Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:11202' (ECDSA) to the list of known hosts. 2025/07/03 01:39:41 fuzzer started 2025/07/03 01:39:41 dialing manager at localhost:45015 syzkaller login: [ 44.497181] cgroup: Unknown subsys name 'net' [ 44.562487] cgroup: Unknown subsys name 'cpuset' [ 44.576098] cgroup: Unknown subsys name 'rlimit' 2025/07/03 01:39:52 syscalls: 2214 2025/07/03 01:39:52 code coverage: enabled 2025/07/03 01:39:52 comparison tracing: enabled 2025/07/03 01:39:52 extra coverage: enabled 2025/07/03 01:39:52 setuid sandbox: enabled 2025/07/03 01:39:52 namespace sandbox: enabled 2025/07/03 01:39:52 Android sandbox: enabled 2025/07/03 01:39:52 fault injection: enabled 2025/07/03 01:39:52 leak checking: enabled 2025/07/03 01:39:52 net packet injection: enabled 2025/07/03 01:39:52 net device setup: enabled 2025/07/03 01:39:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/03 01:39:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/03 01:39:52 USB emulation: enabled 2025/07/03 01:39:52 hci packet injection: enabled 2025/07/03 01:39:52 wifi device emulation: enabled 2025/07/03 01:39:52 802.15.4 emulation: enabled 2025/07/03 01:39:52 fetching corpus: 50, signal 21534/23308 (executing program) 2025/07/03 01:39:52 fetching corpus: 100, signal 33797/37077 (executing program) 2025/07/03 01:39:52 fetching corpus: 150, signal 38270/43058 (executing program) 2025/07/03 01:39:52 fetching corpus: 200, signal 45819/51846 (executing program) 2025/07/03 01:39:52 fetching corpus: 250, signal 49875/57222 (executing program) 2025/07/03 01:39:52 fetching corpus: 300, signal 54320/62857 (executing program) 2025/07/03 01:39:53 fetching corpus: 350, signal 57448/67185 (executing program) 2025/07/03 01:39:53 fetching corpus: 400, signal 60210/71122 (executing program) 2025/07/03 01:39:53 fetching corpus: 450, signal 62737/74781 (executing program) 2025/07/03 01:39:53 fetching corpus: 500, signal 68566/81325 (executing program) 2025/07/03 01:39:53 fetching corpus: 550, signal 70339/84160 (executing program) 2025/07/03 01:39:53 fetching corpus: 600, signal 72004/86840 (executing program) 2025/07/03 01:39:53 fetching corpus: 650, signal 74011/89830 (executing program) 2025/07/03 01:39:53 fetching corpus: 700, signal 75962/92681 (executing program) 2025/07/03 01:39:53 fetching corpus: 750, signal 78088/95716 (executing program) 2025/07/03 01:39:53 fetching corpus: 800, signal 79729/98262 (executing program) 2025/07/03 01:39:53 fetching corpus: 850, signal 81072/100570 (executing program) 2025/07/03 01:39:53 fetching corpus: 900, signal 82712/103042 (executing program) 2025/07/03 01:39:54 fetching corpus: 950, signal 85513/106416 (executing program) 2025/07/03 01:39:54 fetching corpus: 1000, signal 87181/108831 (executing program) 2025/07/03 01:39:54 fetching corpus: 1050, signal 88346/110802 (executing program) 2025/07/03 01:39:54 fetching corpus: 1100, signal 89253/112531 (executing program) 2025/07/03 01:39:54 fetching corpus: 1150, signal 90571/114649 (executing program) 2025/07/03 01:39:54 fetching corpus: 1200, signal 92123/116862 (executing program) 2025/07/03 01:39:54 fetching corpus: 1250, signal 92841/118405 (executing program) 2025/07/03 01:39:54 fetching corpus: 1300, signal 94356/120530 (executing program) 2025/07/03 01:39:54 fetching corpus: 1350, signal 95349/122269 (executing program) 2025/07/03 01:39:54 fetching corpus: 1400, signal 96391/124008 (executing program) 2025/07/03 01:39:54 fetching corpus: 1450, signal 97644/125851 (executing program) 2025/07/03 01:39:54 fetching corpus: 1500, signal 98395/127318 (executing program) 2025/07/03 01:39:54 fetching corpus: 1550, signal 98976/128685 (executing program) 2025/07/03 01:39:55 fetching corpus: 1600, signal 100032/130343 (executing program) 2025/07/03 01:39:55 fetching corpus: 1650, signal 100983/131918 (executing program) 2025/07/03 01:39:55 fetching corpus: 1700, signal 101640/133301 (executing program) 2025/07/03 01:39:55 fetching corpus: 1750, signal 102938/135085 (executing program) 2025/07/03 01:39:55 fetching corpus: 1800, signal 104016/136660 (executing program) 2025/07/03 01:39:55 fetching corpus: 1850, signal 104793/138020 (executing program) 2025/07/03 01:39:55 fetching corpus: 1900, signal 105518/139353 (executing program) 2025/07/03 01:39:55 fetching corpus: 1950, signal 106417/140781 (executing program) 2025/07/03 01:39:55 fetching corpus: 2000, signal 107057/142068 (executing program) 2025/07/03 01:39:55 fetching corpus: 2050, signal 107706/143341 (executing program) 2025/07/03 01:39:55 fetching corpus: 2100, signal 108451/144639 (executing program) 2025/07/03 01:39:56 fetching corpus: 2150, signal 109253/145951 (executing program) 2025/07/03 01:39:56 fetching corpus: 2200, signal 109880/147145 (executing program) 2025/07/03 01:39:56 fetching corpus: 2250, signal 110392/148280 (executing program) 2025/07/03 01:39:56 fetching corpus: 2300, signal 111134/149485 (executing program) 2025/07/03 01:39:56 fetching corpus: 2350, signal 112404/150950 (executing program) 2025/07/03 01:39:56 fetching corpus: 2400, signal 113044/152103 (executing program) 2025/07/03 01:39:56 fetching corpus: 2450, signal 113569/153160 (executing program) 2025/07/03 01:39:56 fetching corpus: 2500, signal 114232/154267 (executing program) 2025/07/03 01:39:56 fetching corpus: 2550, signal 114815/155359 (executing program) 2025/07/03 01:39:56 fetching corpus: 2600, signal 115369/156406 (executing program) 2025/07/03 01:39:56 fetching corpus: 2650, signal 115953/157496 (executing program) 2025/07/03 01:39:57 fetching corpus: 2700, signal 116834/158664 (executing program) 2025/07/03 01:39:57 fetching corpus: 2750, signal 117252/159585 (executing program) 2025/07/03 01:39:57 fetching corpus: 2800, signal 117743/160596 (executing program) 2025/07/03 01:39:57 fetching corpus: 2850, signal 118508/161645 (executing program) 2025/07/03 01:39:57 fetching corpus: 2900, signal 119414/162700 (executing program) 2025/07/03 01:39:57 fetching corpus: 2950, signal 120112/163690 (executing program) 2025/07/03 01:39:57 fetching corpus: 3000, signal 120764/164645 (executing program) 2025/07/03 01:39:57 fetching corpus: 3050, signal 121276/165543 (executing program) 2025/07/03 01:39:57 fetching corpus: 3100, signal 122017/166548 (executing program) 2025/07/03 01:39:57 fetching corpus: 3150, signal 122813/167535 (executing program) 2025/07/03 01:39:57 fetching corpus: 3200, signal 123414/168403 (executing program) 2025/07/03 01:39:57 fetching corpus: 3250, signal 124046/169283 (executing program) 2025/07/03 01:39:58 fetching corpus: 3300, signal 124485/170124 (executing program) 2025/07/03 01:39:58 fetching corpus: 3350, signal 125066/171012 (executing program) 2025/07/03 01:39:58 fetching corpus: 3400, signal 125513/171806 (executing program) 2025/07/03 01:39:58 fetching corpus: 3450, signal 126140/172669 (executing program) 2025/07/03 01:39:58 fetching corpus: 3500, signal 126776/173471 (executing program) 2025/07/03 01:39:58 fetching corpus: 3550, signal 127260/174243 (executing program) 2025/07/03 01:39:58 fetching corpus: 3600, signal 127795/175010 (executing program) 2025/07/03 01:39:58 fetching corpus: 3650, signal 128208/175805 (executing program) 2025/07/03 01:39:58 fetching corpus: 3700, signal 128457/176546 (executing program) 2025/07/03 01:39:58 fetching corpus: 3750, signal 129396/177386 (executing program) 2025/07/03 01:39:58 fetching corpus: 3800, signal 130021/178153 (executing program) 2025/07/03 01:39:58 fetching corpus: 3850, signal 130326/178840 (executing program) 2025/07/03 01:39:58 fetching corpus: 3900, signal 130638/179464 (executing program) 2025/07/03 01:39:59 fetching corpus: 3950, signal 131261/180183 (executing program) 2025/07/03 01:39:59 fetching corpus: 4000, signal 131512/180838 (executing program) 2025/07/03 01:39:59 fetching corpus: 4050, signal 131937/181532 (executing program) 2025/07/03 01:39:59 fetching corpus: 4100, signal 132364/182175 (executing program) 2025/07/03 01:39:59 fetching corpus: 4150, signal 132803/182834 (executing program) 2025/07/03 01:39:59 fetching corpus: 4200, signal 133182/183465 (executing program) 2025/07/03 01:39:59 fetching corpus: 4250, signal 133568/184130 (executing program) 2025/07/03 01:39:59 fetching corpus: 4300, signal 133877/184745 (executing program) 2025/07/03 01:39:59 fetching corpus: 4350, signal 134400/185376 (executing program) 2025/07/03 01:39:59 fetching corpus: 4400, signal 135002/186028 (executing program) 2025/07/03 01:39:59 fetching corpus: 4450, signal 135417/186605 (executing program) 2025/07/03 01:39:59 fetching corpus: 4500, signal 135785/187176 (executing program) 2025/07/03 01:40:00 fetching corpus: 4550, signal 135965/187789 (executing program) 2025/07/03 01:40:00 fetching corpus: 4600, signal 136341/188380 (executing program) 2025/07/03 01:40:00 fetching corpus: 4650, signal 136675/188936 (executing program) 2025/07/03 01:40:00 fetching corpus: 4700, signal 136938/189493 (executing program) 2025/07/03 01:40:00 fetching corpus: 4750, signal 137292/190050 (executing program) 2025/07/03 01:40:00 fetching corpus: 4800, signal 137674/190068 (executing program) 2025/07/03 01:40:00 fetching corpus: 4850, signal 138017/190068 (executing program) 2025/07/03 01:40:00 fetching corpus: 4900, signal 138389/190068 (executing program) 2025/07/03 01:40:00 fetching corpus: 4950, signal 138666/190068 (executing program) 2025/07/03 01:40:00 fetching corpus: 5000, signal 139105/190068 (executing program) 2025/07/03 01:40:00 fetching corpus: 5050, signal 139426/190068 (executing program) 2025/07/03 01:40:00 fetching corpus: 5100, signal 139723/190068 (executing program) 2025/07/03 01:40:00 fetching corpus: 5150, signal 139921/190068 (executing program) 2025/07/03 01:40:01 fetching corpus: 5200, signal 140229/190068 (executing program) 2025/07/03 01:40:01 fetching corpus: 5250, signal 140577/190068 (executing program) 2025/07/03 01:40:01 fetching corpus: 5300, signal 140847/190068 (executing program) 2025/07/03 01:40:01 fetching corpus: 5350, signal 141183/190068 (executing program) 2025/07/03 01:40:01 fetching corpus: 5400, signal 141693/190068 (executing program) 2025/07/03 01:40:01 fetching corpus: 5450, signal 141974/190068 (executing program) 2025/07/03 01:40:01 fetching corpus: 5500, signal 142688/190068 (executing program) 2025/07/03 01:40:01 fetching corpus: 5550, signal 143103/190068 (executing program) 2025/07/03 01:40:01 fetching corpus: 5600, signal 143430/190068 (executing program) 2025/07/03 01:40:01 fetching corpus: 5650, signal 143646/190068 (executing program) 2025/07/03 01:40:01 fetching corpus: 5700, signal 143859/190068 (executing program) 2025/07/03 01:40:01 fetching corpus: 5750, signal 144242/190068 (executing program) 2025/07/03 01:40:01 fetching corpus: 5800, signal 144433/190068 (executing program) 2025/07/03 01:40:02 fetching corpus: 5850, signal 144741/190068 (executing program) 2025/07/03 01:40:02 fetching corpus: 5900, signal 145068/190070 (executing program) 2025/07/03 01:40:02 fetching corpus: 5950, signal 145333/190070 (executing program) 2025/07/03 01:40:02 fetching corpus: 6000, signal 145684/190070 (executing program) 2025/07/03 01:40:02 fetching corpus: 6050, signal 146111/190070 (executing program) 2025/07/03 01:40:02 fetching corpus: 6100, signal 146377/190070 (executing program) 2025/07/03 01:40:02 fetching corpus: 6150, signal 146727/190070 (executing program) 2025/07/03 01:40:02 fetching corpus: 6200, signal 146962/190070 (executing program) 2025/07/03 01:40:02 fetching corpus: 6250, signal 147171/190070 (executing program) 2025/07/03 01:40:02 fetching corpus: 6300, signal 147356/190070 (executing program) 2025/07/03 01:40:02 fetching corpus: 6350, signal 147709/190070 (executing program) 2025/07/03 01:40:02 fetching corpus: 6400, signal 148121/190070 (executing program) 2025/07/03 01:40:02 fetching corpus: 6450, signal 148464/190070 (executing program) 2025/07/03 01:40:02 fetching corpus: 6500, signal 148717/190070 (executing program) 2025/07/03 01:40:03 fetching corpus: 6550, signal 148977/190070 (executing program) 2025/07/03 01:40:03 fetching corpus: 6600, signal 149398/190070 (executing program) 2025/07/03 01:40:03 fetching corpus: 6650, signal 149591/190070 (executing program) 2025/07/03 01:40:03 fetching corpus: 6700, signal 149913/190070 (executing program) 2025/07/03 01:40:03 fetching corpus: 6750, signal 150138/190070 (executing program) 2025/07/03 01:40:03 fetching corpus: 6800, signal 150403/190070 (executing program) 2025/07/03 01:40:03 fetching corpus: 6850, signal 150584/190070 (executing program) 2025/07/03 01:40:03 fetching corpus: 6900, signal 150857/190070 (executing program) 2025/07/03 01:40:03 fetching corpus: 6950, signal 151056/190070 (executing program) 2025/07/03 01:40:03 fetching corpus: 7000, signal 151310/190070 (executing program) 2025/07/03 01:40:03 fetching corpus: 7050, signal 151603/190070 (executing program) 2025/07/03 01:40:03 fetching corpus: 7100, signal 151903/190070 (executing program) 2025/07/03 01:40:03 fetching corpus: 7150, signal 152269/190070 (executing program) 2025/07/03 01:40:03 fetching corpus: 7200, signal 152503/190070 (executing program) 2025/07/03 01:40:03 fetching corpus: 7250, signal 152736/190070 (executing program) 2025/07/03 01:40:04 fetching corpus: 7300, signal 152959/190070 (executing program) 2025/07/03 01:40:04 fetching corpus: 7350, signal 153338/190070 (executing program) 2025/07/03 01:40:04 fetching corpus: 7400, signal 153540/190070 (executing program) 2025/07/03 01:40:04 fetching corpus: 7450, signal 153770/190070 (executing program) 2025/07/03 01:40:04 fetching corpus: 7500, signal 154018/190070 (executing program) 2025/07/03 01:40:04 fetching corpus: 7550, signal 154341/190070 (executing program) 2025/07/03 01:40:04 fetching corpus: 7600, signal 154475/190070 (executing program) 2025/07/03 01:40:04 fetching corpus: 7650, signal 154755/190070 (executing program) 2025/07/03 01:40:04 fetching corpus: 7700, signal 154990/190070 (executing program) 2025/07/03 01:40:04 fetching corpus: 7750, signal 155546/190070 (executing program) 2025/07/03 01:40:04 fetching corpus: 7800, signal 155807/190070 (executing program) 2025/07/03 01:40:04 fetching corpus: 7850, signal 156015/190070 (executing program) 2025/07/03 01:40:04 fetching corpus: 7900, signal 156295/190070 (executing program) 2025/07/03 01:40:04 fetching corpus: 7950, signal 156517/190070 (executing program) 2025/07/03 01:40:04 fetching corpus: 8000, signal 157154/190070 (executing program) 2025/07/03 01:40:04 fetching corpus: 8050, signal 157378/190070 (executing program) 2025/07/03 01:40:04 fetching corpus: 8100, signal 157633/190070 (executing program) 2025/07/03 01:40:05 fetching corpus: 8150, signal 157833/190070 (executing program) 2025/07/03 01:40:05 fetching corpus: 8200, signal 158073/190070 (executing program) 2025/07/03 01:40:05 fetching corpus: 8250, signal 158413/190070 (executing program) 2025/07/03 01:40:05 fetching corpus: 8300, signal 158642/190070 (executing program) 2025/07/03 01:40:05 fetching corpus: 8350, signal 158844/190070 (executing program) 2025/07/03 01:40:05 fetching corpus: 8400, signal 159035/190070 (executing program) 2025/07/03 01:40:05 fetching corpus: 8450, signal 159221/190070 (executing program) 2025/07/03 01:40:05 fetching corpus: 8500, signal 159395/190070 (executing program) 2025/07/03 01:40:05 fetching corpus: 8550, signal 159575/190070 (executing program) 2025/07/03 01:40:05 fetching corpus: 8600, signal 159767/190070 (executing program) 2025/07/03 01:40:05 fetching corpus: 8650, signal 159932/190070 (executing program) 2025/07/03 01:40:05 fetching corpus: 8700, signal 160132/190070 (executing program) 2025/07/03 01:40:05 fetching corpus: 8750, signal 160496/190070 (executing program) 2025/07/03 01:40:06 fetching corpus: 8800, signal 160674/190070 (executing program) 2025/07/03 01:40:06 fetching corpus: 8850, signal 160859/190070 (executing program) 2025/07/03 01:40:06 fetching corpus: 8900, signal 161146/190070 (executing program) 2025/07/03 01:40:06 fetching corpus: 8950, signal 161324/190070 (executing program) 2025/07/03 01:40:06 fetching corpus: 9000, signal 161476/190070 (executing program) 2025/07/03 01:40:06 fetching corpus: 9050, signal 161777/190070 (executing program) 2025/07/03 01:40:06 fetching corpus: 9100, signal 161984/190070 (executing program) 2025/07/03 01:40:06 fetching corpus: 9150, signal 162747/190070 (executing program) 2025/07/03 01:40:06 fetching corpus: 9200, signal 162891/190070 (executing program) 2025/07/03 01:40:06 fetching corpus: 9250, signal 163147/190070 (executing program) 2025/07/03 01:40:06 fetching corpus: 9300, signal 163415/190070 (executing program) 2025/07/03 01:40:06 fetching corpus: 9350, signal 163691/190070 (executing program) 2025/07/03 01:40:06 fetching corpus: 9400, signal 163819/190070 (executing program) 2025/07/03 01:40:07 fetching corpus: 9450, signal 164038/190070 (executing program) 2025/07/03 01:40:07 fetching corpus: 9500, signal 164214/190070 (executing program) 2025/07/03 01:40:07 fetching corpus: 9550, signal 164421/190070 (executing program) 2025/07/03 01:40:07 fetching corpus: 9600, signal 164701/190070 (executing program) 2025/07/03 01:40:07 fetching corpus: 9650, signal 164836/190070 (executing program) 2025/07/03 01:40:07 fetching corpus: 9700, signal 165062/190070 (executing program) 2025/07/03 01:40:07 fetching corpus: 9750, signal 165261/190070 (executing program) 2025/07/03 01:40:07 fetching corpus: 9800, signal 165487/190070 (executing program) 2025/07/03 01:40:07 fetching corpus: 9850, signal 165630/190070 (executing program) 2025/07/03 01:40:07 fetching corpus: 9900, signal 165807/190070 (executing program) 2025/07/03 01:40:07 fetching corpus: 9950, signal 165968/190070 (executing program) 2025/07/03 01:40:07 fetching corpus: 10000, signal 166203/190070 (executing program) 2025/07/03 01:40:07 fetching corpus: 10050, signal 166331/190070 (executing program) 2025/07/03 01:40:07 fetching corpus: 10100, signal 166573/190070 (executing program) 2025/07/03 01:40:07 fetching corpus: 10150, signal 166713/190070 (executing program) 2025/07/03 01:40:07 fetching corpus: 10200, signal 166967/190070 (executing program) 2025/07/03 01:40:08 fetching corpus: 10250, signal 167123/190070 (executing program) 2025/07/03 01:40:08 fetching corpus: 10300, signal 167355/190070 (executing program) 2025/07/03 01:40:08 fetching corpus: 10350, signal 167600/190070 (executing program) 2025/07/03 01:40:08 fetching corpus: 10400, signal 167883/190070 (executing program) 2025/07/03 01:40:08 fetching corpus: 10450, signal 168107/190070 (executing program) 2025/07/03 01:40:08 fetching corpus: 10500, signal 168345/190070 (executing program) 2025/07/03 01:40:08 fetching corpus: 10550, signal 168486/190070 (executing program) 2025/07/03 01:40:08 fetching corpus: 10600, signal 168750/190070 (executing program) 2025/07/03 01:40:08 fetching corpus: 10650, signal 168923/190070 (executing program) 2025/07/03 01:40:08 fetching corpus: 10700, signal 169061/190070 (executing program) 2025/07/03 01:40:08 fetching corpus: 10750, signal 169261/190070 (executing program) 2025/07/03 01:40:08 fetching corpus: 10800, signal 169476/190070 (executing program) 2025/07/03 01:40:08 fetching corpus: 10850, signal 169641/190070 (executing program) 2025/07/03 01:40:08 fetching corpus: 10900, signal 169791/190070 (executing program) 2025/07/03 01:40:09 fetching corpus: 10950, signal 169901/190070 (executing program) 2025/07/03 01:40:09 fetching corpus: 11000, signal 170103/190070 (executing program) 2025/07/03 01:40:09 fetching corpus: 11050, signal 170291/190070 (executing program) 2025/07/03 01:40:09 fetching corpus: 11051, signal 170292/190070 (executing program) 2025/07/03 01:40:09 fetching corpus: 11051, signal 170292/190070 (executing program) 2025/07/03 01:40:11 starting 8 fuzzer processes 01:40:11 executing program 0: sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x608, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004008}, 0x1) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x134, r0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x134}, 0x1, 0x0, 0x0, 0x24020040}, 0x800) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000380)={0x7, 0x20, [0x1, 0x28e8, 0x265, 0x7], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]}) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}}, 0x20000050) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x65}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004002}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x11, 0xffffffffffffffff, 0x8000000) r2 = syz_open_dev$vcsa(&(0x7f0000000600), 0x7fff, 0x2001) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="c4a5985cda75"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000005}, 0x8000) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1c4, r1, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x41}, @void, @val={0xc, 0x99, {0x0, 0x4}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_batadv\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cc7ced21af22f4e8fa2398632909832f80ad0155fa68e675"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cdd5b595a710c063ee41f02416e384db94935a1e521f3e7e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "abe3322ec7f42802235308f3cb3b5bae6f72d03685601a25"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ed6d763f5b628e1b919da8afb6e067abb13a3a20ccf7bb96"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b95d7680b1f0de1a7823e8e4fdc85de27607363a3a0de79b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_1\x00'}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8000000}, 0x1) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x78, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c081}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000001080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f00000012c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x81051041}, 0xc, &(0x7f0000001280)={&(0x7f0000001100)={0x148, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffff0f, 0x34}}}}, [@NL80211_ATTR_IE={0x11e, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @perr={0x84, 0x10f, {0x9b, 0x11, [@not_ext={{}, @broadcast, 0xf74, "", 0x1}, @not_ext={{}, @device_a, 0xcb8c, "", 0x6}, @not_ext={{}, @device_a, 0x2, "", 0x1b}, @ext={{}, @broadcast, 0x9, @device_a, 0x42}, @ext={{}, @device_a, 0x9, @device_b, 0x28}, @not_ext={{}, @device_b, 0x20, "", 0x34}, @ext={{}, @device_a, 0x5, @broadcast, 0x5}, @ext={{}, @device_a, 0x3f, @broadcast, 0x40}, @ext={{}, @device_b, 0x4a93e3d2, @device_b, 0x3e}, @not_ext={{}, @device_a, 0x3, "", 0x13}, @not_ext={{}, @device_a, 0x20, "", 0x3f}, @not_ext={{}, @device_b, 0x6, "", 0x3a}, @not_ext={{}, @device_b, 0x1, "", 0x38}, @not_ext={{}, @device_a, 0xe562000, "", 0x3d}, @ext={{}, @broadcast, 0x7, @broadcast, 0x1f}, @ext={{}, @broadcast, 0x7000, @broadcast, 0x27}, @ext={{}, @device_b, 0x1000, @broadcast, 0x16}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x81, 0xa1}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), r2) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000014c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xe0, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe07e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24000001}, 0x4008041) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, r1, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x775b, 0x1b}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x811) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001600)={{0x1, 0x1, 0x18, r4, {0x8000}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000001740)={&(0x7f0000001640), 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x4c, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 01:40:11 executing program 1: ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000000)={{0x2, 0x100}, 0x100, './file0\x00'}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fchmod(r0, 0x142) fallocate(r1, 0x0, 0x100, 0x2) r2 = fsmount(0xffffffffffffffff, 0x0, 0x7) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@remote, @local, @local, 0x3f, 0x7, 0x400, 0x0, 0x400, 0x83000304}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000280)={0x2, 0xa9, "599fa213dca58c7fce0f8064c8892664a783959993e825ca9d7eb561d9733ae9aad2b083dde0cac5470ca29930aa280e6ce1ec9e0a5001d0fae6b8ee961956f10b6fcc7f55e1f33ab0c1299394f28491fc9800289f6055415a03d56617e4558f0511212aa7379d48a7ce108623cca54dce1fdc75fc439c9313a7b3b71de62b68636afedf8b4a84e7b34251319ce5b5399ed1e556ccc5c56e68a84ba6af531dc6a2d6a0f9c11a7f1456"}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) close(r2) r4 = accept4$unix(r1, 0x0, &(0x7f0000000440), 0x800) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000500)={{r3}, 0x0, 0x2, @inherit={0x50, &(0x7f0000000480)={0x1, 0x1, 0x9, 0x6, {0x14, 0x9, 0x5, 0x1, 0x9}, [0x80]}}, @subvolid=0xfe}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000015c0), 0x181000, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)={0xe8, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x83b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x65d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xe8}}, 0x815) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000017c0)={{{@in=@dev, @in6=@initdev}}, {{@in=@private}, 0x0, @in6=@remote}}, &(0x7f00000018c0)=0xe8) r6 = epoll_create(0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000001900)={"ec073aeee2ba2bc1384deaa6da7459ae", 0x0, 0x0, {0x3f, 0x3dcc}, {0xd3, 0x63b}, 0x6, [0x10000, 0xfff, 0x7, 0x0, 0x8, 0x1f, 0xf73, 0xf5, 0x9, 0x7, 0x1f, 0x1f, 0xffffffff, 0x2, 0x8, 0xff]}) io_submit(0x0, 0x1, &(0x7f0000001bc0)=[&(0x7f0000001b80)={0x0, 0x0, 0x0, 0x5, 0x1, 0xffffffffffffffff, &(0x7f0000001a80)="2fc14171e27d3cf0b87cc5e37d14f5180ede75a059e715f557460c91fe8301cde61aecc557f169056ed428de9014e1a881ac97b7bff3f120a37263ec4b47f6928252e662a34ecbb498d35602cabe10dbe642d8444de176dad74cc6ad8c191fb486b6285228c3d14ab268920ee819d52ef8210dfda433ec628491b4f0063500143d7cb2e462cf0af741d3044189b145977f058db0582a00e71a96b810ab0897da8c520dc1773f51de216420b1cc07ee2d16596dbd92557249d8a59dfaea1aa35546d45dc898199273c76a79aa7dc9230ca8e54e1d93ed21555df5be", 0xdb, 0x3, 0x0, 0xb81a81e6aa784eb1, r0}]) 01:40:11 executing program 2: alarm(0x7) alarm(0x4) alarm(0x84) alarm(0x1) alarm(0x0) alarm(0x8000) alarm(0x1f) alarm(0xffff) alarm(0x7fffffff) alarm(0x8) alarm(0xd8) alarm(0x8001) alarm(0x100000000) alarm(0x5) alarm(0x5) alarm(0x0) alarm(0x9) alarm(0x5) alarm(0x0) alarm(0x2) 01:40:11 executing program 3: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2e}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x30}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x2}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff34}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xd6}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x7c}]}]}, 0x64}}, 0x4000000) r2 = memfd_secret(0x0) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x400, 0x80000000, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x48050) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x91) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5e}, @void, @val={0xc, 0x99, {0x7fff, 0x1b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0xc}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "f2ac28481aca9b121de01f3f04cc4c2d"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x18}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x120, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x20a400, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r6) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x8010) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, 0x8, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xd4, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000001) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000dc0)={0x0, r7, 0x1f, 0x111e, 0x3}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000e40)=0x91c, 0x4) [ 74.591878] audit: type=1400 audit(1751506811.739:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:40:11 executing program 4: sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x2, 0x9, 0xe4c6a6635117ad49, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFCTH_TUPLE={0x48, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_STATUS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x24040000) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3fb, 0x2, 0x70bd27, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/block/loop1', 0x40, 0x120) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xb81fd6007ae6ca8b}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xc4, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x20}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3fc00}, {0x6, 0x11, 0x2}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r0) accept4$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x24, 0x4, 0x2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x0, 0x0, 0x7}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000009c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xe8, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44048000}, 0x8849) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000c80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a40)={0x200, 0x15, 0x2, 0x70bd25, 0x25dfdbfe, {0x2b, 0x1d}, [@INET_DIAG_REQ_BYTECODE={0xb5, 0x1, "9202e98f6e7b3c116977a6d80ff3af805a372f2fa184a76f158faf1fe13a4c8615215f7b6db84380e1dff79123fcec4f2ac6de56bec4ef1f5ff84b9d2628e450cb99c1a8a88b968f1f4bb2e6c49d2eb41775c3797ebaef080611f38c52f9e19c548b992ed52950c865952e116e04911efbb60623312617be0e448641c71577b023328aa1e143ccb92345d818831560513766c1f78134b2d60e8f2100bbaf057c2c1bc7640ef5d6c7c1ad7fc54eb33f0107"}, @INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "b20f63599d4d9d1cb7070016e41b59eaf0f9c2a09a2cad447cf750d8514e14cbbe4d486ca3ecd5bb5138c892f407ef61f2627c4808e4490b1eae"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "8a1d0e6663732d102ab54605e886ce03451210843e187b12fbea84458ea3f716b48a7c1e18f17a56ab673e2c01eacae356079b3a0aea3c3ceb4d758699a36544c08c910bb304ca7a245961b3522a453b7f1382f74e2c980d0331739c35c0e056214291fd139807d7646f7c"}, @INET_DIAG_REQ_BYTECODE={0x82, 0x1, "a95bfd697042342e4d5da4a9be710d2648c876fb1e2bc2a4a32d14f10ed40c2f4e22bd9265a07f68909bcfacf0ff99089233046e48786054f28bfd8c2813913b1b81609f57c685a5c184bac31e7d3b36e86fcdfbfb82268f575815cdf96d3a45dd8f71f9b1def5a16a60b7667014bc2544d3a03b23ac4a3b1039bf55f189"}]}, 0x200}, 0x1, 0x0, 0x0, 0x8040}, 0x8090) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0), 0x4002, 0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0xc0840) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), r4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r6, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x10) r7 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000f40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000001200)={0x0, 0x7fff, 0x7fff}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000001600)={{r5}, r8, 0x2, @inherit={0x90, &(0x7f0000001140)={0x1, 0x9, 0x1, 0x1, {0x24, 0x3, 0x401, 0x70000, 0x7}, [0x1, 0x6, 0x401, 0x4, 0x6, 0x5, 0xfffffffffffeffff, 0x1, 0x1000]}}, @devid=r9}) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000002600)) 01:40:11 executing program 5: pwritev2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)="40619769e1ba13776033c07910b62909f437eb5e4ce160d8b7b0ebb4437a97652d4ea3bbbd6a7eca9bc7e01713e610343d749df4be48c0cbec504cdddc12bfca64e8d8030492d796a5acdfbfe04acedb43e8b7ffac375057728059bd56ed4cd00bd0d52393182fc5c08345a53e68c449f575168d638448322f61f71276caec19a07829c60f5d8b7fe023f7b14cab3fd910ed2821b35d2b575d08b51371fa7ef55f6c1634f0bb70f9ce75c481499eb06c766acea645b288edd14b25bbcd669ffa8c2af86ba7d80f33b407eea5df10bad44541a4ab57ed9c51d158816d10fedddf7b57a82d949f0d", 0xe7}, {&(0x7f0000000100)="be887186eb193a6848a36f82874a68bd9c8641caafb55867c4cb3625fcd22fd9f58394aee746aae1ef8bd55605e4ca59a63d2531c53eadf89f4f38dfb75c7de6a75b07d8221262e9dae0ceaaca15a1019239c613da68adb865bd13bd074af551d057c9320750705190faf53fd75ff933b4f16dadf8ceb1475ae4de2413ffe0ff331016fab2babe036e0b1ae9494fe740659175e73f189d9b3d91025783a4e638136ca4828ac34f1d3a1948e358c4ff999605ee879c1b2ad8950282a1b0164204e499daabd0c4da2f76c5b921ae80b313756e1eaa874b117e894408d6e0a54dcea2f7e3c8db5eb902", 0xe8}, {&(0x7f0000000200)="d447fdaa6025d096425f6844ca7d01020e5eba41f4fcf2feac776c14ea8f5cbccb9c595cfd67cb0d8b823aebf46b69acb98931557c6727be2303ab48d365d6907704a374734464691c6ea687a6df8a276d404c21d4d0fbbde8bf88d1f5de81e5bd1f1815d1154c895892c8657bf650d52f343e034eeff0f517477df61cbb120bdeb7466fadb4e1f38a1a47b207bb72b408b63793baadc4a796b6ed059da5a7c53ffccbafccb4778bae60df0862be2b7598b4e416c8577978861b7c8d3a90fcdac2236ff53215ef7f634deeac27203eab1f7afd70df587750bc62df04e1d7423ad2f822979bc23a87267cdb94b05209dde9e76e03f9b8", 0xf6}, {&(0x7f0000000300)="f37dc1270cedc950090f0744e019c1d0e17cd7e2c8687d82542821a111717cd51b70556deb305e2e66bcc3f7086eec7da1d6d92a1e80172cc46bce217fb06abef7f8a4b99ab11b34a75b7c7b38348d5e1d8fd5403e0cafa0abb8ab6318247523f0b4e72c523678c3bf12a4a342e0fa9bc73be07a237220f30f7900d35a87d37472cc30ae1f66d35c7a9cfca0d530baa5cca0e5bbe7f13707b1e71f6531488fdad0c529a19390c8b9ec819039f8d2f66dd464e5a5edde867d9c7ab15727bb4faec0c2c9e3428cd540ae56e5a9021e8d52efc935f2f8a3b9e20d18c1c68adf2286b4bd3f", 0xe3}], 0x4, 0xffff, 0x8, 0x2) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) r1 = mq_open(&(0x7f0000000480)='\x00', 0x80, 0x4, &(0x7f00000004c0)={0x8000, 0x5, 0x52f, 0x4}) sendfile(r0, r1, &(0x7f0000000500)=0x6, 0x6) mq_timedreceive(r1, &(0x7f0000000540)=""/193, 0xc1, 0x4, &(0x7f0000000640)) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000680)={0x1, 0x0, @status={[0x2, 0xff, 0x1, 0x9, 0x3, 0x1]}, [0x8, 0x1, 0x6, 0x3, 0x81, 0x6, 0x6, 0x7, 0x4, 0x9, 0x7, 0x1f, 0x101, 0x8, 0x7ff, 0x80000001, 0x200, 0x62bf, 0xe588, 0xffffffffffffff7f, 0x37f5, 0x2d, 0x8020000000000, 0x0, 0x7fffffff, 0x0, 0xff, 0x200, 0xfff, 0x2, 0xb, 0x7, 0x2, 0x7fffffff, 0x5, 0x7, 0x5, 0x7, 0x5, 0x1, 0x3, 0x3, 0x8000, 0x8, 0x2, 0x7fffffff, 0x0, 0x9, 0x559, 0x7fff, 0x81, 0x9, 0x9, 0x2, 0xfffffffffffffffe, 0x1, 0x400, 0x4, 0x7fff, 0x7, 0x7, 0x10001, 0x3f, 0x101]}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f00000010c0)) read(0xffffffffffffffff, &(0x7f0000001100)=""/63, 0x3f) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001140)={0x0, 0x7fff, 0x4}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001540)={r2, 0xff, 0x1, [0x5, 0x793, 0x1, 0x100, 0x7ff], [0x8000, 0x290, 0x5, 0xff, 0xfffffffffffffbff, 0x1f, 0x8, 0x3f, 0x7, 0xd3, 0xee5b25d, 0x0, 0x1, 0x400, 0x100, 0x5, 0x401, 0x5c, 0x101, 0x2, 0x4, 0x200, 0x4b5600000000, 0x1, 0xffffffff, 0x9, 0x6, 0x5, 0x6, 0x2, 0xfffffffffffffffc, 0xffffffff, 0x3, 0x8, 0xebf3, 0x2, 0x5, 0x3fff80000, 0x57, 0x100, 0xfffffffffffffffc, 0x3, 0x7ff, 0x8, 0x3, 0x3, 0xfff, 0x3, 0x7fffffff, 0x80000000, 0x81, 0x0, 0x6, 0x1, 0x7ceb2950, 0x4, 0x8e, 0x9, 0x800, 0x4, 0xfffffffffffffffd, 0xaa, 0xce, 0x9, 0x1, 0x80000001, 0xb96, 0x4, 0x1, 0x100000000, 0xd831, 0x40, 0x8000000000000000, 0x7fc8f712, 0x1000000, 0x3, 0x375, 0xe2, 0x2, 0x7fff, 0x1000, 0xfffffffffffffffb, 0x9, 0x1, 0x6, 0x0, 0x1, 0x4, 0x8, 0x3, 0x10001, 0x100, 0x0, 0x60e, 0x8, 0x7f, 0x9, 0x5, 0x0, 0x8, 0x10000, 0x8013, 0x6, 0x8, 0x2, 0x7, 0x100000001, 0x1, 0xcbe3, 0xb5d2, 0x1, 0x1, 0x3, 0x1, 0x81, 0x0, 0x8000, 0x7, 0x100000000, 0x3, 0xfff]}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000001980)={0x20000010}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) epoll_wait(r4, &(0x7f0000001a00)=[{}, {}], 0x2, 0x1) r5 = epoll_create(0x5) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000001a40), &(0x7f0000001a80), 0x2, 0x6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) ioctl$CDROM_MEDIA_CHANGED(r6, 0x5325, 0x3) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000001b00)={0x10, 0x0, {0x0, @struct={0x81, 0xac}, r2, 0x8000, 0xffffffff, 0x8001, 0xfffffffffffffffc, 0x8, 0x10, @struct={0xff, 0x2}, 0x401, 0x8, [0x100000000, 0x5, 0x734e, 0x0, 0xca57, 0x3]}, {0xd80a, @struct={0x5, 0x20}, r2, 0x9, 0x3f, 0x689, 0x80000001, 0x2546, 0x4a1, @usage, 0x8, 0x1ff, [0x1, 0x81, 0x7fffffff, 0x2, 0x8, 0x6e]}, {0x6, @usage=0xaf, r3, 0x3f, 0x1, 0x7, 0xfffffffffffffff9, 0x5, 0xd1, @usage=0xffffffff, 0x4, 0x2, [0x5, 0x5, 0x9, 0x1, 0x912f, 0x1974]}, {0xfff, 0x5, 0x2}}) r7 = accept4$packet(r4, &(0x7f0000001f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001f40)=0x14, 0x80000) accept$packet(r7, &(0x7f0000001f80), &(0x7f0000001fc0)=0x14) 01:40:11 executing program 6: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x31c176163209427b, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x30}}, 0x4) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xe}, @void, @val={0xc, 0x99, {0x7f, 0xd}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x81) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xd}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b3e99eb84d3b0dec15d7d2373b1f9e3d7335b44c0f195817"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x500, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8400}, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xa0, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x3e39, 0x7b}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffffb}, @NL80211_ATTR_VENDOR_DATA={0x5d, 0xc5, "3c65973778592c773d302c00ec5c8c99b96404772c405f2a8080de340bac9b3bb3dcf2a4cebf83c6da0eaf6900aa7f5789cef655ff1cef773610d5b906f908bb9fe2eada6b72221302ea07c2bd9c9be8bdc4471ad276230945"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8000}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1ff}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4048031}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000e00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000a80)={0x334, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xd2, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @prep={0x83, 0x25, @ext={{}, 0x47, 0x80, @broadcast, 0x7, @device_b, 0xf9, 0x2, @broadcast, 0x3}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @chsw_timing={0x68, 0x4, {0xc1, 0x401}}, @dsss={0x3, 0x1, 0x3}, @tim={0x5, 0x34, {0x6, 0x20, 0x0, "1d9fcf84a69e6b3374c6c537eb7b0dfc14d5381d50cb7b7ade1c720647d2ea8ccbc1aa546a12b35ecd77327861a621ea00"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @mesh_chsw={0x76, 0x6, {0x3, 0x7, 0x28, 0x400}}, @cf={0x4, 0x6, {0x4, 0x81, 0x3, 0x7f}}, @perr={0x84, 0x48, {0xe0, 0x4, [@ext={{}, @device_a, 0x3c59a045, @device_b, 0xa}, @ext={{}, @device_a, 0x0, @broadcast}, @ext={{}, @broadcast, 0xd4d4, @broadcast, 0x27}, @not_ext={{}, @broadcast, 0x3, "", 0x28}]}}]}, @NL80211_ATTR_IE={0x14, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @cf={0x4, 0x6, {0x4, 0x4, 0x7, 0x3f}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "31fdf4cb6056032e82dfe0b96dddec031586d97086ae6ad8a889b75d094d9294ad1d79ff69afbd7e7c7cf5131953e3a78770f771ed948b1d35448cd1a4341a08c9ae86d8cab08741bc41c5799ae1ee655ef90de30ac3d27a67a00f5024023a0380e24fe38bcd638e04fa5f86ef77753c629baff12387b44a8ab6b15be928e1043e837cb67c5c09679781bd6c5ee1be957e0f08494c6bbca2e44d42b63aa508ba9a8bb3d63ceb37ec975132331d9c8bc9f7e1d6810bb4cf1a6a2ee42acdf488bb6ceef235b0c2db1bc5eb06b2ada01dd65c6c72"}, @NL80211_ATTR_FILS_ERP_REALM={0x53, 0xfa, "95a071578bbc22770becec56f1ebe27204452863da0d1010a7e889876a33a03ab1a2daacfa8b84fa993c3e5a5395bbda04a76d52922b6eac0036f58493dbb108e71688df4f17c081b39874d5f073b5"}, @NL80211_ATTR_FILS_ERP_RRK={0x2d, 0xfc, "8c4112183015382ae37d5656bea0bf1ea301fdd60c82c2341e38b8cfdf806504128caf12129a3c7cc0"}, @NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "8ba065ed49d78969eaa9ed931e42a0f94ffbbb129403a0bea6961997d4e25f3c7467842901168aa63ea1c190eacbcefbb9ac88a2aab7f17c4194f5e2a47ed14297ff0e61f989e766be720375cfd90d77e5f972cd4dea804e6f639893b93b327c199ffbf868262929a9a34a18e925693c11af465d13bbe53f6dda064e63549271262fb5a895e3253165d1872d23e56b0ea00335d363401566a7ed5457e1dac8e0b6aee5a2d52a85b0dc918a9f8eae115a13cf"}], @NL80211_ATTR_IE={0x1b, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x21}}, @cf={0x4, 0x6, {0x81, 0x81, 0x0, 0x7}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x40041}, 0x24000044) read(r2, &(0x7f0000000e40)=""/32, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000fc0)={&(0x7f0000000e80), 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x70, r3, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x3c}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x70}}, 0x81) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000001000), r6) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x8c, 0x464, 0x8, 0x70bd2d, 0x25dfdbfe, "cdf6c109a2cc9734f87c69532ca719552119c502a334393d6915a6e59e227515a2718848c2bffe61c74100bde5d0a45397eaa6dff8467e5425cdf8e525194d0c6cfb0e58bdf01be5cb953b75527c9f12767f03ae320088529f8418cc9940c83ea5b89881ca457ad63eb71606dd134a733e1da74d9845ee03f1", ["", "", "", ""]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 01:40:11 executing program 7: ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000000)=0x7) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)=@hopopts={0x1c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1f}]}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x8, 0x10000) sendto$inet6(r0, &(0x7f00000000c0)="f3f07bb07304adc3541e588d8c9af936d649d81c19615bfe1f981c02ec055c3bfdb78d89c8cee9ef11e7d26195f941cf8a34346a998eb3e8e564cad22d5473850ac228bed5a674ba90dac8de0d87d83f93f720722f92f4", 0x57, 0x10, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0x1c) pwritev2(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="d98ffdd3e1587368f3110aab", 0xc}, {&(0x7f00000001c0)="6f464f0b8c415ecd1ce5a70ca70d7e582c1722", 0x13}], 0x2, 0x7f, 0x9, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000300)={'nat\x00', 0x0, [0xc6a, 0x3, 0x0, 0x8, 0x400]}, &(0x7f0000000380)=0x54) r2 = dup(r1) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000003c0)=@srh={0x6, 0xe, 0x4, 0x7, 0x1, 0x8, 0xaec, [@dev={0xfe, 0x80, '\x00', 0x44}, @local, @private0, @remote, @mcast2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, 0x78) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000440)) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000480)={0x2f, 0x4, 0x2, 0x8, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, 0x28) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@private0, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000640)=0xe8) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x1000010, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@loose}, {@cache_loose}], [{@appraise}, {@fsname={'fsname', 0x3d, 'nat\x00'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000740)={0x87, 0x4, '\x00', [@hao={0xc9, 0x10, @private0}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x28) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000780)={'wlan1\x00', {0x2, 0x0, @private}}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000007c0)={0x85, 0x2b, '\x00', [@pad1, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @calipso={0x7, 0x30, {0x2, 0xa, 0x9, 0x8, [0x1f, 0x400, 0x8000, 0x4, 0x6]}}, @generic={0x2, 0xd0, "148f03211244b430521fab779b6ddb8842d10619ae4a5f36bc5d22e2f04a257cf661413e5d37af1ec6fea340aef47d909cf1f893e0f077fb1bb6aa984c985df36b5d88e98e86e92ecfd52d12ebbf7acae15c017507b783f5f55f640c2eb509b60fb5f4ef5701344b62299d80b20251fc8d73aab3dbd74827b67be771ccb923e50d69115d9548010437c0a51b3d041fb1ec467e512bd57c5126658ea2cf9e52892ed56d958e87150e7f9fbd06673cacd297629528bc718a384374e791ead5f9f2c9d83e792a7f7ecf30287c7d0990f5be"}, @ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x6, 0x4, [0xffffffffffffff00, 0x4cea75b0, 0x5, 0x3]}}]}, 0x168) setsockopt$inet6_buf(r1, 0x29, 0x2c, &(0x7f0000000940)="f3d03a7f4a2674be5d24ca9dac3a8d3b842f7a142707c6c30eb02265084e3d563b6d1cf0972172d2a23060ac902e7e74e6ffd05cce67ed9bb3528e40d0e412490401cc6166c708030c16458cb3547701381d4bf7156f79d719f066259e38e2f95c7579b074746aa68cc8e4a65916c5ea92ac", 0x72) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000009c0)={0x62, 0x2, 0x1, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010102}]}, 0x18) [ 75.883726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.885996] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.890135] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.891985] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.893747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.895584] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.897611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.899142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.902128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.905563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.907397] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.909399] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.911807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.913416] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.915529] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.958978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.962265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.969036] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.969158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.974686] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.977274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.979598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.981137] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.986546] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.003525] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.012816] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 76.016034] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 76.018734] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 76.021342] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 76.026289] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 76.030002] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 76.033047] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 76.035295] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 76.037826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 76.045824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 76.051022] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 76.054846] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 76.057053] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 76.059300] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 76.066314] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 76.196459] [ 76.197142] ============================= [ 76.197854] WARNING: suspicious RCU usage [ 76.198519] 6.16.0-rc4-next-20250702 #1 Not tainted [ 76.199717] ----------------------------- [ 76.201081] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 76.204206] [ 76.204206] other info that might help us debug this: [ 76.204206] [ 76.207657] [ 76.207657] rcu_scheduler_active = 2, debug_locks = 1 [ 76.209543] 3 locks held by syz-executor.4/285: [ 76.210323] #0: ffff88800f67a400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 76.211916] #1: ffff8880093ba618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 76.213594] #2: ffff888013fcf9c8 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 76.215159] [ 76.215159] stack backtrace: [ 76.215956] CPU: 0 UID: 0 PID: 285 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 76.215990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 76.216003] Call Trace: [ 76.216011] [ 76.216019] dump_stack_lvl+0xfa/0x120 [ 76.216045] lockdep_rcu_suspicious+0x152/0x1c0 [ 76.216072] proc_sys_compare+0x28a/0x340 [ 76.216095] ? __pfx_proc_sys_compare+0x10/0x10 [ 76.216119] d_same_name+0x229/0x2e0 [ 76.216142] d_alloc_parallel+0x7c1/0x1330 [ 76.216179] ? __pfx_d_alloc_parallel+0x10/0x10 [ 76.216207] ? __pfx_default_wake_function+0x10/0x10 [ 76.216239] ? __d_lookup+0x25f/0x490 [ 76.216272] lookup_open.isra.0+0x64f/0x1530 [ 76.216307] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 76.216358] ? mnt_get_write_access+0x81/0x2d0 [ 76.216380] ? mnt_get_write_access+0x1ea/0x2d0 [ 76.216409] path_openat+0xc26/0x2880 [ 76.216449] ? __lock_acquire+0x694/0x1b70 [ 76.216471] ? __pfx_path_openat+0x10/0x10 [ 76.216511] do_filp_open+0x1e8/0x450 [ 76.216542] ? __pfx_do_filp_open+0x10/0x10 [ 76.216584] ? find_held_lock+0x2b/0x80 [ 76.216615] ? alloc_fd+0x2c1/0x560 [ 76.216643] ? lock_release+0xc8/0x290 [ 76.216671] ? alloc_fd+0x2c1/0x560 [ 76.216708] do_sys_openat2+0x104/0x1b0 [ 76.216734] ? __pfx_do_sys_openat2+0x10/0x10 [ 76.216761] ? __fput+0x67b/0xb50 [ 76.216791] __x64_sys_openat+0x142/0x200 [ 76.216816] ? __pfx___x64_sys_openat+0x10/0x10 [ 76.216840] ? __pfx_fput_close_sync+0x10/0x10 [ 76.216877] do_syscall_64+0xbf/0x360 [ 76.216901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.216923] RIP: 0033:0x7f2ea1253a04 [ 76.216942] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 76.216961] RSP: 002b:00007fff23fe2d70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 76.216981] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f2ea1253a04 [ 76.216995] RDX: 0000000000080001 RSI: 00007f2ea130a2d3 RDI: 00000000ffffff9c [ 76.217008] RBP: 00007f2ea130a2d3 R08: 0000000000000000 R09: 00007fff23fe2d60 [ 76.217021] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 76.217034] R13: 00007fff23fe2e10 R14: 0000000000000000 R15: 00000000000000f8 [ 76.217063] [ 77.971065] Bluetooth: hci2: command tx timeout [ 77.971074] Bluetooth: hci1: command tx timeout [ 77.972626] Bluetooth: hci0: command tx timeout [ 78.034602] Bluetooth: hci4: command tx timeout [ 78.035279] Bluetooth: hci3: command tx timeout [ 78.098441] Bluetooth: hci5: command tx timeout [ 78.099598] Bluetooth: hci7: command tx timeout [ 78.163240] Bluetooth: hci6: command tx timeout [ 80.018453] Bluetooth: hci0: command tx timeout [ 80.019114] Bluetooth: hci2: command tx timeout [ 80.019543] Bluetooth: hci1: command tx timeout [ 80.083436] Bluetooth: hci4: command tx timeout [ 80.083850] Bluetooth: hci3: command tx timeout [ 80.147390] Bluetooth: hci7: command tx timeout [ 80.147781] Bluetooth: hci5: command tx timeout [ 80.210568] Bluetooth: hci6: command tx timeout [ 82.067463] Bluetooth: hci1: command tx timeout [ 82.067905] Bluetooth: hci2: command tx timeout [ 82.068282] Bluetooth: hci0: command tx timeout [ 82.130442] Bluetooth: hci3: command tx timeout [ 82.130842] Bluetooth: hci4: command tx timeout [ 82.195962] Bluetooth: hci5: command tx timeout [ 82.196388] Bluetooth: hci7: command tx timeout [ 82.259487] Bluetooth: hci6: command tx timeout [ 84.114610] Bluetooth: hci0: command tx timeout [ 84.115085] Bluetooth: hci2: command tx timeout [ 84.116400] Bluetooth: hci1: command tx timeout [ 84.179574] Bluetooth: hci4: command tx timeout [ 84.180024] Bluetooth: hci3: command tx timeout [ 84.243403] Bluetooth: hci7: command tx timeout [ 84.243814] Bluetooth: hci5: command tx timeout [ 84.306497] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 01:40:13 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828ba3e5 RDI=ffffffff88722060 RBP=ffffffff88722020 RSP=ffff88801767f2b8 R8 =0000000000000000 R9 =ffffed10016cf046 R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88722020 R15=ffffffff828ba3d0 RIP=ffffffff828ba43d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555585222400 00000000 00000000 GS =0000 ffff8880e55ef000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005629decb0060 CR3=000000003b228000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003f847ae147ae147b XMM02=00000000000000000000000000000000 XMM03=00000000000000003f7461a0494c1ccc XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=000000000000000a000000c000014016 XMM09=000000000000002a000000c000016000 XMM10=0000000000000009000000c000014040 XMM11=0000000000000007000000c000014049 XMM12=000000000000001c000000c000018000 XMM13=0000000000000041000000c00001a000 XMM14=000000000000000c000000c000014050 XMM15=000000000000000d000000c000014060 info registers vcpu 1 RAX=0000000000020000 RBX=ffff8880135f3700 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff85c1ccc0 RBP=ffff8880135f4158 RSP=ffff88801942ed20 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=ffff8880135f41a8 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81518ff5 RFL=00000056 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56ef000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7cbf20a8e0 CR3=000000003c862000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000