Warning: Permanently added '[localhost]:60209' (ECDSA) to the list of known hosts. 2025/07/02 07:39:37 fuzzer started 2025/07/02 07:39:37 dialing manager at localhost:37637 syzkaller login: [ 50.932358] cgroup: Unknown subsys name 'net' [ 50.990557] cgroup: Unknown subsys name 'cpuset' [ 51.003346] cgroup: Unknown subsys name 'rlimit' 2025/07/02 07:39:47 syscalls: 2214 2025/07/02 07:39:47 code coverage: enabled 2025/07/02 07:39:47 comparison tracing: enabled 2025/07/02 07:39:47 extra coverage: enabled 2025/07/02 07:39:47 setuid sandbox: enabled 2025/07/02 07:39:47 namespace sandbox: enabled 2025/07/02 07:39:47 Android sandbox: enabled 2025/07/02 07:39:47 fault injection: enabled 2025/07/02 07:39:47 leak checking: enabled 2025/07/02 07:39:47 net packet injection: enabled 2025/07/02 07:39:47 net device setup: enabled 2025/07/02 07:39:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/02 07:39:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/02 07:39:47 USB emulation: enabled 2025/07/02 07:39:47 hci packet injection: enabled 2025/07/02 07:39:47 wifi device emulation: enabled 2025/07/02 07:39:47 802.15.4 emulation: enabled 2025/07/02 07:39:47 fetching corpus: 50, signal 16853/18670 (executing program) 2025/07/02 07:39:48 fetching corpus: 100, signal 26880/30285 (executing program) 2025/07/02 07:39:48 fetching corpus: 150, signal 31954/36951 (executing program) 2025/07/02 07:39:48 fetching corpus: 200, signal 42090/48289 (executing program) 2025/07/02 07:39:48 fetching corpus: 250, signal 45343/52918 (executing program) 2025/07/02 07:39:48 fetching corpus: 300, signal 49638/58471 (executing program) 2025/07/02 07:39:48 fetching corpus: 350, signal 52884/62973 (executing program) 2025/07/02 07:39:48 fetching corpus: 400, signal 55777/67033 (executing program) 2025/07/02 07:39:48 fetching corpus: 450, signal 58206/70659 (executing program) 2025/07/02 07:39:48 fetching corpus: 500, signal 60908/74448 (executing program) 2025/07/02 07:39:48 fetching corpus: 550, signal 62287/77040 (executing program) 2025/07/02 07:39:48 fetching corpus: 600, signal 64374/80194 (executing program) 2025/07/02 07:39:48 fetching corpus: 650, signal 68127/84757 (executing program) 2025/07/02 07:39:48 fetching corpus: 700, signal 69781/87468 (executing program) 2025/07/02 07:39:49 fetching corpus: 750, signal 71585/90249 (executing program) 2025/07/02 07:39:49 fetching corpus: 800, signal 74519/93954 (executing program) 2025/07/02 07:39:49 fetching corpus: 850, signal 76101/96488 (executing program) 2025/07/02 07:39:49 fetching corpus: 900, signal 78062/99272 (executing program) 2025/07/02 07:39:49 fetching corpus: 950, signal 79483/101567 (executing program) 2025/07/02 07:39:49 fetching corpus: 1000, signal 80487/103506 (executing program) 2025/07/02 07:39:49 fetching corpus: 1050, signal 81714/105633 (executing program) 2025/07/02 07:39:49 fetching corpus: 1100, signal 83582/108187 (executing program) 2025/07/02 07:39:49 fetching corpus: 1150, signal 85138/110477 (executing program) 2025/07/02 07:39:49 fetching corpus: 1200, signal 86269/112434 (executing program) 2025/07/02 07:39:49 fetching corpus: 1250, signal 87282/114285 (executing program) 2025/07/02 07:39:49 fetching corpus: 1300, signal 89151/116775 (executing program) 2025/07/02 07:39:50 fetching corpus: 1350, signal 90606/118882 (executing program) 2025/07/02 07:39:50 fetching corpus: 1400, signal 91880/120823 (executing program) 2025/07/02 07:39:50 fetching corpus: 1450, signal 92770/122451 (executing program) 2025/07/02 07:39:50 fetching corpus: 1500, signal 94935/124962 (executing program) 2025/07/02 07:39:50 fetching corpus: 1550, signal 95630/126411 (executing program) 2025/07/02 07:39:50 fetching corpus: 1600, signal 96409/127903 (executing program) 2025/07/02 07:39:50 fetching corpus: 1650, signal 97664/129728 (executing program) 2025/07/02 07:39:50 fetching corpus: 1700, signal 98314/131192 (executing program) 2025/07/02 07:39:50 fetching corpus: 1750, signal 99176/132699 (executing program) 2025/07/02 07:39:50 fetching corpus: 1800, signal 100139/134283 (executing program) 2025/07/02 07:39:50 fetching corpus: 1850, signal 101127/135827 (executing program) 2025/07/02 07:39:50 fetching corpus: 1900, signal 101893/137237 (executing program) 2025/07/02 07:39:50 fetching corpus: 1950, signal 102527/138537 (executing program) 2025/07/02 07:39:50 fetching corpus: 2000, signal 103801/140237 (executing program) 2025/07/02 07:39:51 fetching corpus: 2050, signal 104761/141699 (executing program) 2025/07/02 07:39:51 fetching corpus: 2100, signal 105462/142984 (executing program) 2025/07/02 07:39:51 fetching corpus: 2150, signal 106412/144402 (executing program) 2025/07/02 07:39:51 fetching corpus: 2200, signal 107276/145782 (executing program) 2025/07/02 07:39:51 fetching corpus: 2250, signal 109131/147692 (executing program) 2025/07/02 07:39:51 fetching corpus: 2300, signal 110281/149144 (executing program) 2025/07/02 07:39:51 fetching corpus: 2350, signal 110781/150202 (executing program) 2025/07/02 07:39:51 fetching corpus: 2400, signal 111567/151451 (executing program) 2025/07/02 07:39:51 fetching corpus: 2450, signal 112301/152646 (executing program) 2025/07/02 07:39:51 fetching corpus: 2500, signal 112988/153766 (executing program) 2025/07/02 07:39:51 fetching corpus: 2550, signal 113553/154854 (executing program) 2025/07/02 07:39:51 fetching corpus: 2600, signal 114072/155897 (executing program) 2025/07/02 07:39:52 fetching corpus: 2650, signal 114518/156915 (executing program) 2025/07/02 07:39:52 fetching corpus: 2700, signal 116582/158613 (executing program) 2025/07/02 07:39:52 fetching corpus: 2750, signal 117155/159606 (executing program) 2025/07/02 07:39:52 fetching corpus: 2800, signal 117709/160625 (executing program) 2025/07/02 07:39:52 fetching corpus: 2850, signal 118132/161558 (executing program) 2025/07/02 07:39:52 fetching corpus: 2900, signal 118451/162467 (executing program) 2025/07/02 07:39:52 fetching corpus: 2950, signal 119088/163480 (executing program) 2025/07/02 07:39:52 fetching corpus: 3000, signal 119469/164363 (executing program) 2025/07/02 07:39:52 fetching corpus: 3050, signal 119830/165272 (executing program) 2025/07/02 07:39:52 fetching corpus: 3100, signal 120400/166207 (executing program) 2025/07/02 07:39:52 fetching corpus: 3150, signal 120919/167098 (executing program) 2025/07/02 07:39:52 fetching corpus: 3200, signal 121335/167947 (executing program) 2025/07/02 07:39:52 fetching corpus: 3250, signal 122454/169073 (executing program) 2025/07/02 07:39:52 fetching corpus: 3300, signal 123490/170081 (executing program) 2025/07/02 07:39:52 fetching corpus: 3350, signal 124033/170966 (executing program) 2025/07/02 07:39:52 fetching corpus: 3400, signal 124389/171804 (executing program) 2025/07/02 07:39:53 fetching corpus: 3450, signal 124816/172645 (executing program) 2025/07/02 07:39:53 fetching corpus: 3500, signal 125160/173420 (executing program) 2025/07/02 07:39:53 fetching corpus: 3550, signal 125642/174243 (executing program) 2025/07/02 07:39:53 fetching corpus: 3600, signal 126343/175130 (executing program) 2025/07/02 07:39:53 fetching corpus: 3650, signal 126733/175889 (executing program) 2025/07/02 07:39:53 fetching corpus: 3700, signal 127134/176655 (executing program) 2025/07/02 07:39:53 fetching corpus: 3750, signal 127484/177374 (executing program) 2025/07/02 07:39:53 fetching corpus: 3800, signal 128075/178177 (executing program) 2025/07/02 07:39:53 fetching corpus: 3850, signal 128441/178924 (executing program) 2025/07/02 07:39:53 fetching corpus: 3900, signal 128843/179661 (executing program) 2025/07/02 07:39:53 fetching corpus: 3950, signal 129302/180366 (executing program) 2025/07/02 07:39:54 fetching corpus: 4000, signal 129788/181082 (executing program) 2025/07/02 07:39:54 fetching corpus: 4050, signal 130117/181779 (executing program) 2025/07/02 07:39:54 fetching corpus: 4100, signal 130803/182503 (executing program) 2025/07/02 07:39:54 fetching corpus: 4150, signal 131064/183188 (executing program) 2025/07/02 07:39:54 fetching corpus: 4200, signal 131519/183898 (executing program) 2025/07/02 07:39:54 fetching corpus: 4250, signal 132048/184535 (executing program) 2025/07/02 07:39:54 fetching corpus: 4300, signal 132384/185211 (executing program) 2025/07/02 07:39:54 fetching corpus: 4350, signal 132767/185878 (executing program) 2025/07/02 07:39:54 fetching corpus: 4400, signal 133339/186549 (executing program) 2025/07/02 07:39:54 fetching corpus: 4450, signal 133791/187190 (executing program) 2025/07/02 07:39:54 fetching corpus: 4500, signal 134145/187797 (executing program) 2025/07/02 07:39:54 fetching corpus: 4550, signal 134473/188413 (executing program) 2025/07/02 07:39:55 fetching corpus: 4600, signal 134958/189040 (executing program) 2025/07/02 07:39:55 fetching corpus: 4650, signal 135482/189618 (executing program) 2025/07/02 07:39:55 fetching corpus: 4700, signal 135742/190199 (executing program) 2025/07/02 07:39:55 fetching corpus: 4750, signal 136121/190823 (executing program) 2025/07/02 07:39:55 fetching corpus: 4800, signal 136471/191155 (executing program) 2025/07/02 07:39:55 fetching corpus: 4850, signal 137259/191155 (executing program) 2025/07/02 07:39:55 fetching corpus: 4900, signal 137547/191155 (executing program) 2025/07/02 07:39:55 fetching corpus: 4950, signal 137877/191155 (executing program) 2025/07/02 07:39:55 fetching corpus: 5000, signal 138345/191155 (executing program) 2025/07/02 07:39:55 fetching corpus: 5050, signal 138713/191155 (executing program) 2025/07/02 07:39:55 fetching corpus: 5100, signal 139043/191155 (executing program) 2025/07/02 07:39:55 fetching corpus: 5150, signal 139422/191155 (executing program) 2025/07/02 07:39:55 fetching corpus: 5200, signal 139807/191155 (executing program) 2025/07/02 07:39:56 fetching corpus: 5250, signal 140180/191155 (executing program) 2025/07/02 07:39:56 fetching corpus: 5300, signal 140798/191155 (executing program) 2025/07/02 07:39:56 fetching corpus: 5350, signal 141198/191155 (executing program) 2025/07/02 07:39:56 fetching corpus: 5400, signal 141599/191155 (executing program) 2025/07/02 07:39:56 fetching corpus: 5450, signal 141892/191155 (executing program) 2025/07/02 07:39:56 fetching corpus: 5500, signal 142176/191155 (executing program) 2025/07/02 07:39:56 fetching corpus: 5550, signal 142464/191155 (executing program) 2025/07/02 07:39:56 fetching corpus: 5600, signal 142956/191155 (executing program) 2025/07/02 07:39:56 fetching corpus: 5650, signal 143209/191155 (executing program) 2025/07/02 07:39:56 fetching corpus: 5700, signal 143592/191155 (executing program) 2025/07/02 07:39:56 fetching corpus: 5750, signal 143990/191155 (executing program) 2025/07/02 07:39:56 fetching corpus: 5800, signal 144309/191155 (executing program) 2025/07/02 07:39:57 fetching corpus: 5850, signal 144669/191155 (executing program) 2025/07/02 07:39:57 fetching corpus: 5900, signal 145044/191155 (executing program) 2025/07/02 07:39:57 fetching corpus: 5950, signal 145351/191155 (executing program) 2025/07/02 07:39:57 fetching corpus: 6000, signal 145724/191155 (executing program) 2025/07/02 07:39:57 fetching corpus: 6050, signal 145944/191155 (executing program) 2025/07/02 07:39:57 fetching corpus: 6100, signal 146299/191155 (executing program) 2025/07/02 07:39:57 fetching corpus: 6150, signal 146476/191155 (executing program) 2025/07/02 07:39:57 fetching corpus: 6200, signal 146898/191155 (executing program) 2025/07/02 07:39:57 fetching corpus: 6250, signal 147075/191155 (executing program) 2025/07/02 07:39:57 fetching corpus: 6300, signal 147450/191155 (executing program) 2025/07/02 07:39:57 fetching corpus: 6350, signal 147717/191155 (executing program) 2025/07/02 07:39:57 fetching corpus: 6400, signal 148051/191155 (executing program) 2025/07/02 07:39:58 fetching corpus: 6450, signal 148303/191155 (executing program) 2025/07/02 07:39:58 fetching corpus: 6500, signal 148593/191155 (executing program) 2025/07/02 07:39:58 fetching corpus: 6550, signal 148853/191155 (executing program) 2025/07/02 07:39:58 fetching corpus: 6600, signal 149027/191155 (executing program) 2025/07/02 07:39:58 fetching corpus: 6650, signal 149205/191155 (executing program) 2025/07/02 07:39:58 fetching corpus: 6700, signal 149542/191155 (executing program) 2025/07/02 07:39:58 fetching corpus: 6750, signal 149784/191155 (executing program) 2025/07/02 07:39:58 fetching corpus: 6800, signal 150072/191155 (executing program) 2025/07/02 07:39:58 fetching corpus: 6850, signal 150369/191155 (executing program) 2025/07/02 07:39:58 fetching corpus: 6900, signal 150771/191155 (executing program) 2025/07/02 07:39:58 fetching corpus: 6950, signal 150913/191155 (executing program) 2025/07/02 07:39:58 fetching corpus: 7000, signal 151316/191155 (executing program) 2025/07/02 07:39:59 fetching corpus: 7050, signal 151546/191155 (executing program) 2025/07/02 07:39:59 fetching corpus: 7100, signal 151920/191155 (executing program) 2025/07/02 07:39:59 fetching corpus: 7150, signal 152227/191155 (executing program) 2025/07/02 07:39:59 fetching corpus: 7200, signal 152577/191155 (executing program) 2025/07/02 07:39:59 fetching corpus: 7250, signal 152798/191155 (executing program) 2025/07/02 07:39:59 fetching corpus: 7300, signal 153029/191155 (executing program) 2025/07/02 07:39:59 fetching corpus: 7350, signal 153288/191155 (executing program) 2025/07/02 07:39:59 fetching corpus: 7400, signal 153679/191155 (executing program) 2025/07/02 07:39:59 fetching corpus: 7450, signal 153900/191155 (executing program) 2025/07/02 07:39:59 fetching corpus: 7500, signal 154056/191155 (executing program) 2025/07/02 07:39:59 fetching corpus: 7550, signal 154336/191155 (executing program) 2025/07/02 07:39:59 fetching corpus: 7600, signal 154737/191155 (executing program) 2025/07/02 07:39:59 fetching corpus: 7650, signal 155216/191155 (executing program) 2025/07/02 07:40:00 fetching corpus: 7700, signal 155503/191155 (executing program) 2025/07/02 07:40:00 fetching corpus: 7750, signal 155736/191155 (executing program) 2025/07/02 07:40:00 fetching corpus: 7800, signal 155939/191155 (executing program) 2025/07/02 07:40:00 fetching corpus: 7850, signal 156212/191156 (executing program) 2025/07/02 07:40:00 fetching corpus: 7900, signal 156499/191156 (executing program) 2025/07/02 07:40:00 fetching corpus: 7950, signal 156675/191156 (executing program) 2025/07/02 07:40:00 fetching corpus: 8000, signal 157287/191156 (executing program) 2025/07/02 07:40:00 fetching corpus: 8050, signal 157544/191156 (executing program) 2025/07/02 07:40:00 fetching corpus: 8100, signal 157747/191156 (executing program) 2025/07/02 07:40:00 fetching corpus: 8150, signal 157897/191156 (executing program) 2025/07/02 07:40:00 fetching corpus: 8200, signal 158159/191156 (executing program) 2025/07/02 07:40:00 fetching corpus: 8250, signal 158349/191156 (executing program) 2025/07/02 07:40:00 fetching corpus: 8300, signal 158522/191156 (executing program) 2025/07/02 07:40:00 fetching corpus: 8350, signal 158697/191156 (executing program) 2025/07/02 07:40:01 fetching corpus: 8400, signal 158917/191156 (executing program) 2025/07/02 07:40:01 fetching corpus: 8450, signal 159153/191156 (executing program) 2025/07/02 07:40:01 fetching corpus: 8500, signal 159313/191156 (executing program) 2025/07/02 07:40:01 fetching corpus: 8550, signal 159486/191156 (executing program) 2025/07/02 07:40:01 fetching corpus: 8600, signal 159900/191156 (executing program) 2025/07/02 07:40:01 fetching corpus: 8650, signal 160098/191156 (executing program) 2025/07/02 07:40:01 fetching corpus: 8700, signal 160289/191156 (executing program) 2025/07/02 07:40:01 fetching corpus: 8750, signal 160602/191156 (executing program) 2025/07/02 07:40:01 fetching corpus: 8800, signal 160793/191156 (executing program) 2025/07/02 07:40:01 fetching corpus: 8850, signal 161043/191156 (executing program) 2025/07/02 07:40:01 fetching corpus: 8900, signal 161245/191156 (executing program) 2025/07/02 07:40:01 fetching corpus: 8950, signal 161450/191156 (executing program) 2025/07/02 07:40:01 fetching corpus: 9000, signal 161652/191156 (executing program) 2025/07/02 07:40:01 fetching corpus: 9050, signal 161877/191156 (executing program) 2025/07/02 07:40:02 fetching corpus: 9100, signal 162043/191156 (executing program) 2025/07/02 07:40:02 fetching corpus: 9150, signal 162212/191156 (executing program) 2025/07/02 07:40:02 fetching corpus: 9200, signal 162390/191156 (executing program) 2025/07/02 07:40:02 fetching corpus: 9250, signal 162560/191156 (executing program) 2025/07/02 07:40:02 fetching corpus: 9300, signal 162923/191156 (executing program) 2025/07/02 07:40:02 fetching corpus: 9350, signal 163065/191156 (executing program) 2025/07/02 07:40:02 fetching corpus: 9400, signal 163170/191156 (executing program) 2025/07/02 07:40:02 fetching corpus: 9450, signal 163338/191156 (executing program) 2025/07/02 07:40:02 fetching corpus: 9500, signal 163484/191156 (executing program) 2025/07/02 07:40:02 fetching corpus: 9550, signal 163655/191156 (executing program) 2025/07/02 07:40:02 fetching corpus: 9600, signal 163806/191156 (executing program) 2025/07/02 07:40:02 fetching corpus: 9650, signal 163945/191156 (executing program) 2025/07/02 07:40:02 fetching corpus: 9700, signal 164128/191156 (executing program) 2025/07/02 07:40:02 fetching corpus: 9750, signal 164370/191156 (executing program) 2025/07/02 07:40:02 fetching corpus: 9800, signal 164518/191156 (executing program) 2025/07/02 07:40:03 fetching corpus: 9850, signal 164677/191156 (executing program) 2025/07/02 07:40:03 fetching corpus: 9900, signal 165047/191156 (executing program) 2025/07/02 07:40:03 fetching corpus: 9950, signal 165273/191156 (executing program) 2025/07/02 07:40:03 fetching corpus: 10000, signal 165549/191156 (executing program) 2025/07/02 07:40:03 fetching corpus: 10050, signal 165706/191156 (executing program) 2025/07/02 07:40:03 fetching corpus: 10100, signal 165838/191156 (executing program) 2025/07/02 07:40:03 fetching corpus: 10150, signal 166013/191156 (executing program) 2025/07/02 07:40:03 fetching corpus: 10200, signal 166159/191156 (executing program) 2025/07/02 07:40:03 fetching corpus: 10250, signal 166297/191156 (executing program) 2025/07/02 07:40:03 fetching corpus: 10300, signal 166395/191156 (executing program) 2025/07/02 07:40:03 fetching corpus: 10350, signal 166576/191156 (executing program) 2025/07/02 07:40:03 fetching corpus: 10400, signal 166782/191156 (executing program) 2025/07/02 07:40:04 fetching corpus: 10450, signal 167016/191156 (executing program) 2025/07/02 07:40:04 fetching corpus: 10500, signal 167220/191156 (executing program) 2025/07/02 07:40:04 fetching corpus: 10550, signal 167406/191156 (executing program) 2025/07/02 07:40:04 fetching corpus: 10600, signal 167595/191156 (executing program) 2025/07/02 07:40:04 fetching corpus: 10650, signal 167796/191156 (executing program) 2025/07/02 07:40:04 fetching corpus: 10700, signal 167992/191156 (executing program) 2025/07/02 07:40:04 fetching corpus: 10750, signal 168358/191156 (executing program) 2025/07/02 07:40:04 fetching corpus: 10800, signal 168571/191156 (executing program) 2025/07/02 07:40:04 fetching corpus: 10850, signal 168738/191156 (executing program) 2025/07/02 07:40:04 fetching corpus: 10868, signal 168787/191156 (executing program) 2025/07/02 07:40:04 fetching corpus: 10868, signal 168787/191156 (executing program) 2025/07/02 07:40:07 starting 8 fuzzer processes 07:40:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x26) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x113000, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfe, 0x69}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r4, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x11}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc000801}, 0x8000) r5 = accept(r1, &(0x7f00000004c0)=@ethernet={0x0, @local}, &(0x7f0000000540)=0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xc8, r6, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x81, 0x5}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "88d50d2ee6de417e0837b83458d2e8ca8c5401659d29c1d5"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b523b73076d24d976709315f635530c2164fd7dfe35d1b81"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) mount$bind(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x40, 0x0) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000880), 0x521400, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r4, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffff5b, 0x46}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_IE={0x3f, 0x2a, [@mesh_chsw={0x76, 0x6, {0x2, 0x0, 0x1, 0xbb}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @tim={0x5, 0x7, {0x7f, 0x15, 0xff, "cbd42bb3"}}, @mesh_id={0x72, 0x6}, @supported_rates={0x1, 0x2, [{0x6c}, {0x5, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x0, 0x5c, 0x1c, 0x40}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x40804) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r1, {0x800, 0x585}}, './file0\x00'}) fsetxattr$trusted_overlay_upper(r9, &(0x7f0000000a40), &(0x7f0000000a80)={0x0, 0xfb, 0xdc, 0x3, 0x9, "aa0e72e1a231c629ea37837acc91d36d", "cb7bf2e5c32ed379f1d6f1b7f6b375ed849bf40970580c19a600cb459b004dd31be5e6d8850373cb1ff34e44ca632263f849f5c2f2175c3eba38abd038fde1db52001b0e313dfabadb6b7b2f75012242ec7193a2de9209acf3654913fcc209d37752be6f2beaf6a8b6e09d78e2153fa0ce945727635df5dfa9e11fa3cdb02a135a441f60af1a4bcc4f5082b1ee5c87b00bab1b2d79f64b998e60b74d3281d5ab789a39790daea108e511cc3d4e46d6d55dd3b05bb1bbe20a25151c685616abb8a81ea0e67bfb71"}, 0xdc, 0x2) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b80), 0x80, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r9) getsockname$packet(r3, &(0x7f0000000c40)={0x11, 0x0, 0x0}, &(0x7f0000000c80)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r10, &(0x7f0000001b80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b40)={&(0x7f0000001980)={0x194, r11, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 07:40:07 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe0}}, './file0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0xa00, 0x0, 0x0, {0xc, 0x0, 0xa}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELSET={0x5c, 0xb, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfffff7f5}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x30}]}, @NFT_MSG_NEWCHAIN={0x98, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x711c3244}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x164, 0x18, 0xa, 0x401, 0x0, 0x0, {0xb, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x3c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2f0, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x2d0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELCHAIN={0x198, 0x5, 0xa, 0x100, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x81}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x68242da8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x51981c71}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x47b928e1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xbe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000}]}, @NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5efc3ca1}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}], {0x14}}, 0x7b8}, 0x1, 0x0, 0x0, 0xc001}, 0x2404a040) r1 = creat(&(0x7f00000008c0)='./file0\x00', 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'sit0\x00', 0x0, 0x2f, 0xb9, 0x0, 0x80, 0x0, @private2, @local, 0x7, 0x7, 0x564}}) getsockname$packet(r0, &(0x7f0000000a40)={0x11, 0x0, 0x0}, &(0x7f0000000a80)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xe4, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2004c000}, 0x50000) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, 0x1, 0xa, 0x503, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4000) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000001}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x200040d4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001000)={'sit0\x00', &(0x7f0000000f80)={'sit0\x00', r3, 0x29, 0xf5, 0x81, 0x1, 0x70, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, 0x10, 0x7, 0xac, 0x3f}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001100)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x68, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008814}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x84, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ec}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x81, 0x2, 0x6]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7f}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4a5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x101}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2a7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x586}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8000) recvmsg(r0, &(0x7f0000001540)={&(0x7f00000012c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/147, 0x93}], 0x1, &(0x7f0000001440)=""/253, 0xfd}, 0x40) r6 = signalfd(r1, &(0x7f0000001580)={[0x9]}, 0x8) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000016c0), 0x800, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000001780)={'ip6tnl0\x00', &(0x7f0000001700)={'ip6tnl0\x00', r4, 0x4, 0x5, 0x0, 0x80000000, 0x20, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x10, 0x800, 0x8}}) recvmsg$unix(r1, &(0x7f0000001a40)={&(0x7f00000017c0)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001840)=""/237, 0xed}], 0x1, &(0x7f0000001980)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}, 0x1) ioctl$FIBMAP(r7, 0x1, &(0x7f0000001a80)=0xc0) ioctl$EVIOCSABS0(r8, 0x401845c0, &(0x7f0000001ac0)={0x8, 0x3d80d0be, 0x97c, 0x0, 0x13, 0x81}) [ 80.172799] audit: type=1400 audit(1751442007.167:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:40:07 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd2a4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000050) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x205, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x6, 0x9, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x2000844}, 0x40040) r0 = accept(0xffffffffffffffff, &(0x7f0000000240)=@l2tp={0x2, 0x0, @local}, &(0x7f00000002c0)=0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x24}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048800) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x40, 0x0, 0xffffff67, 0x20, {{0x25, 0x4, 0x0, 0x15, 0x94, 0x65, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@timestamp_addr={0x44, 0x4c, 0xfd, 0x1, 0xe, [{@local}, {@local, 0x6}, {@empty, 0x3}, {@local, 0x7}, {@empty, 0x3}, {@broadcast, 0x2d04c}, {@broadcast, 0x623}, {@remote, 0xb97c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @timestamp={0x44, 0xc, 0xf6, 0x0, 0x4, [0x6, 0x10000]}, @ssrr={0x89, 0x13, 0x83, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3e}, @rand_addr=0x64010101, @broadcast]}, @ssrr={0x89, 0xb, 0x4a, [@empty, @multicast2]}, @rr={0x7, 0x7, 0x71, [@rand_addr=0x64010100]}]}}}}}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f00000006c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x228, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0x1, 0x9, 0x400}, {0xddf, 0xf0, 0xff, 0x6}, {0xffff, 0x0, 0x8, 0x4}, {0x101, 0x1, 0x4, 0x2}, {0x6, 0x1, 0xbd, 0x8}, {0x9, 0x40, 0x9e, 0xdcb}, {0x3, 0xd5, 0x0, 0xfffffff7}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}]}, 0x228}, 0x1, 0x0, 0x0, 0x7c51d38dddf2fdbe}, 0x40) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000009c0), 0x82400, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x35}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008844}, 0x80) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000b00)={@mcast1, 0x4a, r5}) r7 = syz_open_dev$vcsa(&(0x7f0000000b40), 0x81f, 0x400000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x94, r8, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3bb5, 0x47}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffffa}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_BSS_BASIC_RATES={0x14, 0x24, [{0x48}, {0x2, 0x1}, {0x18}, {0x9, 0x1}, {0x17}, {0x48, 0x1}, {0x1b}, {0x35, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x66}, {0x2}, {0xc, 0x1}, {0x6c, 0x1}, {0x6c, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x2004488c}, 0x4000014) getsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) writev(r7, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)="b73229db4d056d0d080e1cf3520f3bbece11233f953c5a44b71a3bc1cf7bd5d3d6a22312fa42624475d15f7a9f7b5a36d8f56ad15a0c71efe6ed6b985708e8f0d7077178c9b4900a4aee1ffbd6de36b515902a3b66a07ca4f058f0b62957e4c04494ecacb0d8f1009588a04cf935a0562f5c00fb39cf351a3b3efb510bd51fce06cc290b", 0x84}, {&(0x7f0000000e80)="6af52334c1b8", 0x6}], 0x2) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xbc, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3c4b561533bd3deef0de17d2e3afdb461d57a9c02a892d9f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x4004040) readv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000010c0)=""/183, 0xb7}, {&(0x7f0000001180)=""/92, 0x5c}, {&(0x7f0000001200)=""/29, 0x1d}, {&(0x7f0000001240)=""/31, 0x1f}], 0x4) 07:40:07 executing program 3: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) fchown(r0, 0xee00, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x85, "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"}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400f4}, 0x4000010) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10010000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40040) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000480)) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x101600, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x54}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c4}, 0x404c801) accept$packet(r2, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94400000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c1}, 0x20000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), r5) r6 = syz_open_dev$vcsn(&(0x7f0000000800), 0xad7c, 0x404400) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x190, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x190}, 0x1, 0x0, 0x0, 0x88c4}, 0x641bd158f721493d) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) r7 = accept4(r3, 0x0, &(0x7f0000000b00), 0x80800) sendmsg$nl_netfilter(r7, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xbc, 0x2, 0x1, 0x101, 0x70bd28, 0x25dfdbfc, {0xc, 0x0, 0x7}, [@typed={0x4, 0x3e}, @nested={0x28, 0x34, 0x0, 0x1, [@typed={0x24, 0x6a, 0x0, 0x0, @binary="ca9e4f80b2b300203254158fde9ab0e20005c3c24e36a3498a102f2551cdac32"}]}, @generic="60771eda2da82058309c2ad3f17837cd6d1b026e1b97f543840e3124a5bdeb8f1d020c6a6793f502258cd9e642c1a5ec3957cafd71bcf3c2601d0ead7127d2317499e4ffe63bcd85beaa273223c1e1b317a4168d9ec19dd09bb71e4180551017fa1734fee54c727d", @typed={0x14, 0x34, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0xc1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) 07:40:07 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) recvmsg$unix(r0, &(0x7f0000001800)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/138, 0x8a}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000280)=""/245, 0xf5}, {&(0x7f0000000380)=""/149, 0x95}, {&(0x7f0000000440)=""/158, 0x9e}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/122, 0x7a}, {&(0x7f0000001580)=""/171, 0xab}, {&(0x7f0000001640)=""/65, 0x41}], 0x9, &(0x7f0000001780)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000001840)={'ah\x00'}, &(0x7f0000001880)=0x1e) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000018c0)={{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffeffff}, {0xa, 0x4e24, 0x4, @mcast2, 0x7fff}, 0xfff7, [0x9, 0x7fff, 0x6, 0x4, 0xa27, 0x1, 0x5, 0xffffffff]}, 0x5c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001940)={{{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in6=@mcast2, 0x4e20, 0x0, 0x4e20, 0x800, 0xa, 0x0, 0x120, 0x1, 0x0, r1}, {0xfffffffffffffffc, 0x2, 0x4, 0x6, 0xffffffffffffffff, 0x3, 0x8001, 0x40}, {0x8, 0x1d35, 0xb396, 0xd7df}, 0x80, 0x0, 0x2, 0x3e22e7a2953b1cf5, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x4d3, 0x32}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3502, 0x1, 0x2, 0x0, 0x7fffffff, 0x0, 0x1}}, 0xe8) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000001a40), &(0x7f0000001a80)=0x10) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x10, 0x3f8, 0x4, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x4060) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001bc0), 0x200000, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000001c00)=@gcm_256={{0x304}, "9bac828f99e0bd58", "80a19c395600dc8b6f0dab843e3ff5df66600e798a162dce367b05f38e025210", "1e84bbe5", "55b6cd144508e3de"}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001c40)={'wlan1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bind$packet(r5, &(0x7f0000001cc0)={0x11, 0xf7, 0x0, 0x1, 0x96, 0x6, @broadcast}, 0x14) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000001dc0)={'ip6tnl0\x00', &(0x7f0000001d40)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x1, 0x9d1e, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7800, 0x6, 0x2}}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000001e00)=0xfc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001e40)={0xffffffffffffffff}) ioctl$sock_SIOCDELDLCI(r7, 0x8981, &(0x7f0000001e80)={'\x00', 0x9}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001ec0)={0x4, 0x2}, 0x4) 07:40:07 executing program 6: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x1ff, 0x2, 0x3, 0x7f215de6, 0x3}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x101500, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000100)={{r0}, 0x2, &(0x7f00000000c0)=[0x6, 0x2], 0x9, 0x2, [0xffffffffffff098e, 0xffffffffffffff2a, 0x4, 0x1fe000000000000]}) getsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000200)={0x0, 0x80000001, 0x7f}) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='memory.numa_stat\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x4f, 0x200) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x400040, 0x0) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000340)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0xff, 0x5, 0xe1, 0x8}]}, 0x10) syz_io_uring_setup(0x10cf, &(0x7f0000000400)={0x0, 0x3af3, 0x2, 0x2, 0x130}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000500)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2000, @fd=r0, 0x4, 0x5, 0xbd, 0x8, 0x0, {0x3, r7}}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000540)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) 07:40:07 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x852}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x12}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8081}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x480d0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000016c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/244, 0xf4}], 0x2, &(0x7f00000015c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}], 0x1, 0x0, &(0x7f0000001700)={r6, r7+10000000}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r12, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9a1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x900) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001840)={'wpan3\x00'}) clock_settime(0x4, &(0x7f0000001880)) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ':{\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan3\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x16}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) recvmmsg(r10, &(0x7f0000004300)=[{{&(0x7f0000001a00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a80)=""/31, 0x1f}], 0x1, &(0x7f0000001b00)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000002b00)=@ieee802154, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002b80)=""/34, 0x22}, {&(0x7f0000002bc0)=""/40, 0x28}, {&(0x7f0000002c00)=""/80, 0x50}], 0x3}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002cc0)=""/8, 0x8}, {&(0x7f0000002d00)=""/190, 0xbe}, {&(0x7f0000002dc0)=""/254, 0xfe}], 0x3, &(0x7f0000002f00)=""/201, 0xc9}}, {{&(0x7f0000003000)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004240)=[{&(0x7f0000003080)=""/74, 0x4a}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/203, 0xcb}, {&(0x7f0000004200)=""/14, 0xe}], 0x4, &(0x7f0000004280)=""/96, 0x60}}], 0x4, 0x10003, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004440), r11) sendmsg$ETHTOOL_MSG_EEE_SET(r10, &(0x7f0000004500)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000044c0)={&(0x7f0000004480)={0x24, r13, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2084}, 0x40) openat$cgroup(r9, &(0x7f0000004540)='syz0\x00', 0x200002, 0x0) 07:40:07 executing program 7: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x1, r0}) r1 = fork() wait4(r1, &(0x7f0000000080), 0x20000000, &(0x7f00000000c0)) r2 = fork() ptrace$setsig(0x4203, r1, 0x0, &(0x7f0000000180)={0x3a, 0x3, 0x5}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000200), 0x8, &(0x7f0000000280)) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e4, &(0x7f0000000340)="9c4977864bfc91632886a0368d923580d6ac981eac109267f2b7396f9bef2a435f0e9b8e220c7555896275ca7622dff1e60afad61ac27d29cce9dfe7e11a6cf564101327fedfcd784c579c8bd639ba9e3297d4bbfd9fcb4fe62ed0576cbad7fb00d1364b0500e05271da1a85ea71") getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000003c0)={'IDLETIMER\x00'}, &(0x7f0000000400)=0x1e) ioprio_set$pid(0x0, r2, 0x6004) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000440)={0x4, 0x8001}) getrusage(0x1, &(0x7f0000000480)) fork() getpid() ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000540)={0x30, 0x7a2b, 0x8001, 0x6, 0x7, 0x6}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000580)=0x0) ptrace$setsig(0x4203, r3, 0x6, &(0x7f00000005c0)={0x1b, 0x2}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) fork() [ 81.345488] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.348454] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.353852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.367936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.370800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.537955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.540581] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.542659] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.547933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.550560] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.600743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.602847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.605997] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.614852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.619609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.621801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.624263] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.628060] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.630974] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.632606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.633955] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.638301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.639913] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.641035] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.642600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.644214] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.646543] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.649591] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.651953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.655034] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.660620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.669429] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.678784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.683673] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.685361] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.687825] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.691785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.701841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.715825] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.720636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.865185] [ 81.865746] ============================= [ 81.866723] WARNING: suspicious RCU usage [ 81.867509] 6.16.0-rc4-next-20250701 #1 Not tainted [ 81.871341] ----------------------------- [ 81.874807] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 81.876054] [ 81.876054] other info that might help us debug this: [ 81.876054] [ 81.877263] [ 81.877263] rcu_scheduler_active = 2, debug_locks = 1 [ 81.878220] 3 locks held by syz-executor.5/288: [ 81.878885] #0: ffff88800a7be400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 81.880196] #1: ffff88800f4a6618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 81.881639] #2: ffff888014623b40 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 81.882985] [ 81.882985] stack backtrace: [ 81.883667] CPU: 0 UID: 0 PID: 288 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 81.883693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 81.883705] Call Trace: [ 81.883713] [ 81.883721] dump_stack_lvl+0xfa/0x120 [ 81.883758] lockdep_rcu_suspicious+0x152/0x1c0 [ 81.883785] proc_sys_compare+0x28a/0x340 [ 81.883806] ? __pfx_proc_sys_compare+0x10/0x10 [ 81.883828] d_same_name+0x229/0x2e0 [ 81.883851] d_alloc_parallel+0x7c1/0x1330 [ 81.883900] ? __pfx_d_alloc_parallel+0x10/0x10 [ 81.883927] ? __pfx_default_wake_function+0x10/0x10 [ 81.883959] ? __d_lookup+0x25f/0x490 [ 81.883991] lookup_open.isra.0+0x64f/0x1530 [ 81.884025] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 81.884073] ? mnt_get_write_access+0x81/0x2d0 [ 81.884094] ? mnt_get_write_access+0x1ea/0x2d0 [ 81.884123] path_openat+0xc26/0x2880 [ 81.884162] ? __lock_acquire+0x694/0x1b70 [ 81.884184] ? __pfx_path_openat+0x10/0x10 [ 81.884224] do_filp_open+0x1e8/0x450 [ 81.884254] ? __pfx_do_filp_open+0x10/0x10 [ 81.884295] ? find_held_lock+0x2b/0x80 [ 81.884322] ? alloc_fd+0x2c1/0x560 [ 81.884350] ? lock_release+0xc8/0x290 [ 81.884376] ? alloc_fd+0x2c1/0x560 [ 81.884413] do_sys_openat2+0x104/0x1b0 [ 81.884438] ? __pfx_do_sys_openat2+0x10/0x10 [ 81.884464] ? lock_release+0xc8/0x290 [ 81.884492] __x64_sys_openat+0x142/0x200 [ 81.884517] ? __pfx___x64_sys_openat+0x10/0x10 [ 81.884555] do_syscall_64+0xbf/0x360 [ 81.884577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.884599] RIP: 0033:0x7fdf3a416a04 [ 81.884615] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 81.884635] RSP: 002b:00007ffc5609aca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 81.884654] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fdf3a416a04 [ 81.884668] RDX: 0000000000080001 RSI: 00007fdf3a4bcf61 RDI: 00000000ffffff9c [ 81.884681] RBP: 00007fdf3a4bcf61 R08: 0000000000000000 R09: 00007ffc5609ac90 [ 81.884694] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 81.884707] R13: 00007ffc5609ad40 R14: 0000000000000000 R15: 00000000000000f8 [ 81.884735] [ 83.440657] Bluetooth: hci0: command tx timeout [ 83.568632] Bluetooth: hci1: command tx timeout [ 83.695286] Bluetooth: hci4: command tx timeout [ 83.695984] Bluetooth: hci3: command tx timeout [ 83.759198] Bluetooth: hci5: command tx timeout [ 83.759786] Bluetooth: hci2: command tx timeout [ 83.823227] Bluetooth: hci6: command tx timeout [ 83.824210] Bluetooth: hci7: command tx timeout [ 85.488265] Bluetooth: hci0: command tx timeout [ 85.616228] Bluetooth: hci1: command tx timeout [ 85.744432] Bluetooth: hci3: command tx timeout [ 85.744859] Bluetooth: hci4: command tx timeout [ 85.808236] Bluetooth: hci2: command tx timeout [ 85.808645] Bluetooth: hci5: command tx timeout [ 85.872256] Bluetooth: hci7: command tx timeout [ 85.872672] Bluetooth: hci6: command tx timeout [ 87.535122] Bluetooth: hci0: command tx timeout [ 87.663120] Bluetooth: hci1: command tx timeout [ 87.792127] Bluetooth: hci4: command tx timeout [ 87.792577] Bluetooth: hci3: command tx timeout [ 87.856155] Bluetooth: hci2: command tx timeout [ 87.856594] Bluetooth: hci5: command tx timeout [ 87.920143] Bluetooth: hci6: command tx timeout [ 87.920585] Bluetooth: hci7: command tx timeout [ 89.584155] Bluetooth: hci0: command tx timeout [ 89.712184] Bluetooth: hci1: command tx timeout [ 89.840150] Bluetooth: hci3: command tx timeout [ 89.840594] Bluetooth: hci4: command tx timeout [ 89.905171] Bluetooth: hci5: command tx timeout [ 89.905603] Bluetooth: hci2: command tx timeout [ 89.968227] Bluetooth: hci7: command tx timeout [ 89.968649] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 07:40:09 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffffffff81604e70 RCX=ffff88806ce089a4 RDX=1ffff1100d9c1155 RSI=ffffffff81b37482 RDI=ffff88806ce08b18 RBP=ffff88806ce08ae8 RSP=ffff88806ce08a40 R8 =0000000000000001 R9 =ffff88806ce08a90 R10=000000000003bae4 R11=0000000000026092 R12=ffff88806ce08b18 R13=0000000000000000 R14=ffff88801360b700 R15=0000000000000000 RIP=ffffffff81604e7f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556b2e6400 00000000 00000000 GS =0000 ffff8880e55f2000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f18e443f8e0 CR3=000000003e29a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000004143644a45644b71 XMM01=00000000000000003f847ae147ae147b XMM02=00000000000000000000000000000000 XMM03=00000000000000003f70504aec382ecb XMM04=00000000000000003fc80cf871ff01f9 XMM05=4e414c56464953434f49535f6b636f73 XMM06=00000000000000003fd3333333333333 XMM07=00000000000000003fd0485bdd8c89e5 XMM08=00000000000000003fd41d0bf0306048 XMM09=00000000000000003f8d3b179fa5a2a0 XMM10=00000000000000003fc999999999999a XMM11=30202c30722845474e41525f47415246 XMM12=0a29307830202c303134393033303478 XMM13=2030720a297d337830202c3665643531 XMM14=666678302872732474616e65706f203d XMM15=202c6339666666666666666666666666 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880134df738 RCX=0000000000000001 RDX=1ffff1100269bee8 RSI=ffff8880134df7d8 RDI=ffff8880134df740 RBP=ffff8880134df7d8 RSP=ffff8880134df640 R8 =ffffffff867cddac R9 =0000000000000000 R10=000000000003bae4 R11=000000000000441c R12=0000000000000008 R13=ffff8880134df780 R14=ffff8880134df7e0 R15=ffff8880134df738 RIP=ffffffff81353ad5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56f2000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f877ab33680 CR3=000000000e523000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=7a5c4a85be2a66fe0000000000133f40 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=aae70dce44d5268c00000000000ae988 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000