Warning: Permanently added '[localhost]:24269' (ECDSA) to the list of known hosts. 2026/01/19 02:25:27 fuzzer started 2026/01/19 02:25:27 dialing manager at localhost:42157 syzkaller login: [ 51.506317] cgroup: Unknown subsys name 'net' [ 51.583760] cgroup: Unknown subsys name 'cpuset' [ 51.607198] cgroup: Unknown subsys name 'rlimit' 2026/01/19 02:25:38 syscalls: 200 2026/01/19 02:25:38 code coverage: enabled 2026/01/19 02:25:38 comparison tracing: enabled 2026/01/19 02:25:38 extra coverage: enabled 2026/01/19 02:25:38 setuid sandbox: enabled 2026/01/19 02:25:38 namespace sandbox: enabled 2026/01/19 02:25:38 Android sandbox: enabled 2026/01/19 02:25:38 fault injection: enabled 2026/01/19 02:25:38 leak checking: enabled 2026/01/19 02:25:38 net packet injection: enabled 2026/01/19 02:25:38 net device setup: enabled 2026/01/19 02:25:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/19 02:25:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/19 02:25:38 USB emulation: enabled 2026/01/19 02:25:38 hci packet injection: enabled 2026/01/19 02:25:38 wifi device emulation: enabled 2026/01/19 02:25:38 802.15.4 emulation: enabled 2026/01/19 02:25:38 fetching corpus: 0, signal 0/0 (executing program) 2026/01/19 02:25:39 starting 8 fuzzer processes 02:25:39 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb3fbf1fa8532b239}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r3) r4 = fsmount(r2, 0x1, 0x30) write$snapshot(r4, &(0x7f00000002c0)="dd1261b805d17f1b3918fc60891869152f7d7e695d06d9f13b9711a4bcb5a5399f122a621c4ecfafa7ab3e26c8ee928ba253456253f17acbb89b670c9d092c4de184e4b9520391b0b2e8b68351b44ad528b841dbc808599faea290db2654af10e3f83ab3e1a89da3e9ef0d1f48002b566ab2", 0x72) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000340)='+)X\'\\&}[\xa2+$', 0x0, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r4) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x148, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xd3, 0xa8, @random="c8ab9ed299a9905502fe64dd9bcae18a6ac056b2deeda7040357ec9fc39506a19eab0d9c1f26a51b8d185435eb3e619a88c02b1431ce36870fd82872fca9acf71fdad74cfb88227326ded962efdc17179326a41523c7ddb0f5a76875f91b20e7681bfc83a4f1f383bb96865d632d57070eac399f01677c5f0ae44a888bd9c6c1ad2766cf6827c7f6da362d71a146c5e21665435575a3e2e11ca2f8e5a5f3d6a78c314b03c0fd96358dbff79415bf174cdc4d981a853cfc66dcd865d6b35734d855dddf0261e7439b036a38ababcd18"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x148}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) r6 = fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x0, 0x88) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1f}]}, 0x20}}, 0x20000000) 02:25:39 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000001800)={0x9, 0x0, &(0x7f00000017c0)=[r0, r4]}, 0x2) r6 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001840), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000001880)={'veth1_to_bridge', 0x32, 0x35}, 0x12) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x15) 02:25:39 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000100)={0x8001, 0x4}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) write$snapshot(r4, &(0x7f0000000180)="4012df397578fa4709578cb3f86bcc1b0a9e1242128e9f973ae7ee", 0x1b) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x9) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 02:25:39 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "f299747ce1700ccf7ac63a569cb3bad968e92e921c9d54f8d060bfac4711daa1a9c1c995b751bf056f018f8cb9aa99f72c91ae42ac94e1a4376e55536859f446d0bcd45f6600d846b22b73aa290176f41aa0cbf22f8130dae23c901e1216bfe3c278a2b795be70ee7d33f8e74326ddfbb9a790793ec22915f38eca7ff95210e292e9f9d906adfb71023730e2c94beec1b1165e9bc0b6871c87e89d2089fdac24a59fe1f7f1163a395f134ce1116a01e690718bc4798a22773b285863baaa9171d140d93187a9449fd96045915bd568ffa27b827d8d81b2cf0ea5cb8537a19a348eaef6df425f28f70b94176741cc2810ec19e3f5e1638b36020b1ba49ed3942fc1f05f9466b078b2c963735d4508c73489b50dd3da428c4f21bdda94b2be630a79b4c7ec7b280c85ea1925b4b9749847616613633bcb10abc4603b396dab562c814b1a4feaee3a35a1c0ede10c84fae2db47fd19936e03201309171a086132337f23cdf1f328d1e19d1c27f939b06ecdb816e1dd00ad50884305bf9aebb4673259490bc17ce3fb8d11a393df9e40ecabc0585bc505639ef31cf355222f1efe641db1781a76ba0c2ab47ff538ba8d3abdf490397c0c56a8e92449b12d5079aa21597a54e979bd9b3d426269c2a58dc39cc4f1cf6e9c6ec968d98c825447eede13cf8c81b6611669674b1b3560748d126e1f553079086d08081397d1a892ad4dbb55eb3503e48a4690899f4ccd8a92e45048480f955c57f1b691da17ced58806972836d4a9496e6bb74510d24ba1cad255062aac0ba42172f5c3bd99ee525953274c396631302dfcd46e81d13de6fefd1f70a4f51e0eb38021e15ca5abccb864ed7c4fc3de8aa03d7ee64e5fb4cdc33a9b1cadb6e98f4820a2425dc86e0b1452178e81ac982fc0b3c089d291794584ac94c4078bb8555d8833fc66f7fc399286bd6894b7c1c6dda9501e8f9e7e24a5131904e9a3a79ca794ef67459d084f7a71fc359747cf3b7d44261d1d30f4532e7463c8eaf493aca3d28fcb0de26214b66f5685becbd51b97e0cb9f096e4ba036af902a2e27416ce933f14fe83bbf5e21b1b80d014c229042a6671b5f79e3129393de2de1afaf8d060282b9e10306781c03b5912179963fa1f6ca17d66b73a33d87a912aab3622bfb3d7a5d119509ec3bfe6103fc09ee6acc187e8ada25dabb7b6a3f41302e4795bc63ffdf8a2670107a2dbe0fd0395bce86654a8454baeab493ededa28a239d2116ef5f3cc0e2117331cdb44fe39a32129bcd0bbb671182e2a35cb47ea2e4e8643f6b7720c50cff249bb12edfde5775a7909229f3e94704803475610465ad4b2fc9febc5935aaa6df56d9923dd2da97cf6d89320b8e"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000880)={0xf9, "2a5a261329becac366a24aaee20ba98b5d7351437db89fb6e54ae54691687b2c0e4c7070be95133c9016b9d6bc5f49e8e1c1e0f8d0207dd84d1477cc3fb80e52"}) r1 = io_uring_setup(0xbcb, &(0x7f0000000900)={0x0, 0x7fb5, 0x4, 0x0, 0x2bd}) socketpair(0x2b, 0x800, 0x100, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) r5 = io_uring_setup(0x54f, &(0x7f0000000a00)={0x0, 0x3e1b, 0x10, 0x1, 0x26c}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000a80)=[r2, r4, r0, r0, r0, r0, r5], 0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs2/binder-control\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000b00), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xb8, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3f}}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x1) r6 = shmget(0x1, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000000cc0)=""/24) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xb4, 0x0, 0x102, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x2001) r7 = fsmount(0xffffffffffffffff, 0x0, 0x4) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001}, 0x0) 02:25:39 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}}, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x408000, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) write$snapshot(r3, &(0x7f0000000380)="61ddcae38ccb9f24cc9efdfd297f904df8000e611b06a5186c375874b1dd4803a856e7af36c1489019285aa10fa194540f59240c87305e615fa16ff6e55af2c3c0e05d46327610595031ed2487b0dbd8163d6997ec17dd7f85b0ea4d8d763f90cbce695684727c6e1c490996727269aa92c53728d61851e5cf9292e035f0f91176743fedab83c81bd5cf197c82fb78a7bbada1c80488986c75d870f7d35e17756731a47315f1102f1b216b88d00fa379b690e9482b3174eae1769c1a485bc4ff255e514598d52a1983c9", 0xca) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r4 = fsmount(0xffffffffffffffff, 0x1, 0x3) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000480)) syz_genetlink_get_family_id$team(&(0x7f00000004c0), r4) r5 = fsmount(r4, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r5, 0x3309) r6 = fsmount(r4, 0x0, 0x88) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x44404100}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x90, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6ea}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4090}, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) [ 61.390151] audit: type=1400 audit(1768789539.367:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:25:39 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000380)='!%\x00&\x00', &(0x7f00000003c0)="d03f78edc840824834bd7e7ca33ebcb8e072d547ec49172fed4b197c5c49710e470678fa3fa8f4fb09e3056c4eec849f342746cd2122e5e1bb77c60055e1b7d0eb7d1d77b679b2add4f4ffbd300cf634a4cf7470d6f48d5a92cab8993e8000fdfc131d5245ba4c99b3926826bd09194d48e6c4722188fb2eac4e", 0x7a) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5) r6 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) r8 = socket$inet(0x2, 0x4, 0xef24) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000600)=[r7, r8, r4, r4, r3, r9], 0x6) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x33, 0x1}, 0x7) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000680)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x13) write$P9_RREADDIR(r5, &(0x7f0000000740)={0x109, 0x29, 0x1, {0xa708, [{{0x80, 0x0, 0x2}, 0xfffffffffffffffd, 0x72, 0x7, './file1'}, {{0x1, 0x3, 0x4}, 0x9, 0x20, 0x7, './file0'}, {{0x0, 0x0, 0x4}, 0x5eb2c3d, 0x1, 0x7, './file0'}, {{0x4, 0x1, 0x2}, 0x1, 0xe1, 0x7, './file0'}, {{0x80, 0x1, 0x6}, 0x5, 0x20, 0x7, './file0'}, {{0x4, 0x1, 0x4}, 0x8001000000000000, 0x80, 0xd, './file0/file0'}, {{0x1, 0x4, 0x7}, 0x10001, 0x5, 0x7, './file0'}, {{0x1, 0x2, 0x6}, 0x2, 0x8, 0x7, './file0'}]}}, 0x109) 02:25:39 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r4 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x2100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000004c0)={0x1ff, "7b1016"}, 0x6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x244, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x388}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x37}, {0x8, 0x15, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xda49}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf28a}, {0x6, 0x11, 0x4a}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x84ed}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2395}, {0x6, 0x11, 0xf800}, {0x8, 0x15, 0x36}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x24000011) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) accept4$bt_l2cap(r7, &(0x7f00000009c0)={0x1f, 0x0, @none}, &(0x7f0000000a00)=0xe, 0x80800) r8 = fspick(r7, &(0x7f0000000a40)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000a80)='dirsync\x00', 0x0, 0x0) 02:25:39 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) r1 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x0, r2, r3, 0xee00, 0xee01, 0x13c, 0xff}, 0xffff7fff, 0x4, 0x7, 0x7, r4, 0xffffffffffffffff, 0xbcae}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = getpid() ioprio_get$pid(0x1, r5) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000001c0)=""/149) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) syz_io_uring_setup(0x3914, &(0x7f0000000300)={0x0, 0x54c6, 0x2, 0x1, 0x11d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0x1d, 0x5, 0x8, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)) r6 = fsmount(0xffffffffffffffff, 0x1, 0x70) write$P9_RREMOVE(r6, &(0x7f00000004c0)={0x7, 0x7b, 0x2}, 0x7) shmget(0x1, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) connect$bt_sco(r6, &(0x7f0000000500)={0x1f, @none}, 0x8) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000540)=""/22) [ 62.503311] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.505130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.509780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.517820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.521016] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.553558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.556624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.564637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.573060] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.580591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.642433] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.651083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.655808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.657555] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.658960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.666073] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.668995] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.671678] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.673451] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.676362] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.678293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.682937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.685700] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.699227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.701973] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.708232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 62.710108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 62.712104] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 62.718443] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 62.721667] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 62.748202] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 62.752652] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 62.759917] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 62.761216] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 62.765630] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 62.798511] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 62.803369] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 62.805852] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 62.812751] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 62.881808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.534510] Bluetooth: hci0: command tx timeout [ 64.597830] Bluetooth: hci1: command tx timeout [ 64.727533] Bluetooth: hci3: command tx timeout [ 64.790649] Bluetooth: hci5: command tx timeout [ 64.790868] Bluetooth: hci4: command tx timeout [ 64.792629] Bluetooth: hci2: command tx timeout [ 64.854797] Bluetooth: hci7: command tx timeout [ 65.109738] Bluetooth: hci6: command tx timeout [ 66.583542] Bluetooth: hci0: command tx timeout [ 66.646563] Bluetooth: hci1: command tx timeout [ 66.773910] Bluetooth: hci3: command tx timeout [ 66.837609] Bluetooth: hci5: command tx timeout [ 66.838087] Bluetooth: hci4: command tx timeout [ 66.838522] Bluetooth: hci2: command tx timeout [ 66.902607] Bluetooth: hci7: command tx timeout [ 67.157528] Bluetooth: hci6: command tx timeout [ 68.630191] Bluetooth: hci0: command tx timeout [ 68.693599] Bluetooth: hci1: command tx timeout [ 68.821611] Bluetooth: hci3: command tx timeout [ 68.885671] Bluetooth: hci4: command tx timeout [ 68.885783] Bluetooth: hci2: command tx timeout [ 68.886134] Bluetooth: hci5: command tx timeout [ 68.950608] Bluetooth: hci7: command tx timeout [ 69.205536] Bluetooth: hci6: command tx timeout [ 70.678515] Bluetooth: hci0: command tx timeout [ 70.742846] Bluetooth: hci1: command tx timeout [ 70.870540] Bluetooth: hci3: command tx timeout [ 70.934525] Bluetooth: hci2: command tx timeout [ 70.934935] Bluetooth: hci4: command tx timeout [ 70.935583] Bluetooth: hci5: command tx timeout [ 70.999235] Bluetooth: hci7: command tx timeout [ 71.253598] Bluetooth: hci6: command tx timeout [ 97.216342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.217037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.409027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.409946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.410847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.411408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.477482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.478085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.740817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.740926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.741832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.747571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:26:15 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "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"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000880)={0xf9, "2a5a261329becac366a24aaee20ba98b5d7351437db89fb6e54ae54691687b2c0e4c7070be95133c9016b9d6bc5f49e8e1c1e0f8d0207dd84d1477cc3fb80e52"}) r1 = io_uring_setup(0xbcb, &(0x7f0000000900)={0x0, 0x7fb5, 0x4, 0x0, 0x2bd}) socketpair(0x2b, 0x800, 0x100, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) r5 = io_uring_setup(0x54f, &(0x7f0000000a00)={0x0, 0x3e1b, 0x10, 0x1, 0x26c}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000a80)=[r2, r4, r0, r0, r0, r0, r5], 0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs2/binder-control\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000b00), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xb8, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3f}}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x1) r6 = shmget(0x1, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000000cc0)=""/24) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xb4, 0x0, 0x102, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x2001) r7 = fsmount(0xffffffffffffffff, 0x0, 0x4) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001}, 0x0) [ 97.845606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.846212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:26:15 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "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"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000880)={0xf9, "2a5a261329becac366a24aaee20ba98b5d7351437db89fb6e54ae54691687b2c0e4c7070be95133c9016b9d6bc5f49e8e1c1e0f8d0207dd84d1477cc3fb80e52"}) r1 = io_uring_setup(0xbcb, &(0x7f0000000900)={0x0, 0x7fb5, 0x4, 0x0, 0x2bd}) socketpair(0x2b, 0x800, 0x100, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) r5 = io_uring_setup(0x54f, &(0x7f0000000a00)={0x0, 0x3e1b, 0x10, 0x1, 0x26c}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000a80)=[r2, r4, r0, r0, r0, r0, r5], 0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs2/binder-control\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000b00), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xb8, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3f}}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x1) r6 = shmget(0x1, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000000cc0)=""/24) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xb4, 0x0, 0x102, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x2001) r7 = fsmount(0xffffffffffffffff, 0x0, 0x4) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001}, 0x0) [ 97.950694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.951277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:26:15 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "f299747ce1700ccf7ac63a569cb3bad968e92e921c9d54f8d060bfac4711daa1a9c1c995b751bf056f018f8cb9aa99f72c91ae42ac94e1a4376e55536859f446d0bcd45f6600d846b22b73aa290176f41aa0cbf22f8130dae23c901e1216bfe3c278a2b795be70ee7d33f8e74326ddfbb9a790793ec22915f38eca7ff95210e292e9f9d906adfb71023730e2c94beec1b1165e9bc0b6871c87e89d2089fdac24a59fe1f7f1163a395f134ce1116a01e690718bc4798a22773b285863baaa9171d140d93187a9449fd96045915bd568ffa27b827d8d81b2cf0ea5cb8537a19a348eaef6df425f28f70b94176741cc2810ec19e3f5e1638b36020b1ba49ed3942fc1f05f9466b078b2c963735d4508c73489b50dd3da428c4f21bdda94b2be630a79b4c7ec7b280c85ea1925b4b9749847616613633bcb10abc4603b396dab562c814b1a4feaee3a35a1c0ede10c84fae2db47fd19936e03201309171a086132337f23cdf1f328d1e19d1c27f939b06ecdb816e1dd00ad50884305bf9aebb4673259490bc17ce3fb8d11a393df9e40ecabc0585bc505639ef31cf355222f1efe641db1781a76ba0c2ab47ff538ba8d3abdf490397c0c56a8e92449b12d5079aa21597a54e979bd9b3d426269c2a58dc39cc4f1cf6e9c6ec968d98c825447eede13cf8c81b6611669674b1b3560748d126e1f553079086d08081397d1a892ad4dbb55eb3503e48a4690899f4ccd8a92e45048480f955c57f1b691da17ced58806972836d4a9496e6bb74510d24ba1cad255062aac0ba42172f5c3bd99ee525953274c396631302dfcd46e81d13de6fefd1f70a4f51e0eb38021e15ca5abccb864ed7c4fc3de8aa03d7ee64e5fb4cdc33a9b1cadb6e98f4820a2425dc86e0b1452178e81ac982fc0b3c089d291794584ac94c4078bb8555d8833fc66f7fc399286bd6894b7c1c6dda9501e8f9e7e24a5131904e9a3a79ca794ef67459d084f7a71fc359747cf3b7d44261d1d30f4532e7463c8eaf493aca3d28fcb0de26214b66f5685becbd51b97e0cb9f096e4ba036af902a2e27416ce933f14fe83bbf5e21b1b80d014c229042a6671b5f79e3129393de2de1afaf8d060282b9e10306781c03b5912179963fa1f6ca17d66b73a33d87a912aab3622bfb3d7a5d119509ec3bfe6103fc09ee6acc187e8ada25dabb7b6a3f41302e4795bc63ffdf8a2670107a2dbe0fd0395bce86654a8454baeab493ededa28a239d2116ef5f3cc0e2117331cdb44fe39a32129bcd0bbb671182e2a35cb47ea2e4e8643f6b7720c50cff249bb12edfde5775a7909229f3e94704803475610465ad4b2fc9febc5935aaa6df56d9923dd2da97cf6d89320b8e"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000880)={0xf9, "2a5a261329becac366a24aaee20ba98b5d7351437db89fb6e54ae54691687b2c0e4c7070be95133c9016b9d6bc5f49e8e1c1e0f8d0207dd84d1477cc3fb80e52"}) r1 = io_uring_setup(0xbcb, &(0x7f0000000900)={0x0, 0x7fb5, 0x4, 0x0, 0x2bd}) socketpair(0x2b, 0x800, 0x100, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) r5 = io_uring_setup(0x54f, &(0x7f0000000a00)={0x0, 0x3e1b, 0x10, 0x1, 0x26c}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000a80)=[r2, r4, r0, r0, r0, r0, r5], 0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs2/binder-control\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000b00), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xb8, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3f}}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x1) r6 = shmget(0x1, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000000cc0)=""/24) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xb4, 0x0, 0x102, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x2001) r7 = fsmount(0xffffffffffffffff, 0x0, 0x4) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001}, 0x0) [ 97.992979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.993602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:26:16 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "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"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000880)={0xf9, "2a5a261329becac366a24aaee20ba98b5d7351437db89fb6e54ae54691687b2c0e4c7070be95133c9016b9d6bc5f49e8e1c1e0f8d0207dd84d1477cc3fb80e52"}) r1 = io_uring_setup(0xbcb, &(0x7f0000000900)={0x0, 0x7fb5, 0x4, 0x0, 0x2bd}) socketpair(0x2b, 0x800, 0x100, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) r5 = io_uring_setup(0x54f, &(0x7f0000000a00)={0x0, 0x3e1b, 0x10, 0x1, 0x26c}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000a80)=[r2, r4, r0, r0, r0, r0, r5], 0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs2/binder-control\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000b00), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xb8, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3f}}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x1) r6 = shmget(0x1, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000000cc0)=""/24) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xb4, 0x0, 0x102, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x2001) fsmount(0xffffffffffffffff, 0x0, 0x4) [ 98.077978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.080216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:26:16 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "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"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000880)={0xf9, "2a5a261329becac366a24aaee20ba98b5d7351437db89fb6e54ae54691687b2c0e4c7070be95133c9016b9d6bc5f49e8e1c1e0f8d0207dd84d1477cc3fb80e52"}) r1 = io_uring_setup(0xbcb, &(0x7f0000000900)={0x0, 0x7fb5, 0x4, 0x0, 0x2bd}) socketpair(0x2b, 0x800, 0x100, &(0x7f0000000980)={0xffffffffffffffff}) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) r4 = io_uring_setup(0x54f, &(0x7f0000000a00)={0x0, 0x3e1b, 0x10, 0x1, 0x26c}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000a80)=[r2, r3, r0, r0, r0, r0, r4], 0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs2/binder-control\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000b00), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xb8, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3f}}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x1) r5 = shmget(0x1, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000cc0)=""/24) fsmount(0xffffffffffffffff, 0x0, 0x4) 02:26:16 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "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"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000880)={0xf9, "2a5a261329becac366a24aaee20ba98b5d7351437db89fb6e54ae54691687b2c0e4c7070be95133c9016b9d6bc5f49e8e1c1e0f8d0207dd84d1477cc3fb80e52"}) r1 = io_uring_setup(0xbcb, &(0x7f0000000900)={0x0, 0x7fb5, 0x4, 0x0, 0x2bd}) socketpair(0x2b, 0x800, 0x100, &(0x7f0000000980)={0xffffffffffffffff}) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) r4 = io_uring_setup(0x54f, &(0x7f0000000a00)={0x0, 0x3e1b, 0x10, 0x1, 0x26c}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000a80)=[r2, r3, r0, r0, r0, r0, r4], 0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs2/binder-control\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000b00), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xb8, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3f}}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x1) shmget(0x1, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) fsmount(0xffffffffffffffff, 0x0, 0x4) 02:26:16 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "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"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000880)={0xf9, "2a5a261329becac366a24aaee20ba98b5d7351437db89fb6e54ae54691687b2c0e4c7070be95133c9016b9d6bc5f49e8e1c1e0f8d0207dd84d1477cc3fb80e52"}) r1 = io_uring_setup(0xbcb, &(0x7f0000000900)={0x0, 0x7fb5, 0x4, 0x0, 0x2bd}) socketpair(0x2b, 0x800, 0x100, &(0x7f0000000980)={0xffffffffffffffff}) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) r4 = io_uring_setup(0x54f, &(0x7f0000000a00)={0x0, 0x3e1b, 0x10, 0x1, 0x26c}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000a80)=[r2, r3, r0, r0, r0, r0, r4], 0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs2/binder-control\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000b00), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xb8, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3f}}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x1) fsmount(0xffffffffffffffff, 0x0, 0x4) [ 98.268818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.269446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:26:16 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "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"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000880)={0xf9, "2a5a261329becac366a24aaee20ba98b5d7351437db89fb6e54ae54691687b2c0e4c7070be95133c9016b9d6bc5f49e8e1c1e0f8d0207dd84d1477cc3fb80e52"}) r1 = io_uring_setup(0xbcb, &(0x7f0000000900)={0x0, 0x7fb5, 0x4, 0x0, 0x2bd}) socketpair(0x2b, 0x800, 0x100, &(0x7f0000000980)={0xffffffffffffffff}) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) r4 = io_uring_setup(0x54f, &(0x7f0000000a00)={0x0, 0x3e1b, 0x10, 0x1, 0x26c}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000a80)=[r2, r3, r0, r0, r0, r0, r4], 0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs2/binder-control\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000b00), 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) [ 98.299116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.299736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.345993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.346665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.524395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.525066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.269435] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.271355] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.280158] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.288421] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.292668] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.298804] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.302250] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.304899] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 99.309169] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 99.314171] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.316176] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.319856] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.323836] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 99.325013] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 99.329430] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 99.333193] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 99.334391] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 99.338995] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 99.346025] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 99.347660] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 99.352247] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 99.356361] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 99.358395] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 99.361989] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 99.438110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.439744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.513119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.514151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.556116] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.557794] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.559393] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.561422] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.563215] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 100.565104] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 100.567036] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 100.578058] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 101.653609] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.613652] Bluetooth: hci7: command 0x0c1a tx timeout [ 102.614514] Bluetooth: hci6: command 0x0c1a tx timeout [ 102.614869] Bluetooth: hci5: command 0x0c1a tx timeout [ 102.615625] Bluetooth: hci4: command 0x0c1a tx timeout [ 102.619527] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.621216] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.621925] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.702530] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.661581] Bluetooth: hci5: command 0x0c1a tx timeout [ 104.662672] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.663641] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.665291] Bluetooth: hci6: command 0x0c1a tx timeout [ 104.665340] Bluetooth: hci7: command 0x0c1a tx timeout [ 104.665377] Bluetooth: hci4: command 0x0c1a tx timeout [ 104.665399] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.749623] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.709647] Bluetooth: hci6: command 0x0c1a tx timeout [ 106.710808] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.711926] Bluetooth: hci4: command 0x0c1a tx timeout [ 106.712837] Bluetooth: hci7: command 0x0c1a tx timeout [ 106.713420] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.714360] Bluetooth: hci5: command 0x0c1a tx timeout [ 106.714954] Bluetooth: hci3: command 0x0c1a tx timeout 02:26:28 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "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"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000880)={0xf9, "2a5a261329becac366a24aaee20ba98b5d7351437db89fb6e54ae54691687b2c0e4c7070be95133c9016b9d6bc5f49e8e1c1e0f8d0207dd84d1477cc3fb80e52"}) r1 = io_uring_setup(0xbcb, &(0x7f0000000900)={0x0, 0x7fb5, 0x4, 0x0, 0x2bd}) socketpair(0x2b, 0x800, 0x100, &(0x7f0000000980)={0xffffffffffffffff}) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) r4 = io_uring_setup(0x54f, &(0x7f0000000a00)={0x0, 0x3e1b, 0x10, 0x1, 0x26c}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000a80)=[r2, r3, r0, r0, r0, r0, r4], 0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs2/binder-control\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) 02:26:28 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb3fbf1fa8532b239}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r3) r4 = fsmount(r2, 0x1, 0x30) write$snapshot(r4, &(0x7f00000002c0)="dd1261b805d17f1b3918fc60891869152f7d7e695d06d9f13b9711a4bcb5a5399f122a621c4ecfafa7ab3e26c8ee928ba253456253f17acbb89b670c9d092c4de184e4b9520391b0b2e8b68351b44ad528b841dbc808599faea290db2654af10e3f83ab3e1a89da3e9ef0d1f48002b566ab2", 0x72) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000340)='+)X\'\\&}[\xa2+$', 0x0, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r4) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x148, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xd3, 0xa8, @random="c8ab9ed299a9905502fe64dd9bcae18a6ac056b2deeda7040357ec9fc39506a19eab0d9c1f26a51b8d185435eb3e619a88c02b1431ce36870fd82872fca9acf71fdad74cfb88227326ded962efdc17179326a41523c7ddb0f5a76875f91b20e7681bfc83a4f1f383bb96865d632d57070eac399f01677c5f0ae44a888bd9c6c1ad2766cf6827c7f6da362d71a146c5e21665435575a3e2e11ca2f8e5a5f3d6a78c314b03c0fd96358dbff79415bf174cdc4d981a853cfc66dcd865d6b35734d855dddf0261e7439b036a38ababcd18"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x148}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) r6 = fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x0, 0x88) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1f}]}, 0x20}}, 0x20000000) 02:26:28 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000001800)={0x9, 0x0, &(0x7f00000017c0)=[r0, r4]}, 0x2) r6 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001840), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000001880)={'veth1_to_bridge', 0x32, 0x35}, 0x12) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x15) 02:26:28 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000100)={0x8001, 0x4}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) write$snapshot(r4, &(0x7f0000000180)="4012df397578fa4709578cb3f86bcc1b0a9e1242128e9f973ae7ee", 0x1b) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x9) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 02:26:28 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}}, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x408000, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) write$snapshot(r3, &(0x7f0000000380)="61ddcae38ccb9f24cc9efdfd297f904df8000e611b06a5186c375874b1dd4803a856e7af36c1489019285aa10fa194540f59240c87305e615fa16ff6e55af2c3c0e05d46327610595031ed2487b0dbd8163d6997ec17dd7f85b0ea4d8d763f90cbce695684727c6e1c490996727269aa92c53728d61851e5cf9292e035f0f91176743fedab83c81bd5cf197c82fb78a7bbada1c80488986c75d870f7d35e17756731a47315f1102f1b216b88d00fa379b690e9482b3174eae1769c1a485bc4ff255e514598d52a1983c9", 0xca) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r4 = fsmount(0xffffffffffffffff, 0x1, 0x3) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000480)) syz_genetlink_get_family_id$team(&(0x7f00000004c0), r4) r5 = fsmount(r4, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r5, 0x3309) r6 = fsmount(r4, 0x0, 0x88) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x44404100}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x90, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6ea}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4090}, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 02:26:28 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) r1 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x0, r2, r3, 0xee00, 0xee01, 0x13c, 0xff}, 0xffff7fff, 0x4, 0x7, 0x7, r4, 0xffffffffffffffff, 0xbcae}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = getpid() ioprio_get$pid(0x1, r5) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000001c0)=""/149) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) syz_io_uring_setup(0x3914, &(0x7f0000000300)={0x0, 0x54c6, 0x2, 0x1, 0x11d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0x1d, 0x5, 0x8, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)) r6 = fsmount(0xffffffffffffffff, 0x1, 0x70) write$P9_RREMOVE(r6, &(0x7f00000004c0)={0x7, 0x7b, 0x2}, 0x7) shmget(0x1, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) connect$bt_sco(r6, &(0x7f0000000500)={0x1f, @none}, 0x8) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000540)=""/22) 02:26:28 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000380)='!%\x00&\x00', &(0x7f00000003c0)="d03f78edc840824834bd7e7ca33ebcb8e072d547ec49172fed4b197c5c49710e470678fa3fa8f4fb09e3056c4eec849f342746cd2122e5e1bb77c60055e1b7d0eb7d1d77b679b2add4f4ffbd300cf634a4cf7470d6f48d5a92cab8993e8000fdfc131d5245ba4c99b3926826bd09194d48e6c4722188fb2eac4e", 0x7a) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5) r6 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) r8 = socket$inet(0x2, 0x4, 0xef24) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000600)=[r7, r8, r4, r4, r3, r9], 0x6) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x33, 0x1}, 0x7) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000680)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x13) write$P9_RREADDIR(r5, &(0x7f0000000740)={0x109, 0x29, 0x1, {0xa708, [{{0x80, 0x0, 0x2}, 0xfffffffffffffffd, 0x72, 0x7, './file1'}, {{0x1, 0x3, 0x4}, 0x9, 0x20, 0x7, './file0'}, {{0x0, 0x0, 0x4}, 0x5eb2c3d, 0x1, 0x7, './file0'}, {{0x4, 0x1, 0x2}, 0x1, 0xe1, 0x7, './file0'}, {{0x80, 0x1, 0x6}, 0x5, 0x20, 0x7, './file0'}, {{0x4, 0x1, 0x4}, 0x8001000000000000, 0x80, 0xd, './file0/file0'}, {{0x1, 0x4, 0x7}, 0x10001, 0x5, 0x7, './file0'}, {{0x1, 0x2, 0x6}, 0x2, 0x8, 0x7, './file0'}]}}, 0x109) 02:26:28 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r4 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x2100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000004c0)={0x1ff, "7b1016"}, 0x6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x244, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x388}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x37}, {0x8, 0x15, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xda49}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf28a}, {0x6, 0x11, 0x4a}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x84ed}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2395}, {0x6, 0x11, 0xf800}, {0x8, 0x15, 0x36}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x24000011) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) accept4$bt_l2cap(r7, &(0x7f00000009c0)={0x1f, 0x0, @none}, &(0x7f0000000a00)=0xe, 0x80800) r8 = fspick(r7, &(0x7f0000000a40)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000a80)='dirsync\x00', 0x0, 0x0) [ 111.736105] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.738428] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.739912] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.741358] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.743013] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 111.744332] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 111.746033] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 111.747985] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 112.918526] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.749609] Bluetooth: hci7: command 0x0c1a tx timeout [ 113.750515] Bluetooth: hci6: command 0x0c1a tx timeout [ 113.750729] Bluetooth: hci5: command 0x0c1a tx timeout [ 113.751395] Bluetooth: hci4: command 0x0c1a tx timeout [ 113.752301] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.752337] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.753103] Bluetooth: hci1: command 0x0c1a tx timeout 02:26:38 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) r1 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x0, r2, r3, 0xee00, 0xee01, 0x13c, 0xff}, 0xffff7fff, 0x4, 0x7, 0x7, r4, 0xffffffffffffffff, 0xbcae}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = getpid() ioprio_get$pid(0x1, r5) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000001c0)=""/149) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) syz_io_uring_setup(0x3914, &(0x7f0000000300)={0x0, 0x54c6, 0x2, 0x1, 0x11d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0x1d, 0x5, 0x8, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)) r6 = fsmount(0xffffffffffffffff, 0x1, 0x70) write$P9_RREMOVE(r6, &(0x7f00000004c0)={0x7, 0x7b, 0x2}, 0x7) shmget(0x1, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) connect$bt_sco(r6, &(0x7f0000000500)={0x1f, @none}, 0x8) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000540)=""/22) 02:26:38 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000100)={0x8001, 0x4}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) write$snapshot(r4, &(0x7f0000000180)="4012df397578fa4709578cb3f86bcc1b0a9e1242128e9f973ae7ee", 0x1b) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x9) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 02:26:38 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}}, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x408000, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) write$snapshot(r3, &(0x7f0000000380)="61ddcae38ccb9f24cc9efdfd297f904df8000e611b06a5186c375874b1dd4803a856e7af36c1489019285aa10fa194540f59240c87305e615fa16ff6e55af2c3c0e05d46327610595031ed2487b0dbd8163d6997ec17dd7f85b0ea4d8d763f90cbce695684727c6e1c490996727269aa92c53728d61851e5cf9292e035f0f91176743fedab83c81bd5cf197c82fb78a7bbada1c80488986c75d870f7d35e17756731a47315f1102f1b216b88d00fa379b690e9482b3174eae1769c1a485bc4ff255e514598d52a1983c9", 0xca) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r4 = fsmount(0xffffffffffffffff, 0x1, 0x3) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000480)) syz_genetlink_get_family_id$team(&(0x7f00000004c0), r4) r5 = fsmount(r4, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r5, 0x3309) r6 = fsmount(r4, 0x0, 0x88) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x44404100}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x90, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6ea}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4090}, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 02:26:38 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000380)='!%\x00&\x00', &(0x7f00000003c0)="d03f78edc840824834bd7e7ca33ebcb8e072d547ec49172fed4b197c5c49710e470678fa3fa8f4fb09e3056c4eec849f342746cd2122e5e1bb77c60055e1b7d0eb7d1d77b679b2add4f4ffbd300cf634a4cf7470d6f48d5a92cab8993e8000fdfc131d5245ba4c99b3926826bd09194d48e6c4722188fb2eac4e", 0x7a) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5) r6 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) r8 = socket$inet(0x2, 0x4, 0xef24) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000600)=[r7, r8, r4, r4, r3, r9], 0x6) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x33, 0x1}, 0x7) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000680)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x13) write$P9_RREADDIR(r5, &(0x7f0000000740)={0x109, 0x29, 0x1, {0xa708, [{{0x80, 0x0, 0x2}, 0xfffffffffffffffd, 0x72, 0x7, './file1'}, {{0x1, 0x3, 0x4}, 0x9, 0x20, 0x7, './file0'}, {{0x0, 0x0, 0x4}, 0x5eb2c3d, 0x1, 0x7, './file0'}, {{0x4, 0x1, 0x2}, 0x1, 0xe1, 0x7, './file0'}, {{0x80, 0x1, 0x6}, 0x5, 0x20, 0x7, './file0'}, {{0x4, 0x1, 0x4}, 0x8001000000000000, 0x80, 0xd, './file0/file0'}, {{0x1, 0x4, 0x7}, 0x10001, 0x5, 0x7, './file0'}, {{0x1, 0x2, 0x6}, 0x2, 0x8, 0x7, './file0'}]}}, 0x109) 02:26:38 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb3fbf1fa8532b239}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r3) r4 = fsmount(r2, 0x1, 0x30) write$snapshot(r4, &(0x7f00000002c0)="dd1261b805d17f1b3918fc60891869152f7d7e695d06d9f13b9711a4bcb5a5399f122a621c4ecfafa7ab3e26c8ee928ba253456253f17acbb89b670c9d092c4de184e4b9520391b0b2e8b68351b44ad528b841dbc808599faea290db2654af10e3f83ab3e1a89da3e9ef0d1f48002b566ab2", 0x72) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000340)='+)X\'\\&}[\xa2+$', 0x0, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r4) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x148, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xd3, 0xa8, @random="c8ab9ed299a9905502fe64dd9bcae18a6ac056b2deeda7040357ec9fc39506a19eab0d9c1f26a51b8d185435eb3e619a88c02b1431ce36870fd82872fca9acf71fdad74cfb88227326ded962efdc17179326a41523c7ddb0f5a76875f91b20e7681bfc83a4f1f383bb96865d632d57070eac399f01677c5f0ae44a888bd9c6c1ad2766cf6827c7f6da362d71a146c5e21665435575a3e2e11ca2f8e5a5f3d6a78c314b03c0fd96358dbff79415bf174cdc4d981a853cfc66dcd865d6b35734d855dddf0261e7439b036a38ababcd18"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x148}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) r6 = fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x0, 0x88) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1f}]}, 0x20}}, 0x20000000) 02:26:38 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000001800)={0x9, 0x0, &(0x7f00000017c0)=[r0, r4]}, 0x2) r6 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001840), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000001880)={'veth1_to_bridge', 0x32, 0x35}, 0x12) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x15) 02:26:38 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r4 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x2100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000004c0)={0x1ff, "7b1016"}, 0x6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x244, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x388}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x37}, {0x8, 0x15, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xda49}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf28a}, {0x6, 0x11, 0x4a}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x84ed}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2395}, {0x6, 0x11, 0xf800}, {0x8, 0x15, 0x36}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x24000011) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) accept4$bt_l2cap(r7, &(0x7f00000009c0)={0x1f, 0x0, @none}, &(0x7f0000000a00)=0xe, 0x80800) r8 = fspick(r7, &(0x7f0000000a40)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000a80)='dirsync\x00', 0x0, 0x0) 02:26:38 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "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"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000880)={0xf9, "2a5a261329becac366a24aaee20ba98b5d7351437db89fb6e54ae54691687b2c0e4c7070be95133c9016b9d6bc5f49e8e1c1e0f8d0207dd84d1477cc3fb80e52"}) r1 = io_uring_setup(0xbcb, &(0x7f0000000900)={0x0, 0x7fb5, 0x4, 0x0, 0x2bd}) socketpair(0x2b, 0x800, 0x100, &(0x7f0000000980)={0xffffffffffffffff}) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) r4 = io_uring_setup(0x54f, &(0x7f0000000a00)={0x0, 0x3e1b, 0x10, 0x1, 0x26c}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000a80)=[r2, r3, r0, r0, r0, r0, r4], 0x7) fsmount(0xffffffffffffffff, 0x0, 0x4) 02:26:38 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "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"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000880)={0xf9, "2a5a261329becac366a24aaee20ba98b5d7351437db89fb6e54ae54691687b2c0e4c7070be95133c9016b9d6bc5f49e8e1c1e0f8d0207dd84d1477cc3fb80e52"}) io_uring_setup(0xbcb, &(0x7f0000000900)={0x0, 0x7fb5, 0x4, 0x0, 0x2bd}) socketpair(0x2b, 0x800, 0x100, &(0x7f0000000980)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) io_uring_setup(0x54f, &(0x7f0000000a00)={0x0, 0x3e1b, 0x10, 0x1, 0x26c}) fsmount(0xffffffffffffffff, 0x0, 0x4) 02:26:38 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000380)='!%\x00&\x00', &(0x7f00000003c0)="d03f78edc840824834bd7e7ca33ebcb8e072d547ec49172fed4b197c5c49710e470678fa3fa8f4fb09e3056c4eec849f342746cd2122e5e1bb77c60055e1b7d0eb7d1d77b679b2add4f4ffbd300cf634a4cf7470d6f48d5a92cab8993e8000fdfc131d5245ba4c99b3926826bd09194d48e6c4722188fb2eac4e", 0x7a) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5) r6 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) r8 = socket$inet(0x2, 0x4, 0xef24) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000600)=[r7, r8, r4, r4, r3, r9], 0x6) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x33, 0x1}, 0x7) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000680)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x13) write$P9_RREADDIR(r5, &(0x7f0000000740)={0x109, 0x29, 0x1, {0xa708, [{{0x80, 0x0, 0x2}, 0xfffffffffffffffd, 0x72, 0x7, './file1'}, {{0x1, 0x3, 0x4}, 0x9, 0x20, 0x7, './file0'}, {{0x0, 0x0, 0x4}, 0x5eb2c3d, 0x1, 0x7, './file0'}, {{0x4, 0x1, 0x2}, 0x1, 0xe1, 0x7, './file0'}, {{0x80, 0x1, 0x6}, 0x5, 0x20, 0x7, './file0'}, {{0x4, 0x1, 0x4}, 0x8001000000000000, 0x80, 0xd, './file0/file0'}, {{0x1, 0x4, 0x7}, 0x10001, 0x5, 0x7, './file0'}, {{0x1, 0x2, 0x6}, 0x2, 0x8, 0x7, './file0'}]}}, 0x109) 02:26:38 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) r1 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x0, r2, r3, 0xee00, 0xee01, 0x13c, 0xff}, 0xffff7fff, 0x4, 0x7, 0x7, r4, 0xffffffffffffffff, 0xbcae}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = getpid() ioprio_get$pid(0x1, r5) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000001c0)=""/149) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) syz_io_uring_setup(0x3914, &(0x7f0000000300)={0x0, 0x54c6, 0x2, 0x1, 0x11d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0x1d, 0x5, 0x8, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)) r6 = fsmount(0xffffffffffffffff, 0x1, 0x70) write$P9_RREMOVE(r6, &(0x7f00000004c0)={0x7, 0x7b, 0x2}, 0x7) shmget(0x1, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) connect$bt_sco(r6, &(0x7f0000000500)={0x1f, @none}, 0x8) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000540)=""/22) 02:26:38 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r4 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x2100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000004c0)={0x1ff, "7b1016"}, 0x6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x244, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x388}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x37}, {0x8, 0x15, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xda49}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf28a}, {0x6, 0x11, 0x4a}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x84ed}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2395}, {0x6, 0x11, 0xf800}, {0x8, 0x15, 0x36}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x24000011) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) accept4$bt_l2cap(r7, &(0x7f00000009c0)={0x1f, 0x0, @none}, &(0x7f0000000a00)=0xe, 0x80800) r8 = fspick(r7, &(0x7f0000000a40)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000a80)='dirsync\x00', 0x0, 0x0) 02:26:38 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r4 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x2100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000004c0)={0x1ff, "7b1016"}, 0x6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x244, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x388}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x37}, {0x8, 0x15, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xda49}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf28a}, {0x6, 0x11, 0x4a}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x84ed}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2395}, {0x6, 0x11, 0xf800}, {0x8, 0x15, 0x36}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x24000011) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) accept4$bt_l2cap(r7, &(0x7f00000009c0)={0x1f, 0x0, @none}, &(0x7f0000000a00)=0xe, 0x80800) fspick(r7, &(0x7f0000000a40)='./file0\x00', 0x0) 02:26:38 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb3fbf1fa8532b239}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r3) r4 = fsmount(r2, 0x1, 0x30) write$snapshot(r4, &(0x7f00000002c0)="dd1261b805d17f1b3918fc60891869152f7d7e695d06d9f13b9711a4bcb5a5399f122a621c4ecfafa7ab3e26c8ee928ba253456253f17acbb89b670c9d092c4de184e4b9520391b0b2e8b68351b44ad528b841dbc808599faea290db2654af10e3f83ab3e1a89da3e9ef0d1f48002b566ab2", 0x72) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000340)='+)X\'\\&}[\xa2+$', 0x0, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r4) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x148, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xd3, 0xa8, @random="c8ab9ed299a9905502fe64dd9bcae18a6ac056b2deeda7040357ec9fc39506a19eab0d9c1f26a51b8d185435eb3e619a88c02b1431ce36870fd82872fca9acf71fdad74cfb88227326ded962efdc17179326a41523c7ddb0f5a76875f91b20e7681bfc83a4f1f383bb96865d632d57070eac399f01677c5f0ae44a888bd9c6c1ad2766cf6827c7f6da362d71a146c5e21665435575a3e2e11ca2f8e5a5f3d6a78c314b03c0fd96358dbff79415bf174cdc4d981a853cfc66dcd865d6b35734d855dddf0261e7439b036a38ababcd18"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x148}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) r6 = fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x0, 0x88) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1f}]}, 0x20}}, 0x20000000) 02:26:38 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000001800)={0x9, 0x0, &(0x7f00000017c0)=[r0, r4]}, 0x2) r6 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001840), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000001880)={'veth1_to_bridge', 0x32, 0x35}, 0x12) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x15) [ 121.081174] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.082041] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.082930] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.083799] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.084692] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 121.085418] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 121.086313] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 121.087126] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 122.262533] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.094551] Bluetooth: hci7: command 0x0c1a tx timeout [ 123.095532] Bluetooth: hci6: command 0x0c1a tx timeout [ 123.095577] Bluetooth: hci5: command 0x0c1a tx timeout [ 123.097602] Bluetooth: hci4: command 0x0c1a tx timeout [ 123.097633] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.097657] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.097680] Bluetooth: hci1: command 0x0c1a tx timeout 02:26:47 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "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"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000880)={0xf9, "2a5a261329becac366a24aaee20ba98b5d7351437db89fb6e54ae54691687b2c0e4c7070be95133c9016b9d6bc5f49e8e1c1e0f8d0207dd84d1477cc3fb80e52"}) io_uring_setup(0xbcb, &(0x7f0000000900)={0x0, 0x7fb5, 0x4, 0x0, 0x2bd}) socketpair(0x2b, 0x800, 0x100, &(0x7f0000000980)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) 02:26:47 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}}, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x408000, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) write$snapshot(r3, &(0x7f0000000380)="61ddcae38ccb9f24cc9efdfd297f904df8000e611b06a5186c375874b1dd4803a856e7af36c1489019285aa10fa194540f59240c87305e615fa16ff6e55af2c3c0e05d46327610595031ed2487b0dbd8163d6997ec17dd7f85b0ea4d8d763f90cbce695684727c6e1c490996727269aa92c53728d61851e5cf9292e035f0f91176743fedab83c81bd5cf197c82fb78a7bbada1c80488986c75d870f7d35e17756731a47315f1102f1b216b88d00fa379b690e9482b3174eae1769c1a485bc4ff255e514598d52a1983c9", 0xca) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r4 = fsmount(0xffffffffffffffff, 0x1, 0x3) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000480)) syz_genetlink_get_family_id$team(&(0x7f00000004c0), r4) r5 = fsmount(r4, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r5, 0x3309) r6 = fsmount(r4, 0x0, 0x88) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x44404100}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x90, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6ea}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4090}, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 02:26:47 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000100)={0x8001, 0x4}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) write$snapshot(r4, &(0x7f0000000180)="4012df397578fa4709578cb3f86bcc1b0a9e1242128e9f973ae7ee", 0x1b) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x9) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 02:26:47 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000001800)={0x9, 0x0, &(0x7f00000017c0)=[r0, r4]}, 0x2) r6 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001840), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000001880)={'veth1_to_bridge', 0x32, 0x35}, 0x12) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:26:47 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r4 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x2100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000004c0)={0x1ff, "7b1016"}, 0x6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x244, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x388}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x37}, {0x8, 0x15, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xda49}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf28a}, {0x6, 0x11, 0x4a}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x84ed}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2395}, {0x6, 0x11, 0xf800}, {0x8, 0x15, 0x36}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x24000011) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r7, &(0x7f0000000a40)='./file0\x00', 0x0) 02:26:47 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000380)='!%\x00&\x00', &(0x7f00000003c0)="d03f78edc840824834bd7e7ca33ebcb8e072d547ec49172fed4b197c5c49710e470678fa3fa8f4fb09e3056c4eec849f342746cd2122e5e1bb77c60055e1b7d0eb7d1d77b679b2add4f4ffbd300cf634a4cf7470d6f48d5a92cab8993e8000fdfc131d5245ba4c99b3926826bd09194d48e6c4722188fb2eac4e", 0x7a) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5) r6 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) r8 = socket$inet(0x2, 0x4, 0xef24) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000600)=[r7, r8, r4, r4, r3, r9], 0x6) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x33, 0x1}, 0x7) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000680)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x13) 02:26:47 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) r1 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x0, r2, r3, 0xee00, 0xee01, 0x13c, 0xff}, 0xffff7fff, 0x4, 0x7, 0x7, r4, 0xffffffffffffffff, 0xbcae}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = getpid() ioprio_get$pid(0x1, r5) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000001c0)=""/149) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) syz_io_uring_setup(0x3914, &(0x7f0000000300)={0x0, 0x54c6, 0x2, 0x1, 0x11d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0x1d, 0x5, 0x8, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)) r6 = fsmount(0xffffffffffffffff, 0x1, 0x70) write$P9_RREMOVE(r6, &(0x7f00000004c0)={0x7, 0x7b, 0x2}, 0x7) shmget(0x1, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) connect$bt_sco(r6, &(0x7f0000000500)={0x1f, @none}, 0x8) 02:26:47 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb3fbf1fa8532b239}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r3) r4 = fsmount(r2, 0x1, 0x30) write$snapshot(r4, &(0x7f00000002c0)="dd1261b805d17f1b3918fc60891869152f7d7e695d06d9f13b9711a4bcb5a5399f122a621c4ecfafa7ab3e26c8ee928ba253456253f17acbb89b670c9d092c4de184e4b9520391b0b2e8b68351b44ad528b841dbc808599faea290db2654af10e3f83ab3e1a89da3e9ef0d1f48002b566ab2", 0x72) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000340)='+)X\'\\&}[\xa2+$', 0x0, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r4) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x148, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xd3, 0xa8, @random="c8ab9ed299a9905502fe64dd9bcae18a6ac056b2deeda7040357ec9fc39506a19eab0d9c1f26a51b8d185435eb3e619a88c02b1431ce36870fd82872fca9acf71fdad74cfb88227326ded962efdc17179326a41523c7ddb0f5a76875f91b20e7681bfc83a4f1f383bb96865d632d57070eac399f01677c5f0ae44a888bd9c6c1ad2766cf6827c7f6da362d71a146c5e21665435575a3e2e11ca2f8e5a5f3d6a78c314b03c0fd96358dbff79415bf174cdc4d981a853cfc66dcd865d6b35734d855dddf0261e7439b036a38ababcd18"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x148}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) r6 = fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x88) 02:26:47 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000380)='!%\x00&\x00', &(0x7f00000003c0)="d03f78edc840824834bd7e7ca33ebcb8e072d547ec49172fed4b197c5c49710e470678fa3fa8f4fb09e3056c4eec849f342746cd2122e5e1bb77c60055e1b7d0eb7d1d77b679b2add4f4ffbd300cf634a4cf7470d6f48d5a92cab8993e8000fdfc131d5245ba4c99b3926826bd09194d48e6c4722188fb2eac4e", 0x7a) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5) r6 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) r8 = socket$inet(0x2, 0x4, 0xef24) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000600)=[r7, r8, r4, r4, r3, r9], 0x6) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x33, 0x1}, 0x7) 02:26:47 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r4 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x2100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000004c0)={0x1ff, "7b1016"}, 0x6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x244, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x388}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x37}, {0x8, 0x15, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xda49}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf28a}, {0x6, 0x11, 0x4a}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x84ed}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2395}, {0x6, 0x11, 0xf800}, {0x8, 0x15, 0x36}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x24000011) fspick(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x0) 02:26:47 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000380)='!%\x00&\x00', &(0x7f00000003c0)="d03f78edc840824834bd7e7ca33ebcb8e072d547ec49172fed4b197c5c49710e470678fa3fa8f4fb09e3056c4eec849f342746cd2122e5e1bb77c60055e1b7d0eb7d1d77b679b2add4f4ffbd300cf634a4cf7470d6f48d5a92cab8993e8000fdfc131d5245ba4c99b3926826bd09194d48e6c4722188fb2eac4e", 0x7a) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5) r6 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) r8 = socket$inet(0x2, 0x4, 0xef24) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000600)=[r7, r8, r4, r4, r3, r9], 0x6) [ 130.021338] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.022807] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.025760] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.027124] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.028438] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.029811] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 130.031458] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 130.032934] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 131.221577] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.053617] Bluetooth: hci7: command 0x0c1a tx timeout [ 132.054675] Bluetooth: hci6: command 0x0c1a tx timeout [ 132.055540] Bluetooth: hci5: command 0x0c1a tx timeout [ 132.055638] Bluetooth: hci4: command 0x0c1a tx timeout [ 132.056440] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.057603] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.058230] Bluetooth: hci1: command 0x0c1a tx timeout 02:26:56 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000100)={0x8001, 0x4}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) write$snapshot(r4, &(0x7f0000000180)="4012df397578fa4709578cb3f86bcc1b0a9e1242128e9f973ae7ee", 0x1b) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x9) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 02:26:56 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb3fbf1fa8532b239}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r3) r4 = fsmount(r2, 0x1, 0x30) write$snapshot(r4, &(0x7f00000002c0)="dd1261b805d17f1b3918fc60891869152f7d7e695d06d9f13b9711a4bcb5a5399f122a621c4ecfafa7ab3e26c8ee928ba253456253f17acbb89b670c9d092c4de184e4b9520391b0b2e8b68351b44ad528b841dbc808599faea290db2654af10e3f83ab3e1a89da3e9ef0d1f48002b566ab2", 0x72) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000340)='+)X\'\\&}[\xa2+$', 0x0, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r4) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x148, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xd3, 0xa8, @random="c8ab9ed299a9905502fe64dd9bcae18a6ac056b2deeda7040357ec9fc39506a19eab0d9c1f26a51b8d185435eb3e619a88c02b1431ce36870fd82872fca9acf71fdad74cfb88227326ded962efdc17179326a41523c7ddb0f5a76875f91b20e7681bfc83a4f1f383bb96865d632d57070eac399f01677c5f0ae44a888bd9c6c1ad2766cf6827c7f6da362d71a146c5e21665435575a3e2e11ca2f8e5a5f3d6a78c314b03c0fd96358dbff79415bf174cdc4d981a853cfc66dcd865d6b35734d855dddf0261e7439b036a38ababcd18"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x148}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) r6 = fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 02:26:56 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r4 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x2100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000004c0)={0x1ff, "7b1016"}, 0x6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x244, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x388}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x37}, {0x8, 0x15, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xda49}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf28a}, {0x6, 0x11, 0x4a}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x84ed}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2395}, {0x6, 0x11, 0xf800}, {0x8, 0x15, 0x36}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x24000011) fspick(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x0) 02:26:56 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}}, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x408000, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) write$snapshot(r3, &(0x7f0000000380)="61ddcae38ccb9f24cc9efdfd297f904df8000e611b06a5186c375874b1dd4803a856e7af36c1489019285aa10fa194540f59240c87305e615fa16ff6e55af2c3c0e05d46327610595031ed2487b0dbd8163d6997ec17dd7f85b0ea4d8d763f90cbce695684727c6e1c490996727269aa92c53728d61851e5cf9292e035f0f91176743fedab83c81bd5cf197c82fb78a7bbada1c80488986c75d870f7d35e17756731a47315f1102f1b216b88d00fa379b690e9482b3174eae1769c1a485bc4ff255e514598d52a1983c9", 0xca) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r4 = fsmount(0xffffffffffffffff, 0x1, 0x3) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000480)) syz_genetlink_get_family_id$team(&(0x7f00000004c0), r4) r5 = fsmount(r4, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r5, 0x3309) r6 = fsmount(r4, 0x0, 0x88) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x44404100}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x90, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6ea}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4090}, 0x4) 02:26:56 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) r1 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x0, r2, r3, 0xee00, 0xee01, 0x13c, 0xff}, 0xffff7fff, 0x4, 0x7, 0x7, r4, 0xffffffffffffffff, 0xbcae}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = getpid() ioprio_get$pid(0x1, r5) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000001c0)=""/149) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) syz_io_uring_setup(0x3914, &(0x7f0000000300)={0x0, 0x54c6, 0x2, 0x1, 0x11d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0x1d, 0x5, 0x8, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)) r6 = fsmount(0xffffffffffffffff, 0x1, 0x70) write$P9_RREMOVE(r6, &(0x7f00000004c0)={0x7, 0x7b, 0x2}, 0x7) connect$bt_sco(r6, &(0x7f0000000500)={0x1f, @none}, 0x8) 02:26:56 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "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"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000880)={0xf9, "2a5a261329becac366a24aaee20ba98b5d7351437db89fb6e54ae54691687b2c0e4c7070be95133c9016b9d6bc5f49e8e1c1e0f8d0207dd84d1477cc3fb80e52"}) io_uring_setup(0xbcb, &(0x7f0000000900)={0x0, 0x7fb5, 0x4, 0x0, 0x2bd}) socketpair(0x2b, 0x800, 0x100, &(0x7f0000000980)) fsmount(0xffffffffffffffff, 0x0, 0x4) 02:26:56 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000001800)={0x9, 0x0, &(0x7f00000017c0)=[r0, r4]}, 0x2) r6 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001840), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000001880)={'veth1_to_bridge', 0x32, 0x35}, 0x12) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:26:56 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000380)='!%\x00&\x00', &(0x7f00000003c0)="d03f78edc840824834bd7e7ca33ebcb8e072d547ec49172fed4b197c5c49710e470678fa3fa8f4fb09e3056c4eec849f342746cd2122e5e1bb77c60055e1b7d0eb7d1d77b679b2add4f4ffbd300cf634a4cf7470d6f48d5a92cab8993e8000fdfc131d5245ba4c99b3926826bd09194d48e6c4722188fb2eac4e", 0x7a) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5) r6 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) r8 = socket$inet(0x2, 0x4, 0xef24) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000600)=[r7, r8, r4, r4, r3, 0xffffffffffffffff], 0x6) 02:26:56 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r4 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x2100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000004c0)={0x1ff, "7b1016"}, 0x6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x244, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x388}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x37}, {0x8, 0x15, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xda49}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf28a}, {0x6, 0x11, 0x4a}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x84ed}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2395}, {0x6, 0x11, 0xf800}, {0x8, 0x15, 0x36}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x24000011) fspick(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x0) 02:26:56 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) r1 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x0, r2, r3, 0xee00, 0xee01, 0x13c, 0xff}, 0xffff7fff, 0x4, 0x7, 0x7, r4, 0xffffffffffffffff, 0xbcae}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = getpid() ioprio_get$pid(0x1, r5) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000001c0)=""/149) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) syz_io_uring_setup(0x3914, &(0x7f0000000300)={0x0, 0x54c6, 0x2, 0x1, 0x11d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0x1d, 0x5, 0x8, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)) r6 = fsmount(0xffffffffffffffff, 0x1, 0x70) connect$bt_sco(r6, &(0x7f0000000500)={0x1f, @none}, 0x8) 02:26:56 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000380)='!%\x00&\x00', &(0x7f00000003c0)="d03f78edc840824834bd7e7ca33ebcb8e072d547ec49172fed4b197c5c49710e470678fa3fa8f4fb09e3056c4eec849f342746cd2122e5e1bb77c60055e1b7d0eb7d1d77b679b2add4f4ffbd300cf634a4cf7470d6f48d5a92cab8993e8000fdfc131d5245ba4c99b3926826bd09194d48e6c4722188fb2eac4e", 0x7a) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5) r6 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) r8 = socket$inet(0x2, 0x4, 0xef24) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000600)=[r7, r8, r4, r4, r3, 0xffffffffffffffff], 0x6) 02:26:56 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "f299747ce1700ccf7ac63a569cb3bad968e92e921c9d54f8d060bfac4711daa1a9c1c995b751bf056f018f8cb9aa99f72c91ae42ac94e1a4376e55536859f446d0bcd45f6600d846b22b73aa290176f41aa0cbf22f8130dae23c901e1216bfe3c278a2b795be70ee7d33f8e74326ddfbb9a790793ec22915f38eca7ff95210e292e9f9d906adfb71023730e2c94beec1b1165e9bc0b6871c87e89d2089fdac24a59fe1f7f1163a395f134ce1116a01e690718bc4798a22773b285863baaa9171d140d93187a9449fd96045915bd568ffa27b827d8d81b2cf0ea5cb8537a19a348eaef6df425f28f70b94176741cc2810ec19e3f5e1638b36020b1ba49ed3942fc1f05f9466b078b2c963735d4508c73489b50dd3da428c4f21bdda94b2be630a79b4c7ec7b280c85ea1925b4b9749847616613633bcb10abc4603b396dab562c814b1a4feaee3a35a1c0ede10c84fae2db47fd19936e03201309171a086132337f23cdf1f328d1e19d1c27f939b06ecdb816e1dd00ad50884305bf9aebb4673259490bc17ce3fb8d11a393df9e40ecabc0585bc505639ef31cf355222f1efe641db1781a76ba0c2ab47ff538ba8d3abdf490397c0c56a8e92449b12d5079aa21597a54e979bd9b3d426269c2a58dc39cc4f1cf6e9c6ec968d98c825447eede13cf8c81b6611669674b1b3560748d126e1f553079086d08081397d1a892ad4dbb55eb3503e48a4690899f4ccd8a92e45048480f955c57f1b691da17ced58806972836d4a9496e6bb74510d24ba1cad255062aac0ba42172f5c3bd99ee525953274c396631302dfcd46e81d13de6fefd1f70a4f51e0eb38021e15ca5abccb864ed7c4fc3de8aa03d7ee64e5fb4cdc33a9b1cadb6e98f4820a2425dc86e0b1452178e81ac982fc0b3c089d291794584ac94c4078bb8555d8833fc66f7fc399286bd6894b7c1c6dda9501e8f9e7e24a5131904e9a3a79ca794ef67459d084f7a71fc359747cf3b7d44261d1d30f4532e7463c8eaf493aca3d28fcb0de26214b66f5685becbd51b97e0cb9f096e4ba036af902a2e27416ce933f14fe83bbf5e21b1b80d014c229042a6671b5f79e3129393de2de1afaf8d060282b9e10306781c03b5912179963fa1f6ca17d66b73a33d87a912aab3622bfb3d7a5d119509ec3bfe6103fc09ee6acc187e8ada25dabb7b6a3f41302e4795bc63ffdf8a2670107a2dbe0fd0395bce86654a8454baeab493ededa28a239d2116ef5f3cc0e2117331cdb44fe39a32129bcd0bbb671182e2a35cb47ea2e4e8643f6b7720c50cff249bb12edfde5775a7909229f3e94704803475610465ad4b2fc9febc5935aaa6df56d9923dd2da97cf6d89320b8e"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000880)={0xf9, "2a5a261329becac366a24aaee20ba98b5d7351437db89fb6e54ae54691687b2c0e4c7070be95133c9016b9d6bc5f49e8e1c1e0f8d0207dd84d1477cc3fb80e52"}) io_uring_setup(0xbcb, &(0x7f0000000900)={0x0, 0x7fb5, 0x4, 0x0, 0x2bd}) fsmount(0xffffffffffffffff, 0x0, 0x4) 02:26:57 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb3fbf1fa8532b239}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r3) r4 = fsmount(r2, 0x1, 0x30) write$snapshot(r4, &(0x7f00000002c0)="dd1261b805d17f1b3918fc60891869152f7d7e695d06d9f13b9711a4bcb5a5399f122a621c4ecfafa7ab3e26c8ee928ba253456253f17acbb89b670c9d092c4de184e4b9520391b0b2e8b68351b44ad528b841dbc808599faea290db2654af10e3f83ab3e1a89da3e9ef0d1f48002b566ab2", 0x72) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000340)='+)X\'\\&}[\xa2+$', 0x0, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r4) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x148, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xd3, 0xa8, @random="c8ab9ed299a9905502fe64dd9bcae18a6ac056b2deeda7040357ec9fc39506a19eab0d9c1f26a51b8d185435eb3e619a88c02b1431ce36870fd82872fca9acf71fdad74cfb88227326ded962efdc17179326a41523c7ddb0f5a76875f91b20e7681bfc83a4f1f383bb96865d632d57070eac399f01677c5f0ae44a888bd9c6c1ad2766cf6827c7f6da362d71a146c5e21665435575a3e2e11ca2f8e5a5f3d6a78c314b03c0fd96358dbff79415bf174cdc4d981a853cfc66dcd865d6b35734d855dddf0261e7439b036a38ababcd18"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x148}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) 02:26:57 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000001800)={0x9, 0x0, &(0x7f00000017c0)=[r0, r4]}, 0x2) r6 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001840), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000001880)={'veth1_to_bridge', 0x32, 0x35}, 0x12) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:26:57 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r4 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x2100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000004c0)={0x1ff, "7b1016"}, 0x6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x244, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x388}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x37}, {0x8, 0x15, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xda49}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf28a}, {0x6, 0x11, 0x4a}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x84ed}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2395}, {0x6, 0x11, 0xf800}, {0x8, 0x15, 0x36}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r6, &(0x7f0000000a40)='./file0\x00', 0x0) 02:26:57 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "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"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000880)={0xf9, "2a5a261329becac366a24aaee20ba98b5d7351437db89fb6e54ae54691687b2c0e4c7070be95133c9016b9d6bc5f49e8e1c1e0f8d0207dd84d1477cc3fb80e52"}) fsmount(0xffffffffffffffff, 0x0, 0x4) [ 139.585666] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 139.588694] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 139.591334] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.595702] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.597985] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 139.600770] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 139.602794] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 139.605336] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 140.821561] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.653577] Bluetooth: hci7: command 0x0c1a tx timeout [ 141.654524] Bluetooth: hci6: command 0x0c1a tx timeout [ 141.654665] Bluetooth: hci5: command 0x0c1a tx timeout [ 141.655407] Bluetooth: hci4: command 0x0c1a tx timeout [ 141.656333] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.656374] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.657135] Bluetooth: hci1: command 0x0c1a tx timeout 02:27:06 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000380)='!%\x00&\x00', &(0x7f00000003c0)="d03f78edc840824834bd7e7ca33ebcb8e072d547ec49172fed4b197c5c49710e470678fa3fa8f4fb09e3056c4eec849f342746cd2122e5e1bb77c60055e1b7d0eb7d1d77b679b2add4f4ffbd300cf634a4cf7470d6f48d5a92cab8993e8000fdfc131d5245ba4c99b3926826bd09194d48e6c4722188fb2eac4e", 0x7a) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5) r6 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) r8 = socket$inet(0x2, 0x4, 0xef24) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000600)=[r7, r8, r4, r4, r3, 0xffffffffffffffff], 0x6) 02:27:06 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "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"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x160, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8000) fsmount(0xffffffffffffffff, 0x0, 0x4) 02:27:06 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) r1 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x0, r2, r3, 0xee00, 0xee01, 0x13c, 0xff}, 0xffff7fff, 0x4, 0x7, 0x7, r4, 0xffffffffffffffff, 0xbcae}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = getpid() ioprio_get$pid(0x1, r5) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000001c0)=""/149) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) syz_io_uring_setup(0x3914, &(0x7f0000000300)={0x0, 0x54c6, 0x2, 0x1, 0x11d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0x1d, 0x5, 0x8, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @none}, 0x8) 02:27:06 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb3fbf1fa8532b239}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r3) r4 = fsmount(r2, 0x1, 0x30) write$snapshot(r4, &(0x7f00000002c0)="dd1261b805d17f1b3918fc60891869152f7d7e695d06d9f13b9711a4bcb5a5399f122a621c4ecfafa7ab3e26c8ee928ba253456253f17acbb89b670c9d092c4de184e4b9520391b0b2e8b68351b44ad528b841dbc808599faea290db2654af10e3f83ab3e1a89da3e9ef0d1f48002b566ab2", 0x72) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000340)='+)X\'\\&}[\xa2+$', 0x0, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r4) fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) 02:27:06 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000100)={0x8001, 0x4}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) write$snapshot(r4, &(0x7f0000000180)="4012df397578fa4709578cb3f86bcc1b0a9e1242128e9f973ae7ee", 0x1b) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x9) 02:27:06 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}}, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x408000, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) write$snapshot(r3, &(0x7f0000000380)="61ddcae38ccb9f24cc9efdfd297f904df8000e611b06a5186c375874b1dd4803a856e7af36c1489019285aa10fa194540f59240c87305e615fa16ff6e55af2c3c0e05d46327610595031ed2487b0dbd8163d6997ec17dd7f85b0ea4d8d763f90cbce695684727c6e1c490996727269aa92c53728d61851e5cf9292e035f0f91176743fedab83c81bd5cf197c82fb78a7bbada1c80488986c75d870f7d35e17756731a47315f1102f1b216b88d00fa379b690e9482b3174eae1769c1a485bc4ff255e514598d52a1983c9", 0xca) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r4 = fsmount(0xffffffffffffffff, 0x1, 0x3) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000480)) syz_genetlink_get_family_id$team(&(0x7f00000004c0), r4) r5 = fsmount(r4, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r5, 0x3309) fsmount(r4, 0x0, 0x88) 02:27:06 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000001800)={0x9, 0x0, &(0x7f00000017c0)=[r0, r4]}, 0x2) r6 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001840), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000001880)={'veth1_to_bridge', 0x32, 0x35}, 0x12) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:27:06 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r4 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x2100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000004c0)={0x1ff, "7b1016"}, 0x6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x244, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x388}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x37}, {0x8, 0x15, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xda49}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf28a}, {0x6, 0x11, 0x4a}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x84ed}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2395}, {0x6, 0x11, 0xf800}, {0x8, 0x15, 0x36}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r6, &(0x7f0000000a40)='./file0\x00', 0x0) 02:27:06 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r4 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x2100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000004c0)={0x1ff, "7b1016"}, 0x6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x244, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x388}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x37}, {0x8, 0x15, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xda49}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf28a}, {0x6, 0x11, 0x4a}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x84ed}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2395}, {0x6, 0x11, 0xf800}, {0x8, 0x15, 0x36}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r6, &(0x7f0000000a40)='./file0\x00', 0x0) 02:27:06 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "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"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000600)='[-$}]*\\)^:*-G)!:*]/[(\x93\x00', 0x0, r0) fsmount(0xffffffffffffffff, 0x0, 0x4) 02:27:06 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000380)='!%\x00&\x00', &(0x7f00000003c0)="d03f78edc840824834bd7e7ca33ebcb8e072d547ec49172fed4b197c5c49710e470678fa3fa8f4fb09e3056c4eec849f342746cd2122e5e1bb77c60055e1b7d0eb7d1d77b679b2add4f4ffbd300cf634a4cf7470d6f48d5a92cab8993e8000fdfc131d5245ba4c99b3926826bd09194d48e6c4722188fb2eac4e", 0x7a) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5) r6 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000600)=[r7, 0xffffffffffffffff, r4, r4, r3, r8], 0x6) 02:27:06 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) r1 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x0, r2, r3, 0xee00, 0xee01, 0x13c, 0xff}, 0xffff7fff, 0x4, 0x7, 0x7, r4, 0xffffffffffffffff, 0xbcae}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = getpid() ioprio_get$pid(0x1, r5) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000001c0)=""/149) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) syz_io_uring_setup(0x3914, &(0x7f0000000300)={0x0, 0x54c6, 0x2, 0x1, 0x11d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0x1d, 0x5, 0x8, &(0x7f0000000400)) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @none}, 0x8) 02:27:06 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "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"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000500)=""/212) fsmount(0xffffffffffffffff, 0x0, 0x4) 02:27:06 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r4 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x2100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000004c0)={0x1ff, "7b1016"}, 0x6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x244, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x80000001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x388}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x37}, {0x8, 0x15, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xda49}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf28a}, {0x6, 0x11, 0x4a}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x84ed}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x1000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2395}, {0x6, 0x11, 0xf800}, {0x8, 0x15, 0x36}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r6, &(0x7f0000000a40)='./file0\x00', 0x0) 02:27:06 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb3fbf1fa8532b239}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r3) r4 = fsmount(r2, 0x1, 0x30) write$snapshot(r4, &(0x7f00000002c0)="dd1261b805d17f1b3918fc60891869152f7d7e695d06d9f13b9711a4bcb5a5399f122a621c4ecfafa7ab3e26c8ee928ba253456253f17acbb89b670c9d092c4de184e4b9520391b0b2e8b68351b44ad528b841dbc808599faea290db2654af10e3f83ab3e1a89da3e9ef0d1f48002b566ab2", 0x72) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000340)='+)X\'\\&}[\xa2+$', 0x0, r2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) 02:27:06 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000001800)={0x9, 0x0, &(0x7f00000017c0)=[r0, r4]}, 0x2) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001840), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:27:06 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000380)='!%\x00&\x00', &(0x7f00000003c0)="d03f78edc840824834bd7e7ca33ebcb8e072d547ec49172fed4b197c5c49710e470678fa3fa8f4fb09e3056c4eec849f342746cd2122e5e1bb77c60055e1b7d0eb7d1d77b679b2add4f4ffbd300cf634a4cf7470d6f48d5a92cab8993e8000fdfc131d5245ba4c99b3926826bd09194d48e6c4722188fb2eac4e", 0x7a) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5) r6 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r3, r7], 0x6) 02:27:06 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "f299747ce1700ccf7ac63a569cb3bad968e92e921c9d54f8d060bfac4711daa1a9c1c995b751bf056f018f8cb9aa99f72c91ae42ac94e1a4376e55536859f446d0bcd45f6600d846b22b73aa290176f41aa0cbf22f8130dae23c901e1216bfe3c278a2b795be70ee7d33f8e74326ddfbb9a790793ec22915f38eca7ff95210e292e9f9d906adfb71023730e2c94beec1b1165e9bc0b6871c87e89d2089fdac24a59fe1f7f1163a395f134ce1116a01e690718bc4798a22773b285863baaa9171d140d93187a9449fd96045915bd568ffa27b827d8d81b2cf0ea5cb8537a19a348eaef6df425f28f70b94176741cc2810ec19e3f5e1638b36020b1ba49ed3942fc1f05f9466b078b2c963735d4508c73489b50dd3da428c4f21bdda94b2be630a79b4c7ec7b280c85ea1925b4b9749847616613633bcb10abc4603b396dab562c814b1a4feaee3a35a1c0ede10c84fae2db47fd19936e03201309171a086132337f23cdf1f328d1e19d1c27f939b06ecdb816e1dd00ad50884305bf9aebb4673259490bc17ce3fb8d11a393df9e40ecabc0585bc505639ef31cf355222f1efe641db1781a76ba0c2ab47ff538ba8d3abdf490397c0c56a8e92449b12d5079aa21597a54e979bd9b3d426269c2a58dc39cc4f1cf6e9c6ec968d98c825447eede13cf8c81b6611669674b1b3560748d126e1f553079086d08081397d1a892ad4dbb55eb3503e48a4690899f4ccd8a92e45048480f955c57f1b691da17ced58806972836d4a9496e6bb74510d24ba1cad255062aac0ba42172f5c3bd99ee525953274c396631302dfcd46e81d13de6fefd1f70a4f51e0eb38021e15ca5abccb864ed7c4fc3de8aa03d7ee64e5fb4cdc33a9b1cadb6e98f4820a2425dc86e0b1452178e81ac982fc0b3c089d291794584ac94c4078bb8555d8833fc66f7fc399286bd6894b7c1c6dda9501e8f9e7e24a5131904e9a3a79ca794ef67459d084f7a71fc359747cf3b7d44261d1d30f4532e7463c8eaf493aca3d28fcb0de26214b66f5685becbd51b97e0cb9f096e4ba036af902a2e27416ce933f14fe83bbf5e21b1b80d014c229042a6671b5f79e3129393de2de1afaf8d060282b9e10306781c03b5912179963fa1f6ca17d66b73a33d87a912aab3622bfb3d7a5d119509ec3bfe6103fc09ee6acc187e8ada25dabb7b6a3f41302e4795bc63ffdf8a2670107a2dbe0fd0395bce86654a8454baeab493ededa28a239d2116ef5f3cc0e2117331cdb44fe39a32129bcd0bbb671182e2a35cb47ea2e4e8643f6b7720c50cff249bb12edfde5775a7909229f3e94704803475610465ad4b2fc9febc5935aaa6df56d9923dd2da97cf6d89320b8e"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/135) fsmount(0xffffffffffffffff, 0x0, 0x4) 02:27:06 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r4 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x2100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000004c0)={0x1ff, "7b1016"}, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r6, &(0x7f0000000a40)='./file0\x00', 0x0) 02:27:06 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) r1 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x0, r2, r3, 0xee00, 0xee01, 0x13c, 0xff}, 0xffff7fff, 0x4, 0x7, 0x7, r4, 0xffffffffffffffff, 0xbcae}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = getpid() ioprio_get$pid(0x1, r5) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000001c0)=""/149) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) syz_io_uring_setup(0x3914, &(0x7f0000000300)={0x0, 0x54c6, 0x2, 0x1, 0x11d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @none}, 0x8) [ 148.908567] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 148.910307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.912025] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 148.913190] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 148.914345] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 148.915680] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 148.916821] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 148.917989] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 150.102516] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.934506] Bluetooth: hci7: command 0x0c1a tx timeout [ 150.934550] Bluetooth: hci6: command 0x0c1a tx timeout [ 150.935014] Bluetooth: hci5: command 0x0c1a tx timeout [ 150.936023] Bluetooth: hci4: command 0x0c1a tx timeout [ 150.936389] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.937309] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.937712] Bluetooth: hci1: command 0x0c1a tx timeout 02:27:15 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000100)={0x8001, 0x4}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) write$snapshot(r4, &(0x7f0000000180)="4012df397578fa4709578cb3f86bcc1b0a9e1242128e9f973ae7ee", 0x1b) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x9) 02:27:15 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}}, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x408000, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) write$snapshot(r3, &(0x7f0000000380)="61ddcae38ccb9f24cc9efdfd297f904df8000e611b06a5186c375874b1dd4803a856e7af36c1489019285aa10fa194540f59240c87305e615fa16ff6e55af2c3c0e05d46327610595031ed2487b0dbd8163d6997ec17dd7f85b0ea4d8d763f90cbce695684727c6e1c490996727269aa92c53728d61851e5cf9292e035f0f91176743fedab83c81bd5cf197c82fb78a7bbada1c80488986c75d870f7d35e17756731a47315f1102f1b216b88d00fa379b690e9482b3174eae1769c1a485bc4ff255e514598d52a1983c9", 0xca) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r4 = fsmount(0xffffffffffffffff, 0x1, 0x3) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000480)) syz_genetlink_get_family_id$team(&(0x7f00000004c0), r4) fsmount(r4, 0x0, 0x0) fsmount(r4, 0x0, 0x88) 02:27:15 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000380)='!%\x00&\x00', &(0x7f00000003c0)="d03f78edc840824834bd7e7ca33ebcb8e072d547ec49172fed4b197c5c49710e470678fa3fa8f4fb09e3056c4eec849f342746cd2122e5e1bb77c60055e1b7d0eb7d1d77b679b2add4f4ffbd300cf634a4cf7470d6f48d5a92cab8993e8000fdfc131d5245ba4c99b3926826bd09194d48e6c4722188fb2eac4e", 0x7a) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r3, r6], 0x6) 02:27:15 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "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"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) 02:27:15 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) r1 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x0, r2, r3, 0xee00, 0xee01, 0x13c, 0xff}, 0xffff7fff, 0x4, 0x7, 0x7, r4, 0xffffffffffffffff, 0xbcae}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = getpid() ioprio_get$pid(0x1, r5) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000001c0)=""/149) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @none}, 0x8) 02:27:15 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r4 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x2100, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r5, &(0x7f0000000a40)='./file0\x00', 0x0) 02:27:15 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000001800)={0x9, 0x0, &(0x7f00000017c0)=[r0, r4]}, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:27:15 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb3fbf1fa8532b239}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r3) r4 = fsmount(r2, 0x1, 0x30) write$snapshot(r4, &(0x7f00000002c0)="dd1261b805d17f1b3918fc60891869152f7d7e695d06d9f13b9711a4bcb5a5399f122a621c4ecfafa7ab3e26c8ee928ba253456253f17acbb89b670c9d092c4de184e4b9520391b0b2e8b68351b44ad528b841dbc808599faea290db2654af10e3f83ab3e1a89da3e9ef0d1f48002b566ab2", 0x72) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000340)='+)X\'\\&}[\xa2+$', 0x0, r2) fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) 02:27:15 executing program 2: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)={0x3ca, "f299747ce1700ccf7ac63a569cb3bad968e92e921c9d54f8d060bfac4711daa1a9c1c995b751bf056f018f8cb9aa99f72c91ae42ac94e1a4376e55536859f446d0bcd45f6600d846b22b73aa290176f41aa0cbf22f8130dae23c901e1216bfe3c278a2b795be70ee7d33f8e74326ddfbb9a790793ec22915f38eca7ff95210e292e9f9d906adfb71023730e2c94beec1b1165e9bc0b6871c87e89d2089fdac24a59fe1f7f1163a395f134ce1116a01e690718bc4798a22773b285863baaa9171d140d93187a9449fd96045915bd568ffa27b827d8d81b2cf0ea5cb8537a19a348eaef6df425f28f70b94176741cc2810ec19e3f5e1638b36020b1ba49ed3942fc1f05f9466b078b2c963735d4508c73489b50dd3da428c4f21bdda94b2be630a79b4c7ec7b280c85ea1925b4b9749847616613633bcb10abc4603b396dab562c814b1a4feaee3a35a1c0ede10c84fae2db47fd19936e03201309171a086132337f23cdf1f328d1e19d1c27f939b06ecdb816e1dd00ad50884305bf9aebb4673259490bc17ce3fb8d11a393df9e40ecabc0585bc505639ef31cf355222f1efe641db1781a76ba0c2ab47ff538ba8d3abdf490397c0c56a8e92449b12d5079aa21597a54e979bd9b3d426269c2a58dc39cc4f1cf6e9c6ec968d98c825447eede13cf8c81b6611669674b1b3560748d126e1f553079086d08081397d1a892ad4dbb55eb3503e48a4690899f4ccd8a92e45048480f955c57f1b691da17ced58806972836d4a9496e6bb74510d24ba1cad255062aac0ba42172f5c3bd99ee525953274c396631302dfcd46e81d13de6fefd1f70a4f51e0eb38021e15ca5abccb864ed7c4fc3de8aa03d7ee64e5fb4cdc33a9b1cadb6e98f4820a2425dc86e0b1452178e81ac982fc0b3c089d291794584ac94c4078bb8555d8833fc66f7fc399286bd6894b7c1c6dda9501e8f9e7e24a5131904e9a3a79ca794ef67459d084f7a71fc359747cf3b7d44261d1d30f4532e7463c8eaf493aca3d28fcb0de26214b66f5685becbd51b97e0cb9f096e4ba036af902a2e27416ce933f14fe83bbf5e21b1b80d014c229042a6671b5f79e3129393de2de1afaf8d060282b9e10306781c03b5912179963fa1f6ca17d66b73a33d87a912aab3622bfb3d7a5d119509ec3bfe6103fc09ee6acc187e8ada25dabb7b6a3f41302e4795bc63ffdf8a2670107a2dbe0fd0395bce86654a8454baeab493ededa28a239d2116ef5f3cc0e2117331cdb44fe39a32129bcd0bbb671182e2a35cb47ea2e4e8643f6b7720c50cff249bb12edfde5775a7909229f3e94704803475610465ad4b2fc9febc5935aaa6df56d9923dd2da97cf6d89320b8e"}) fsmount(0xffffffffffffffff, 0x0, 0x4) 02:27:15 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r4 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r5, &(0x7f0000000a40)='./file0\x00', 0x0) 02:27:15 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000380)='!%\x00&\x00', &(0x7f00000003c0)="d03f78edc840824834bd7e7ca33ebcb8e072d547ec49172fed4b197c5c49710e470678fa3fa8f4fb09e3056c4eec849f342746cd2122e5e1bb77c60055e1b7d0eb7d1d77b679b2add4f4ffbd300cf634a4cf7470d6f48d5a92cab8993e8000fdfc131d5245ba4c99b3926826bd09194d48e6c4722188fb2eac4e", 0x7a) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r3, r6], 0x6) 02:27:15 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) r1 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x0, r2, r3, 0xee00, 0xee01, 0x13c, 0xff}, 0xffff7fff, 0x4, 0x7, 0x7, r4, 0xffffffffffffffff, 0xbcae}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = getpid() ioprio_get$pid(0x1, r5) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000001c0)=""/149) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @none}, 0x8) 02:27:15 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb3fbf1fa8532b239}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r3) r4 = fsmount(r2, 0x1, 0x30) write$snapshot(r4, &(0x7f00000002c0)="dd1261b805d17f1b3918fc60891869152f7d7e695d06d9f13b9711a4bcb5a5399f122a621c4ecfafa7ab3e26c8ee928ba253456253f17acbb89b670c9d092c4de184e4b9520391b0b2e8b68351b44ad528b841dbc808599faea290db2654af10e3f83ab3e1a89da3e9ef0d1f48002b566ab2", 0x72) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) 02:27:15 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x4) 02:27:15 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) r1 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x0, r2, r3, 0xee00, 0xee01, 0x13c, 0xff}, 0xffff7fff, 0x4, 0x7, 0x7, r4, 0xffffffffffffffff, 0xbcae}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = getpid() ioprio_get$pid(0x1, r5) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @none}, 0x8) [ 157.973946] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 157.975116] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.976276] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 157.977564] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.978723] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 157.980162] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 157.981243] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 157.982509] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 159.189590] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.021635] Bluetooth: hci4: command 0x0c1a tx timeout [ 160.022787] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.023864] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.024923] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.025989] Bluetooth: hci7: command 0x0c1a tx timeout [ 160.027057] Bluetooth: hci6: command 0x0c1a tx timeout [ 160.028127] Bluetooth: hci5: command 0x0c1a tx timeout 02:27:24 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:27:24 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000380)='!%\x00&\x00', &(0x7f00000003c0)="d03f78edc840824834bd7e7ca33ebcb8e072d547ec49172fed4b197c5c49710e470678fa3fa8f4fb09e3056c4eec849f342746cd2122e5e1bb77c60055e1b7d0eb7d1d77b679b2add4f4ffbd300cf634a4cf7470d6f48d5a92cab8993e8000fdfc131d5245ba4c99b3926826bd09194d48e6c4722188fb2eac4e", 0x7a) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000480)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r3, r6], 0x6) 02:27:24 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r4, &(0x7f0000000a40)='./file0\x00', 0x0) 02:27:24 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb3fbf1fa8532b239}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r3) r4 = fsmount(r2, 0x1, 0x30) write$snapshot(r4, &(0x7f00000002c0)="dd1261b805d17f1b3918fc60891869152f7d7e695d06d9f13b9711a4bcb5a5399f122a621c4ecfafa7ab3e26c8ee928ba253456253f17acbb89b670c9d092c4de184e4b9520391b0b2e8b68351b44ad528b841dbc808599faea290db2654af10e3f83ab3e1a89da3e9ef0d1f48002b566ab2", 0x72) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) 02:27:24 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) 02:27:24 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) r1 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x0, r2, r3, 0xee00, 0xee01, 0x13c, 0xff}, 0xffff7fff, 0x4, 0x7, 0x7, r4, 0xffffffffffffffff, 0xbcae}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getpid() connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @none}, 0x8) 02:27:24 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000100)={0x8001, 0x4}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) write$snapshot(r4, &(0x7f0000000180)="4012df397578fa4709578cb3f86bcc1b0a9e1242128e9f973ae7ee", 0x1b) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x9) 02:27:24 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}}, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x408000, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) write$snapshot(r3, &(0x7f0000000380)="61ddcae38ccb9f24cc9efdfd297f904df8000e611b06a5186c375874b1dd4803a856e7af36c1489019285aa10fa194540f59240c87305e615fa16ff6e55af2c3c0e05d46327610595031ed2487b0dbd8163d6997ec17dd7f85b0ea4d8d763f90cbce695684727c6e1c490996727269aa92c53728d61851e5cf9292e035f0f91176743fedab83c81bd5cf197c82fb78a7bbada1c80488986c75d870f7d35e17756731a47315f1102f1b216b88d00fa379b690e9482b3174eae1769c1a485bc4ff255e514598d52a1983c9", 0xca) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r4 = fsmount(0xffffffffffffffff, 0x1, 0x3) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000480)) syz_genetlink_get_family_id$team(&(0x7f00000004c0), r4) fsmount(r4, 0x0, 0x88) 02:27:24 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r4, &(0x7f0000000a40)='./file0\x00', 0x0) 02:27:24 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) 02:27:24 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) r1 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x0, r2, r3, 0xee00, 0xee01, 0x13c, 0xff}, 0xffff7fff, 0x4, 0x7, 0x7, r4, 0xffffffffffffffff, 0xbcae}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @none}, 0x8) 02:27:24 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r4, &(0x7f0000000a40)='./file0\x00', 0x0) 02:27:24 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb3fbf1fa8532b239}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r3) r4 = fsmount(r2, 0x1, 0x30) write$snapshot(r4, &(0x7f00000002c0)="dd1261b805d17f1b3918fc60891869152f7d7e695d06d9f13b9711a4bcb5a5399f122a621c4ecfafa7ab3e26c8ee928ba253456253f17acbb89b670c9d092c4de184e4b9520391b0b2e8b68351b44ad528b841dbc808599faea290db2654af10e3f83ab3e1a89da3e9ef0d1f48002b566ab2", 0x72) fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) 02:27:24 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) 02:27:24 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000380)='!%\x00&\x00', &(0x7f00000003c0)="d03f78edc840824834bd7e7ca33ebcb8e072d547ec49172fed4b197c5c49710e470678fa3fa8f4fb09e3056c4eec849f342746cd2122e5e1bb77c60055e1b7d0eb7d1d77b679b2add4f4ffbd300cf634a4cf7470d6f48d5a92cab8993e8000fdfc131d5245ba4c99b3926826bd09194d48e6c4722188fb2eac4e", 0x7a) openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) r5 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r3, r6], 0x6) 02:27:24 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) r1 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x0, r2, r3, 0xee00, 0xee01, 0x13c, 0xff}, 0xffff7fff, 0x4, 0x7, 0x7, r4, 0xffffffffffffffff, 0xbcae}) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @none}, 0x8) 02:27:24 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:27:24 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r4, &(0x7f0000000a40)='./file0\x00', 0x0) [ 167.186229] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.187025] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.187736] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.188366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.189032] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 167.189774] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 167.190405] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 167.191172] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 168.405682] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.237582] Bluetooth: hci7: command 0x0c1a tx timeout [ 169.238510] Bluetooth: hci5: command 0x0c1a tx timeout [ 169.238683] Bluetooth: hci6: command 0x0c1a tx timeout [ 169.239332] Bluetooth: hci4: command 0x0c1a tx timeout [ 169.240157] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.240988] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.241775] Bluetooth: hci1: command 0x0c1a tx timeout 02:27:32 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000380)='!%\x00&\x00', &(0x7f00000003c0)="d03f78edc840824834bd7e7ca33ebcb8e072d547ec49172fed4b197c5c49710e470678fa3fa8f4fb09e3056c4eec849f342746cd2122e5e1bb77c60055e1b7d0eb7d1d77b679b2add4f4ffbd300cf634a4cf7470d6f48d5a92cab8993e8000fdfc131d5245ba4c99b3926826bd09194d48e6c4722188fb2eac4e", 0x7a) r5 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r3, r6], 0x6) 02:27:32 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}}, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x408000, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) write$snapshot(r3, &(0x7f0000000380)="61ddcae38ccb9f24cc9efdfd297f904df8000e611b06a5186c375874b1dd4803a856e7af36c1489019285aa10fa194540f59240c87305e615fa16ff6e55af2c3c0e05d46327610595031ed2487b0dbd8163d6997ec17dd7f85b0ea4d8d763f90cbce695684727c6e1c490996727269aa92c53728d61851e5cf9292e035f0f91176743fedab83c81bd5cf197c82fb78a7bbada1c80488986c75d870f7d35e17756731a47315f1102f1b216b88d00fa379b690e9482b3174eae1769c1a485bc4ff255e514598d52a1983c9", 0xca) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r4 = fsmount(0xffffffffffffffff, 0x1, 0x3) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000480)) fsmount(r4, 0x0, 0x88) 02:27:32 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000100)={0x8001, 0x4}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) write$snapshot(r4, &(0x7f0000000180)="4012df397578fa4709578cb3f86bcc1b0a9e1242128e9f973ae7ee", 0x1b) 02:27:32 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r4, &(0x7f0000000a40)='./file0\x00', 0x0) 02:27:32 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) geteuid() getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @none}, 0x8) 02:27:32 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:27:32 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb3fbf1fa8532b239}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r3) fsmount(r2, 0x1, 0x30) fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) 02:27:32 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:27:32 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) geteuid() getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @none}, 0x8) 02:27:32 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1) r5 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r3, r6], 0x6) 02:27:32 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) geteuid() connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @none}, 0x8) 02:27:33 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) syz_io_uring_setup(0x69f6, &(0x7f00000002c0)={0x0, 0x67f5, 0x22, 0x3, 0x1bb, 0x0, r3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000558000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r4, &(0x7f0000000a40)='./file0\x00', 0x0) 02:27:33 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:27:33 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @none}, 0x8) 02:27:33 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb3fbf1fa8532b239}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r3) fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) 02:27:33 executing program 7: r0 = shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @none}, 0x8) [ 175.758725] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.760371] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 175.761908] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.764132] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 175.766744] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 175.768256] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 175.769736] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 175.771748] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 176.982499] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.814517] Bluetooth: hci7: command 0x0c1a tx timeout [ 177.814566] Bluetooth: hci6: command 0x0c1a tx timeout [ 177.815019] Bluetooth: hci5: command 0x0c1a tx timeout [ 177.816010] Bluetooth: hci4: command 0x0c1a tx timeout [ 177.816431] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.817394] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.817813] Bluetooth: hci1: command 0x0c1a tx timeout 02:27:41 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='!%\x00&\x00', 0x0, r3) r4 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r5], 0x6) 02:27:41 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}}, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x408000, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) write$snapshot(r3, &(0x7f0000000380)="61ddcae38ccb9f24cc9efdfd297f904df8000e611b06a5186c375874b1dd4803a856e7af36c1489019285aa10fa194540f59240c87305e615fa16ff6e55af2c3c0e05d46327610595031ed2487b0dbd8163d6997ec17dd7f85b0ea4d8d763f90cbce695684727c6e1c490996727269aa92c53728d61851e5cf9292e035f0f91176743fedab83c81bd5cf197c82fb78a7bbada1c80488986c75d870f7d35e17756731a47315f1102f1b216b88d00fa379b690e9482b3174eae1769c1a485bc4ff255e514598d52a1983c9", 0xca) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r4 = fsmount(0xffffffffffffffff, 0x1, 0x3) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) fsmount(r4, 0x0, 0x88) 02:27:41 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:27:41 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000100)={0x8001, 0x4}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) write$snapshot(r4, &(0x7f0000000180)="4012df397578fa4709578cb3f86bcc1b0a9e1242128e9f973ae7ee", 0x1b) 02:27:41 executing program 7: shmget(0x0, 0x5000, 0x800, &(0x7f0000ff8000/0x5000)=nil) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @none}, 0x8) 02:27:41 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb3fbf1fa8532b239}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) 02:27:41 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:27:41 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) r3 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r4, &(0x7f0000000a40)='./file0\x00', 0x0) 02:27:41 executing program 7: connect$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @none}, 0x8) 02:27:41 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb3fbf1fa8532b239}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x800) fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) 02:27:41 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r4, &(0x7f0000000a40)='./file0\x00', 0x0) 02:27:41 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) r4 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r5], 0x6) 02:27:41 executing program 7: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 02:27:41 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r4, &(0x7f0000000a40)='./file0\x00', 0x0) 02:27:41 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], 0x6) [ 183.908051] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 183.910080] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 183.910924] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 183.912021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.913009] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 183.914073] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 183.915068] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 183.916200] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 185.109542] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.941585] Bluetooth: hci7: command 0x0c1a tx timeout [ 185.942766] Bluetooth: hci6: command 0x0c1a tx timeout [ 185.943872] Bluetooth: hci5: command 0x0c1a tx timeout [ 185.944510] Bluetooth: hci4: command 0x0c1a tx timeout [ 185.944928] Bluetooth: hci3: command 0x0c1a tx timeout [ 185.945619] Bluetooth: hci2: command 0x0c1a tx timeout [ 185.945649] Bluetooth: hci1: command 0x0c1a tx timeout 02:27:49 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000100)={0x8001, 0x4}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) write$snapshot(r4, &(0x7f0000000180)="4012df397578fa4709578cb3f86bcc1b0a9e1242128e9f973ae7ee", 0x1b) 02:27:49 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}}, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x408000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) write$snapshot(r2, &(0x7f0000000380)="61ddcae38ccb9f24cc9efdfd297f904df8000e611b06a5186c375874b1dd4803a856e7af36c1489019285aa10fa194540f59240c87305e615fa16ff6e55af2c3c0e05d46327610595031ed2487b0dbd8163d6997ec17dd7f85b0ea4d8d763f90cbce695684727c6e1c490996727269aa92c53728d61851e5cf9292e035f0f91176743fedab83c81bd5cf197c82fb78a7bbada1c80488986c75d870f7d35e17756731a47315f1102f1b216b88d00fa379b690e9482b3174eae1769c1a485bc4ff255e514598d52a1983c9", 0xca) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r3 = fsmount(0xffffffffffffffff, 0x1, 0x3) fsmount(r3, 0x0, 0x88) 02:27:49 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) r4 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r5], 0x6) 02:27:49 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:27:49 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) write$P9_RLINK(r2, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r3 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r4, &(0x7f0000000a40)='./file0\x00', 0x0) 02:27:49 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) r3 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], 0x6) 02:27:49 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:27:49 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r2 = fsmount(r1, 0x1, 0x1) fspick(r2, &(0x7f0000000600)='./file0\x00', 0x0) 02:27:49 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3], 0x6) 02:27:49 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) r4 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r5], 0x6) 02:27:49 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) fspick(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x0) 02:27:50 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) pipe2$9p(&(0x7f00000001c0), 0xc4000) io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) r2 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r3, &(0x7f0000000a40)='./file0\x00', 0x0) 02:27:50 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 02:27:50 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) r3 = syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) r4 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r5], 0x6) [ 192.800515] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.801892] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.804009] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.805895] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.807319] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 192.808843] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 192.810435] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 192.811831] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 194.006540] Bluetooth: hci0: command 0x0c1a tx timeout [ 194.837605] Bluetooth: hci7: command 0x0c1a tx timeout [ 194.838665] Bluetooth: hci6: command 0x0c1a tx timeout [ 194.839670] Bluetooth: hci5: command 0x0c1a tx timeout [ 194.840633] Bluetooth: hci4: command 0x0c1a tx timeout [ 194.841541] Bluetooth: hci3: command 0x0c1a tx timeout [ 194.841576] Bluetooth: hci2: command 0x0c1a tx timeout [ 194.842176] Bluetooth: hci1: command 0x0c1a tx timeout 02:27:59 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) fsmount(0xffffffffffffffff, 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x0) 02:27:59 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}}, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x408000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) write$snapshot(r2, &(0x7f0000000380)="61ddcae38ccb9f24cc9efdfd297f904df8000e611b06a5186c375874b1dd4803a856e7af36c1489019285aa10fa194540f59240c87305e615fa16ff6e55af2c3c0e05d46327610595031ed2487b0dbd8163d6997ec17dd7f85b0ea4d8d763f90cbce695684727c6e1c490996727269aa92c53728d61851e5cf9292e035f0f91176743fedab83c81bd5cf197c82fb78a7bbada1c80488986c75d870f7d35e17756731a47315f1102f1b216b88d00fa379b690e9482b3174eae1769c1a485bc4ff255e514598d52a1983c9", 0xca) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) fsmount(0xffffffffffffffff, 0x0, 0x88) 02:27:59 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000100)={0x8001, 0x4}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) 02:27:59 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:27:59 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 02:27:59 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) r0 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) 02:27:59 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 02:27:59 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000180)={0x401, "0e9646"}, 0x6) io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) r2 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r3, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:00 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 02:28:00 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) fspick(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x0) 02:28:00 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='\x00', 0x0, r1) io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) r2 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r3, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:00 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) 02:28:00 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 02:28:00 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 02:28:00 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) fspick(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x0) 02:28:00 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) 02:28:00 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000) io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) r0 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r1, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:00 executing program 0: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) fspick(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x0) [ 202.834268] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.834983] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.835909] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.836641] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.837238] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 202.838109] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 202.838930] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 202.839833] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 204.054507] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.886513] Bluetooth: hci7: command 0x0c1a tx timeout [ 204.886567] Bluetooth: hci6: command 0x0c1a tx timeout [ 204.886999] Bluetooth: hci5: command 0x0c1a tx timeout [ 204.887015] Bluetooth: hci4: command 0x0c1a tx timeout [ 204.888100] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.888477] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.889404] Bluetooth: hci1: command 0x0c1a tx timeout 02:28:08 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 02:28:08 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:08 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:08 executing program 0: fspick(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x0) 02:28:08 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}}, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x408000, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) write$snapshot(r1, &(0x7f0000000380)="61ddcae38ccb9f24cc9efdfd297f904df8000e611b06a5186c375874b1dd4803a856e7af36c1489019285aa10fa194540f59240c87305e615fa16ff6e55af2c3c0e05d46327610595031ed2487b0dbd8163d6997ec17dd7f85b0ea4d8d763f90cbce695684727c6e1c490996727269aa92c53728d61851e5cf9292e035f0f91176743fedab83c81bd5cf197c82fb78a7bbada1c80488986c75d870f7d35e17756731a47315f1102f1b216b88d00fa379b690e9482b3174eae1769c1a485bc4ff255e514598d52a1983c9", 0xca) fsmount(0xffffffffffffffff, 0x0, 0x88) 02:28:08 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) 02:28:08 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) r0 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r1, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:08 executing program 4: r0 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) 02:28:08 executing program 0: fspick(0xffffffffffffffff, 0x0, 0x0) 02:28:08 executing program 6: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) r0 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r1, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:08 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) 02:28:08 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 02:28:09 executing program 0: fspick(0xffffffffffffffff, 0x0, 0x0) [ 211.643890] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 211.645099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 211.647119] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 211.648962] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.650340] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 211.651953] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 211.653434] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 211.654848] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 212.886504] Bluetooth: hci0: command 0x0c1a tx timeout [ 213.654514] Bluetooth: hci5: command 0x0c1a tx timeout [ 213.655096] Bluetooth: hci4: command 0x0c1a tx timeout [ 213.655651] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.656134] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.656669] Bluetooth: hci1: command 0x0c1a tx timeout [ 213.718515] Bluetooth: hci7: command 0x0c1a tx timeout [ 213.718988] Bluetooth: hci6: command 0x0c1a tx timeout 02:28:17 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) 02:28:17 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) 02:28:17 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}}, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x408000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x88) 02:28:17 executing program 0: fspick(0xffffffffffffffff, 0x0, 0x0) 02:28:17 executing program 6: io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) r0 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r1, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:17 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:17 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:17 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 02:28:17 executing program 6: io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) r0 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r1, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:17 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:17 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 02:28:17 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) 02:28:17 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 02:28:17 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:17 executing program 6: io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) r0 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r1, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:17 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) [ 220.033590] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 220.034848] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 220.036673] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 220.037312] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 220.038238] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 220.039096] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 220.039981] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 220.040646] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 221.269565] Bluetooth: hci0: command 0x0c1a tx timeout [ 222.037552] Bluetooth: hci2: command 0x0c1a tx timeout [ 222.038606] Bluetooth: hci1: command 0x0c1a tx timeout [ 222.101603] Bluetooth: hci7: command 0x0c1a tx timeout [ 222.102730] Bluetooth: hci6: command 0x0c1a tx timeout [ 222.103746] Bluetooth: hci5: command 0x0c1a tx timeout [ 222.104736] Bluetooth: hci4: command 0x0c1a tx timeout [ 222.105485] Bluetooth: hci3: command 0x0c1a tx timeout 02:28:25 executing program 4: r0 = syz_io_uring_setup(0x558f, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) 02:28:25 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) 02:28:25 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}}, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x408000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x88) 02:28:25 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:25 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 02:28:25 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:25 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 02:28:25 executing program 6: io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xb743, 0x8, 0x3, 0xe2}) r0 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r1, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:25 executing program 6: io_uring_setup(0x492, 0x0) r0 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r1, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:25 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 02:28:25 executing program 6: io_uring_setup(0x492, 0x0) r0 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r1, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:25 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:25 executing program 4: r0 = syz_io_uring_setup(0x558f, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) 02:28:25 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_open_dev$hiddev(&(0x7f0000000300), 0x8, 0x100) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 02:28:25 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:25 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 02:28:25 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}}, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x88) [ 228.518690] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 228.520103] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 228.521643] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.522903] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 228.524593] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 228.526346] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 228.528122] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 228.529872] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 229.718505] Bluetooth: hci0: command 0x0c1a tx timeout [ 230.550504] Bluetooth: hci7: command 0x0c1a tx timeout [ 230.550541] Bluetooth: hci6: command 0x0c1a tx timeout [ 230.551032] Bluetooth: hci5: command 0x0c1a tx timeout [ 230.552070] Bluetooth: hci4: command 0x0c1a tx timeout [ 230.552109] Bluetooth: hci3: command 0x0c1a tx timeout [ 230.552136] Bluetooth: hci2: command 0x0c1a tx timeout [ 230.552162] Bluetooth: hci1: command 0x0c1a tx timeout 02:28:35 executing program 6: io_uring_setup(0x492, 0x0) r0 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r1, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:35 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x7e) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:35 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 02:28:35 executing program 4: r0 = syz_io_uring_setup(0x558f, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) 02:28:35 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xa8}}, 0x4) fsmount(0xffffffffffffffff, 0x0, 0x88) 02:28:35 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 02:28:35 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:35 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) 02:28:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:35 executing program 4: r0 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) 02:28:35 executing program 6: io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x3, 0xe2}) r0 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r1, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:35 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 02:28:35 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 02:28:35 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) socket$nl_generic(0x10, 0x3, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x88) 02:28:35 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:35 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:35 executing program 6: io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x3, 0xe2}) r0 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r1, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:35 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) [ 238.095521] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 238.096652] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 238.097812] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 238.099104] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 238.100161] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 238.101234] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 238.102533] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 238.103621] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 239.318527] Bluetooth: hci0: command 0x0c1a tx timeout [ 240.150627] Bluetooth: hci7: command 0x0c1a tx timeout [ 240.151121] Bluetooth: hci6: command 0x0c1a tx timeout [ 240.151599] Bluetooth: hci5: command 0x0c1a tx timeout [ 240.152563] Bluetooth: hci4: command 0x0c1a tx timeout [ 240.153323] Bluetooth: hci3: command 0x0c1a tx timeout [ 240.154286] Bluetooth: hci2: command 0x0c1a tx timeout [ 240.155068] Bluetooth: hci1: command 0x0c1a tx timeout 02:28:44 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000040)="daa052010464409862cf307fe60d764df285153df3a6987dac40ea95fb31e67a4667e57c61640a9325f3f9e1bc8e4e9f1e962ae94e0e6fe65b792ce4e01ddc09f76683e7c495ae183c6457a4891f00158f9cd65486177ae70d6487797b4ba231422cc7b02348eaccbabc4575a29adcc33b375c4491ada2f417a4be98c3a7d28431c4c3582c61e0e2cce68f8bf39875e590c5aeb6c36b0533e955b71fd9b5dc7d36d5e90b8cf5be1efc5281d3c8f238a31f1187511d587573f3d1546bd0ec2c6e25695929272821525bfa6423f62750b649a8", 0xd2) fsmount(0xffffffffffffffff, 0x0, 0x88) 02:28:44 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) 02:28:44 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/152, 0x98}, {&(0x7f0000001540)=""/118, 0x76}, {&(0x7f00000015c0)=""/45, 0x2d}], 0x6) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:44 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:44 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 02:28:44 executing program 6: io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x3, 0xe2}) r0 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r1, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:44 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 02:28:44 executing program 4: r0 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x1e4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) 02:28:44 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) 02:28:44 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:44 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) fsmount(0xffffffffffffffff, 0x0, 0x88) 02:28:44 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 02:28:44 executing program 6: io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x0, 0x3, 0xe2}) r0 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r1, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:44 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 02:28:44 executing program 4: r0 = syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1e4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) 02:28:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, 0x0, 0x0) [ 247.004817] [ 247.005054] ===================================== [ 247.005556] WARNING: bad unlock balance detected! [ 247.006052] 6.19.0-rc5-next-20260116 #1 Not tainted [ 247.006558] ------------------------------------- [ 247.007030] syz-executor.5/279 is trying to release lock (rcu_read_lock) at: [ 247.007750] [] __wait_on_freeing_inode+0x105/0x350 [ 247.008410] but there are no more locks to release! [ 247.008908] [ 247.008908] other info that might help us debug this: [ 247.009554] 4 locks held by syz-executor.5/279: [ 247.010014] #0: ffff88800f6fe3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 247.011582] #1: ffff88801aa27640 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 247.013554] #2: ffff88800f75a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 247.015128] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 247.016680] [ 247.016680] stack backtrace: [ 247.017479] CPU: 0 UID: 0 PID: 279 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 247.017500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 247.017509] Call Trace: [ 247.017515] [ 247.017521] dump_stack_lvl+0xca/0x120 [ 247.017558] ? __wait_on_freeing_inode+0x105/0x350 [ 247.017578] print_unlock_imbalance_bug+0x118/0x130 [ 247.017598] ? __wait_on_freeing_inode+0x105/0x350 [ 247.017617] lock_release+0x1ee/0x270 [ 247.017638] __wait_on_freeing_inode+0x10a/0x350 [ 247.017658] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 247.017679] ? __pfx_var_wake_function+0x10/0x10 [ 247.017703] ? lock_is_held_type+0x9e/0x120 [ 247.017718] insert_inode_locked+0x25f/0x890 [ 247.017741] __ext4_new_inode+0x223d/0x4cd0 [ 247.017764] ? __pfx___ext4_new_inode+0x10/0x10 [ 247.017783] ? __pfx_avc_has_perm+0x10/0x10 [ 247.017802] ? __pfx___dquot_initialize+0x10/0x10 [ 247.017830] ext4_mkdir+0x331/0xb30 [ 247.017855] ? __pfx_ext4_mkdir+0x10/0x10 [ 247.017876] ? security_inode_permission+0x72/0xe0 [ 247.017894] vfs_mkdir+0x6d8/0xc00 [ 247.017916] filename_mkdirat+0x118/0x430 [ 247.017934] ? __pfx_filename_mkdirat+0x10/0x10 [ 247.017951] ? strncpy_from_user+0x21b/0x2f0 [ 247.017973] __x64_sys_mkdir+0x6e/0xd0 [ 247.017990] do_syscall_64+0xbf/0x420 [ 247.018008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.018024] RIP: 0033:0x7fceea939c27 [ 247.018037] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 247.018051] RSP: 002b:00007ffd826612a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 247.018066] RAX: ffffffffffffffda RBX: 00007ffd82661330 RCX: 00007fceea939c27 [ 247.018076] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffd82661330 [ 247.018085] RBP: 00007ffd8266130c R08: 0000000000000000 R09: 0000000000000004 [ 247.018095] R10: 00007ffd82661046 R11: 0000000000000202 R12: 0000000000000032 [ 247.018104] R13: 000000000003c432 R14: 0000000000000002 R15: 00007ffd82661370 [ 247.018118] [ 247.044244] ------------[ cut here ]------------ [ 247.065729] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.5/279 [ 247.067056] Modules linked in: [ 247.067532] CPU: 0 UID: 0 PID: 279 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 247.068726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 247.069727] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 247.070391] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 247.072562] RSP: 0018:ffff88801a7bf9e0 EFLAGS: 00010286 [ 247.073169] RAX: 00000000ffffffff RBX: ffff88801ae2b700 RCX: ffffffff815660f7 [ 247.074040] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88801ae2bafc [ 247.074908] RBP: ffff88801ae2b700 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 247.075785] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801ae2b700 [ 247.076656] R13: 0000000000000001 R14: ffffffff85c0c930 R15: ffff8880097cebf0 [ 247.077515] FS: 00005555843ad400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 247.078412] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.079129] CR2: 00007f16fc548718 CR3: 000000000a5fb000 CR4: 0000000000350ef0 [ 247.079999] Call Trace: [ 247.080341] [ 247.081286] __wait_on_freeing_inode+0x10f/0x350 [ 247.082270] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 247.083832] ? __pfx_var_wake_function+0x10/0x10 [ 247.085584] ? lock_is_held_type+0x9e/0x120 [ 247.087116] insert_inode_locked+0x25f/0x890 [ 247.089274] __ext4_new_inode+0x223d/0x4cd0 [ 247.092446] ? __pfx___ext4_new_inode+0x10/0x10 [ 247.093752] ? __pfx_avc_has_perm+0x10/0x10 [ 247.094634] ? __pfx___dquot_initialize+0x10/0x10 [ 247.097434] ext4_mkdir+0x331/0xb30 [ 247.099958] ? __pfx_ext4_mkdir+0x10/0x10 [ 247.100808] ? security_inode_permission+0x72/0xe0 [ 247.104265] vfs_mkdir+0x6d8/0xc00 [ 247.106038] filename_mkdirat+0x118/0x430 [ 247.107356] ? __pfx_filename_mkdirat+0x10/0x10 [ 247.108365] ? strncpy_from_user+0x21b/0x2f0 [ 247.110792] __x64_sys_mkdir+0x6e/0xd0 [ 247.111642] do_syscall_64+0xbf/0x420 [ 247.112712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.113407] RIP: 0033:0x7fceea939c27 [ 247.113978] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 247.116024] RSP: 002b:00007ffd826612a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 247.116914] RAX: ffffffffffffffda RBX: 00007ffd82661330 RCX: 00007fceea939c27 [ 247.117754] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffd82661330 [ 247.118593] RBP: 00007ffd8266130c R08: 0000000000000000 R09: 0000000000000004 [ 247.119367] R10: 00007ffd82661046 R11: 0000000000000202 R12: 0000000000000032 [ 247.120217] R13: 000000000003c432 R14: 0000000000000002 R15: 00007ffd82661370 [ 247.123658] [ 247.123935] irq event stamp: 298469 [ 247.124333] hardirqs last enabled at (298469): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 247.125521] hardirqs last disabled at (298468): [] _raw_spin_lock_irqsave+0x53/0x60 [ 247.126673] softirqs last enabled at (298464): [] kernel_fpu_end+0x59/0x70 [ 247.127751] softirqs last disabled at (298462): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 247.128898] ---[ end trace 0000000000000000 ]--- 02:28:52 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) fsmount(0xffffffffffffffff, 0x0, 0x88) 02:28:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, 0x0, 0x0) 02:28:52 executing program 4: r0 = syz_io_uring_setup(0x558f, &(0x7f00000004c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) 02:28:52 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) r2 = fsmount(0xffffffffffffffff, 0x1, 0x4) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 02:28:52 executing program 6: io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x0, 0x0, 0xe2}) r0 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r1, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:52 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x79b0, &(0x7f0000000000)={0x0, 0x884e, 0x4, 0x2, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r0, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044086}, 0x44081) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101480, 0x0) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001680)=""/87) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1, &(0x7f0000001740)={0x0, 0xbbde, 0x20, 0x3, 0x354, 0x0, r3}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 02:28:52 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 02:28:52 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) r2 = fsmount(r0, 0x1, 0x2) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) 02:28:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, 0x0, 0x0) 02:28:52 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 02:28:52 executing program 3: ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) fsmount(0xffffffffffffffff, 0x0, 0x88) 02:28:52 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x100010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5092, &(0x7f0000000000)={0x0, 0x33b8, 0x20, 0x3, 0x12c}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x101482) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) syz_io_uring_setup(0x558f, &(0x7f00000004c0)={0x0, 0xa2db, 0x2, 0x3, 0x1e4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 02:28:52 executing program 6: io_uring_setup(0x492, &(0x7f0000000240)={0x0, 0xb743, 0x0, 0x0, 0xe2}) r0 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000400)='$N\x00', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) fspick(r1, &(0x7f0000000a40)='./file0\x00', 0x0) 02:28:52 executing program 1: ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x80000000) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) r0 = fsmount(0xffffffffffffffff, 0x0, 0x66) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r0, 0x10000000) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) fsmount(r0, 0x1, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x8182, 0x0) 02:28:52 executing program 4: r0 = syz_io_uring_setup(0x558f, &(0x7f00000004c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0, &(0x7f0000000580)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x6) [ 255.809294] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 255.811242] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 255.813089] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 255.815566] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 255.816952] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 255.818018] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 255.819924] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 255.821382] Bluetooth: hci7: Opcode 0x0c1a failed: -4 VM DIAGNOSIS: 02:28:45 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff829750a0 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88806ce08940 R8 =0000000000000001 R9 =ffffed100d9c1119 R10=0000000000000000 R11=652d7a7973205043 R12=0000000000000072 R13=ffffffff889c19f0 R14=ffffffff889c19a0 R15=ffffffff889c1c60 RIP=ffffffff829750f5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555843ad400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f16fc548718 CR3=000000000a5fb000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffea0000c31518 RBX=0000000000000000 RCX=ffffffff819fbbe7 RDX=ffff888044890000 RSI=ffffffff819fbca9 RDI=0000000000000005 RBP=0000000000000000 RSP=ffff888049377658 R8 =0000000000000000 R9 =fffff940001862a0 R10=0000000000000000 R11=0000000000000000 R12=8000000030c54007 R13=dffffc0000000000 R14=ffff888049377ad0 R15=ffff88800d6f8648 RIP=ffffffff819fbcae RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2cc22000 CR3=000000000faa4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000ff0000 XMM01=6a6e695f31313230385f7a7973006273 XMM02=000000000000000000ffffffff000000 XMM03=00007fd7e3be47c800007fd7e3be47c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000