Warning: Permanently added '[localhost]:54676' (ECDSA) to the list of known hosts. 2025/07/01 11:52:02 fuzzer started 2025/07/01 11:52:03 dialing manager at localhost:37637 syzkaller login: [ 51.352577] cgroup: Unknown subsys name 'net' [ 51.431211] cgroup: Unknown subsys name 'cpuset' [ 51.452811] cgroup: Unknown subsys name 'rlimit' 2025/07/01 11:52:13 syscalls: 215 2025/07/01 11:52:13 code coverage: enabled 2025/07/01 11:52:13 comparison tracing: enabled 2025/07/01 11:52:13 extra coverage: enabled 2025/07/01 11:52:13 setuid sandbox: enabled 2025/07/01 11:52:13 namespace sandbox: enabled 2025/07/01 11:52:13 Android sandbox: enabled 2025/07/01 11:52:13 fault injection: enabled 2025/07/01 11:52:13 leak checking: enabled 2025/07/01 11:52:13 net packet injection: enabled 2025/07/01 11:52:13 net device setup: enabled 2025/07/01 11:52:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/01 11:52:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/01 11:52:13 USB emulation: enabled 2025/07/01 11:52:13 hci packet injection: enabled 2025/07/01 11:52:13 wifi device emulation: enabled 2025/07/01 11:52:13 802.15.4 emulation: enabled 2025/07/01 11:52:13 fetching corpus: 0, signal 0/0 (executing program) 2025/07/01 11:52:14 starting 8 fuzzer processes 11:52:14 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000040)={{0x0, 0x6, 0x7, 0x7fffffff, 0x5, 0x5f42, 0x401, 0x5, 0x8000, 0x80000000, 0x5cf5e8f7, 0x5, 0x8527, 0x0, 0x100000000}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001040)={{r1, 0xff, 0x100, 0x73, 0x7, 0x7fffffff, 0x9, 0x100, 0x6, 0x4, 0x20, 0x9, 0x2e1b, 0x1, 0x31da}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001100)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffffa}}, './file0\x00'}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000001140)=0x3, 0x4) r3 = socket$inet(0x2, 0x6, 0x9) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000001180)={{0x2, 0x4e20, @private=0xa010101}, {0x6, @random="ccfbce3bd6c1"}, 0x18, {0x2, 0x4e22, @empty}, 'syzkaller0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001200)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001240)={{0x1, 0x1, 0x18, r2, @in_args={0x1}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000001280)={0x80000000}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000012c0), 0x40000, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000001300)={{0x2, 0x4e24, @multicast1}, {0x1, @broadcast}, 0x2, {0x2, 0x4e20, @empty}, 'virt_wifi0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f00000013c0)={'filter\x00', 0x4}, 0x68) getpeername$packet(r8, &(0x7f0000001480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000014c0)=0x14) setsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000001500)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, r9}, 0xc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000001540)={'filter\x00', 0x4}, 0x68) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001640)={'ip_vti0\x00', &(0x7f00000015c0)={'ip_vti0\x00', r9, 0x1, 0x20, 0x3f, 0x2, {{0xe, 0x4, 0x3, 0x3a, 0x38, 0x64, 0x0, 0x53, 0x29, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp={0x44, 0x24, 0x22, 0x0, 0x3, [0x4, 0x1, 0x40000, 0x1000, 0x101, 0x113, 0x10001, 0x80]}]}}}}}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001680)={r10, 0x1, 0x6, @random="4c52d7b8f1e3"}, 0x10) 11:52:14 executing program 1: getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x1c, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'bridge_slave_0\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e20, @multicast1}, {0x306, @remote}, 0x8, {0x2, 0x4e21, @rand_addr=0x64010101}, 'ipvlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0xa0002011}) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000280), 0x4) r1 = syz_io_uring_setup(0x6956, &(0x7f00000002c0)={0x0, 0x2bd2, 0x1, 0x1, 0x1f3, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_NOP={0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000400)={0x1}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r3) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000000540)={0x0, 0x0, "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", "c68515df94aa24664380ff894a85be5a91d40efb784319668e8cdf569c317047c68df35a2f630707cd77bb5617dac96846ea87d1ceb677f37525dc987c17aad531150577c7cf9011233c9fba0dd394771a5c54f1f947b3d7c9e17c7206521fc96557b5ecb8e414fbb4a27b06abb36bfbbfe8c97af28bd7b4a0dda8fe6e5aedbe79a79ad3c7ca6f7d7cdbbb06a0a324de1f41c89fc1cca3c116561e02c36712858900e621ea105befd69b3bdecd7ee5d6dcb35db4afb22298b29f58f4df4277d6c4e95d7b3ee2f4cef59be458371b04377a66fc994450e90e341ff38316652f2f55f2d9b0b497185beffe1b82a0e5c96962c78bb56382834764a82a08052c06dce5c87079459ad76c40b25e51053f5b6ccc1865228cbcb3d8fad232975de9bd13e1b35ad9657f6a85b6a7cd40e466a7e97f1402af1261c2800efd4b10852a11ad4f0c1df6482b2cfb6fe999ea8ee8a338ea14bc3aed5e96ed5fdf1ba9e921becfbbc47830c3eedc538e67ab22fc410d01536cb83d637589f1d64f187c8c5eb9428d0c7bba80be4becb85f5ff97150ae78e124e2753d0697721fbfb29a6e09d85557ec512c058d5d0d2738f494c25dd7e240d898afd93dddbda5db70d751acecfc7962746365c97f5ada8ca9568e3e76889f2e907e2b87759fbbbc610dbc3bcecbd55a497714af4cae72fb8c71c42e8527293e60e9cb02fd360a0e8dc707060669b9504196c6c67cd0f429db267a90dea38f0affb5c32ee0c28001905b4b5b45bb9b63c0fbd6466f820003f55ca159aad244f525b863a12864ae5edacf3d8bf374c7d856e50dd49dae35a77e0ea9c11d19aa869f18f45147582bcaea9cc2d02f69bdfff350e411c4da6e5e68662fa77c50a3cac0f073dd556adf6ebd48536d88d38f46c7e7a16b7d576992a62f5656c7ff2d15dd4970f8b2c11294f7db101c25df8de79baa44cd18bbafbf7abf6d0381f3b1acde4b74b96527eea4aafbe6e2273c3af5c45194ed38916021e11c8bbca7ace542dc66ee3d7d1f38838a18b07bfdf030390258489b04f17a76c201b1e119ed0c9ef90b44b870620491fe4fd9d7b30f2710604bf926f1d3d146ed5a45eddde31c1604f149e95f2f6f4c1eba68f267a38ced853e98b7fdd65d645ac7775093c02298fc054bbf54a4a2f3860bc2d18800c41ea6da4f7bfc1863c9e17ab507f4553c528dba68911c025660b0843baf9d03e21a00e5b2cbbd870a8a1cefdb1e3dfc8123227f0d97eabeaca1f5c650edbb5d03fda32670de620c12adafa2aefb5607e791f6da4964ec8b54b4a32b596803160c4a0c26759df322aaac7f85c4b4540ff44a218808dbbb779acb6863e12bd23cb729dda139500cf38e9ac6a73cf3e47ba9f23328c71ede0fe1789d6d7a44ff35b860fc5d25392a367f977cfc685ef3de1412ae3f5fdf0d24b12d11310b893671da5ecbff99a2c5989af925c1acb0b9f4e7c0c03988d6e497af421e3e0632e9564690796abac84339bb19a2acf9df7b06d21d6bb1c50e57b893be721603451c681a6c0f10b5976dc7a02e654a3947f8b13f250771dc4cb20727f090e881bc70ada67de95481e461112c31862a141a532d0de2d0c314938d3d899ae6684b21d9d95f421ef8c57d1aebc2a1fd961ffabfff5329b607c79842106aec7ced2ea16f1ddf3e7704afe7122133d2c34cec7781ae9dac630077bcf51fec94484256f41d120fe79b069acdb529d50331980a5d7b7506771a507f8fbbec624ce21a15c4c774c271dad593447548a187a8f4c342432d4a96aa6c55d7fb3dcb76738d198d3e81c6b0bdf30d779bbce32bed7e348d7de81db8a93fb8fec9b43c45f40ba4d4ecf4eaac125427c16845b9905ea9fbaedecf9822f768a838e87cbc45315328f6cfab3fd475b34cc900d22f56c023f81c332907147854c925fa72589f7d3f22ed5620c29f700198ce20834d144ad6d55e9f8dc4ab6e323de013d15d4aebef1d7bbddf1a9320687b116aeba2e3625db9dee1fc715c4869b81a21bcdf48adbf68a8fb841ef9030683c3b1a5da4c6631f523f7ab6f6df9e095cbe96882e356fffb8a7a64c99d9116cb3544ffaa0884246094f09f353167a89d858b62cacbca8286c5bb7f73aa9d8b2ee19bcd9912ee91156bccaf05b94b23397fd0c9fc44b2025cc758507757bd1f0a49f9a5e94bfb37416e9d32cbe739c6cec8ef35874b8ecea907c93512fa59e28fc4f2584e03ed30ff894f96e61dd4d97206d149bd57fed9edfae4972f94801da2d36f6714394199b21cd5e4beee13d49359edb1ff4088ccad2e8d0d87d21311f68ebe956c7d6129efdbe13ee182d9f9d87d66cfc66c535108bfb4e51d3e1629fa811acfea00f7e5cf98828ffd8645e576d2cafeaa15fa65a2d547fc69816cfd0126e2c1ea4593e607615a3aa9266be05335cad8956a34e8ee65d09d2958c27ac4f7dc159a090e6b194eb788469960a6aa5973ce9a9070cf453a6d50e2542a2d25b8704d03c862ea7c46c50fa82ab1642470f206b915ff1d328589abee7dbdfb0a4ba1039cc0919f7add76f5fcdb5735dcff69e63a318d522b5f80ad1a66eed49384f2c539b9e4992c257cd0ac2d4bd9714bb154a4311d02f5c6fd1107c0f2671de84e72d0664bc21b31282f2ed901d6f49d103bdd88c65b27f19d9b957be1204c2e16d0dcecbfbc592b17abc53011cc10bf43fadb608905fedccfcbeaf3d600bb40c2206024164effe78f4d0814a6be62e3fed6141c541fdb9e44c263733a91af76a4fa546a39f282d5fe4e11e1d53623fb993a616784b5d45e821cda1a2704af73b818eddf410a478ef39549978b005bd8c83a6086f82be7d72ed21c6601dcb7144415b1fded29ae2737dfac2abde24847745096b088ca9278cae309ac303428d515cc522047f4402a31f919e75d53c6f4b323e7f3bf8c2af4423f928ef1226b21ff13efbf56ede71cfeb6df820f8c591fe6bd90043b6b5ee8a5f07a4ab87aba0d184a6793c2326ec17503ca53e42be7eeb14bb78369a78a74829f86ebf90b20ee43f986d9bf07c9c5246983cf42afe93b649e1c6bbb69c3236029a61f13a191021891fdc891888e4d72b6e9becc49068c8a7f775efe0449e47ebee189314992d14a120f56b5063cb18302b07748cdeb9d27a43adc37e72110e3852025f3cbc4e19105b8c2917391b59c639eb314008116437e8540304acafc7310d35fc1858275a8b33b586bc7c469662b59614c77ae8113ee2aac6390fff524a0601927be082a095f952a978f2cecb27409748d8369f3aeab368708365a11c85a52db61224aa20a4d2df55fd8dbe27d88d8f3349b7cdeef99a45f8e9b28546de10a09af3544ca6de985f2eeb8b124f74d1a2bafddebac13d26066b0f4b8f76d6380884eee7689f24e0b4823e38500697e7bdd21d50b89d57e2b132ceb6749723ed072a3d633db019e570104e88e40f30d57f1f885ec4257bcc21aca874f8c5f7a76dc26ea3154ff5be6c3211a367113ac98e35f26e6a20d289ad6b1ddf7d94d187e929894fc016e0491fa99901239bba8b532f1038b07db6c6641c78f506181865775b3cf414336a4a39b8f303159497c257a1e2368804bbccf8f784766082bca9f93f3fced537c6859649fe666fd43358236504bbaa2646ac619e06bedae088c8f31793cf6210b9c8a78924fc44da611f2dddcbcfb12dd6bd3252146af0ab499efd9cfecb0c0f3a19792893cc35f331a0bc8ecf77cb91a049a0dbc80307b0800fa4a60d7b2007865f2a85bf11fe9f1864bdedb15e32aadd942cad54dd7c73ffc0c6c008cf60a9dc43d81011308660051c0dffefdf51a9891a2936c63d033316e570f6cb292058cbe50844d3948c58f2ace5a070ed8e39fb6df4f6aab8eb811999891ef7f152a9c93015ade7aa21b43d1e8c04181d060a08b704c635db3726362c7c8d38205a399d934f7ca56ddc3176a4524bfba5ccbc3ae03a29fd914af182b0657c3b0f5b3925b138496b4f8ea0adc41e761de9a15f7b644904bc1f64982635b7601142c4ba71d2d588d71218912a73fa332fa523aa091ddbbc25c4c385e7970b3625e31a3c518c33fede6b016350efa3b517e6ec3af1e4dfa238832e70094343386f5218618b02e329de96de3f0127587cdc9cb61acafecfbdeb602e7434362ac0125b8ed78dacfa2a3b12f555017ef41077c6ae6a44124cc1d296875470b5b701442c862031e83904c1d88c7814b9907ec575fa5d8ed2501790530b62910b21c497e97ca32abff0232f0acf8368c76ba67fa09eaa8c8a62e4645c4155a13438b96755dd1fef78d7535f29ea67fba54bf4ec0c55d605cf4ff7e19e23d3e8e466c0ef10f5b26aa7124bcd54a275bb10e657eaa5202db2d31c5628e8d4602896ed97c5de0081a88b1de205dfab2f238954c798d1c08b80d5ef4e8ded3a3106a1cf373733e89de432c6cebf3b695b484f38fd7cbde7d6094a83b8654eedce0d5a1ed383fd1ea2b0982ece08a86751d82ca847e419786f1dfca0e9e8a97756f7f44eec4c4ebd6fd36277e4ba204a8f936203e69fd3895594c00f1e853bbe4ee3ff1bf2db73d5e873bd3ae09e0899c9053d3476791fbe2669e2c40117d9990c87c96f9df9f58d80acb9581f299ef213c74ee8e322da945a47575d54f0ab7ebf543f977465e04a6afe64aa8414eabc5661bf341898c8ff562a08bfad80526cf15d7cac072e0c6521bb0e14238c7df72670ce94e7be7d5af1205f9dcd04b8e5cc1f442fde594d4ef95dd88104004aad117eb49b05b4cbe80948ad5143cd4cf5d14b90069cf7f30b6e1ed05294bc6a1ea0d568edcadcf3e0137e2e5cc4500a2cec0bbdbb73fcd7e71d974193fef7f3ef9b822bc03ccd254c9a17099ceadd7d408d978f8cc99ab8d3ea31e385880bf14aa1caf2376e916ff8b67dbf1eadb97da622269e9839c9ba1fdae1c8bedd79969f1f2e87b423d9c7bec7dd436f7373bc88930c586593c8918139395d0c9297e608aa23e0463c3aa010488f7c67337f48033659f21f0b3ea1a211f731719867f5f0803e58500f3b144a8e8d3b267d2aac4f3d0c28b088351ef9314e631d71760cda71aaedeb617d2859e3f41b25b47697d08821a2932cd13b1075a11082ccc7c44c4e938aeaaf8ee7f7db73c0bce55051905e45b77e026b81ebd7821ff0a06da7b4f1768794f2994dc9112d6ed83432e03df7954c39dcdbd2b65aba806a2a29028fe80cf205a6191cf599e0b397bcd7dc5418227fc3860acda6f52524eba2ba889c6406ec57259b5b3454c021320365462251439a396e9279fdecf9447dddd912d8fe616f9c14f7a19029256581141c5754ac694d6b3820f86a6f500c11781bdb0e50cfb49059bd41009f35da46e54c1f3d009e62dc828ae81ff3ab07612153b9c7a6986"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001540)) r7 = socket$inet(0x2, 0x5, 0x18) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, &(0x7f0000001740)={'ah\x00'}, &(0x7f0000001780)=0x1e) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) 11:52:14 executing program 2: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000040)={0x11, 0x16, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) recvfrom$packet(r1, &(0x7f00000000c0)=""/38, 0x26, 0x21, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x7, 0x6, @random=')&iPd;'}, 0x14) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000140)=0x5, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000001c0)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x1, 'rr\x00', 0x0, 0x9, 0x1}, 0x2c) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{0x0, 0xfff, 0x4, 0xffffffff, 0x200, 0x7f, 0x800, 0x9, 0x2920, 0xd3e7, 0x0, 0x4, 0x100, 0x1, 0x7}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000280)={{r3, 0x6, 0x7, 0x8, 0x100, 0x5, 0x200, 0x2, 0x8, 0xff, 0x3f, 0x4, 0xffffffff, 0x1761, 0x2}, 0x20, [0x0, 0x0, 0x0, 0x0]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x600, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file1\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000003c0)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000500)={{{@in=@dev={0xac, 0x14, 0x14, 0x1b}, @in=@broadcast, 0x4e24, 0x3, 0x4e22, 0x0, 0xa, 0xa0, 0x20, 0x0, 0x0, r6}, {0x10001, 0x9, 0xdeee, 0x3, 0x9, 0x270, 0x81}, {0x3ff, 0x8, 0xa000000000000000, 0x2b1}, 0x2, 0x6e6bbd, 0x2, 0x1, 0x0, 0x2}, {{@in=@private=0xa010102, 0x4d5, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x51, 0xffff, 0xee, 0x7}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) getsockopt$inet_buf(r2, 0x0, 0x9, &(0x7f00000006c0)=""/4096, &(0x7f00000016c0)=0x1000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001740)=@req={0x4, 0x7, 0x7, 0x4}, 0x10) 11:52:14 executing program 3: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x101, 0x1000}, {0x3, 0x2, 0x1800}, {0x0, 0x800}], 0x3, &(0x7f0000000040)={0x0, 0x989680}) connect$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x18, 0x0, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) semctl$SEM_INFO(0xffffffffffffffff, 0x4, 0x13, &(0x7f00000000c0)=""/161) semtimedop(0xffffffffffffffff, &(0x7f0000000180)=[{0x3, 0x6, 0x1800}, {0x2, 0x2, 0x1000}, {0x2, 0x6, 0x1c00}, {0x1, 0x800}], 0x4, &(0x7f00000001c0)={0x0, 0x3938700}) r0 = epoll_create1(0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) epoll_pwait2(r0, &(0x7f0000000200)=[{}, {}], 0x2, &(0x7f0000000280)={r1, r2+10000000}, &(0x7f00000002c0)={[0x20]}, 0x8) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)=""/108, &(0x7f0000000380)=0x6c) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x18, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @multicast}, 0x10) r3 = syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x80080) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wg1\x00', 0x0}) recvfrom$packet(r3, &(0x7f0000000480)=""/121, 0x79, 0x22, &(0x7f0000000540)={0x11, 0xf6, r4, 0x1, 0x81, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f00000005c0)={{0x0, 0x80, 0x3, 0x80, 0x3, 0x5, 0x25a, 0x2, 0x7fff, 0x800, 0xfff, 0x1, 0x15a, 0x7, 0x7}}) semget$private(0x0, 0x2, 0x200) bind$packet(r3, &(0x7f0000000640)={0x11, 0x18, r4, 0x1, 0x1f, 0x6, @random="63757b84e060"}, 0x14) r6 = openat$cgroup_devices(r3, &(0x7f0000000680)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f00000006c0)={{0x8, 0x20}, 0x100, './file0\x00'}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000800), &(0x7f0000000840)=0x6) [ 62.306704] audit: type=1400 audit(1751370734.905:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:52:14 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x7) r0 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x9a) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) faccessat2(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="21b8149eec5e987c848a28910f58051e9b96e86ab5f2f7f9c594c03b2841659ee4ce215f3a682d4089c1662ac447f63f59801ee6aecca7800b60bdc04f9085", 0x3f, 0x1) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000300)={0x20002011}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x401}}, './file0\x00'}) bind(r5, &(0x7f0000000400)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000480)={{0x2, 0x4e22, @broadcast}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_to_bridge\x00'}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000500)={0x6, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x9, [{{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e24, @rand_addr=0x64010101}}, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}, {{0x2, 0x4e20, @private=0xa010100}}, {{0x2, 0x4e22, @rand_addr=0x64010100}}]}, 0x510) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000a40)={'wg1\x00'}) r8 = accept$packet(r6, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000ac0)=0x14) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r8, {0x10000}}, './file1\x00'}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000b40)='./file1\x00', &(0x7f0000000b80), &(0x7f0000000bc0), 0x2, 0x1) pselect6(0x40, &(0x7f0000000c00)={0x3, 0x3, 0xdc8e, 0x3f, 0x9, 0x4d20, 0x6, 0x7}, &(0x7f0000000c40)={0x2, 0xfffffffffffffffa, 0x101, 0x9552, 0x2, 0x2, 0x20, 0x5}, &(0x7f0000000c80)={0x4, 0x7, 0x583, 0x1ff, 0x8, 0x101, 0x92d, 0x80000000}, &(0x7f0000000cc0)={0x77359400}, &(0x7f0000000d40)={&(0x7f0000000d00)={[0x1]}, 0x8}) 11:52:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x101003, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @multicast1}, {0x306, @broadcast}, 0x2, {0x2, 0x4e21, @broadcast}, 'team_slave_0\x00'}) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@report={0x1bc, 0x20, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, {@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x4e22, 0x6, 0x4e24, 0x2, 0xa, 0x0, 0x20, 0x67, 0x0, 0xffffffffffffffff}}, [@user_kmaddress={0x2c, 0x13, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@local, 0x0, 0x2}}, @algo_crypt={0x141, 0x2, {{'chacha20\x00'}, 0x7c8, "b1e6adebc0bb63042463b0d6adecc237721e39d822a53abc74f74fb61ee3a7c05b17c23424b6d0b73f66a15de81a8d6b67557aa2bfcebd1ba004a13ae52456f03688a4e2622112b29d674b452def010cf204bbe71ae7bd0be16ec95c63cf103e42376b4ded8eb3bf53bc8d04c0394fe0ce5a1a6510d81a402b13ac349383bdb7b627f7c89da700a853f1e4e0271da2478be5f2c27c31c061a61ce1321776d0273a681900f0f74c4482eae2120d144643fa268e131e7efdc7a9d3401dd4d18d57cdb4b7013a4aa251164d81074c774df7a83fbedbcbdad2807f249663fee259a094a52ee6dfa18110e9b0489864dfabec6f556706adfab48a89"}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20004011}, 0x4008485) r2 = epoll_create(0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) bind(r3, &(0x7f0000000380)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1}}, 0x80) syz_io_uring_setup(0x15a5, &(0x7f0000000400)={0x0, 0xe1c6, 0x1, 0x0, 0x5, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x10, r1, 0x10000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r6, 0x2, {0x0, r2}, 0x6, 0x8, 0x1, {0x0, 0x0, r7}}, 0x7) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f00000005c0)=""/208, &(0x7f00000006c0)=0xd0) r8 = accept4$bt_l2cap(r7, &(0x7f0000000700)={0x1f, 0x0, @none}, &(0x7f0000000740)=0xe, 0x80800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, &(0x7f0000000780)={0x9, "480e1a"}, 0x6) inotify_init() setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000007c0)=0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000800)={0x2}) 11:52:14 executing program 6: r0 = getgid() getgroups(0x5, &(0x7f00000000c0)=[0xee01, 0xee01, 0x0, 0xffffffffffffffff, 0xee00]) getgroups(0x3, &(0x7f0000000100)=[0xee00, 0x0, 0x0]) getgroups(0x8, &(0x7f0000000140)=[0xee00, 0x0, 0xffffffffffffffff, r0, 0xee00, r2, r3, 0xee00]) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000810) r4 = getgid() r5 = getgid() getgroups(0x3, &(0x7f0000000340)=[r4, r5, r3]) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)='./file0\x00', 0x800, 0x400}, 0x400) getgroups(0x2, &(0x7f0000000500)=[r8, r7]) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) getgid() ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r9, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9c14}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408c0}, 0x0) r10 = fsmount(r9, 0x0, 0x6) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r9) sendmsg$BATADV_CMD_GET_GATEWAYS(r10, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r11, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x480d0) r12 = getgid() getgroups(0x6, &(0x7f0000000880)=[r6, 0xffffffffffffffff, r1, r12, 0xee01, 0xee00]) fchownat(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x1000) 11:52:14 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000), 0xe72e, 0x101000) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000040)) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000001c0)) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000200)=""/169, 0xa9, 0x0, &(0x7f00000002c0)={0x11, 0x1, 0x0, 0x1, 0x8}, 0x14) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f00000003c0)) r3 = fsmount(r2, 0x0, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000400)) r4 = fsmount(0xffffffffffffffff, 0x0, 0x7d) epoll_pwait2(r4, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000640)={0x77359400}, &(0x7f0000000680)={[0x5]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0/file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000700)=0x41, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fsmount(r6, 0x1, 0x74) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000780)) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000007c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000940)={0x8}) [ 63.604812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.607316] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.611560] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.616363] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.619156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.623711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.626438] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.628223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.632658] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.636711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.638666] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.641912] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.644321] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.646626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.649764] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.654407] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.655357] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.655483] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.659972] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.661220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.684436] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.696981] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.700577] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.704807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.706629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 63.712238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 63.715702] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 63.717270] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 63.730279] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 63.733288] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 63.734621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 63.738405] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.739994] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 63.745011] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.747678] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 63.756452] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 63.766266] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 63.778287] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 63.780629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 63.794138] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.047088] [ 64.047658] ============================= [ 64.048405] WARNING: suspicious RCU usage [ 64.048999] 6.16.0-rc4-next-20250701 #1 Not tainted [ 64.049771] ----------------------------- [ 64.051828] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 64.057154] [ 64.057154] other info that might help us debug this: [ 64.057154] [ 64.058545] [ 64.058545] rcu_scheduler_active = 2, debug_locks = 1 [ 64.059688] 3 locks held by syz-executor.6/286: [ 64.060510] #0: ffff88800fd7a400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 64.062094] #1: ffff88800c1ba618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 64.063800] #2: ffff888013f83b40 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 64.065402] [ 64.065402] stack backtrace: [ 64.066218] CPU: 0 UID: 0 PID: 286 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 64.066250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 64.066264] Call Trace: [ 64.066272] [ 64.066283] dump_stack_lvl+0xfa/0x120 [ 64.066325] lockdep_rcu_suspicious+0x152/0x1c0 [ 64.066356] proc_sys_compare+0x28a/0x340 [ 64.066380] ? __pfx_proc_sys_compare+0x10/0x10 [ 64.066407] d_same_name+0x229/0x2e0 [ 64.066434] d_alloc_parallel+0x7c1/0x1330 [ 64.066478] ? __pfx_d_alloc_parallel+0x10/0x10 [ 64.066511] ? __pfx_default_wake_function+0x10/0x10 [ 64.066547] ? __d_lookup+0x25f/0x490 [ 64.066586] lookup_open.isra.0+0x64f/0x1530 [ 64.066625] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 64.066677] ? mnt_get_write_access+0x81/0x2d0 [ 64.066701] ? mnt_get_write_access+0x1ea/0x2d0 [ 64.066735] path_openat+0xc26/0x2880 [ 64.066782] ? __lock_acquire+0x694/0x1b70 [ 64.066807] ? __pfx_path_openat+0x10/0x10 [ 64.066854] do_filp_open+0x1e8/0x450 [ 64.066889] ? __pfx_do_filp_open+0x10/0x10 [ 64.066942] ? find_held_lock+0x2b/0x80 [ 64.066975] ? alloc_fd+0x2c1/0x560 [ 64.067008] ? lock_release+0xc8/0x290 [ 64.067046] ? alloc_fd+0x2c1/0x560 [ 64.067090] do_sys_openat2+0x104/0x1b0 [ 64.067119] ? __pfx_do_sys_openat2+0x10/0x10 [ 64.067150] ? rcu_read_unlock+0x2d/0xb0 [ 64.067176] ? lock_release+0xc8/0x290 [ 64.067209] __x64_sys_openat+0x142/0x200 [ 64.067238] ? __pfx___x64_sys_openat+0x10/0x10 [ 64.067275] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 64.067319] do_syscall_64+0xbf/0x360 [ 64.067345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.067370] RIP: 0033:0x7fddbfd58a04 [ 64.067390] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 64.067413] RSP: 002b:00007ffc93374500 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 64.067436] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007fddbfd58a04 [ 64.067452] RDX: 0000000000080001 RSI: 00007fddbfe0f264 RDI: 00000000ffffff9c [ 64.067468] RBP: 00007fddbfe0f264 R08: 0000000000000000 R09: 00007ffc933744f0 [ 64.067483] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 64.067498] R13: 00007ffc933745a0 R14: 0000000000000000 R15: 00000000000000f8 [ 64.067532] [ 65.686726] Bluetooth: hci0: command tx timeout [ 65.750295] Bluetooth: hci2: command tx timeout [ 65.750354] Bluetooth: hci3: command tx timeout [ 65.751632] Bluetooth: hci1: command tx timeout [ 65.814630] Bluetooth: hci4: command tx timeout [ 65.814681] Bluetooth: hci7: command tx timeout [ 65.815598] Bluetooth: hci5: command tx timeout [ 65.878220] Bluetooth: hci6: command tx timeout [ 67.737286] Bluetooth: hci0: command tx timeout [ 67.798367] Bluetooth: hci3: command tx timeout [ 67.798420] Bluetooth: hci2: command tx timeout [ 67.799693] Bluetooth: hci1: command tx timeout [ 67.863182] Bluetooth: hci4: command tx timeout [ 67.863613] Bluetooth: hci5: command tx timeout [ 67.863989] Bluetooth: hci7: command tx timeout [ 67.926142] Bluetooth: hci6: command tx timeout [ 69.782399] Bluetooth: hci0: command tx timeout [ 69.846356] Bluetooth: hci2: command tx timeout [ 69.846529] Bluetooth: hci1: command tx timeout [ 69.846978] Bluetooth: hci3: command tx timeout [ 69.910702] Bluetooth: hci7: command tx timeout [ 69.911441] Bluetooth: hci5: command tx timeout [ 69.911818] Bluetooth: hci4: command tx timeout [ 69.974260] Bluetooth: hci6: command tx timeout [ 71.830883] Bluetooth: hci0: command tx timeout [ 71.894140] Bluetooth: hci1: command tx timeout [ 71.894579] Bluetooth: hci3: command tx timeout [ 71.894624] Bluetooth: hci2: command tx timeout [ 71.958176] Bluetooth: hci4: command tx timeout [ 71.958200] Bluetooth: hci5: command tx timeout [ 71.958911] Bluetooth: hci7: command tx timeout [ 72.022091] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 11:52:16 Registers: info registers vcpu 0 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b9285 RDI=ffffffff8871efa0 RBP=ffffffff8871ef60 RSP=ffff88803257f2b8 R8 =0000000000000000 R9 =ffffed100148f046 R10=0000000000000063 R11=0000000000000001 R12=0000000000000063 R13=0000000000000010 R14=ffffffff8871ef60 R15=ffffffff828b9270 RIP=ffffffff828b92dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555559abc400 00000000 00000000 GS =0000 ffff8880e55f2000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f75f20bf620 CR3=000000003382b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3dda0 RCX=ffffffff81682b7e RDX=ffff88802e043700 RSI=ffffffff81682b58 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff8880319978c8 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=1ffff1100d9e6bb9 R12=ffffed100d9c7bb5 R13=ffff88806ce3dda8 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81739688 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555581201400 00000000 00000000 GS =0000 ffff8880e56f2000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fefedf9d0d8 CR3=0000000032ec0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff000000000000ffff000000000000 XMM02=ffffff0000ff00000000000000000000 XMM03=ffff0000ffffffff0000000000000000 XMM04=ffffffffffffff00ffffffffff000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000