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6}) 23:51:15 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 465.316604][ T9698] Bluetooth: hci0: command 0x0c20 tx timeout 23:51:15 executing program 0: socketpair(0x28, 0xa, 0x0, &(0x7f0000000000)) socket(0x4, 0x6, 0x2) 23:51:15 executing program 5: socketpair(0x28, 0x0, 0x8, &(0x7f0000000000)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14) 23:51:15 executing program 2: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x40, 0x1, 0x6, 0x1, 0x6, 0x4, 0x7ff}, 0x1c) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000180)=0x1) socketpair(0x25, 0x803, 0x8000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={&(0x7f00000000c0)="b496dfb3ac041c", 0x7}, 0x1, 0x0, 0x0, 0x4004801}, 0x20008001) 23:51:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) [ 465.465997][ T2664] Unsupported ieee802154 address type: 0 23:51:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) 23:51:15 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @empty, 0x9}, 0x1c) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) [ 465.635995][ T2680] Unsupported ieee802154 address type: 0 23:51:15 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket(0x5, 0x800, 0x2000007) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x1, 0x8001, "0a9e88", 0x91, 0x2}) 23:51:15 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14) 23:51:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)) 23:51:15 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x3, {0x6, 0x4, "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", 0x2, 0x9, 0xce, 0x7, 0x6, 0x6, 0x3f}}}, 0x128) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) 23:51:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) [ 465.858264][ T2700] Unsupported ieee802154 address type: 0 23:51:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) 23:51:16 executing program 0: socketpair(0x4, 0x0, 0x0, &(0x7f0000000000)) 23:51:16 executing program 5: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14) 23:51:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @accept_sync_conn_req={{0x429, 0x15}, {@any, 0x9, 0x2, 0x716, 0x0, 0x62, 0x182}}}, 0x19) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000)={0x0, [0xa5c], 0x400}, 0x10) 23:51:16 executing program 2: socketpair(0x1, 0x4, 0x10000, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x81, 0x1, 0x8, 0x80, 0x2}, 0xc) 23:51:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, 0x0) 23:51:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x3, {0x6, 0x4, "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", 0x2, 0x9, 0xce, 0x7, 0x6, 0x6, 0x3f}}}, 0x128) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) [ 466.107239][ T20] Bluetooth: hci4: command 0x0401 tx timeout 23:51:16 executing program 5: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14) 23:51:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000040)) 23:51:16 executing program 2: socketpair(0x27, 0x80001, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x80282, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000080)) socketpair(0x27, 0x2, 0x4, &(0x7f0000000240)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)=r3) r4 = socket$packet(0x11, 0x2, 0x300) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000200)={r5, 0x1, 0x6, @multicast}, 0x10) 23:51:16 executing program 0: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@mcast1, @empty, @loopback, 0x4, 0xc, 0x4, 0x400}) 23:51:16 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x3, {0x6, 0x4, "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", 0x2, 0x9, 0xce, 0x7, 0x6, 0x6, 0x3f}}}, 0x128) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) 23:51:16 executing program 5: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0x14) 23:51:16 executing program 0: socketpair(0x2a, 0x5, 0xc0000000, &(0x7f0000000040)) 23:51:16 executing program 2: bind$isdn_base(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x80, 0x2, 0x45, 0x9}, 0x6) r0 = socket(0x2, 0x80806, 0x7) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r2], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r3, r4, 0x0, r5], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r6], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r7, r8, 0x0, r9], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000480)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, r1, r5, r9], 0x2, 0x1}) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000004ff0f000000000000000000050000020900020073797a3100000000050001000700a77888919f00000900020073797a"], 0x34}, 0x1, 0x0, 0x0, 0x95}, 0x20040800) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x2, 0x1, 0xb01, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_MARK_MASK={0x8}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_LABELS_MASK={0x18, 0x17, [0xaf4e, 0x7, 0xfffffffc, 0x5, 0x7]}]}, 0x5c}}, 0x20000000) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x6}) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:16 executing program 1: ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair(0x27, 0x800, 0x552, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x3, 0x3, "b32733", 0x7, 0x9}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x4, 0x3748, "3a97ad", 0x80, 0x7}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r3 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r3) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) write$smackfs_cipso(0xffffffffffffffff, &(0x7f0000000040)={'#,.@[/\'\x87\xfc', 0x20, 0xa1, 0x20, 0x2, 0x20, [{0x1a}, {0x3}]}, 0x5f) 23:51:16 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x3, {0x6, 0x4, "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", 0x2, 0x9, 0xce, 0x7, 0x6, 0x6, 0x3f}}}, 0x128) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) 23:51:16 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) 23:51:16 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x6, 0xc6, 0x3, 0x1}, 0x10) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:16 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x3, {0x6, 0x4, "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", 0x2, 0x9, 0xce, 0x7, 0x6, 0x6, 0x3f}}}, 0x128) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) 23:51:16 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) 23:51:16 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 23:51:16 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x80800) 23:51:16 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x3, {0x6, 0x4, "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", 0x2, 0x9, 0xce, 0x7, 0x6, 0x6, 0x3f}}}, 0x128) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) 23:51:17 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x6, "b7f500", 0x80, 0x20}) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) r3 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) 23:51:17 executing program 2: socketpair(0x18, 0x2, 0x820, &(0x7f0000000000)) socketpair(0x28, 0x80000, 0x1, &(0x7f0000000040)) 23:51:17 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) 23:51:17 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x9, &(0x7f0000000040)=""/42, &(0x7f0000000080)=0x2a) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x3, {0x6, 0x4, "2d9a67d1d5cef2df9ba7a727fed6500e375977de8e6faba758e1d8cffee13eb862764ae1d1c7f5b223fb188d6df769c9dd85ef6f51f2f4e41130b5e5824a94d29a1b3c73464d1d9aa4c7a48afbe01adfea2972884ae04ff4c9d769dbb12c7b183f8e33ba70288427fb5acd85e7ccce8d663523dca48b0ec18f71b560f67f00fcf57bafa84e45e88bc805789e7ef61acefa995c377bc8858fda02df6322f061ecc9751393e8877b42967dfa370246df4e515ba182829aa3ecbd11defcb7aa8d587fef52e64a2fdaf6511ba4d7ee260d8114c3ec1a6ebc23bea25b4026208fe0620a6cdc84520112b9eba8278c34da4bc4485bba8c33842bcfe25fa6727e736b26", 0x2, 0x9, 0xce, 0x7, 0x6, 0x6, 0x3f}}}, 0x128) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) [ 467.386565][ T9698] Bluetooth: hci0: command 0x0c20 tx timeout 23:51:17 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:17 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000040)=0xfffffffe) 23:51:17 executing program 0: socketpair(0x2b, 0x0, 0x0, &(0x7f0000000000)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x8, 0x0, 0x9, 0xce, 0x1, 0x9, 0x2d}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 23:51:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x3, {0x6, 0x4, "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", 0x2, 0x9, 0xce, 0x7, 0x6, 0x6, 0x3f}}}, 0x128) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) 23:51:17 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180), 0x14) 23:51:17 executing program 0: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000180)={0x5, [0x2, 0x9], 0x1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000001c0)=0x2, 0x4) socketpair(0x28, 0x0, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x280, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x4b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7a}]}, 0x28}, 0x1, 0x0, 0x0, 0x4804}, 0x1) 23:51:17 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:17 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x3, {0x6, 0x4, "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", 0x2, 0x9, 0xce, 0x7, 0x6, 0x6, 0x3f}}}, 0x128) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) [ 467.763673][ T2835] Unsupported ieee802154 address type: 0 23:51:17 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) getgid() getgid() getegid() r3 = getegid() ioctl$TUNSETGROUP(r2, 0x400454ce, r3) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'team_slave_0\x00'}) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:17 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x6, "b7f500", 0x80, 0x20}) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) r3 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) 23:51:18 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:18 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x3, {0x6, 0x4, "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", 0x2, 0x9, 0xce, 0x7, 0x6, 0x6, 0x3f}}}, 0x128) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) 23:51:18 executing program 2: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@private1}, &(0x7f0000000080)=0x14) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x28, 0x80000, 0x1, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x1, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x111b2}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x101}, @NFACCT_BYTES={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x68}}, 0x800) 23:51:18 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:18 executing program 0: r0 = socket(0x2, 0x80806, 0x7) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000200)="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") getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x80800) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x4, 0x3, 0x2, 0x5, 0x39, 0x1, 0x7}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x6}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000001c0)=0x9, 0x4) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x6}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) socketpair(0x25, 0x4, 0xfffffff9, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x2, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001200)={{{@in=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x8e31, 0x4e23, 0x6, 0x2, 0x100, 0x80, 0x1}, {0x81, 0x1f, 0xa000000000000, 0x20, 0xffff, 0x100000000, 0x1ff, 0xffff}, {0x400, 0xffffffff, 0xe8f6, 0x80000001}, 0x2, 0x6e6bbe, 0x0, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x32}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3500, 0x2, 0x1, 0x71, 0x0, 0xb775}}, 0xe8) 23:51:18 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0x2, 0x1, 0x80000001) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)="5eaf35470e13bab1139dcfdaf3a3bffbf19baa0aa5b19e8c341159d9539a50f44e43dab48bbfa5caf5a28e74550b0b546efb14cab470ff5dd07db980e88dd42d896770e6cd26a20f900cc61be391f4dd099843266ef4893f0e7c5c30407246fbdb1e0bfbd3c87df763a6bfee61095ba6b35a3ec5c8b0f085f329fdcfbc01000000dc7d9033431e85274114600bf3bc8698ef6a5504393765067c0cb65771c9c8ebd649a19cea0793cbeff7363efcd03925fc95e07010711dbd0322ec19d9ab14c7b4f0f5d02e2549e633d8135d4484b5faf2d0d14597c0c80d86d17348ae571eb0f863783b0a000000000000") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:18 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:18 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) 23:51:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:18 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) 23:51:18 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 23:51:18 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)={0x7ff}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) getgid() r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000100)=r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc02864ca, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000180)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, r4, 0x0, 0x0], 0x5, 0x1}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:18 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:18 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:18 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x5, 0xffffffff) r3 = accept$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000004000000000000000000000100010018dd4f0012a092d13e1305ce2cdb9d498c144e2a3b33f98f3b672bb4"], &(0x7f00000001c0)=0x3c) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000040)) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@local, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0xb438, 0x7ff, 0x0, 0x403, 0x10, r4}) 23:51:18 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) [ 468.666496][ T20] Bluetooth: hci4: command 0x0401 tx timeout 23:51:18 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000200)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f00000001c0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) setsockopt$inet6_buf(r0, 0x29, 0xd2, &(0x7f0000000040)="8511ce1b24dac3bb4fc793447148b10573b8aba9666c2d2c576cd4b9dd0633d0594da9dcb4be12c8c5616ff9c589ea6d08c635b95fffa71cd78d8952fd3e8e2b5b39f36407265485dba17cfa399e9a7dd9261209d9aaf9e32c1fd2337d034366813a9eb54d7da8dcf95fa289d10b0888439119a96066c9cfd3ee3f699dd105402ffb32f2227a863708d60cc345f93943268eeb10fcab4ed84783c5f225c8db24cf28bd4c8dbaa781fd1d8de1d24488483f20a236b17137bb1ca3ff5f8df448ffa9b1a6e9e77ed8a2d7f476163843dcc0f093eb075c8d7e", 0xd7) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x3ff, 0x0, 0x3, 0x0, 0x6}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0x1}}, 0x20) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:18 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:18 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:18 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) 23:51:18 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) 23:51:18 executing program 0: socketpair(0x26, 0x0, 0xf34, &(0x7f0000000040)) 23:51:19 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:19 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x3, [0x56d9, 0x3], 0x7}, 0x10) r1 = socket(0x2, 0x80806, 0x7) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:51:19 executing program 0: socketpair(0x3, 0x4, 0x926a, &(0x7f0000000040)) 23:51:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) 23:51:19 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) 23:51:19 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0xffff, '~5M', 0x7f, 0xa1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, 0x0, 0x90) 23:51:19 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) 23:51:19 executing program 0: socketpair(0x3, 0x4, 0x926a, &(0x7f0000000040)) 23:51:19 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, 0x0, 0x90) 23:51:19 executing program 2: socketpair(0x2, 0x0, 0x2, &(0x7f0000000000)) 23:51:19 executing program 0: socketpair(0x3, 0x4, 0x926a, &(0x7f0000000040)) 23:51:19 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'vlan0\x00'}) 23:51:19 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) [ 469.466362][ T20] Bluetooth: hci0: command 0x0c20 tx timeout 23:51:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, 0x0, 0x90) 23:51:19 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x3}}, 0x18) 23:51:19 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:19 executing program 0: socketpair(0x3, 0x4, 0x926a, &(0x7f0000000040)) 23:51:19 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x113, 0x2}}, 0x20) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={@local, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, 0x20, 0x1, 0x9, 0x400, 0x7, 0x1}) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x7fffffff, "260cde280cb8b5d0166ade9aad06cb846347d56f217328c719518b840aca84691541fe892cab6e0aac9097c0eabd29f2d553b5968cc098ed4b24e62de80df58d9a1f998e91dde4ceeb6cf5dfa6df6f267afdcca4df7cd29a81fb983448a208010ab2a2239de06e852723eccfa9fa7dcd7128d131717f4b1425c3798b8d92d64a28f1b39ac18e895011aa5804c32e8c82ac66706b0d73cd65cd2f5d1d23560f021138f7b9b68ecf739e9fcf4920aa8b36a34c11938d944e1bd1dddd380aee62155f5a35750bf0404afda2ca15b9c07d96386bdd79c82933a95563c88fd707bf65aed914019dfc25dec5871bc818bca12cb0b900", 0x27, 0x6, 0x4, 0x9a, 0x1f, 0x81, 0x75, 0x1}, r1}}, 0x128) 23:51:19 executing program 1: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x1, 0x7, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x101}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x94be}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:19 executing program 0: socketpair(0x0, 0x4, 0x926a, &(0x7f0000000040)) 23:51:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) 23:51:20 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:20 executing program 2: socketpair(0xf, 0x3, 0x81, &(0x7f0000000040)) 23:51:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) 23:51:20 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x81, [0x8, 0x4], 0xe9}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket(0x10, 0xa, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000000c0)=0x401, 0x4) r2 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:51:20 executing program 0: socketpair(0x0, 0x4, 0x926a, &(0x7f0000000040)) 23:51:20 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x144, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x25}}}}, [@NL80211_ATTR_BEACON_TAIL={0x11b, 0xf, [@random_vendor={0xdd, 0x1d, "da202c1fdf980cdb8a520256037af597c41eea3202a8bc41d3f8b03411"}, @challenge={0x10, 0x1, 0xdc}, @challenge={0x10, 0x1, 0x9b}, @random={0xff, 0xc1, "08605e654f58e1b6cee1309f0a19c923f363c28a073fc6837e583cd0a197c5d942dc2774985a219e818af94692f9192927135356d9ed8fb53fa3c518eaf06ea9e53d35b6c63f04cabe829af97cabe3f8b396c935ce48331caad0c2eac71f6c66883667285919566bafb2d20a933316622eede1d059d52f83017b852e55ffe30a5f520d37ae8914ca355f6ffe03c62b3736112ead7d28f9381aacd1a67da16f03b8844a99a7b47febb5782745111370d7c993112497900ffed7c2464170b29b885e"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x8, 0x7}}, @challenge={0x10, 0x1, 0x3e}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x99, 0x5}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xa, 0x40}}, @rann={0x7e, 0x15, {{0x0, 0x1c}, 0x5, 0x1, @device_b, 0x200, 0x6, 0x7ff}}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x40}, 0x41) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000300)={0x55, 0x3, 0x80, 0x6, "7dd3a60e1896f1b10f732716248bcbb52b741bce030cfd7bdc3a6d446765821d282967857854c9a5eac15a96870f3a6d1c32e547d305e60980cd3d9f95"}) 23:51:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) 23:51:20 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:20 executing program 0: socketpair(0x0, 0x4, 0x926a, &(0x7f0000000040)) 23:51:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) 23:51:20 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000180)={&(0x7f0000000080)="009bcc3076682f2c8a0efe82118c1ae960a93c771309cfb02d8da5d2d46a029c2f688965b4b599c8e5bd2a672c9fc8d06edc530c4888605a81762e09df9b921135877ecbfbcc3e5f653c322d8cf326b445178255dba26aa91a69acb2804ed0979fa67cc2ac9b719d1fe09ebeb6e1bf93785817a81a60394301b7f6471a1cc3dbbb265a81daf16f1cd318dc262d91fe4e9abd1f00094b3f892e7419ee3c468021a19bf3644c9272992ac3233ddadf3f823e9504370636f804bcd770cc9b30ea2dbb571fc9ba5501", 0xc7}, 0x1, 0x0, 0x0, 0x24040080}, 0x20048800) 23:51:20 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) 23:51:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:20 executing program 0: socketpair(0x3, 0x0, 0x926a, &(0x7f0000000040)) 23:51:20 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 23:51:20 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x3, 0x800, 0xe2a6) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) [ 470.756330][ T9698] Bluetooth: hci4: command 0x0401 tx timeout 23:51:20 executing program 1: r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast1, @in=@empty, 0x4e21, 0x0, 0x4e21, 0x1f, 0x2, 0x20, 0x0, 0x73, 0x0, 0xee01}, {0x8000, 0x400, 0xff, 0x0, 0x80000001, 0x40, 0x3, 0x341}, {0x8, 0x6, 0x4, 0x3}, 0xfe, 0x6e6bb6, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x6c}, 0x2, @in6=@mcast1, 0x34ff, 0x1, 0x1, 0x72, 0xffffffff, 0xfffffffe, 0x6}}, 0xe8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r3) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth1_vlan\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x90) 23:51:20 executing program 0: socketpair(0x3, 0x0, 0x0, &(0x7f0000000040)) 23:51:20 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:21 executing program 2: socketpair(0x4, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x2c, 0x1, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x20, 0x4e21, 0x5, 0xa, 0x80, 0x80, 0x3c, r2, 0xee01}, {0x2, 0x1e, 0x1, 0x9, 0x5, 0x101, 0x7, 0x40}, {0x1c, 0xffffffffffff23e0, 0x6, 0x40}, 0x3, 0x6e6bbd, 0x2}, {{@in6=@mcast1, 0x4d5, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2, 0x1, 0x4, 0xfffffffd, 0x3, 0xf4}}, 0xe8) 23:51:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:51:21 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0xffffffe0, 0x4) 23:51:21 executing program 0: socketpair(0x3, 0x0, 0x0, &(0x7f0000000040)) 23:51:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:21 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:21 executing program 0: socketpair(0x3, 0x0, 0x0, &(0x7f0000000040)) 23:51:21 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:21 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0xffffffe0, 0x4) 23:51:21 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@empty, @in6}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f0000000140)=0xe8) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x640000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f00000001c0)) socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) 23:51:21 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:21 executing program 4: sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:21 executing program 0: socketpair(0x3, 0x0, 0x926a, 0x0) 23:51:21 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:21 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x43}, @loopback, 0xee6f, 0x756, 0x3, 0x80, 0x8, 0x4000000, r2}) 23:51:21 executing program 4: sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:21 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) [ 471.556207][ T9698] Bluetooth: hci0: command 0x0c20 tx timeout 23:51:21 executing program 0: socketpair(0x3, 0x0, 0x926a, 0x0) 23:51:21 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:21 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:21 executing program 4: sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:21 executing program 0: socketpair(0x3, 0x0, 0x926a, 0x0) 23:51:21 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:21 executing program 1: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:21 executing program 2: socketpair(0x1, 0x0, 0x2000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@routing={0x2b, 0xa, 0x0, 0x1, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @local, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, 0x58) 23:51:21 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:21 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:21 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:22 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:22 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:22 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:22 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:22 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x8, 0x1, 0x9, 0x7886}, 0x10) 23:51:22 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 23:51:22 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)="9a0e3e93241d8c1eeff821cf0153f75f87") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:22 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:22 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:22 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:22 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 23:51:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, 0x0, 0x90) 23:51:22 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:22 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:22 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=0x4, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0xa, 0x2, 0xfd53, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) r1 = socket(0x25, 0x0, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x7fff, 0x4) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="50216d77a2e84cf5486baba260c70ee86e1afa04af120747f119467b9708b1cca20d188e239611de50b6ccb2f754dcbb535ea410b9196365686a05a3387b3d32c772b1fe186445cd33c767ceae8851c76bbf445e5392586700a09f68d2aaf6cccc93418863d88bb79dc7c4611d027d4bae5e90c4504faa702ab6f0f7b8dfd9127a1fc0e40c4159befaf55b1110bf4beda5771bb982347d3c59092e19cb01a1b8c10df54d4a629f8ee8ba422ffe6e1f876e2d8940b81b553e4770ee5fde9f555274016d0bca60bf42ab2af728ddb164f81f9d745a4021247fc7e31b00a359fa561c545d1b0ce977d7b484fc79", 0xec}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 23:51:22 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:22 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) 23:51:22 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 23:51:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, 0x0, 0x90) 23:51:22 executing program 1: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000ffdbdf256200000008000300c31adbb6271b59d5c64c728a51677391a0ac9b280ca7c1e470d2275cc1066bc5e285b5f3ccc8dc67a8d0d01275218038191840b01051b1fe9be3cc95536df1815031bd1adfb93e34134a7a359cfeadcd87e0c037b16ade323d909f4344cd50", @ANYRES32=0x0, @ANYBLOB="0600b300030000000600b400ad070000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0xf25, 0x1, 0x3e, 0x8000, 0x27a}, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:22 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, 0x0, 0x90) 23:51:22 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:22 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:22 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) 23:51:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:23 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:23 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) 23:51:23 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x27, 0x80000, 0x22, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x6379, "4553cc", 0x9, 0xf6}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x7fffffff, [0xfffffff9, 0x7ff], 0x6f}, 0x10) 23:51:23 executing program 5: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000ffdbdf256200000008000300c31adbb6271b59d5c64c728a51677391a0ac9b280ca7c1e470d2275cc1066bc5e285b5f3ccc8dc67a8d0d01275218038191840b01051b1fe9be3cc95536df1815031bd1adfb93e34134a7a359cfeadcd87e0c037b16ade323d909f4344cd50", @ANYRES32=0x0, @ANYBLOB="0600b300030000000600b400ad070000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0xf25, 0x1, 0x3e, 0x8000, 0x27a}, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:23 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:23 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x1) r1 = memfd_create(&(0x7f0000000180)='],/\x00\xba\xcd%\xe8\xce\xb9s\xe4\x17X\xa6\xe8\x1d\xc0,o\xb8`r$\xf3\x12c\x12\\\xfd\xa1\xaf\xa9|(\xcb\x88\xb7)\xaf\x82\xc2\xac/+\x8d\x1d.\x1c\xca\xdb\x97\x94\x8b\'\xa6\x05\x19\x00'/74, 0x1) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000080)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x2000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0x2000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0x5000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000}, {r0, 0x0, 0x4000, 0x8000}, {r0, 0x0, 0xfffffffffffff000, 0x4000}, {0xffffffffffffffff, 0x0, 0x4000}, {r1, 0x0, 0x100000000, 0xfffff000}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:23 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x90) 23:51:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:23 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x90) 23:51:23 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) 23:51:23 executing program 5: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000ffdbdf256200000008000300c31adbb6271b59d5c64c728a51677391a0ac9b280ca7c1e470d2275cc1066bc5e285b5f3ccc8dc67a8d0d01275218038191840b01051b1fe9be3cc95536df1815031bd1adfb93e34134a7a359cfeadcd87e0c037b16ade323d909f4344cd50", @ANYRES32=0x0, @ANYBLOB="0600b300030000000600b400ad070000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0xf25, 0x1, 0x3e, 0x8000, 0x27a}, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:23 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:23 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 473.635835][ T9698] Bluetooth: hci0: command 0x0c20 tx timeout 23:51:23 executing program 5: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000ffdbdf256200000008000300c31adbb6271b59d5c64c728a51677391a0ac9b280ca7c1e470d2275cc1066bc5e285b5f3ccc8dc67a8d0d01275218038191840b01051b1fe9be3cc95536df1815031bd1adfb93e34134a7a359cfeadcd87e0c037b16ade323d909f4344cd50", @ANYRES32=0x0, @ANYBLOB="0600b300030000000600b400ad070000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0xf25, 0x1, 0x3e, 0x8000, 0x27a}, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:23 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:23 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:51:23 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010d0417faffffff31b457"], 0x1b) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)={'virt_wifi0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10) write$snapshot(r2, &(0x7f0000000000), 0x0) 23:51:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:23 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) 23:51:23 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:23 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 23:51:24 executing program 5: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000ffdbdf256200000008000300c31adbb6271b59d5c64c728a51677391a0ac9b280ca7c1e470d2275cc1066bc5e285b5f3ccc8dc67a8d0d01275218038191840b01051b1fe9be3cc95536df1815031bd1adfb93e34134a7a359cfeadcd87e0c037b16ade323d909f4344cd50", @ANYRES32=0x0, @ANYBLOB="0600b300030000000600b400ad070000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0xf25, 0x1, 0x3e, 0x8000, 0x27a}, 0xc) 23:51:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:24 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:24 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:24 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 23:51:24 executing program 5: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000ffdbdf256200000008000300c31adbb6271b59d5c64c728a51677391a0ac9b280ca7c1e470d2275cc1066bc5e285b5f3ccc8dc67a8d0d01275218038191840b01051b1fe9be3cc95536df1815031bd1adfb93e34134a7a359cfeadcd87e0c037b16ade323d909f4344cd50", @ANYRES32=0x0, @ANYBLOB="0600b300030000000600b400ad070000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:24 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) 23:51:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x400, [0x3ff, 0x4], 0x7fff}, 0x10) 23:51:24 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:24 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 23:51:24 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:24 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 23:51:24 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2a, 0x3, 0x8) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000000)="4eac6a29a189c94ddec807b234292d39b73732210c00d26ade12e98787107842bb229aa4cf31f0841bf237a2b93c4907b3c17b60666a1143aad3b904740e0cd91bcdd860e53974ac7ab39280abcef952e3887ccd0aff88630118e117c284e097520c42977158529417ee0e0717f2c36f4a0fdfe7ec50bc86ba7ff0abd1a80def01846bab6f4e5d62ae5aeac8d2af0acd0be6682835a37a59901764d3000c9b5249d6c9fbdae52b92f6acf814dcd7eed638a254c0fcfa9c15e9d41f24b761b8d88b9c60eb99768d1a5531ae4ba7370c5d5253951b53090016d2c38a2ccac034", 0xdf) 23:51:24 executing program 5: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000ffdbdf256200000008000300c31adbb6271b59d5c64c728a51677391a0ac9b280ca7c1e470d2275cc1066bc5e285b5f3ccc8dc67a8d0d01275218038191840b01051b1fe9be3cc95536df1815031bd1adfb93e34134a7a359cfeadcd87e0c037b16ade323d909f4344cd50", @ANYRES32=0x0, @ANYBLOB="0600b300030000000600b400ad070000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:24 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:24 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 23:51:24 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) 23:51:24 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x27, 0x4, 0x2) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0xd08e, "8d5ea6", 0xff, 0x2c}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x7, [@broadcast, @random="a007ca4f3af7", @empty, @broadcast, @remote, @random="3754954bdda0", @multicast]}) 23:51:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:24 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 23:51:24 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:24 executing program 1: sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)={0x4b4, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x208, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x75, 0x3, "2053a77f03d44148c18db4a012d328747202ef556e5153a380980f4a77e5c20e62435d5dc1f7920ae9e1e2ad67fec8044ff3e51e9787461779094da9114255373c6c1165d49c4e663ac38396b84e8aa1023724d472379f835f34e8d3980b075ad68daf93c9a8541987d6d0e6561d143a38"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb4, 0x3, "1e477e7f9e3a6ac98ef9243a3054336a6a2df4c0885dd99e9112b9933d3d99978ed4cedca7fe04e4bb39d95a6be498e8e69a842eedd1e2ce8fd64c9d750e9a0f9d4a6df10b2fa3786fb7109ebb3c50379e0182f147560101dc09b303ff824b176a8b01f33b4f487a9ae73d4867fe73466b3ae9337a2ff34c074797c66bf5d57dd738f8b535b3d33530a100fe0834b07d5cac56cefe985ac3c0071f8b5d16d56a8d5dc08708e5914e0000000000000000"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x61, 0x2, "aa61d3c4c934e04cfd9f504108c7e1bed5cabd961e1ccf6cb596f37915009221bca46cda32bffc62c2e6d607314ca81c8758c40ee622f16976466a623e228441af99ea3162b99a0b4bf514761b90246d2dfb8f6b8f7f55889b0ee3b107"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4f, 0x2, "93faf12b719fcab8be854418b72073b93628d8776143385d1327957f07e96167534b2b79e5efe4c819310190d691fd6fe3724e3fdbc3197e4356f0979da318bb83821dbf6ffc8cff818a49"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x12, 0x2, "80637bd6d00f9c8dec27890446ca"}]}, @NL80211_ATTR_IE={0xdc, 0x2a, [@supported_rates={0x1, 0x1, [{0x68, 0x1}]}, @supported_rates={0x1, 0x5, [{0x36}, {0x60, 0x1}, {0x48}, {0x1}, {0x3, 0x1}]}, @random_vendor={0xdd, 0x98, "50499f6e09f0ebf704754be337c0386be1d409cf59595baa1757434411f5493fa486e311f54facbd59d72c9dfaa16465cabf10bd7c7772742e9ee199e5f8cfda4312769081b53391622b7e63af7ae21a4108a57aec74ca00db7b542431d88ed3763eb225c6cf1662b237823e0d35da8aeaafd819d7b86125395c66634190388cc667c7b19400d4616a2bd00996ca14e3183b06ed7b2b39eb"}, @ssid={0x0, 0x3, @random="10728a"}, @challenge={0x10, 0x1, 0xc7}, @cf={0x4, 0x6, {0x7, 0xa1, 0x2, 0xfff}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ht={0x2d, 0x1a, {0x10, 0x2, 0x3, 0x0, {0x8, 0xa0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x400, 0x81, 0xf8}}]}, @NL80211_ATTR_PROBE_RESP={0x1b4, 0x91, "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"}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x5, 0x4) 23:51:24 executing program 5: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000ffdbdf256200000008000300c31adbb6271b59d5c64c728a51677391a0ac9b280ca7c1e470d2275cc1066bc5e285b5f3ccc8dc67a8d0d01275218038191840b01051b1fe9be3cc95536df1815031bd1adfb93e34134a7a359cfeadcd87e0c037b16ade323d909f4344cd50", @ANYRES32=0x0, @ANYBLOB="0600b300030000000600b400ad070000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) 23:51:25 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:25 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:51:25 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:25 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x27, 0x4, 0x2) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0xd08e, "8d5ea6", 0xff, 0x2c}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x7, [@broadcast, @random="a007ca4f3af7", @empty, @broadcast, @remote, @random="3754954bdda0", @multicast]}) 23:51:25 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:25 executing program 5: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) 23:51:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:25 executing program 3: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000ffdbdf256200000008000300c31adbb6271b59d5c64c728a51677391a0ac9b280ca7c1e470d2275cc1066bc5e285b5f3ccc8dc67a8d0d01275218038191840b01051b1fe9be3cc95536df1815031bd1adfb93e34134a7a359cfeadcd87e0c037b16ade323d909f4344cd50", @ANYRES32=0x0, @ANYBLOB="0600b300030000000600b400ad070000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:25 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 23:51:25 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:25 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:25 executing program 5: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) 23:51:25 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 23:51:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:25 executing program 3: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) 23:51:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:25 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:25 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 475.705703][ T9698] Bluetooth: hci0: command 0x0c20 tx timeout 23:51:25 executing program 5: socket(0x2, 0x80806, 0x7) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) 23:51:25 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:25 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:25 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20040, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'rose0\x00', @dev}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000001c0)=0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000000c0)={0x9, [0x200, 0x2d6], 0x2aa7}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000040)=0x9, 0x4) 23:51:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 23:51:26 executing program 5: openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) 23:51:26 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:26 executing program 1: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) [ 476.266849][ T8] INFO: trying to register non-static key. [ 476.272817][ T8] The code is fine but needs lockdep annotation, or maybe [ 476.280100][ T8] you didn't initialize this object before use? [ 476.286438][ T8] turning off the locking correctness validator. [ 476.292979][ T8] CPU: 0 PID: 8 Comm: kworker/0:2 Not tainted 5.12.0-syzkaller #0 [ 476.300795][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.311052][ T8] Workqueue: events l2cap_chan_timeout [ 476.317030][ T8] Call Trace: [ 476.320313][ T8] dump_stack+0x202/0x31e [ 476.324851][ T8] ? show_regs_print_info+0x12/0x12 [ 476.330082][ T8] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 476.336162][ T8] ? lockdep_unlock+0x145/0x2e0 [ 476.341027][ T8] ? __is_module_percpu_address+0x29e/0x3d0 [ 476.347148][ T8] register_lock_class+0xedb/0x1490 [ 476.352360][ T8] ? lockdep_init_map_type+0x9a0/0x9a0 [ 476.357945][ T8] __lock_acquire+0x186/0x6040 [ 476.362747][ T8] ? del_timer+0x7e/0x390 [ 476.367156][ T8] ? rcu_read_lock_sched_held+0x87/0x110 [ 476.373152][ T8] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 476.379158][ T8] ? trace_lock_acquire+0x180/0x180 [ 476.384615][ T8] ? mark_lock+0x199/0x1eb0 [ 476.389308][ T8] ? __bfs+0x700/0x700 [ 476.393564][ T8] ? do_raw_spin_unlock+0x134/0x8a0 [ 476.398950][ T8] ? _raw_spin_lock_irqsave+0xbf/0x100 [ 476.404439][ T8] ? rcu_read_lock_sched_held+0x87/0x110 [ 476.410347][ T8] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 476.416427][ T8] ? del_timer+0x14f/0x390 [ 476.420964][ T8] lock_acquire+0x17f/0x720 [ 476.425521][ T8] ? skb_queue_purge+0x2e/0x1c0 [ 476.430479][ T8] ? read_lock_is_recursive+0x10/0x10 [ 476.436012][ T8] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 476.442009][ T8] ? print_irqtrace_events+0x220/0x220 [ 476.447582][ T8] ? __mutex_lock_common+0x550/0x2e50 [ 476.453039][ T8] ? lockdep_hardirqs_off+0x69/0xf0 [ 476.458253][ T8] _raw_spin_lock_irqsave+0xb3/0x100 [ 476.463560][ T8] ? skb_queue_purge+0x2e/0x1c0 [ 476.468426][ T8] ? _raw_spin_lock+0x40/0x40 [ 476.473122][ T8] skb_queue_purge+0x2e/0x1c0 [ 476.477838][ T8] ? l2cap_chan_del+0x400/0x610 [ 476.482695][ T8] l2cap_chan_timeout+0x12c/0x280 [ 476.487761][ T8] process_one_work+0x833/0x10c0 [ 476.492741][ T8] ? worker_detach_from_pool+0x260/0x260 [ 476.498440][ T8] ? _raw_spin_lock_irqsave+0x100/0x100 [ 476.503978][ T8] ? kthread_data+0x4d/0xc0 [ 476.508461][ T8] ? wq_worker_running+0x8b/0x140 23:51:26 executing program 1: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x21, 0x5, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="ff7f0000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf257200000008000300", @ANYRES32=r4, @ANYBLOB="0c009900340a000073000000"], 0x28}, 0x1, 0x0, 0x0, 0x40054}, 0x44004) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f00000002c0)={0x6}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 23:51:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 23:51:26 executing program 5: openat$smackfs_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:51:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:26 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20040, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'rose0\x00', @dev}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000001c0)=0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000000c0)={0x9, [0x200, 0x2d6], 0x2aa7}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000040)=0x9, 0x4) [ 476.513791][ T8] worker_thread+0xac1/0x1300 [ 476.518453][ T8] ? rcu_lock_release+0x20/0x20 [ 476.523282][ T8] kthread+0x39a/0x3c0 [ 476.527505][ T8] ? rcu_lock_release+0x20/0x20 [ 476.532490][ T8] ? kthread_blkcg+0xd0/0xd0 [ 476.537063][ T8] ret_from_fork+0x1f/0x30 23:51:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:26 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 23:51:26 executing program 5: openat$smackfs_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:51:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) 23:51:26 executing program 5: openat$smackfs_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:51:26 executing program 2: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) 23:51:26 executing program 1: r0 = socket(0x2, 0x5, 0xa) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x2, 0x1, 0x0, 0x0, 0x0, {0xc, 0x0, 0x7}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6a}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x200}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004040}, 0x20040000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_create_cis={{0x2064, 0x11}, {0x4, [{0x4, 0xce3}, {0x4, 0xf801}, {0x8001, 0x1}, {0x81, 0x3}]}}}, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) 23:51:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 23:51:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) 23:51:26 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:26 executing program 2: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) 23:51:26 executing program 2: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) 23:51:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) 23:51:26 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x21, 0x5, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="ff7f0000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf257200000008000300", @ANYRES32=r4, @ANYBLOB="0c009900340a000073000000"], 0x28}, 0x1, 0x0, 0x0, 0x40054}, 0x44004) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f00000002c0)={0x6}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 23:51:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) 23:51:26 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) 23:51:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) 23:51:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000140)="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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) r2 = socket(0x21, 0x4, 0x4) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES16=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="91eab7d74556783815c10d4a0f1de7fc6f6c8889c73a9216b986821aa8302cf46a46b9533b7c90b8f5714f5120125414c75bda069b3393479c8169a655ed63eed018e9176a98eb25ca07d6c3f0362b149d3f6934b613", @ANYRES32], 0xb) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:27 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) 23:51:27 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) 23:51:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:27 executing program 0: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) 23:51:27 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) 23:51:27 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x21, 0x3f, 0x4}, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0xfff, 0x4) 23:51:27 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x21, 0x5, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="ff7f0000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf257200000008000300", @ANYRES32=r4, @ANYBLOB="0c009900340a000073000000"], 0x28}, 0x1, 0x0, 0x0, 0x40054}, 0x44004) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f00000002c0)={0x6}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 23:51:27 executing program 0: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) 23:51:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000140)="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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) r2 = socket(0x21, 0x4, 0x4) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES16=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="91eab7d74556783815c10d4a0f1de7fc6f6c8889c73a9216b986821aa8302cf46a46b9533b7c90b8f5714f5120125414c75bda069b3393479c8169a655ed63eed018e9176a98eb25ca07d6c3f0362b149d3f6934b613", @ANYRES32], 0xb) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 23:51:27 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) socket(0x2, 0x80806, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:27 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x7, 0x4) r0 = socket(0x8, 0x800, 0x2) accept$inet6(r0, &(0x7f0000000040), &(0x7f0000000080)=0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:27 executing program 0: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) 23:51:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 23:51:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 23:51:27 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:27 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0x4, 0xa, 0x400) 23:51:27 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x21, 0x5, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="ff7f0000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf257200000008000300", @ANYRES32=r4, @ANYBLOB="0c009900340a000073000000"], 0x28}, 0x1, 0x0, 0x0, 0x40054}, 0x44004) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f00000002c0)={0x6}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 23:51:27 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) 23:51:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:27 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) socket(0x2, 0x80806, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:27 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:27 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) 23:51:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000100)="551aa5f10869a58f5cc80b36e6ebb52f248cae332047d653bd5591f8565fd3f22fe6754fd79c8008825b3506641ca65f1a734b462eeec3386a89e9d65c3a63f6de47846f96fee08b241eeb42b418852bf829562d54f650dd708872fc83d07ad2e46e496ef2b2c1429957d7019b9d358f8628f9ba1eaf77c84e000000000000000000000030c8ff0e0bb4081635871df4eb2f66cee90b9ec7f23fb236b7933d4f052a28eb9ad6c77dd0ec872d8a774aafd8532823bf980c1a5c36e7b7b6d2") write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0124f102a8e3eb"], 0x7) 23:51:27 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:27 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1b) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:27 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) 23:51:27 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) socket(0x2, 0x80806, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:27 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x21, 0x5, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="ff7f0000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf257200000008000300", @ANYRES32=r4, @ANYBLOB="0c009900340a000073000000"], 0x28}, 0x1, 0x0, 0x0, 0x40054}, 0x44004) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f00000002c0)={0x6}) 23:51:27 executing program 1: r0 = getegid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r3 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r4, &(0x7f00000000c0)=""/122, 0x7a) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x1, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa337, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000180)=[r5], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r6, r7, 0x0, r8], 0x1}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:27 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 23:51:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:27 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) socket(0x2, 0x80806, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:27 executing program 1: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000400)=@req3={0x493, 0x4, 0x3, 0x5, 0xfffffff7, 0x1, 0xffff}, 0x1c) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022bbd7000fcdbdf257600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990006000000320000000c0058807a000000000000000c00580013000000000000000c00580061000000000000000c0058000a000000000000000c0058007f00000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6(0xa, 0x80000, 0x1fffe000) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000001026000000b5d25907f34cea18e948c55da0208d82e484d1c60e30b433ba67dbca80ae26b89c98a6487b9c"], &(0x7f0000000240)=0x4a) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @long={0x3, 0x88d70104105bf23, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="fc458b337f73728a0b28e89ee2c73cf8f2bf2064b3eb52090f29de5ea5917bfb707c704505d97cefa98dd095e12b90277ff7f94108a6983029d7241cfe6217c253a345b46322e370cfcfdd674a8333c5886e96b34669c63b12bbc92d94b9a2567f4563aed764fdacac082921b9c114a673930acadb7a6037320fcff4e53117f444712f6cc2ca8b88009293ecbda29e12200538926932e5afcd008b4798fafe91e84fffb53f5bfd88e7d412ee98947c44675bdbc0b5b7307bd03e623ed7d01636c60df6ec8115ff6333427a1a2c3741041f6c26972fe19fcc2565b571006244caee4c737a4ee367c700"/247, 0xf7}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) 23:51:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) [ 477.795178][ T3134] Bluetooth: hci0: command 0x0c20 tx timeout 23:51:27 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 23:51:27 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x21, 0x5, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="ff7f0000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf257200000008000300", @ANYRES32=r4, @ANYBLOB="0c009900340a000073000000"], 0x28}, 0x1, 0x0, 0x0, 0x40054}, 0x44004) r5 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:51:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:28 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:28 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) socket(0x2, 0x80806, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 23:51:28 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:28 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:51:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="0a45ebe1f23d8071b8654eccccda38f890aeccd8330bb2616aa945b8386f810693dbe14c75af15812ebfb34ae65e0c41720f3a369e1cc2afc0bd06217e77bcd5462545173df46a7cbd536360a1424469e1") syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:28 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:28 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x21, 0x5, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="ff7f0000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf257200000008000300", @ANYRES32=r4, @ANYBLOB="0c009900340a000073000000"], 0x28}, 0x1, 0x0, 0x0, 0x40054}, 0x44004) socket(0x2, 0x80806, 0x7) 23:51:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:28 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 23:51:28 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:28 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 23:51:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:28 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0xf87, "8e74f9", 0x6, 0x80}) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:28 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 23:51:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:28 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 23:51:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:28 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x21, 0x5, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="ff7f0000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf257200000008000300", @ANYRES32=r4, @ANYBLOB="0c009900340a000073000000"], 0x28}, 0x1, 0x0, 0x0, 0x40054}, 0x44004) 23:51:28 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, 0x0) 23:51:28 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$packet(r0, &(0x7f0000000000)={0x11, 0x4, 0x0, 0x1, 0x5a, 0x6, @remote}, 0x14) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080)=0x6, 0x4) 23:51:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) socket(0x2, 0x80806, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) 23:51:28 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 23:51:28 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, 0x0) 23:51:28 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, 0x0) 23:51:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) 23:51:28 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x21, 0x5, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 23:51:28 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 23:51:28 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) 23:51:28 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 23:51:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0xf5, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x4, 0x1, 0x3, "350e378a"}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) 23:51:28 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) 23:51:28 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 23:51:28 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket(0x21, 0x5, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:51:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x0, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:28 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x28ac, 0x440a02) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000040)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:28 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) 23:51:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x0, 0x0, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:29 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:29 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x9, 0x80000, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@mcast1}, &(0x7f0000000080)=0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) 23:51:29 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 23:51:29 executing program 0: write$nbd(0xffffffffffffffff, 0x0, 0x0) 23:51:29 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x0, 0x0, 0x0, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:29 executing program 0: write$nbd(0xffffffffffffffff, 0x0, 0x0) [ 479.055369][ T4175] Unsupported ieee802154 address type: 0 23:51:29 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket(0x21, 0x5, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80806, 0x7) 23:51:29 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x0, 0x0, 0x0, 0x0, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="882355415fe1b8fac17fbd09e63d212758a68c0cb1fca166a6b525a2cc33696fa789d5406ddf1bfa06fa19aaccee418dd93953953249957500b2438dbf7c7cb92e901e07ad57b7983e483f83c5ca21da9def91159f16f4497288dccccb6631a214b11d223bde460858e7b30b7a", 0x6d}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000100)=0x4, 0x4) 23:51:29 executing program 2: getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 23:51:29 executing program 0: write$nbd(0xffffffffffffffff, 0x0, 0x0) 23:51:29 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:29 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0), 0x10) 23:51:29 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) 23:51:29 executing program 2: getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 23:51:29 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:29 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:29 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) 23:51:29 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket(0x21, 0x5, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:51:29 executing program 2: getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 23:51:29 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:29 executing program 1: request_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xffffffffffffffff) r0 = add_key$fscrypt_v1(&(0x7f0000000cc0), &(0x7f0000000d00)={'fscrypt:', @desc4}, &(0x7f0000000d40)={0x0, "5a5ad93bcb04b3a3ca3aad51d1240b07e06a831db39d921cab084eac64193359cce85c6b74d3d47c774cd4abd13bab9fc85037e7cc9fc630e70485ef8a5d0469", 0x13}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee00, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x2, 0x80806, 0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = getgid() ioctl$TUNSETGROUP(r3, 0x400454ce, r5) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000080)={'vlan0\x00'}) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = getegid() keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r6) keyctl$chown(0x4, r0, 0xee01, r6) ioctl$sock_bt_hci(r2, 0x800448d4, &(0x7f0000000100)="a220f1fc16674e46f047cfd9143be5684af2c2052002fc9a86ce9565b975bcd94afb33f32f899b5358aa7c85142588559a28c1059775074d03e4c00744adab177ea127811aef59929d1349c5b1d4ee1b71c36f0a1a72c7e1aca1117237a01d10f279adab663d3c6b387d4824d69703532c63a6b5db338b1ca177b48f323dfb4ba02c715f657ca1039a57c71b4c990000000000000000000100") syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x2, 0x4, "381786", 0x9, 0x7f}) 23:51:29 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) 23:51:29 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:29 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, 0x0, 0x0) 23:51:29 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0x21, 0x5, 0x7) 23:51:29 executing program 2: getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 23:51:29 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, 0x0, 0x0) 23:51:29 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:29 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x14) socket(0x21, 0x5, 0x7) 23:51:29 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:29 executing program 2: getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 23:51:29 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, 0x0, 0x0) [ 479.865014][ T3134] Bluetooth: hci0: command 0x0c20 tx timeout 23:51:30 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x1ff}}, 0x18) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000000)=""/128, &(0x7f0000000080)=0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:30 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:30 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x9, 0x80000, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@mcast1}, &(0x7f0000000080)=0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) 23:51:30 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x21, 0x5, 0x7) 23:51:30 executing program 0: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x14) socket(0x21, 0x5, 0x7) 23:51:30 executing program 2: getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 23:51:30 executing program 2: getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 23:51:30 executing program 1: r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:30 executing program 2: getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 23:51:30 executing program 0: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x14) socket(0x21, 0x5, 0x7) 23:51:30 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) [ 480.358209][ T4305] Unsupported ieee802154 address type: 0 23:51:30 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x9, 0x80000, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@mcast1}, &(0x7f0000000080)=0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) 23:51:30 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2, 0x80806, 0x7) socket(0x21, 0x5, 0x7) 23:51:30 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x1ff}}, 0x18) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000000)=""/128, &(0x7f0000000080)=0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:30 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:30 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x1ff}}, 0x18) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000000)=""/128, &(0x7f0000000080)=0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:30 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x1ff}}, 0x18) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000000)=""/128, &(0x7f0000000080)=0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:30 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:30 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x9, 0x80000, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@mcast1}, &(0x7f0000000080)=0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) [ 480.531611][ T4356] Unsupported ieee802154 address type: 0 23:51:30 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) 23:51:30 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x21, 0x5, 0x7) 23:51:30 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x1ff}}, 0x18) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000000)=""/128, &(0x7f0000000080)=0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:30 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x1ff}}, 0x18) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000000)=""/128, &(0x7f0000000080)=0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:30 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) [ 480.642719][ T4373] Unsupported ieee802154 address type: 0 23:51:30 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x9, 0x80000, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@mcast1}, &(0x7f0000000080)=0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) 23:51:30 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x21, 0x5, 0x7) 23:51:30 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB='filtmr\x00'/36], &(0x7f00000000c0)=0x24) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x100}, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000100)=0x4, 0x4) r1 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 23:51:30 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x1ff}}, 0x18) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000000)=""/128, &(0x7f0000000080)=0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:30 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) 23:51:30 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x1ff}}, 0x18) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000000)=""/128, &(0x7f0000000080)=0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:30 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x9, 0x80000, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@mcast1}, &(0x7f0000000080)=0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) 23:51:30 executing program 3: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x6}) socket(0x21, 0x5, 0x7) 23:51:30 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x1ff}}, 0x18) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000000)=""/128, &(0x7f0000000080)=0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:51:30 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) 23:51:30 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x1ff}}, 0x18) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000000)=""/128, &(0x7f0000000080)=0x80) 23:51:30 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x9, 0x80000, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@mcast1}, &(0x7f0000000080)=0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) 23:51:30 executing program 3: socket(0x21, 0x5, 0x7) 23:51:30 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x1ff}}, 0x18) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000000)=""/128, &(0x7f0000000080)=0x80) 23:51:30 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_sync_train_params={{0xc78, 0xfffffffffffffd3a}, {0x8001, 0xa0da, 0x7, 0x1}}}, 0xd) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:30 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x0, 0x4, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:30 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x1ff}}, 0x18) socket$inet6_icmp(0xa, 0x2, 0x3a) 23:51:30 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x9, 0x80000, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@mcast1}, &(0x7f0000000080)=0x14) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) 23:51:30 executing program 3: socket(0x0, 0x5, 0x7) 23:51:31 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x0, 0x0, 0x3, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:31 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x9, 0x80000, 0x4) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) 23:51:31 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x1ff}}, 0x18) socket$inet6_icmp(0xa, 0x2, 0x3a) [ 480.993775][ T4432] Unsupported ieee802154 address type: 0 23:51:31 executing program 3: socket(0x0, 0x5, 0x7) 23:51:31 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) socket$inet6_icmp(0xa, 0x2, 0x3a) 23:51:31 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x0, 0x0, 0x0, 0x3, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) [ 481.073713][ T4447] Unsupported ieee802154 address type: 0 23:51:31 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x9, 0x80000, 0x4) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) 23:51:31 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x29, "37735a753bcc71d32842a8e9ca4ca0881c39c9065cd133bffded39b4f871421cb42d441c13454999f5"}, &(0x7f0000000080)=0x4d) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@dev, @in6=@private2}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:31 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x1ff}}, 0x18) 23:51:31 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x0, 0x0, 0x0, 0x0, "3e839bc2074dd86bce7462f3c800bb15e546e8aa720851a437fde82997103129c3a1f735a0b035c6cc6e719e9ba5ef94dfaca38454653d93910086d3def49bc46da1ca87e43b6c034cc91fe36668175571ee9f982cb4c5936ad2118d239edef1d36eae7831925c85edb0548f1c727b9e1c9037826c0c2f45e23146a1265897810f90de35794af4a6079fa3492408cc4096bc248d4cf26fcd1bd2a323fc70c9a3212bb25944bcaf915e46b18c7986133e04666a239e1bdf8c3d5be7683d7c70df98290624de"}, 0xd5) 23:51:31 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 23:51:31 executing program 3: socket(0x0, 0x5, 0x7) 23:51:31 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) [ 481.177418][ T4464] Unsupported ieee802154 address type: 0 23:51:31 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) 23:51:31 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:31 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) 23:51:31 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 23:51:31 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f00000000c0), 0x10) 23:51:31 executing program 3: socket(0x21, 0x0, 0x7) 23:51:31 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) [ 481.301569][ T4481] Unsupported ieee802154 address type: 0 23:51:31 executing program 2: socket$inet6_icmp(0xa, 0x2, 0x3a) 23:51:31 executing program 3: socket(0x21, 0x0, 0x0) 23:51:31 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 23:51:31 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x5, "e0c536", 0x4}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:31 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:31 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:31 executing program 0: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 481.400217][ T4496] Unsupported ieee802154 address type: 0 23:51:31 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:31 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) 23:51:31 executing program 0: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:51:31 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:31 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:31 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = getgid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = getgid() ioctl$TUNSETGROUP(r3, 0x400454ce, r5) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000080)={'team0\x00'}) r6 = socket(0x2, 0x80806, 0x7) getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000040)={0x100, [0x1ff, 0x5], 0x1}, 0x10) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @mcast2, 0xe6}, 0x1c) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'netdevsim0\x00'}) [ 481.554683][ T9698] Bluetooth: hci2: command 0x0401 tx timeout 23:51:31 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) 23:51:31 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:31 executing program 0: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 23:51:31 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:31 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:31 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) 23:51:31 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:31 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:31 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:31 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)=0x2) 23:51:31 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)=0x2) 23:51:31 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) 23:51:31 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)=0x2) 23:51:31 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:31 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) 23:51:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x214002, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r3) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0xafd, "d868b9", 0x7, 0x80}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth0_to_bridge\x00', @dev}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:31 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) 23:51:31 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) 23:51:31 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 23:51:31 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0)) 23:51:31 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) 23:51:31 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x24102, 0x0) 23:51:31 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1}}, 0xfffffea0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getgid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x90) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) r4 = getgid() ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee