Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:45831' (ECDSA) to the list of known hosts. 2025/07/01 19:19:34 fuzzer started 2025/07/01 19:19:35 dialing manager at localhost:37637 syzkaller login: [ 45.277252] cgroup: Unknown subsys name 'net' [ 45.328363] cgroup: Unknown subsys name 'cpuset' [ 45.345133] cgroup: Unknown subsys name 'rlimit' 2025/07/01 19:19:46 syscalls: 200 2025/07/01 19:19:46 code coverage: enabled 2025/07/01 19:19:46 comparison tracing: enabled 2025/07/01 19:19:46 extra coverage: enabled 2025/07/01 19:19:46 setuid sandbox: enabled 2025/07/01 19:19:46 namespace sandbox: enabled 2025/07/01 19:19:46 Android sandbox: enabled 2025/07/01 19:19:46 fault injection: enabled 2025/07/01 19:19:46 leak checking: enabled 2025/07/01 19:19:46 net packet injection: enabled 2025/07/01 19:19:46 net device setup: enabled 2025/07/01 19:19:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/01 19:19:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/01 19:19:46 USB emulation: enabled 2025/07/01 19:19:46 hci packet injection: enabled 2025/07/01 19:19:46 wifi device emulation: enabled 2025/07/01 19:19:46 802.15.4 emulation: enabled 2025/07/01 19:19:46 fetching corpus: 0, signal 0/0 (executing program) 2025/07/01 19:19:47 starting 8 fuzzer processes 19:19:48 executing program 1: r0 = socket$inet6(0xa, 0x4, 0x1ff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x75f9}, 0x6df}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000080)={0x6, 'vxcan1\x00', {0x2a}, 0x400}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f00000000c0)={0x24, @short={0x2, 0x1, 0xfffd}}, 0x14) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/tg3', 0x0, 0x100) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000140), &(0x7f0000000180)=0x8) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = socket(0x21, 0x4, 0x100) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000240), &(0x7f0000000280)=0x10) bind$802154_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x24, @short}, 0x14) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000340)={@rand_addr=0x64010102, @remote, 0x0, 0x4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2]}, 0x20) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000380)) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) getsockname(r3, &(0x7f0000000400)=@tipc=@id, &(0x7f0000000480)=0x80) socket(0x5, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000540)=""/61) 19:19:48 executing program 0: ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f0000000000)={0x20, 0x3, 0x3, 0x1f, 0x6, 0xe}) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x27, "806d8047b84b21257e8eb677b58704d4df845901e9766ca6f68542a1b0b61c5073cd126a4574ae"}, &(0x7f0000000100)=0x4b) ioctl$CDROM_SELECT_DISK(0xffffffffffffffff, 0x5322, 0x8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in, @in=@private}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000240)=0xe8) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, &(0x7f00000002c0)) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000480)={'broute\x00', 0x0, 0x4, 0x88, [0x800, 0x30, 0x4, 0x1, 0xffffffffffff8001, 0x1], 0x9, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)=""/136}, &(0x7f0000000500)=0x78) ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0xffff) r2 = gettid() capset(&(0x7f0000000540)={0x19980330, r2}, &(0x7f0000000580)={0x9, 0x4, 0x80000000, 0x9, 0xd9, 0xfffffffc}) ioctl$CDROM_GET_CAPABILITY(r1, 0x5331) ioctl$CDROMSETSPINDOWN(r1, 0x531e, &(0x7f00000005c0)=0x4) ptrace$getsig(0x4202, 0xffffffffffffffff, 0x461, &(0x7f0000000600)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000680)) r3 = gettid() ptrace$getsig(0x4202, r3, 0x8000, &(0x7f00000006c0)) recvmmsg(r0, &(0x7f0000003100)=[{{&(0x7f0000000800), 0x80, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/12, 0xc}, {&(0x7f00000008c0)=""/165, 0xa5}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000009c0)=""/17, 0x11}], 0x4, &(0x7f0000000a40)=""/237, 0xed}, 0x5}, {{&(0x7f0000000b40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)=""/44, 0x2c}, {&(0x7f0000000c00)=""/101, 0x65}, {&(0x7f0000000c80)=""/35, 0x23}], 0x3}, 0x3}, {{&(0x7f0000000d00)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000d80)=""/179, 0xb3}, {&(0x7f0000000e40)=""/14, 0xe}, {&(0x7f0000000e80)=""/220, 0xdc}, {&(0x7f0000000f80)=""/144, 0x90}, {&(0x7f0000001040)=""/33, 0x21}, {&(0x7f0000001080)=""/111, 0x6f}, {&(0x7f0000001100)=""/200, 0xc8}], 0x7}, 0x6313}, {{&(0x7f0000001280)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002700)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/167, 0xa7}, {&(0x7f00000023c0)=""/75, 0x4b}, {&(0x7f0000002440)=""/190, 0xbe}, {&(0x7f0000002500)=""/115, 0x73}, {&(0x7f0000002580)=""/188, 0xbc}, {&(0x7f0000002640)=""/150, 0x96}], 0x7, &(0x7f0000002780)=""/204, 0xcc}, 0x3}, {{&(0x7f0000002880)=@qipcrtr, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002900)=""/235, 0xeb}, {&(0x7f0000002a00)=""/133, 0x85}, {&(0x7f0000002ac0)=""/145, 0x91}], 0x3, &(0x7f0000002bc0)=""/194, 0xc2}, 0x1}, {{&(0x7f0000002cc0)=@caif=@dbg, 0x80, &(0x7f0000003040)=[{&(0x7f0000002d40)=""/183, 0xb7}, {&(0x7f0000002e00)=""/57, 0x39}, {&(0x7f0000002e40)=""/73, 0x49}, {&(0x7f0000002ec0)=""/201, 0xc9}, {&(0x7f0000002fc0)=""/105, 0x69}], 0x5, &(0x7f00000030c0)=""/19, 0x13}, 0x7}], 0x6, 0x102, &(0x7f0000003280)={0x0, 0x989680}) getsockopt$SO_TIMESTAMP(r4, 0x1, 0xe3, &(0x7f00000032c0), &(0x7f0000003300)=0x4) setsockopt$inet_buf(r4, 0x0, 0x26, &(0x7f0000003340)="8b9b64ae045bc201e61639d2f8ea49bb6e2a65f32837e560946628a98017bab6456239b86d74d7126ab1005a1fcf33abc06b4c6c1c17bf917a2e4c88ac50a539b4482ce3c34309956be7fca60aa187a9767e8663ecc38a7791d6aeeffc8516b0a39f4036766f88667767358e52aac686a43fc22a33", 0x75) 19:19:48 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/faux', 0x282000, 0xa) ioctl$CDROM_DISC_STATUS(r0, 0x5327) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair(0x23, 0x4, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000100)={{0x2f, @multicast2, 0x4e24, 0x1, 'wrr\x00', 0x32, 0x6, 0x14}, {@multicast2, 0x4e23, 0x4, 0x0, 0x9, 0xff}}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/block/loop2', 0x5000, 0x10c) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = gettid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000002c0)=r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0xa, 0x0, 0x0, 0x80, 0x1}, 0x5) ioctl$CDROM_TIMED_MEDIA_CHANGE(r3, 0x5396, &(0x7f0000000340)={0xffffffff80000001, 0x1}) socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000003c0)={{0x3b, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 'wrr\x00', 0x34, 0xff, 0xa}, {@multicast1, 0x4e22, 0x1, 0x9, 0x80000001, 0xa68}}, 0x44) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000440)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}}, 0xfffffffd) r7 = accept$inet(r5, &(0x7f0000000500)={0x2, 0x0, @local}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000580)={0x2f, @loopback, 0x4e22, 0x3, 'fo\x00', 0x20, 0x7, 0x7b}, 0x2c) r8 = accept4$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @private}, &(0x7f0000000600)=0x10, 0x800) ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f0000000640)={'veth0_to_bridge\x00', {0x2, 0x0, @dev}}) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) [ 57.331470] audit: type=1400 audit(1751397588.035:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:19:48 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'veth1_to_bridge\x00'}) set_robust_list(&(0x7f0000000100)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x4, &(0x7f00000000c0)}, 0x18) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000140)={0x6, 'ipvlan1\x00', {0x5}, 0x3}) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000011c0)={'nat\x00', 0xf, "a648b4aa9f31d605cd346bd9914d9c"}, &(0x7f0000001200)=0x33) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001240)={'bridge_slave_0\x00'}) r1 = socket(0x8, 0x4, 0x5) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000001340)='veth0_virt_wifi\x00') getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000001380), &(0x7f00000013c0)=0x4) syz_80211_join_ibss(&(0x7f0000001400)='wlan0\x00', &(0x7f0000001440)=@default_ap_ssid, 0x6, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000001480)=0x5, 0x4) socketpair(0x22, 0x5, 0x7, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000001540), r1) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, r4, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000001640)={{0x2, 0x4e22, @loopback}, {0x6, @remote}, 0x20, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ipvlan1\x00'}) r5 = accept4$inet(r2, &(0x7f00000016c0)={0x2, 0x0, @multicast2}, &(0x7f0000001700)=0x10, 0x80800) getsockopt$inet_int(r5, 0x0, 0x16, &(0x7f0000001740), &(0x7f0000001780)=0x4) r6 = socket$inet(0x2, 0x1, 0x9) setsockopt$inet_buf(r6, 0x0, 0x25, &(0x7f00000017c0)="2f854dc98195184023012247bdfde6b6f66c66bb99db80ee606e5297ac77a555c6d23bda7619ca58b5e9ee3b1deddea8bd41378c8fd76633b0d6500be2bd3d77cccc15104d975f2e370e916ddf2ed3f5baf269bb69514134d09c0bfb07c7fbdbb14bfb067c", 0x65) 19:19:48 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x183, 0x0) read$snapshot(r0, &(0x7f0000000040)=""/161, 0xa1) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) socketpair(0x29, 0xa, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_raw(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000200)={&(0x7f00000001c0)="8cd96fc61067c968142bddb609a344fe1e", 0x11}}, 0x40) ioctl$SNAPSHOT_FREE(r0, 0x3305) ioctl$SNAPSHOT_FREE(r1, 0x3305) ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000280)=0xc) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x0, 'vlan1\x00'}, 0x18) bind$802154_raw(r3, &(0x7f0000000300)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000340)={0x40, {{0x2, 0x4e21, @multicast2}}}, 0x88) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000400)={0x1, 0xe27e}) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/hid_belkin', 0x200000, 0x5c) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x100) 19:19:48 executing program 5: capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000040)={0x7000, 0x8, 0x2, 0x3, 0x3, 0x1}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000680)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200000c0, 0x0, 0x0, 0x20000384, 0x20000620], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x11, 0x31, 0x1a, 'lo\x00', 'veth1_macvtap\x00', 'veth0_macvtap\x00', 'bond_slave_0\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0x0, 0xff, 0x0, 0xff], 0x9e, 0xd6, 0x10e, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x4}}}], [@snat={'snat\x00', 0x10, {{@local, 0xffffffffffffffff}}}], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}}, {0x9, 0x30, 0x892f, 'hsr0\x00', 'ip6_vti0\x00', 'bridge0\x00', 'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0xff, 0x6352e32165fb4ec, 0xff, 0xff], @remote, [0xff], 0xde, 0x14e, 0x186, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x2, 0x1, 0x88b5, 0x2, 0x4}}}, @devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x0, 0x80000001, 0x80, 0x9d, 0x7}}}], [@arpreply={'arpreply\x00', 0x10, {{@local, 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@random='}Z6;`n', 0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x3, 0x1, 0xdada, 'veth1_virt_wifi\x00', 'xfrm0\x00', 'veth1_virt_wifi\x00', 'syzkaller0\x00', @remote, [0x0, 0xff, 0xff], @empty, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0xe6, 0xe6, 0x15e, [@limit={{'limit\x00', 0x0, 0x20}, {{0x9, 0xf8ab, 0x22d600000000, 0x0, 0xffff8fb8, 0x57a}}}, @state={{'state\x00', 0x0, 0x8}, {{0xfffff8ae}}}], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xfffffffa, 0x8, 0x3, 0x0, 0x0, "37808cb3f07af21b0526d0f48bab40ec256e23610f1635d5063c1e98b1db31f33b9f25ceca839a745ba2197f8a9f50b5ccac8a3669d01a06811551e76560d142"}}}}, {0x3, 0x8, 0x601f, 'vcan0\x00', 'macsec0\x00', 'veth0_vlan\x00', 'ip6erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, [0xff, 0xff], 0x6e, 0xd6, 0x10e, [], [@common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}], @arpreply={'arpreply\x00', 0x10, {{@remote, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x608) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000700)={'filter\x00', 0x4}, 0x68) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) ioctl$CDROM_SELECT_DISK(r0, 0x5322, 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000007c0)="5c9fc64c6e732f85276ab617b67157eca2522e2c399f67295ae65abaf9dd79650618fb08c579e5fa48abf4367d6a33d43a5c0776aaad64ad3ee796125b121dc1cb66e1196fd1a5111bd4a16bee7304da32f27840d5c8fa5d6a23888b90317935ec8663114f73c11978afeaedca1704c24724173b4dd4b5fba1c0da1185abb2ca8c232c37c1a60611edbb6c5900df98cd782e4e8fb5eeb24009eb7a6918a87c62cb846f59e19cc159bcca67a15cb1b444c88924be058dcac059664e4a58fc2048f6a0e0cedf7a7079fda6115af7f08a3dcbd4099ac611facfff4a7b976d4b2ff3a8c11c16473e7039ef3a46b41226ce394897f9478318e3d7c28b524b9e493e455fd45717d4b338b4887bb6ff1aa35798d9cd4ddd60410fcbe19b8bbdbba9561f966c8988284e8f955877e5221b2bacd2a824c5f30c955d87fa584880e69e7ef571c333bda0744f765117ed07bc3774f7a5786018f167a65e300a39eed94dbc31bb9259a712461c577500b1900a88d57d6d24bee49e03633b0b94b510bdbea3af033349865eaee4cb3176c7172f1d5d8efc805ecc5d907189ab61160e728069381e2dfbfb19ec58835b106c8fbbff0edc330e4a2f2ff215c895bd18b3b6487799204645351190f08d6b09da31fd96c96b05fb55646c4863b7399dff8ef29a7b584b34f933e988b10dda934b5e602d3175ce7d2411e05a85d1d9c76a87ce530750be7ded9a66d65ef2008da29f8b69e5a7eacd449aaa4634173156b387dac213cce69dcb6ac08bc77182b069cbf150f3b0b616ddea34d4330f388f04ff5bf0b69fb0b671bd7ead040eba3561efedd5468f4fe4ff74ba2998f92cae0d91e299f8d0976cc4ce8c20eccec8e721f060303a5f84e9be92477970773dcfbbab6e84eedc95682c835d83fdabe700ca337bf193de0b0baaf333c35b23b3c78823294ddf29f5dd99ce9e02a18d5d4dcd0582765a9c2a966dd0c31449c3a6e49bfcc13434fb62961f99a3f10b8d787faae3cabb0abebd38829209c68c914e451b60dcaf61568f3133160b735a5172a5f7006e8b67f38699c3af229cc9bbf854fc6306dc8ffcfa3ed605ada2b3419c4069c7398297d0dae23bf2283196b8584ed8fa9cabb2dc48cb9b24141bbf32be43b1aa786500dea1f037917bba5bc6bbfe48d61720449c71d32c2429a50e224a7e4316262929fe37a9fdf4d56184c69a0d81ff392b1aa663a7fbd327f3dd2174e3ad28343931d29de54a25109becce6954a4dd99b650d0cb0d72e7e1d60fc8ef23f2d7d61a5696015b5b3919ba0bf8042f80b1d2fae605a13fc94a68833aad3aa1cf455a9d4484a155f68b364561d297973ca6523fa8152e833e8016e06bbfc45775a68597b1a11f217abd9c062d17212e9068a16d6a0ef207bee041ee92be08165d4b7d3a3e5dd6eefd91a77cfc06b388b46980d8c385218194dd9b7a1f24cb65e4b76315b8c20a446e06f7c36b49ffb5f3200fb01bb8171f184d8318be02c13280d5916517b7d79d2f086d78d2f9d0bdd1a345f3bd4b139b2320192dc83559075ca8044896131995e40c7fae77e7eab40612692d7ae87c244464cb345385543dad0c681fd30473a842a6195c0b0e78286b88eb4706186f694f0ab1d70d6f7fd21f962d8d6706e7a9f7a6bb14e64758f3224dc78dba064c7318dae61dc9c52d651f6d86198936e9a0b38373017d665b4832b1de536edcf1662482ac22132ab9b9879cd68c9e2cfeec1685fa8657a98e7f02e32a7473470a4ca4d8419ab21417ec610b59344c76199cfbf2a39d114686913986985d63333b70bd9c9448095953808d37e0da74ee1c8f5157f1e53ec6096762a5eb97101b592ade11f70250e3c8a998bedb1a6fd9f199b2211410aa0d48dd925d85f2bca7e80bb43a7bc7ca449fc7bd402face744e5d64a45bde2e8c089566a638493459051f09b92ae33ef1427547c3f9401fe54cbb7176d9562ecacd32d3749b81afb1bcf0fcc57c1d98ec95229d3e3edeb26a708a6fbcbc50c9ec96dc7a937b77229d8d913ce204cc93730c59b094877f18cf2af4a67ee3b6be464d3ae645999a0bfecdee574db775022f149087066eb10250bc13b8c351e98f17c7e5e962052275d6a3971d4f85c094f47cc8156d9fe800a75a36586be934d93b644979e34064039edb5e2e76376de4a4be755d69423dde1048931fbf3e1f51ba1f08f26e07688f0a2715a0f68385ca4021e7e0de73d9d392f3cd4e87b18251972125912392b462862e0af79f30fa6ceb223a5281097c4509296e69c5bb778cd7dcc54313d18f33208c57ab3e6c0dc07b4266d0dcd783d564fd5c0f793551a7ceec91a748befb0b91573e3059b855464aedf5403c8afcfd2d3b9ff1839cf93d25e8624cd18d6ab3739422bc715f98d42f8d0c970ad7f4d85426ebe204dcfc3b122e5cbae7376f1d90817f4ae33228ff039a180bbcd786ca43395208b8e37825f9a19b4915caef128947511463e0c2b08704f9ef4c4aeb92d441331188f0d4250a73aefce1e66b88757e8bb406ddb5d13c01b6405244d8f77238e69665a64f344a6941907b5e792b9d36baeb4a816f420d45b782bfd6d14b5ee8f88e009ef8f0633822061375cb0e5437ce1ad2a16ca39315f74656b6e77bc41ffdca21d9121ec54435d2bc16dfaf78b03538231a4c1d221fd5a8b11188de14f9817d2a5cbfea3111b8813f9658859af7ab4d1ef96a6fd449861d850a55f8aaaaf260419ac3062ac8c71b189bb6b77bade6d3a94019ad772264464fcc5bdef1d108d7184f7e14ecb4e3b2cf541c4ded6330a51cf80bed8d876610a43747546a4bf2e6144950f3cc466d9ca73e87388744262774c67c64bb1c4ec977f47d498303b70dc0b4babf47537f8d5ab36d7920758e2526459447215434438460ff2aa36a250a97cd8c0c1e66f80bd9fc40c7c55080345ddab87e48eae0580f2c50d9e7b0ef8e3d24107719e32f2997e24ca7eef6063803c123ed6d2b4d8fa60b8662688a902a04077aa817ec8fda86baca8657224e63f18fbdc6cd4aa1af14f9e4fff80bdff466326bf63c3b0233b019a083053aaa7800a026f00c18f287050979fb896846230ea14af19109eaa9b0496cdc26b5a281914c07ae38551b482484d0bfe0da17bc8f20ccf17a4c657827df0f8c6b597c4733161ff9574395c09a5329714b4962b9da7e9fcada1f3ebecfaf32e8bba87c5cae798f9be1b186aa27a43ba4741745b9c47e03a24d1d691056e2a7f0eda5c0285d6998da3c53fa7a654f9bc1a01c6782f21280a6658e0f1b7ae38e8fac12b5083cc0bc9f962672b4d350b6940117694917d5f0b22fe4340612ee3eea2138c5436f0fe4977c03c27b74738520f912178f38d7e62e511c282f660183fbe0e44ea6f7c9d8a6b9de2ce21f5fa23ccf4dc8a41a40b408200eeb2d0d9e158226a2f72a75c584694be3bdc20a81550f7bfdb8ab16f9908a282e2f160cc017de33478318d47b54ee0788403160a7c530fc147fc46ab35accf27e37d76f0424497026024ac6db3def014ff51699a0ad1475fcd69693f2f0510b1fd4d566f2d8c478e69681a334ee7414603cc3b92597ed93ae08cde7617faa64a8dc9f35de5bb7525aeafef9de1b7ac4a163a8eca2c1a9c1e68cd877db7e758f2006b9ce719d8924d0c1748b0e000e3ddb9ea342c247e8dbaf08c9418dc488d603b319f35a993de8274eee1f943aabde6ebdbbfa9037c1ede846960819bf2bfafb912d3ed1eca5a687473dd4cd2f1782956fac90652c376605eed66473c5f71da1d9f6de6027678d5f72168ed2bf0ce31056ea496e77fd331621244e863c9e5c7b1d45b4573933f57235cc7c4ad70db575bdc51183328058d36187204f136cca9762c6ec2b3e2c533a886154287a2807a41d5cd144041c55501a688d32d17a1a1383a5303a33b24f1074d736bae30c6a0d96e9eee0ee622cbf19a532ee367f7dff19ed1d25f1ce93463faa19ef1fa80f8ff0f114169e4c816a177a1fb6cf85c73a298b77ec2f3d034e2dbffe97d4d5c924f0910cf7e2d8d2978a9bf31ad8da2d6c9a6e4285baf38147fbb742d129a63a5cadeace2f0f1d452de1035c134687c9378f049e92811577be1093ffa0e3fb7fe575f67cdaa38cc20e0a39406573949581a0da901ee4d85a1b1e2ba721036c1d8066bd579504288ef69899ec7f84dee1271679d88848a935f8699034232db8a22ee681b9397832560d017ea462693829dd9523c6a57f2364977a5940f8f5cd4af78982169e57fd6a1bee92b208209a36e2c12afaf6d62acf5c7a803e01ac1d6dc7e59e268539bfb007cb8bc0d7351b3a991393b9f6bf21a9bfd7ee1087dc4e07be307a94e256fdd3030a9a5d64bc121637675ff548601e6283b4ee454da5d0d5bc50b33c25009529d9d4c1a2eee8dfe5ae0a6783e5cc6bcf79293dd0d18efd4a5a305383ea635e918a15d318b27b8e5f06fbe3b919d65178301cdae1779e0b292ce06ba7604c52fbf486887f7e16732b86af34680a53c86d838295474073a1603424f3acd7f7c08752e46fb96ba9e96fd0aa5a17f0c2fc5fddd4a82e272b634daed3010a005a36817c9e61a9f35f18a4334c2563a5ef1eb9ad3ae64bd389ebcd898a3598f2dcd539537ddedd16e0037f14fe67f24e05e54cec226d75710513aa9ddd1a9962f40940f070c9166aaff8987b1d99e55fc93f31e5d447c697e4fa80f85e3526fc8717f51b36f82d33e496e57a751ca5c30eaa385b746ec2c79cc3b6339438a3f964c56e8cfc321126c7bfe4695180fd7fe74fb59ea11b7c95fb42ed8c97e9587247e92ad91e5c2c17510cfc54475d7985a90694c1242fc2386a8b1e50081ffa576667cb8faa3c91b10d654552b86857d69d4f9129b475204443efa82c27bc3c5ae3366ff82f75a0102a911e0a92778967db7908731a2730d311d4461dbb6889170e182a30d130cb64aee4aacca371a38b15c1e492108e129dfedf0e1a29b8f00722a11cb3e68b4bbf681f7d7e641a447ddb36f0478f24ffe0730d93d5d245fcf67694ebd5861eed0a4ff63ab107a5a2d21c2a01aa80b4ec442342277efcd6c36d822f3c336488ba3fd01ec8262c24daa61febbf6f7487f123012f8e7efc9bbb0db078c616fe3666e361c3b6876e8f2f7a242411d90d2a33cd342587c9f78806272f9757812a71f2b1b125dc012041e01793f1a8f2b73ed3f85568cb2cdedc3fd0738c19af6b81947e4a80b275affd585a65d8fb707dff8a3781e3119605e49d586bb71965eb67640924399da293aba1f8b6a2af9925f0573f1d74eb4e5e2661fcb66d031e5622d9bc6160eb41f174825f787658471bc2a8697fd8118b285ad1efde11c67b2a800c29011a55ad5e91c343df8034af592ddbbf50d853a27210f23c3e5299d4b7388099d9d2ee4e2ffa46cff2d662b08da436086d8d950dc201b5fd189da6901c3aa84b5cc7756394507ca27c4bcc7719a05c342b9d98525bb527b77b594f3d3e519ed12680448cd6fee9b0f2fd64f88463a77c070c5183a1f7f21373652492922394e3b5cc909553ece7df66518d3bc8e119d7ac422e3a36473e672f891cdfeae462c89f4ad3404974af4e8aabd79e0e2e49213200c456ae43f6cd1fd455e7a28f1641e7764c7316f36474a82155ca81680d6f5c01b6258bec2df9e1d17bbdf54217b84c09c922abc7ac1af34b2e374e286b44378fb0e351fbcbf8c734060273ad73b5cec52ac9e380216f2f7f4b7af04ad44018a9468d699aeca68a4f785424f94e06407ed2e619fb78cdb546d5a", 0x1000) ioctl$CDROM_DISC_STATUS(r0, 0x5327) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000001800)={@lba=0x81, 0x2, 0x29, &(0x7f00000017c0)=""/41}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000001840)={@broadcast, @multicast1, 0x1, 0x9, [@local, @private=0xa010102, @remote, @private=0xa010101, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x12}, @empty, @multicast1, @broadcast]}, 0x34) sendto$inet(0xffffffffffffffff, &(0x7f0000001880)="74a7a0e9294e1b47320e9f674684a5f10ed5e52eef88167dc0773f82db9dfebf4825fc740c2d5c46511baf4e88822d5ddce2af131ad6311e64c5a676f40440b2d2a840c0fa2703c7419be852812d6677bf3b1fb8ad432ecd93a6d110726a80edb982f971cea99b8d296a5c4e9f560e0ba4631c1b2a473f1fdd4f598d05b20be70d88d2648d536d264440889a65bda390b93a34929d8ae547c385b7b3bcd210c8be82f3ac8652bd6d5948d036951e22e390889db3054230699b298ad0e83829351556", 0xc2, 0x20000801, &(0x7f0000001980)={0x2, 0x4e21, @remote}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = accept4$inet(r1, &(0x7f00000019c0)={0x2, 0x0, @multicast2}, &(0x7f0000001a00)=0x10, 0x180000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001a40), &(0x7f0000001a80)=0xc) ioctl$sock_ifreq(r1, 0x8933, &(0x7f0000001ac0)={'ipvlan1\x00', @ifru_names}) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000001b00)) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000001bc0)=0x5, 0x4) accept4$inet(r1, &(0x7f0000001c00)={0x2, 0x0, @multicast1}, &(0x7f0000001c40)=0x10, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000001c80)=""/45, 0x2d) 19:19:48 executing program 6: prctl$PR_SET_FPEMU(0xa, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_FPEMU(0xa, 0x0) prctl$PR_SET_FPEMU(0xa, 0x1) write$tcp_congestion(r0, &(0x7f0000000040)='veno\x00', 0x5) prctl$PR_SET_FPEMU(0xa, 0x1) r1 = socket$inet6(0xa, 0xa, 0x489f) prctl$PR_SET_FPEMU(0xa, 0x2) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) write$snapshot(r0, &(0x7f0000000240)="7484e9be477e13c405e252204d82dee68fb55f04e99bece5fbe4a9bf15e54ccfe29e82342af829e73e353b499090282ba5abc59a9ac058771a0d1e06478cc76ddc2970c16a1aced8ee9f980fb98522d63d4a0417bc3b1f9d35631bbb40abf9e267fc7ac7edd79daca5c4e7a2f89c535f1e0da1afef31d0b8387ab8af3efab4693f74d395a218e6dce983eaa72b08729e6b925c00c0f6d97f4d03947cecf5e8d3c4a28e04c052d2a8f7e3fa9f38c743afcfc8d6abaed11a3b6417c78c2a102c54d79981a36c1a7601bf4e2a64d6b2999a4aec84c5540a0af6e1a128838c597a6f0373289c44", 0xe5) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000340)={@empty}, &(0x7f0000000380)=0x14) capset(&(0x7f00000003c0)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000400)={0x400, 0xffff0001, 0x52, 0x5e0e, 0xfff, 0x6}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000440)={'bridge_slave_1\x00'}) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000480)={{0x2, 0x4e23, @local}, {0x306, @remote}, 0x6a, {0x2, 0x4e24, @loopback}, 'ip6erspan0\x00'}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) read$snapshot(r2, &(0x7f0000000540)=""/4096, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001540)=@IORING_OP_NOP={0x0, 0x4}, 0x9) 19:19:48 executing program 7: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0xc20e, 0x6, 0x1}, 0x2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$CDROM_GET_CAPABILITY(r0, 0x5331) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x2, 0x0, 0x9, 0x3}, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000240)={'nat\x00', 0x0, 0x3, 0x24, [0x100000000, 0x766, 0x7, 0x1000, 0xfffffffffffffffa, 0xbcaa], 0x2, &(0x7f00000001c0)=[{}, {}], &(0x7f0000000200)=""/36}, &(0x7f00000002c0)=0x78) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000340)={@lba=0x7, 0x1, 0x37, &(0x7f0000000300)=""/55}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000380)={0x3, 'team_slave_1\x00', {0x4}, 0x3ff}) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000003c0), 0x500, 0x0) ioctl$CDROM_CHANGER_NSLOTS(r1, 0x5328) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000500)={&(0x7f0000000440)="fa641d46739ce474199d06bcba807200815716ebcdf162e1c3ed734927a9b73474cc2f5df47621b67e67093ec7b02c96bca07dd438e66aabc03fcbf39a251c86e77a551e212163d5fa53ddc25eccbfbd41cca80e6da53813eea861cd3976498da14ed84141bfba5a73b69b99a1edbdf53f215dc6c4b8372e4ba09eab8ad06a733c", 0x81}, 0x1, 0x0, 0x0, 0x1}, 0x4042094) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000580)) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000005c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) bind(0xffffffffffffffff, &(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast2}, 0x1, 0x1, 0x1, 0x4}}, 0x80) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000700)='gretap0\x00') ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0xdd) [ 58.586654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.588960] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.593198] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.598635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.602209] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.650105] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.654272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.656338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.658510] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.660617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.664730] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.666345] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.667766] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.670457] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.673260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.678815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.679926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.680947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.682273] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.702935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.710640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.715201] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.725516] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.736497] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 58.739934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.744025] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 58.745626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 58.748112] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 58.759260] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 58.762451] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 58.763730] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 58.765252] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 58.766967] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 58.769031] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.772307] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 58.775039] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 58.785281] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 58.794253] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 58.799875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 58.837817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 59.191645] [ 59.192270] ============================= [ 59.192856] WARNING: suspicious RCU usage [ 59.193575] 6.16.0-rc4-next-20250701 #1 Not tainted [ 59.197237] ----------------------------- [ 59.200727] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 59.201794] [ 59.201794] other info that might help us debug this: [ 59.201794] [ 59.202988] [ 59.202988] rcu_scheduler_active = 2, debug_locks = 1 [ 59.203949] 3 locks held by syz-executor.6/287: [ 59.204652] #0: ffff88800f874400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 59.206011] #1: ffff88800903a618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 59.207535] #2: ffff888018f6cb18 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 59.208944] [ 59.208944] stack backtrace: [ 59.209615] CPU: 1 UID: 0 PID: 287 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 59.209641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 59.209654] Call Trace: [ 59.209661] [ 59.209670] dump_stack_lvl+0xfa/0x120 [ 59.209705] lockdep_rcu_suspicious+0x152/0x1c0 [ 59.209730] proc_sys_compare+0x28a/0x340 [ 59.209750] ? __pfx_proc_sys_compare+0x10/0x10 [ 59.209772] d_same_name+0x229/0x2e0 [ 59.209795] d_alloc_parallel+0x7c1/0x1330 [ 59.209831] ? __pfx_d_alloc_parallel+0x10/0x10 [ 59.209858] ? __pfx_default_wake_function+0x10/0x10 [ 59.209888] ? __d_lookup+0x25f/0x490 [ 59.209920] lookup_open.isra.0+0x64f/0x1530 [ 59.209953] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 59.210002] ? mnt_get_write_access+0x81/0x2d0 [ 59.210022] ? mnt_get_write_access+0x1ea/0x2d0 [ 59.210051] path_openat+0xc26/0x2880 [ 59.210089] ? __lock_acquire+0x694/0x1b70 [ 59.210110] ? __pfx_path_openat+0x10/0x10 [ 59.210159] do_filp_open+0x1e8/0x450 [ 59.210188] ? __pfx_do_filp_open+0x10/0x10 [ 59.210229] ? find_held_lock+0x2b/0x80 [ 59.210256] ? alloc_fd+0x2c1/0x560 [ 59.210283] ? lock_release+0xc8/0x290 [ 59.210310] ? alloc_fd+0x2c1/0x560 [ 59.210347] do_sys_openat2+0x104/0x1b0 [ 59.210371] ? __pfx_do_sys_openat2+0x10/0x10 [ 59.210397] ? __fput+0x67b/0xb50 [ 59.210425] __x64_sys_openat+0x142/0x200 [ 59.210449] ? __pfx___x64_sys_openat+0x10/0x10 [ 59.210472] ? __pfx_fput_close_sync+0x10/0x10 [ 59.210507] do_syscall_64+0xbf/0x360 [ 59.210528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.210549] RIP: 0033:0x7faa21451a04 [ 59.210566] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 59.210586] RSP: 002b:00007ffe6623ef70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 59.210605] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007faa21451a04 [ 59.210618] RDX: 0000000000080001 RSI: 00007faa21508286 RDI: 00000000ffffff9c [ 59.210631] RBP: 00007faa21508286 R08: 0000000000000000 R09: 00007ffe6623ef60 [ 59.210644] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 59.210656] R13: 00007ffe6623f010 R14: 0000000000000000 R15: 00000000000000f8 [ 59.210684] [ 60.678129] Bluetooth: hci0: command tx timeout [ 60.741151] Bluetooth: hci1: command tx timeout [ 60.805166] Bluetooth: hci4: command tx timeout [ 60.805925] Bluetooth: hci3: command tx timeout [ 60.807207] Bluetooth: hci2: command tx timeout [ 60.869254] Bluetooth: hci6: command tx timeout [ 60.869908] Bluetooth: hci7: command tx timeout [ 60.933035] Bluetooth: hci5: command tx timeout [ 62.725384] Bluetooth: hci0: command tx timeout [ 62.791021] Bluetooth: hci1: command tx timeout [ 62.853307] Bluetooth: hci4: command tx timeout [ 62.853848] Bluetooth: hci2: command tx timeout [ 62.854409] Bluetooth: hci3: command tx timeout [ 62.917487] Bluetooth: hci7: command tx timeout [ 62.918234] Bluetooth: hci6: command tx timeout [ 62.981065] Bluetooth: hci5: command tx timeout [ 64.773280] Bluetooth: hci0: command tx timeout [ 64.837208] Bluetooth: hci1: command tx timeout [ 64.901077] Bluetooth: hci3: command tx timeout [ 64.901768] Bluetooth: hci4: command tx timeout [ 64.902460] Bluetooth: hci2: command tx timeout [ 64.965172] Bluetooth: hci7: command tx timeout [ 64.965831] Bluetooth: hci6: command tx timeout [ 65.029070] Bluetooth: hci5: command tx timeout [ 66.823993] Bluetooth: hci0: command tx timeout [ 66.886033] Bluetooth: hci1: command tx timeout [ 66.951073] Bluetooth: hci2: command tx timeout [ 66.951516] Bluetooth: hci3: command tx timeout [ 66.951903] Bluetooth: hci4: command tx timeout [ 67.014090] Bluetooth: hci6: command tx timeout [ 67.014540] Bluetooth: hci7: command tx timeout [ 67.078015] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 19:19:50 Registers: info registers vcpu 0 RAX=0000000000000046 RBX=0000000000000293 RCX=ffffffff817bbfa6 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88806ce31850 RBP=ffff888013f96240 RSP=ffff8880172377a0 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff86438657 R11=0000000000000001 R12=ffff888013f96240 R13=ffffffffffffffd0 R14=1ffff11002e46efd R15=ffffffffffffffff RIP=ffffffff81518ccd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55f2000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1325bf4620 CR3=000000000a7ad000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b9285 RDI=ffffffff8871efa0 RBP=ffffffff8871ef60 RSP=ffff88800f5e72b8 R8 =0000000000000000 R9 =ffffed1001409046 R10=000000000000002d R11=0000000000000001 R12=000000000000002d R13=0000000000000010 R14=ffffffff8871ef60 R15=ffffffff828b9270 RIP=ffffffff828b92dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555582c9f400 00000000 00000000 GS =0000 ffff8880e56f2000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5e565f8008 CR3=0000000033e72000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000