Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:8029' (ECDSA) to the list of known hosts. 2025/01/23 05:06:38 fuzzer started 2025/01/23 05:06:38 dialing manager at localhost:38529 syzkaller login: [ 70.162463] cgroup: Unknown subsys name 'net' [ 70.295751] cgroup: Unknown subsys name 'cpuset' [ 70.333771] cgroup: Unknown subsys name 'rlimit' [ 76.122619] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 05:06:55 syscalls: 2217 2025/01/23 05:06:55 code coverage: enabled 2025/01/23 05:06:55 comparison tracing: enabled 2025/01/23 05:06:55 extra coverage: enabled 2025/01/23 05:06:55 setuid sandbox: enabled 2025/01/23 05:06:55 namespace sandbox: enabled 2025/01/23 05:06:55 Android sandbox: enabled 2025/01/23 05:06:55 fault injection: enabled 2025/01/23 05:06:55 leak checking: enabled 2025/01/23 05:06:55 net packet injection: enabled 2025/01/23 05:06:55 net device setup: enabled 2025/01/23 05:06:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 05:06:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 05:06:55 USB emulation: enabled 2025/01/23 05:06:55 hci packet injection: enabled 2025/01/23 05:06:55 wifi device emulation: enabled 2025/01/23 05:06:55 802.15.4 emulation: enabled 2025/01/23 05:06:55 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/23 05:06:55 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/23 05:06:55 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/23 05:06:55 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/23 05:06:55 fetching corpus: 0, signal 0/10000 (executing program) 2025/01/23 05:06:55 fetching corpus: 0, signal 0/10667 (executing program) 2025/01/23 05:06:55 fetching corpus: 0, signal 0/10667 (executing program) 2025/01/23 05:06:58 starting 8 fuzzer processes 05:06:58 executing program 0: sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}}, 0x40044) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x110, r0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4269}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd04}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd0}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x35b60296}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x14}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x919e}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb8, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0xb}}}}, [@NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x20040041) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) fchown(0xffffffffffffffff, r1, 0xffffffffffffffff) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000006c0)=0x10000, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x10001, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x28000}, 0x44) ioctl$RTC_PIE_OFF(r3, 0x7006) syz_usb_connect$cdc_ecm(0x0, 0x58, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x7, 0x24, 0x6, 0x0, 0x0, '4!'}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x5, 0x3}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x40, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7f, 0x2f, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7f, 0x50, 0x20}}}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x200, 0x3a, 0xff, 0x2, 0x20, 0x2}, 0x3a, &(0x7f0000000940)={0x5, 0xf, 0x3a, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x1f, 0x5, 0xfff, 0xf00, 0x8, [0xcf, 0xff3f0f, 0xc0a0, 0xff3f, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x2, 0x6, 0x9, 0xcf}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x2, 0x3, 0x4}]}, 0x2, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x40f}}]}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000a40), &(0x7f0000000ac0)=0x68) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40004000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x3, 0x2a390d6f, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x8, 0x4, 0x6}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r3, {r1, r2}}, './file0\x00'}) sendmsg$TIPC_CMD_GET_LINKS(r7, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, 0x0, 0x408, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7ff}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x24000080) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, 0x0, 0xd80833c71180ce00, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf3a7, 0x11}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008010) 05:06:58 executing program 3: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x58}}, 0x2) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20049000}, 0x4000000) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45340e55}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd8f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59ba346c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x883e5e3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3521}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdd73}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x100}, 0x400c001) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x188, 0x0, 0x201, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e77}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x52, 0x3, "365767cd459d35f96b070ea11ba7ab78d217a3a039ff2e5e6db804be6ee77ce2cb6d1e7ac4e30c6f2d916864666491a996adf904caa390c9ce5d3ab2bd90347a87726fe47a317ea57356eb0d9436"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x84}, 0x20000080) recvmsg(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000740)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000007c0)=""/105, 0x69}, {&(0x7f0000000840)=""/233, 0xe9}, {&(0x7f0000000940)=""/151, 0x97}, {&(0x7f0000000a00)=""/100, 0x64}, {&(0x7f0000000a80)=""/60, 0x3c}, {&(0x7f0000000ac0)=""/150, 0x96}, {&(0x7f0000000b80)=""/50, 0x32}, {&(0x7f0000000bc0)=""/197, 0xc5}], 0x8}, 0x100) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d80)={'syztnl1\x00', r0, 0x29, 0x4, 0x1e, 0x401, 0x1b, @private1, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7, 0x7800, 0x6, 0x10a}}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000e40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x30, r1, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x52}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x20040044) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000011c0)={r0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000001240), 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001280)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x94, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf6d}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x4000) keyctl$update(0x2, 0x0, &(0x7f0000001400), 0x0) r5 = dup(r3) write$bt_hci(r5, &(0x7f0000001440)={0x1, @change_conn_ptype={{0x40f, 0x4}, {0xc9, 0x7f}}}, 0x8) ioctl$KDGETKEYCODE(r5, 0x4b4c, &(0x7f0000001480)={0x6, 0x100}) 05:06:58 executing program 1: ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x106, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x7d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004044) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0xe16d6fc620ec33c9, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0x2}) setresgid(0xee01, 0xee00, 0xee01) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000001c0)) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000200)="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") ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000004640)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000004740)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004700)={&(0x7f00000046c0)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x20, 0x7, @l2={'eth', 0x3a, 'gre0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x20048041) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f00000047c0)={0x5, 0x10, '\x00', 0x1, &(0x7f0000004780)=[0x0, 0x0]}) ioctl$FITHAW(r3, 0xc0045878) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000004cc0)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004c80)={&(0x7f0000004840)={0x428, 0x3f4, 0x100, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x40, [0x0, 0xde4, 0xbd9, 0x1ff, 0x2, 0x2, 0x543b, 0x4, 0x3f, 0x8, 0x3, 0x5, 0x8, 0x0, 0xaff, 0x7fff, 0x40, 0x7a, 0x6, 0x401, 0x3, 0x6, 0x3, 0xf173, 0x3, 0x974, 0x0, 0x6, 0xc2ac, 0x2, 0xe6, 0x1000, 0x37, 0xffff0000, 0x6, 0x4, 0x9, 0x2985, 0x6, 0x4, 0xfff, 0x0, 0x6, 0xca, 0x2, 0x3ff, 0x3, 0x2, 0x7f, 0x69a55ab6, 0x6, 0x6, 0x3, 0x400, 0x1, 0x2, 0xfffffff9, 0x96f0, 0x5, 0x2, 0x101, 0x20, 0x5b, 0x80000001], [0x4, 0xffff8001, 0xb04d, 0xaa, 0x5, 0x8, 0x9, 0x7, 0x6, 0x7fff, 0x0, 0x1ff, 0xff, 0x4, 0x7, 0x3, 0x3, 0x0, 0x1, 0x9, 0xc5d5, 0x5, 0x8438, 0x400, 0x0, 0x4, 0x4, 0x3, 0x1f80, 0xad, 0x7, 0x3, 0x7, 0x8001, 0x10000, 0x0, 0x6, 0x7c, 0x9, 0x200, 0x400, 0x1ff, 0x200, 0x200, 0x2, 0x7, 0x9, 0xd6, 0x8, 0x9, 0x60017338, 0x81, 0x6, 0x9, 0x9, 0x84, 0x3f, 0xc71, 0x2, 0x1, 0x81, 0x3, 0x4, 0x9], [0x5, 0x0, 0xee83, 0x4, 0x7ff, 0x0, 0x2, 0x1d, 0x2cd, 0x1, 0x8, 0x1, 0x3, 0x1, 0x7, 0xb09, 0x80000000, 0x7, 0xffffffff, 0x13d0, 0x1, 0x1, 0x10001, 0x4, 0x3, 0x80000000, 0x7ff, 0x3, 0x9, 0x8, 0x7, 0x4, 0x6, 0x401, 0x6, 0xad, 0x0, 0x7, 0x5, 0x5, 0x5b, 0x855, 0x4b, 0x200, 0x5, 0x5, 0x501, 0x7f, 0xffff, 0x6, 0x1, 0x8, 0x3, 0x8ac4, 0x8000000, 0x5, 0x6, 0xff, 0x4, 0x4, 0x0, 0x7, 0x7, 0x1], [0x7fff, 0x0, 0x4, 0x3, 0xffffff2f, 0x1ff, 0x6, 0x80, 0x4, 0x6, 0x9, 0x72c, 0x4, 0x1, 0x9, 0x2, 0x200, 0x8001, 0x5, 0xfffffbff, 0x4, 0x58e00000, 0xe4, 0x6, 0x80000001, 0xffffff00, 0x80000000, 0x8, 0x9, 0x7, 0xffffffff, 0x5, 0x6, 0x6, 0xfff, 0x6, 0x20, 0x7, 0x5, 0x1, 0x4, 0x3, 0x40, 0x9, 0xda, 0x0, 0x9, 0x8, 0xfb4, 0x8, 0xfff, 0x5, 0xffffffd9, 0xb4, 0xfffffffc, 0x7, 0xb4eb, 0x51fe, 0x502, 0x2c, 0x5, 0x1, 0x3, 0x2], 0x5, ['gre0\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4000004}, 0x4080) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000004dc0)={&(0x7f0000004d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004d80)={&(0x7f0000004d40)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x480c4}, 0x4040080) r5 = openat(0xffffffffffffffff, &(0x7f0000004e00)='./file0\x00', 0x80001, 0x89) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000006180)={&(0x7f0000004e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000006140)={&(0x7f0000004e80)={0x12b4, 0x1, 0x5, 0x101, 0x0, 0x0, {0x5}, [{{0x254, 0x1, {{0x3, 0x800}, 0xfd, 0x1, 0x7, 0x8, 0xe, 'syz0\x00', "0fe427fa47b31c83c7c177ceb9618e12649485311e22cc02ee2983e933b2747a", "32c0231e06dfbed78732ae49913e9d51badba8c09746c687f37f344d619bcc22", [{0x0, 0xfc, {0x1, 0x9}}, {0x8001, 0x5, {0x0, 0x3}}, {0x5, 0x2, {0x0, 0xfffffffd}}, {0x4070, 0x81, {0x3, 0x2}}, {0x5, 0x4, {0x3, 0x80000001}}, {0x4, 0x1, {0x2, 0x9}}, {0x200, 0x1ff, {0x2, 0x1c}}, {0x2, 0x967, {0x3, 0x8}}, {0xe14f, 0x1, {0x0, 0x6}}, {0x1f, 0xfffb, {0x3, 0x7ff}}, {0x7, 0xfffd, {0x0, 0xff}}, {0x9, 0x6, {0x3, 0x6}}, {0x80, 0x4, {0x3, 0x3ff}}, {0x1, 0x7ff, {0x0, 0x75}}, {0x40, 0x1ff, {0x3, 0x2}}, {0x1033, 0x5834, {0x2, 0x1}}, {0x7, 0x81, {0x0, 0x5}}, {0x1, 0x5, {0x1, 0x8}}, {0x0, 0x4, {0x1, 0x800}}, {0xbd, 0x7f, {0x2, 0x20}}, {0x2, 0x1f, {0x2, 0x4}}, {0x1, 0x4, {0x1, 0x2}}, {0xb188, 0x0, {0x2, 0x90}}, {0x4, 0x200, {0x3, 0x80000001}}, {0x8, 0x200, {0x1, 0xffffffc1}}, {0x6, 0x800, {0x0, 0x9}}, {0x6, 0x3ff, {0x1, 0x20}}, {0x6, 0x8, {0x1, 0x200}}, {0x5, 0xffff, {0x0, 0x4}}, {0x2, 0x7e, {0x0, 0x4}}, {0x2, 0x1, {0x3, 0x3}}, {0x5, 0x1, {0x2, 0xff}}, {0x8001, 0x1ff, {0x0, 0x8000}}, {0x0, 0x40, {0x1, 0x7cb}}, {0x3, 0xffff, {0x2, 0x5}}, {0xff, 0x800, {0x0, 0x5}}, {0xc6, 0x800, {0x1, 0x5}}, {0x5, 0x0, {0x2, 0xffffff00}}, {0x4543, 0x7, {0x1, 0x10000}}, {0x101, 0x9, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0x20, 0x2, 0x4, 0x815c, 0xc, 'syz0\x00', "d51615f64bbc74d76e2a520321e93d61925167a635a799fb6dc78b103923772c", "ebc8470058d5bb4d358cdf9bb7cb7509cfee0a48f547aed2f11ea53577d8223d", [{0xc00, 0xff01, {0x1, 0x1ff}}, {0x7, 0x4, {0x0, 0x8}}, {0x6, 0x80, {0x1, 0x6}}, {0x9, 0xff94, {0x2, 0x2}}, {0x1000, 0x8, {0x3, 0x8}}, {0x4, 0x9, {0x2, 0x5}}, {0x3, 0x1fb, {0x3}}, {0x200, 0x0, {0x3, 0x3}}, {0x6, 0x401, {0x3, 0x10001}}, {0x7ff, 0xffff, {0x3, 0xfffffffc}}, {0x1, 0x107, {0x2, 0x81}}, {0x8, 0x3, {0x0, 0xbfd}}, {0x200, 0x0, {0x3, 0x9}}, {0x1, 0x8, {0x3, 0x7}}, {0x1ff, 0x5, {0x0, 0xffff8001}}, {0x7ff, 0x6, {0x0, 0x1}}, {0x7, 0x0, {0x1, 0x9}}, {0x7, 0x2, {0x3, 0x756}}, {0x0, 0x8001, {0x1, 0x4a0d}}, {0x7, 0x4, {0x0, 0x80}}, {0x8, 0xf1, {0x2, 0x2}}, {0x7, 0x400, {0x1, 0x2}}, {0x3f, 0x7, {0x0, 0xfffff3c6}}, {0x1, 0x0, {0x0, 0x101}}, {0x7, 0x200, {0x2}}, {0x4, 0xffff, {0x2, 0x1}}, {0x6, 0x3, {0x1}}, {0x3, 0x0, {0x1, 0x8}}, {0x0, 0x101, {0x2, 0x1f}}, {0x8, 0x4, {0x0, 0x8}}, {0x80b, 0x800, {0x2, 0x710e}}, {0x7f, 0x0, {0x3, 0x81}}, {0x6, 0x8, {0x1, 0x1}}, {0x9, 0x5, {0x3, 0x3}}, {0x7f, 0x3, {0x1, 0x7}}, {0x7, 0xd57c, {0x3, 0x7f}}, {0x1000, 0x0, {0x2, 0x9}}, {0x4930, 0xfffe, {0x0, 0x20}}, {0x20d9, 0x2}, {0x1, 0xfff, {0x3, 0x80}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0xef, 0xba, 0x20, 0x9, 0x11, 'syz1\x00', "06a46905a0906e3ca21723c353f024ba8f9e9ad1afd9af2f0be8a22431841644", "566c4acc7cb5ab0beeb289c18bfc215aa889e596c3352e5a125779025d6e31cc", [{0x1f, 0x6, {0x2, 0x4}}, {0x0, 0xffff, {0x2, 0xff}}, {0x6, 0x7, {0x0, 0x1}}, {0xcc, 0x3c1, {0x1}}, {0x7, 0x3, {0x0, 0x8}}, {0x9, 0x3, {0x3, 0x73}}, {0x6, 0x4, {0x3, 0x1000}}, {0xd0, 0x7fff, {0x0, 0x8}}, {0x8819, 0x1, {0x3}}, {0x9, 0x7f, {0x2, 0xffff}}, {0xd10c, 0x3, {0x3}}, {0xffff, 0x7fff, {0x0, 0x95fc}}, {0x1f, 0x7, {0x3, 0x2}}, {0x1, 0x81, {0x0, 0x1}}, {0x1ff, 0x9, {0x0, 0xffffffff}}, {0x7, 0x81, {0x0, 0x4}}, {0x1ff, 0x7ff, {0x2, 0x100}}, {0xfffe, 0x8, {0x1, 0x8001}}, {0x7f, 0x2, {0x1, 0x9}}, {0x64, 0x400, {0x3, 0x7d9}}, {0x7ff, 0xada6, {0x0, 0x9}}, {0x100, 0xffff, {0x0, 0x81}}, {0x2000, 0xa0, {0x3, 0x7fffffff}}, {0x7, 0x1, {0x1, 0xffffffff}}, {0x3ff, 0xfff8, {0x3, 0x8}}, {0xfffe, 0x5, {0x2, 0xdb}}, {0x4, 0x8, {0x3, 0x5}}, {0xf306, 0x3, {0x0, 0x3}}, {0x5a, 0x6, {0x3, 0x2}}, {0x7fff, 0x9, {0x2, 0x2}}, {0x6, 0x101, {0x1, 0x1}}, {0x8, 0x92, {0x2, 0x5}}, {0x9a8, 0x3ff, {0x2, 0x3ff}}, {0x0, 0x8, {0x0, 0x80000000}}, {0x2, 0xab, {0x3, 0xff}}, {0xfffe, 0x8, {0x3, 0x9}}, {0x1, 0x8, {0x3}}, {0x7, 0x101, {0x2, 0x100}}, {0x8, 0x7, {0x1, 0x9}}, {0x4, 0x101, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0x6, 0x8, 0x8001, 0x6, 0x1c, 'syz1\x00', "361d82e3b87c4aaa991a113e313eb1c92790e05983a47cb84d6a0dd0f2929700", "87bde1f4168679f475ec83b7e9dbd3ecff074802aac7458bd69b8a783e775bca", [{0x7, 0x5, {0x1, 0x40}}, {0xfc00, 0x8, {0x1, 0x530b}}, {0x9, 0xfd29, {0x0, 0x1}}, {0xff, 0x8, {0x1, 0x101}}, {0x3ff, 0x1, {0x3, 0x240}}, {0x7fff, 0x5, {0x1, 0x2}}, {0x38, 0x401, {0x1, 0x6}}, {0x6, 0x8, {0x3, 0x401}}, {0x0, 0x5, {0x0, 0x3}}, {0x5, 0x100, {0x2, 0x4}}, {0x5, 0x0, {0x1, 0x100}}, {0x7, 0x7a6, {0x1, 0x20}}, {0xf723, 0x8, {0x1, 0x3}}, {0x8, 0x800, {0x0, 0x5}}, {0x2, 0x9, {0x1, 0x1eff}}, {0x7, 0x8, {0x2, 0x1}}, {0x1, 0x3, {0x2, 0x59}}, {0xfff9, 0x2, {0x1, 0x81}}, {0x3c, 0x81, {0x3, 0x1}}, {0xf1a, 0x800, {0x3, 0x1ff}}, {0x0, 0x4, {0x1, 0x101}}, {0x3, 0x9, {0x0, 0x1}}, {0x7fff, 0x1, {0x1, 0x3}}, {0x9, 0x7, {0x0, 0x6}}, {0x1, 0x4, {0x1, 0x7a7}}, {0x8001, 0x7, {0x2, 0x6}}, {0x9e, 0xffff, {0x0, 0x4}}, {0x1, 0xe77, {0x3, 0x6}}, {0x4, 0x4819, {0x2, 0x9}}, {0x8001, 0x8, {0x2, 0x6}}, {0x3f, 0x9, {0x2, 0x3}}, {0x100, 0x2fc, {0x0, 0x1}}, {0x800, 0x1000, {0x1, 0x2}}, {0x40, 0x7, {0x1, 0x3ff}}, {0x9, 0x9, {0x1, 0xff}}, {0x0, 0x5, {0x2, 0x80000001}}, {0x5, 0x1ff, {0x1, 0x2}}, {0xfff, 0x1, {0x3, 0xff}}, {0x5, 0x8, {0x2, 0x2}}, {0x5, 0x790c, {0x0, 0x7c}}]}}}, {{0x254, 0x1, {{0x1}, 0x3, 0x13, 0x3, 0x91, 0x28, 'syz1\x00', "49f061fc811dcbed4f174b96eb1981726679f54a676946e65f5e2044241f312f", "1cc380351f5e1dd74a4f5365a46c7b517823315f72472ae819339f6a4dadf640", [{0x101, 0xfffa, {0x0, 0x855}}, {0x5, 0x6, {0x3, 0x5967}}, {0x8, 0xffff, {0x2}}, {0x9, 0x101, {0x0, 0x2}}, {0x5, 0x7, {0x1, 0x7}}, {0x729, 0x4, {0x2, 0x401}}, {0x2, 0x99, {0x1, 0x3ff80}}, {0x480, 0xc7, {0x1, 0x6}}, {0x8, 0x100, {0x1, 0x8c9}}, {0x3ff, 0x400, {0x2, 0x1}}, {0x800, 0xff85, {0x0, 0xe9}}, {0x7, 0x1, {0x1}}, {0xf000, 0x400, {0x3, 0x8}}, {0x5, 0x4, {0x2}}, {0x6, 0x3}, {0x7, 0x401, {0x3, 0x4}}, {0x7b07, 0x8, {0x2, 0x3ff}}, {0x7, 0x8001, {0x0, 0x56e}}, {0x3, 0x2, {0x0, 0xfffffffe}}, {0x9, 0x9, {0x1, 0x5}}, {0x3, 0x0, {0x3}}, {0x3f, 0x8001, {0x0, 0xfffffff9}}, {0x2, 0x40, {0x2, 0x5}}, {0x800, 0x204}, {0x7, 0x400, {0x1, 0x401}}, {0x81, 0x7ff, {0x2, 0x7}}, {0x9, 0x400, {0x0, 0x800}}, {0x9, 0x578, {0x0, 0x9}}, {0x6, 0x9, {0x0, 0x4}}, {0x4, 0x7, {0x0, 0x1}}, {0x1, 0x6, {0x1, 0x10000}}, {0x7, 0xfff, {0x3, 0x1}}, {0x6, 0x0, {0x3, 0x7}}, {0x3, 0x0, {0x0, 0x5}}, {0x3, 0x1, {0x1, 0x7}}, {0x8, 0x2, {0x0, 0x3f}}, {0x80, 0x1f, {0x3, 0x9}}, {0x401, 0x1f, {0x3, 0x1}}, {0x9f82, 0xfee1, {0x1, 0x200}}, {0x5, 0x40, {0x0, 0x1000}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x7f, 0x7f, 0x9, 0xe51f, 0x22, 'syz1\x00', "a9d3f3eef488fde4fe934b1e129d3567cb3748dbc25488277092a20ea4c78d36", "1a10a9163343245dce6f8855afb10941dff5d0f82fefbcfecd9702f5d2eb8790", [{0x8, 0x200, {0x0, 0xe9}}, {0x5, 0xda3}, {0x7, 0x6, {0x0, 0x4}}, {0xffff, 0x3, {0x0, 0x9}}, {0x4, 0x5, {0x2, 0x7fff}}, {0xdd, 0x80, {0x0, 0x59}}, {0x7ff, 0x7b7e, {0x1, 0x5774}}, {0x6, 0x673, {0x1, 0x7255}}, {0x8, 0x6, {0x3, 0x7}}, {0x63, 0x400, {0x0, 0x800}}, {0x1, 0x400, {0x0, 0x9}}, {0x40, 0x1, {0x2, 0x7}}, {0x5, 0x9, {0x3, 0x1}}, {0x0, 0x7f, {0x1, 0x9}}, {0x4, 0x4, {0x1, 0x7}}, {0xfffd, 0xa0, {0x2, 0x21ae}}, {0x5, 0x2, {0x1, 0x7}}, {0x100, 0x7, {0x1, 0x9}}, {0xbf97, 0x0, {0x2, 0x7fffffff}}, {0x7, 0x8a, {0x2, 0x3}}, {0x200, 0x7, {0x1, 0x280000}}, {0x2, 0x36, {0x2, 0x8000}}, {0x9, 0x7ff, {0x3, 0x271}}, {0x2, 0x7fff, {0x1, 0x3f}}, {0x3, 0x4, {0x0, 0x3}}, {0xfff9, 0x3, {0x2, 0x80000000}}, {0x800, 0xfffc, {0x0, 0x154}}, {0x7, 0x1, {0x1, 0x31}}, {0x9, 0x3, {0x0, 0x800}}, {0xaa, 0x4, {0x0, 0x8}}, {0x8, 0x3, {0x2, 0x5}}, {0xa9c, 0x7}, {0x1, 0x0, {0x3, 0x5}}, {0x7fff, 0xff, {0x1, 0x3}}, {0x856, 0x5, {0x0, 0x4}}, {0x73, 0x2, {0x1, 0x5}}, {0x27b, 0xfffb, {0x3, 0x3}}, {0x8f30, 0x5, {0x1}}, {0xad, 0x80, {0x1, 0x10000}}, {0x6, 0xec70, {0x2, 0x3ff}}]}}}, {{0x254, 0x1, {{0x2, 0x40000000}, 0x6, 0x1, 0x1ff, 0x4, 0x16, 'syz0\x00', "04cd4de1594b4075f4386d588f47579587acfd44dc284e7872351d31b6dc5bb4", "384e8e9129e1eb9a749f6dd1fcff54e5ca2cdeab7f9619de725cdd596b76a3bf", [{0xfa3, 0x8001, {0x0, 0x1}}, {0x77, 0x5, {0x0, 0x3}}, {0x6fc, 0x3, {0x0, 0x10001}}, {0x8, 0x676f, {0x0, 0x10001}}, {0x0, 0x400, {0x2, 0x5}}, {0x3, 0x3, {0x1, 0x7}}, {0x6, 0x4, {0x1, 0x400}}, {0x8e, 0x7, {0x1, 0x4}}, {0x401, 0x7, {0x1, 0x947}}, {0x1f, 0x9, {0x1, 0x101}}, {0x2, 0x2, {0x0, 0x61a81936}}, {0xae, 0x6, {0xf665466000ff5b40, 0x200}}, {0x0, 0x7, {0x2, 0x81}}, {0x5d43, 0x2, {0x3, 0x3}}, {0x5af, 0x923c, {0x2, 0xf9b1}}, {0x5, 0x1, {0x0, 0x9d}}, {0x7, 0x0, {0x3, 0xe26}}, {0x80, 0x6, {0x2, 0xff}}, {0x200, 0x2d, {0x3}}, {0x6, 0x9, {0x2, 0x4}}, {0x8001, 0x3, {0x0, 0x1}}, {0x0, 0x7, {0x1, 0x1}}, {0x6, 0x7, {0x2}}, {0x89e, 0x7e, {0x1, 0xb9}}, {0x8, 0x2b5, {0x1, 0x48000000}}, {0x3ff, 0xa9, {0x3, 0x1}}, {0x5067, 0x0, {0x1, 0x401}}, {0x200, 0x52, {0x3, 0x1}}, {0x2, 0x8, {0x1, 0x1}}, {0x2, 0x100, {0x2, 0x6}}, {0x0, 0x7, {0x2, 0x5}}, {0x401, 0x800, {0x2, 0x1}}, {0x200, 0x6, {0x3, 0x5}}, {0xfffd, 0x40, {0x0, 0x6}}, {0x3, 0x5, {0x2, 0x1}}, {0x0, 0x9, {0x0, 0x3}}, {0xd38, 0x401, {0x0, 0x8000}}, {0x4, 0x81, {0x3, 0x1}}, {0x20, 0xff, {0x2, 0xc2}}, {0x6, 0x101, {0x2, 0x40}}]}}}, {{0x254, 0x1, {{0x1, 0x8a8}, 0x2, 0x3f, 0x0, 0xb92, 0x19, 'syz1\x00', "645a22acaea5a5ecce1ce5f443eb85feffccb48e67e1c81c2db47b23d38a4482", "f51427a2c1f9fb3316883b6dcb9f4eb94d96d3786b7955ef8460a2f26feb379a", [{0x8, 0x7, {0x3, 0xfdfc}}, {0x2, 0x8001, {0x1, 0x9}}, {0x2000, 0x5, {0x1, 0x9}}, {0x6, 0x17d2, {0x1, 0x4}}, {0xffff, 0x0, {0x2, 0x4}}, {0x8, 0x400, {0x0, 0x81}}, {0x9, 0x40, {0x3, 0x200}}, {0x7, 0xde, {0x3, 0x8}}, {0x401, 0x8, {0x0, 0x456f}}, {0x6, 0x7ff, {0x1, 0x3ff}}, {0x8000, 0x8, {0x1, 0xfffffff7}}, {0xffc0, 0xf78d, {0x3, 0x6}}, {0x3, 0x7f, {0x0, 0x9}}, {0x14ac, 0x3, {0x0, 0x401}}, {0xee98, 0x800, {0x2, 0x1}}, {0xfff, 0x0, {0x0, 0x7}}, {0x4, 0x1, {0x1, 0x9}}, {0x3, 0xfffd, {0x1, 0x1}}, {0x6, 0xff, {0x3, 0x10000}}, {0x400, 0x0, {0x1, 0x2}}, {0x4, 0xb7d, {0x1, 0x2b}}, {0x5, 0x7, {0x1, 0x800}}, {0x7, 0x5, {0x3, 0x5}}, {0x81c3, 0x4, {0x1, 0x4}}, {0x20, 0x2, {0x3, 0x81}}, {0x1ff, 0x6, {0x1, 0x5}}, {0x0, 0x1, {0x0, 0x5e5}}, {0x0, 0x9, {0x2, 0x5}}, {0xccc, 0x9, {0x1, 0x3}}, {0xfff, 0x31, {0x0, 0x4}}, {0x401, 0x200, {0x1, 0x36a}}, {0x7, 0x7, {0x2, 0x7}}, {0xfffa, 0x200, {0x2, 0x100}}, {0x8, 0x1000, {0x2, 0xffff753e}}, {0x4, 0x0, {0x0, 0x4}}, {0x9, 0x3, {0x3, 0xda}}, {0x20, 0x7, {0x0, 0x6}}, {0x2, 0x200, {0x3, 0x1f}}, {0x6, 0x81, {0x3, 0x6}}, {0x6, 0x5, {0x2, 0xc1}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x24048884}, 0x200008d0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000061c0)) 05:06:58 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffa}}, './file0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2af}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x101}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x900000}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x10, 0x24, [{0x3}, {0x12, 0x1}, {0x1, 0x1}, {0x24, 0x1}, {0x6c}, {0x18, 0x1}, {0x4}, {0x12}, {0x1, 0x1}, {0xb, 0x1}, {0xb, 0x1}, {0x34}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x8041) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x3}, {0x9}, 0x10, 0x0, 0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)="2d2ff48b3182bc0083d1021e2d46469193e5af379e50084bfc607914c222317b1c0c4a503b0217185e31b70dcd81e88029c9e6918c4907fff09c933ab8222feb88abb18ab1bb45998f789219", 0x4c, 0x0, &(0x7f00000002c0)={0x2, 0xe1, {0x0, 0xc, 0x72, "782eb0bd087c1eee1b636871d58cc6feeb6b20f0f2cde8ca7adcae28cd3286077c2338438300026a9cbee25e2937235720991d8aa8077c2dfb83f247454c92fa2852791720cd0a75264b155ab1b09b85ce9b92fa4544c65ca87f6c859611a16a4a6cd895a2612e53b8a3aee6de86330529ae", 0x62, "543fa91db6944913f244d8690633df07801df4fb1764edce68f2bdd30e214d4c5677321d4b030f8d1b3ee2ddb966a70befbcd02c13d0dde4fd1572a1bb16aca599dacceabe55f87b6c0c3bcefcf565b469a7f4611a9023b40f37466e79839ec03163"}, 0xb0, "22410da094116f2f343ff38c17408453a61ae0e20aa79f45470900ef702e0411efd4bd0f9f476551f40083883cbc6ea6d2de21ba156758e9f78dc9d070367bc923674faff80e0acec5493c7dc646cc037f434df4a5b8fd0c1ba5adf85031d83eff177936bcedb849575746b9ad8c77e8c22bcb86c641dcd170807813fa60157432fc7b466cd268e68c0bd4b87b047660544afc927df6eca37336dc8b91ef12dbe7334bc4a907472070d0b08cf4aa38a3"}, 0x19d}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000500)={@private2}, 0x14) mount$9p_rdma(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x208000, &(0x7f0000000600)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x100}}, {@common=@cache_fscache}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, ',\\-3'}}, {@obj_user={'obj_user', 0x3d, ','}}, {@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0x3}}]}}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@local, @in=@empty, 0x4e20, 0x7, 0x4e21, 0x400, 0x2, 0xa0, 0x80, 0x3a, 0x0, 0xee01}, {0xe6, 0x10001, 0xffffffff, 0x6, 0x9b12, 0x9a, 0x1, 0x401}, {0x1000, 0x6, 0x0, 0x4}, 0x80000000, 0x6e6bb7, 0x1, 0x1, 0x6, 0x3}, {{@in6=@loopback, 0x4d5, 0x2b}, 0x2, @in=@empty, 0x3504, 0x3, 0x0, 0x5, 0x1, 0x6, 0x7}}, 0xe8) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000007c0)={0x2, 0x0, [0x0, 0x0]}) r2 = syz_open_dev$evdev(&(0x7f0000000800), 0x1, 0x157480) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000840)=0x3f) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x14, 0x70bd29, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x40004) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000980)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind(r3, &(0x7f00000009c0)=@pppoe={0x18, 0x0, {0x2, @empty, 'lo\x00'}}, 0x80) r4 = memfd_create(&(0x7f0000000a40)='obj_user', 0x3) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000a80)={"aa8599e3a85cf368549accffd4226b76", 0x0, 0x0, {0xa6e8, 0xfffffffc}, {0xd89, 0x4}, 0x800, [0x2, 0x2, 0x7, 0x20, 0x723a8, 0x2, 0x2, 0x5, 0x6f0, 0x5, 0x100, 0x3, 0x5, 0x800, 0x101, 0x6c]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000c00)={{r4}, r5, 0x8, @inherit={0x60, &(0x7f0000000b80)={0x0, 0x3, 0xfffffffffffffff9, 0x385, {0x8, 0x4, 0x9, 0x1, 0x583}, [0x6, 0x0, 0x7d]}}, @devid}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x3000, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f0000001c40)=""/4096) 05:06:58 executing program 2: ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff, 0x6}}, './file0\x00'}) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xb5}}, '\x00'}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1f}}, './file0\x00'}) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000200)=r4) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x54000, 0xa) r6 = signalfd(r1, &(0x7f0000000280)={[0x1]}, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000340)={0x0, "7247a29ae5d8e94a5a23c992bce49cd2"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000001340)={{r0}, r4, 0x0, @inherit={0x68, &(0x7f00000002c0)={0x0, 0x4, 0xfff, 0x6, {0x8, 0xffffffffa9953e5f, 0x8, 0x6, 0x7}, [0x6, 0x80, 0x2, 0x400]}}, @devid=r7}) getsockname$packet(r0, &(0x7f0000002340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002380)=0x14) pipe2(&(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x20000000) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x7ff) write$binfmt_misc(r9, &(0x7f0000002500)={'syz0', "2c2020613ad73679ad883e9c050a279bba2c3d0a2f8aa0b2970972bb9fd8379ba0c38983547c918e0360e7db8e3bf2eac472b06234f1051464761a19662c67191be361fb225e664fa58b50e389820abc55083ffbd97212c0afb5f09003005ea6673fdd54d15f6c342ec4e864e1c0e72cecb4"}, 0x76) [ 90.210839] audit: type=1400 audit(1737608818.792:7): avc: denied { execmem } for pid=275 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:06:58 executing program 6: ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000000)={0x0, 0xe66, 0xab8}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x200, 0x7, 0xffffffffffff9a18}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x202002, 0x0) epoll_pwait(r2, &(0x7f0000000100)=[{}, {}], 0x2, 0x1000, &(0x7f0000000140)={[0x1f]}, 0x8) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000200)={0x0, 0x8000, 0x1, [0x9, 0x1, 0x9, 0x1, 0xfffffffffffffffe], [0x8001, 0xf13, 0x3, 0x9, 0x800, 0x89, 0x7fff, 0xbdf, 0x800, 0xbfd, 0x7, 0xce, 0x2, 0xfffffffffffff43a, 0x7, 0x81, 0xab92, 0x81, 0x0, 0x14630010, 0x6, 0x5, 0x1, 0x7, 0xfffffffffffffffd, 0xffffffff, 0x2613, 0xfff, 0x6, 0x20, 0x100, 0x1, 0x7fffffff, 0x6, 0x0, 0x0, 0x1, 0x73, 0xfd5, 0x3, 0x7, 0x0, 0x8, 0x80, 0x67, 0x80000000, 0x5, 0x9, 0x2, 0x207, 0x4, 0x6, 0x1, 0x10001, 0x7fff, 0x20, 0x7, 0x8, 0x8000, 0xbc6, 0x8, 0x0, 0x1, 0x3, 0x3, 0x2, 0x7d6, 0x9, 0x6796e81, 0x100, 0x2, 0x305, 0x750e, 0x6, 0x4, 0x1000, 0x101, 0x1f, 0x1, 0x2, 0x0, 0x9, 0xc9, 0x0, 0x7, 0x63ad, 0x8001, 0x7, 0x4, 0x4, 0x2, 0x227b, 0x81, 0xfffffffffffffffc, 0x7, 0x6, 0x0, 0x200, 0x7f, 0x80000000, 0x7fffffff, 0x7fff, 0x9, 0xe6, 0x1ff, 0x0, 0x8, 0xff, 0x8, 0x2, 0x8, 0x3, 0x9, 0x3, 0x3ff, 0x4, 0x401, 0x80000001, 0x800, 0xaf, 0xe652]}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fgetxattr(r3, &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f00000006c0)=""/149, 0x95) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000780), 0x521ac0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000a40)={{r5}, r6, 0x18, @inherit={0x78, &(0x7f00000009c0)={0x0, 0x6, 0x80, 0xa3ee, {0x4, 0xffffffff, 0x4, 0x1c36, 0x80}, [0x7c, 0x700000000000000, 0x400, 0x7f, 0x4c836a80, 0xf000000000000000]}}, @subvolid=0x7c0000000}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000001a40)={'ah\x00'}, &(0x7f0000001a80)=0x1e) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001ac0), 0x10100, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000001b40)={&(0x7f0000001b00)=""/45, 0x2d}) getsockname$inet6(r0, &(0x7f0000001b80)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001bc0)=0x1c) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001c00)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000001c40)={{0x1, 0x1, 0x18, r7, {0x200}}, './file0\x00'}) io_setup(0x7, &(0x7f0000001c80)) 05:06:58 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x100, 0x70bd29, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x24000880}, 0x4c014) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x10) ioctl$RTC_PIE_OFF(r1, 0x7006) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4004880) r2 = syz_open_dev$hidraw(&(0x7f0000000380), 0x99e, 0xa6000) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000440)={{r1}, 0x0, 0x8, @inherit={0x78, &(0x7f00000003c0)={0x0, 0x6, 0xd8a8, 0x3ff, {0x3, 0xb6bb, 0x7fffffff, 0xdd, 0xba1c}, [0x6, 0x5, 0x400, 0x3, 0x1, 0x2]}}, @subvolid=0x8}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x2c, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044000) r3 = io_uring_setup(0x4bab, &(0x7f0000001540)={0x0, 0xca48, 0xcd86e78f4adc60a7, 0x2, 0x108}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000001600)={@remote, 0x0}, &(0x7f0000001640)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001700)={'syztnl0\x00', &(0x7f0000001680)={'syztnl1\x00', r5, 0x29, 0x8, 0x0, 0x0, 0x68, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8000, 0x8000, 0x4, 0x1000}}) prlimit64(0xffffffffffffffff, 0x3, &(0x7f0000001740)={0x0, 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0x88, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x20000081) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x68, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x60000}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001d80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d40)={&(0x7f0000001a80)={0x2b0, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x290, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0x1}, {0x5, 0x4}, {0x3, 0x6}, {}, {0x6, 0x1}, {0x2, 0x8}, {0x3, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x7, 0x3}, {}, {0x5, 0x9}, {0x4, 0x2}, {0x2, 0x7}, {0x6, 0x3}, {0x2, 0x4}, {0x0, 0xa}, {0x2, 0x4}, {0x4, 0x7}, {0x1, 0xa}, {0x3}, {0x0, 0x6}, {0x6, 0x4}, {0x0, 0x6}, {0x0, 0x9}, {0x2, 0x4}, {0x7, 0x7}]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x60, 0x24, 0x30, 0x5, 0x6, 0x6, 0x24, 0xb, 0xc, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x7, 0x3f81, 0xcabd, 0x5, 0x400, 0x1]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x9, 0x18, 0xc, 0x6, 0xc, 0x24, 0x30, 0xb, 0x48, 0x2, 0xeb32ccfc64c7bb25, 0xc, 0x4, 0x12, 0x24, 0x24, 0x24, 0x24, 0x3, 0x1, 0x16, 0x16, 0x18, 0x6, 0x9, 0x16, 0x6, 0x5, 0xc, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x7}, {0x5, 0x7}, {0x2, 0x4}, {0x7, 0x8}, {0x6, 0x9}, {0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x4, 0x2}, {0x1, 0x6}, {0x3, 0x6}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0xa}, {0x0, 0x3}, {0x0, 0x1}, {0x7, 0x1}, {0x3, 0x9}, {0x3, 0x9}, {0x5, 0x4}, {0x2, 0x7}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x5}, {0x4, 0x8}, {0x5, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0x9}, {0x2, 0x1}, {0x3, 0xa}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x80, 0x400, 0x6, 0x3, 0x0, 0x0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x2, 0x1, 0x0, 0x1, 0x401, 0x6e9b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1ff, 0x4, 0x3, 0x7f2, 0x2, 0x101]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x5, 0x3}, {0x2, 0x7}, {0x3, 0xa}, {0x3, 0x7}, {0x1, 0x7}, {0x3, 0x4}, {0x6, 0x8}, {0x1, 0xa}, {0x4, 0x5}, {0x1}, {0x3, 0x3}, {0x2, 0x3}, {}, {0x6}, {0x6}, {0x7, 0x3}, {0x7, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x8}, {0x1, 0x1}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x2, 0xa}, {0x6, 0x7}, {0x1, 0x6}, {0x2, 0x5}, {}, {0x1, 0x2}, {0x1, 0xa}, {0x0, 0x3}, {0x7, 0x3}, {0x1, 0x2}, {0x6, 0x7}, {0x6, 0x7}, {0x2, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x5, 0x4}, {0x5, 0x6}, {0x6, 0x8}, {0x4}, {0x0, 0x9}, {0x4}, {0x1, 0x9}, {0x3, 0xa}, {}, {0x6, 0xa}, {0x1, 0x4}, {0x2, 0x5}, {0x7, 0xa}, {0x0, 0x7}, {0x4, 0x3}, {0x1, 0x8}, {0x6, 0x7}, {0x0, 0x8}, {0x1, 0xa}, {0x5}, {0x6, 0x3}, {0x4, 0xa}, {0x5, 0x1}, {0x1, 0x4}, {0x7, 0x2}, {0x2, 0x8}, {0x3, 0x3}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x0, 0x4}, {0x6, 0x1}, {0x2, 0x8}, {0x6, 0x7}, {0x3, 0x1}, {0x7}, {0x7, 0x8}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x5}, {0x5}, {0x3, 0x5}, {0x7, 0x7}, {0x0, 0x8}, {0x7, 0x6}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x800, 0x8, 0x8, 0x78e7, 0x7, 0x7, 0xe75]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0xfffa, 0x3, 0x2, 0x57, 0x0, 0x8]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x5, 0x3}, {0x7, 0x6}, {0x0, 0x3}, {0x3, 0x7}, {0x4, 0x7}, {0x0, 0x7}, {0x0, 0x7}, {0x1}, {0x6}, {0x6, 0x9}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0x1}, {0x4, 0x8}, {0x3}, {0x1, 0x3}, {0x2, 0x6}, {0x1, 0x2}, {0x7, 0x5}, {0x3, 0x6}]}]}, @NL80211_BAND_5GHZ={0xec, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x565, 0x3f, 0x8, 0x101, 0x3, 0x80, 0xc85]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x36, 0x48, 0x2, 0x12, 0x9, 0x9, 0x1b, 0x30]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x48, 0x5, 0x9, 0x9, 0x12, 0x6, 0x6, 0x6c]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x6, 0x2}, {0x6, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x2, 0x9}, {0x1}, {0x2, 0x2}, {0x4}, {0x7}, {0x2, 0x3}, {0x6}, {0x6, 0x9}, {0x4, 0xa}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x2}, {0x3, 0x4}, {0x2, 0xa}, {0x1}, {0x7, 0x8}, {0x5, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x439, 0x0, 0x3, 0x5, 0x4, 0x73a, 0x5]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x6c, 0x24, 0x12, 0x24, 0x2, 0x1, 0x0, 0x1b, 0x48]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0xa}, {0x5, 0x5}, {0x2, 0x8}, {0x4, 0x7}, {0x7, 0x3}, {0x7, 0x1}, {0x6, 0x5}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0xa}, {0x5, 0x3}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x6, 0x7}, {0x4, 0x3}, {0x5, 0x2}]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x6}, {0x0, 0x3}, {0x5, 0x3}, {0x4, 0x5}, {0x7, 0x4}, {0x7, 0x9}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x4}, {}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x6}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x5}, {0x3, 0x9}, {0x3, 0x4}, {0x7, 0x7}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x5}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x9}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0xa}, {0x4, 0x5}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x3, 0xa}, {0x0, 0x2}, {0x5, 0x6}, {0x2, 0x7}, {0x4, 0x5}, {0x5, 0x9}, {0x7, 0x6}, {0x5, 0x5}, {0x4, 0x5}, {0x7, 0x6}, {0x7, 0x2}, {0x3, 0x6}, {0x1, 0x3}, {0x6, 0xa}, {0x6, 0x2}, {0x3, 0xa}, {0x3, 0x7}, {0x0, 0x8}, {0x4, 0x3}, {0x5, 0x5}, {0x3, 0x9}, {0x6, 0xa}, {0x7, 0x5}, {0x5, 0x6}, {0x7, 0x5}, {0x0, 0x1}, {0x4}, {0x7, 0x8}, {0x1, 0x3}, {0x6, 0x4}, {0x7, 0x4}, {0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x400, 0xfffe, 0x2, 0x9802, 0x7ff, 0x4, 0x1]}}]}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x20048011}, 0x4800) r7 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001e40)={'sit0\x00', &(0x7f0000001dc0)={'syztnl2\x00', r6, 0x2f, 0x3f, 0x4, 0xd2f1, 0x8, @local, @empty, 0x7, 0x1, 0x6, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001ec0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) 05:06:58 executing program 7: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r1 = dup2(r0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000000)) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x400000, 0x84) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0x6, 0x2, 0x3f, 0x377, 0xc0, "410e6a85bdfe43f9986f4e792f560f89482352", 0x74, 0x5}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3e8, 0x10, 0x70bd2b, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x8880) r4 = clone3(&(0x7f0000000480)={0x103000200, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x7}, &(0x7f0000000300)=""/119, 0x77, &(0x7f0000000380)=""/133, &(0x7f0000000440)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r1}}, 0x58) ptrace$setregs(0xf, r4, 0x0, &(0x7f0000000500)="985567543913c7b7dae6da108bde6933492741f3412fc2a4ea806bc8f951a2a9b818dd8026af2b561b23b6c8af0ec0a33145566b5d319032a57872faf5cf452820a5efc987c1f9f1d94c4a9fd92b52efcfd80352a63ab20300ca1add93a50cbd6401a731dee29a722c68f986950af962eecc91586608c26ef7e591c566b7ae21de88c0d92ae0a2562cd95746adc55275c586938e3dad20bd9fe22b53ee90fbe655ed7eb67356211599b882819a864bf6c8e2c040c845046627784b190452e7dd85057c4150ac2ee324aeb2197c57e10b3761da8ddbd5a2b4415075ab5783d4b605e02268cdf9fc0bee8939eb37dd") r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x3ed, 0x102, 0x70bd25, 0x25dfdbfc, "a714d2e59d3337b33da740e2b459a0a1d7", ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x8001) recvmsg$unix(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=""/67, 0x43}, {&(0x7f0000000780)=""/176, 0xb0}], 0x2, &(0x7f0000000880)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x2001) process_madvise(r6, &(0x7f0000000b40)=[{&(0x7f0000000940)="795492efc96a90e28b946533cb13b37acd3576fee69c08777ff3ccc9dedd71ea1e119ccee296cc487a776acd882f7fee2f2824a02997e7286a35cf1dd4c5fd9e4568c372bd7920c6800fa94d23cd58691db97e6313859b406c2233a3aaaee77ac2e3d1a82ce08443a60a5fdddeed90bd2c425da17547bccba63f666c7e10dc93c2a94de5b4e78d52a59406ae8ebc375522", 0x91}, {&(0x7f0000000a00)="6acaa51031b9e0813b9bb32491091c1683d2d5358dcb6fc0fcac759ff82a1947f5315bd22f3056f53b743f2a4404681067a80b168085a3e7fc215f267a611cd8282810e764a4dde92c6800c831a34e6bb06ba5a7189ad216d5c39a72ed9949ce0f21dd2dfaf5ef864fbff27f8e85ff24b26ab77c5d7f6639ed2308b3ac9c0b5b9ed72a3313d1ebd190fda4e51f45a870f3b5e1319825e39551a0d6", 0x9b}, {&(0x7f0000000ac0)="5b3ca80de8bb17537abd74c2e283eff9420233cfa4a58c6cdc00fbb75f6fcbad614a07c87283b54da001b42c90c660034b44c9ca33bd1ef5e20dcd8b513da69c3b1756f232f9082d9eed1b8b0d4d5c0e6db18f0542a22194bd1ce0d532f22c7b2bcf7f3a32841b88554777", 0x6b}], 0x3, 0xc, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000b80)) r8 = syz_open_procfs(r4, &(0x7f0000000bc0)='net/ip_tables_targets\x00') ioctl$BINDER_CTL_ADD(r8, 0xc1086201, &(0x7f0000000c00)={'binder1\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000d40)={0x6, 'wg2\x00', {0x2}, 0x400}) [ 91.606338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.612064] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.613093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.617980] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.623039] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.625730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.629213] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.630584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.637683] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.664949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.674873] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.678027] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.684902] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.688081] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.695769] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.699398] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.703211] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.704152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.739263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.770148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.781502] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.784600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.785857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.787148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.788278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.793962] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.795963] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.798044] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.800803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.833882] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.845759] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.851243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.859896] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.862635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.866952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.869035] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.869544] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.873745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.878740] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.883803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.884555] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.898545] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.901549] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.914428] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.919545] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.932164] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.951872] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.953434] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.681175] Bluetooth: hci0: command tx timeout [ 93.806597] Bluetooth: hci2: command tx timeout [ 93.807742] Bluetooth: hci1: command tx timeout [ 93.871563] Bluetooth: hci4: command tx timeout [ 93.998767] Bluetooth: hci6: command tx timeout [ 93.999074] Bluetooth: hci3: command tx timeout [ 94.062781] Bluetooth: hci7: command tx timeout [ 94.063551] Bluetooth: hci5: command tx timeout [ 95.728410] Bluetooth: hci0: command tx timeout [ 95.856013] Bluetooth: hci1: command tx timeout [ 95.856120] Bluetooth: hci2: command tx timeout [ 95.919433] Bluetooth: hci4: command tx timeout [ 96.046541] Bluetooth: hci3: command tx timeout [ 96.046640] Bluetooth: hci6: command tx timeout [ 96.111462] Bluetooth: hci5: command tx timeout [ 96.111568] Bluetooth: hci7: command tx timeout [ 97.774501] Bluetooth: hci0: command tx timeout [ 97.903458] Bluetooth: hci2: command tx timeout [ 97.903563] Bluetooth: hci1: command tx timeout [ 97.967554] Bluetooth: hci4: command tx timeout [ 98.095583] Bluetooth: hci3: command tx timeout [ 98.096474] Bluetooth: hci6: command tx timeout [ 98.158496] Bluetooth: hci5: command tx timeout [ 98.158594] Bluetooth: hci7: command tx timeout [ 99.822826] Bluetooth: hci0: command tx timeout [ 99.950681] Bluetooth: hci1: command tx timeout [ 99.950881] Bluetooth: hci2: command tx timeout [ 100.014492] Bluetooth: hci4: command tx timeout [ 100.142605] Bluetooth: hci6: command tx timeout [ 100.142806] Bluetooth: hci3: command tx timeout [ 100.206586] Bluetooth: hci7: command tx timeout [ 100.206802] Bluetooth: hci5: command tx timeout [ 138.319418] modprobe (2910) used greatest stack depth: 24216 bytes left [ 152.039678] syz-executor.1 (284) used greatest stack depth: 24064 bytes left [ 154.745894] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.748407] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.749265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.755004] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.757634] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.759121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.808906] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.812030] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.816596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.832195] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.841000] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.843005] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.885391] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.888853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.889284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.920694] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.922061] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.922490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.952475] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.961273] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.964073] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.969472] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.969888] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.971960] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.981696] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.987026] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.989737] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.990487] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.997962] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.004243] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.008012] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.008508] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.015040] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.016088] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.016993] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.018025] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.018468] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.022129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.023551] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.024276] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.025570] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.033542] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.042026] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.069244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.072869] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.086844] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.092723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.095313] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.846410] Bluetooth: hci0: command tx timeout [ 156.911067] Bluetooth: hci1: command tx timeout [ 157.102511] Bluetooth: hci5: command tx timeout [ 157.103109] Bluetooth: hci6: command tx timeout [ 157.166837] Bluetooth: hci4: command tx timeout [ 157.168525] Bluetooth: hci3: command tx timeout [ 157.168659] Bluetooth: hci2: command tx timeout [ 157.230418] Bluetooth: hci7: command tx timeout [ 158.896411] Bluetooth: hci0: command tx timeout [ 158.959420] Bluetooth: hci1: command tx timeout [ 159.150581] Bluetooth: hci5: command tx timeout [ 159.151250] Bluetooth: hci6: command tx timeout [ 159.214467] Bluetooth: hci2: command tx timeout [ 159.215047] Bluetooth: hci3: command tx timeout [ 159.215139] Bluetooth: hci4: command tx timeout [ 159.278448] Bluetooth: hci7: command tx timeout [ 160.943402] Bluetooth: hci0: command tx timeout [ 161.007522] Bluetooth: hci1: command tx timeout [ 161.199656] Bluetooth: hci6: command tx timeout [ 161.199764] Bluetooth: hci5: command tx timeout [ 161.263600] Bluetooth: hci4: command tx timeout [ 161.263691] Bluetooth: hci3: command tx timeout [ 161.263774] Bluetooth: hci2: command tx timeout [ 161.327435] Bluetooth: hci7: command tx timeout [ 162.991533] Bluetooth: hci0: command tx timeout [ 163.056383] Bluetooth: hci1: command tx timeout [ 163.246457] Bluetooth: hci5: command tx timeout [ 163.246552] Bluetooth: hci6: command tx timeout [ 163.310464] Bluetooth: hci2: command tx timeout [ 163.310557] Bluetooth: hci3: command tx timeout [ 163.310644] Bluetooth: hci4: command tx timeout [ 163.374507] Bluetooth: hci7: command tx timeout [ 215.220849] [ 215.221107] ====================================================== [ 215.221725] WARNING: possible circular locking dependency detected [ 215.222316] 6.13.0-next-20250122 #1 Not tainted [ 215.222782] ------------------------------------------------------ [ 215.223959] kworker/u8:0/11 is trying to acquire lock: [ 215.225234] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.227393] [ 215.227393] but task is already holding lock: [ 215.229015] ffff888024208768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 215.230859] [ 215.230859] which lock already depends on the new lock. [ 215.230859] [ 215.232368] [ 215.232368] the existing dependency chain (in reverse order) is: [ 215.233078] [ 215.233078] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 215.233743] __mutex_lock+0x13d/0xb50 [ 215.234211] wiphy_register+0x1b2e/0x25d0 [ 215.234707] ieee80211_register_hw+0x23a4/0x3d60 [ 215.235242] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 215.235818] init_mac80211_hwsim+0x389/0x870 [ 215.236354] do_one_initcall+0xf9/0x640 [ 215.236840] kernel_init_freeable+0x53d/0x7a0 [ 215.237367] kernel_init+0x1e/0x2d0 [ 215.237804] ret_from_fork+0x48/0x80 [ 215.238233] ret_from_fork_asm+0x1a/0x30 [ 215.238721] [ 215.238721] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 215.239338] __lock_acquire+0x29fd/0x4580 [ 215.239831] lock_acquire+0x19b/0x520 [ 215.240272] __mutex_lock+0x13d/0xb50 [ 215.240723] unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.241340] unregister_netdevice_queue+0x224/0x2e0 [ 215.241900] _cfg80211_unregister_wdev+0x57b/0x700 [ 215.242453] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 215.243002] ieee80211_unregister_hw+0x55/0x3a0 [ 215.243526] hwsim_exit_net+0x3a0/0x730 [ 215.243992] ops_exit_list+0xb3/0x180 [ 215.244440] cleanup_net+0x546/0xad0 [ 215.244886] process_one_work+0x8ee/0x1a10 [ 215.245390] worker_thread+0x674/0xe70 [ 215.245866] kthread+0x3ab/0x720 [ 215.246287] ret_from_fork+0x48/0x80 [ 215.246719] ret_from_fork_asm+0x1a/0x30 [ 215.247210] [ 215.247210] other info that might help us debug this: [ 215.247210] [ 215.247972] Possible unsafe locking scenario: [ 215.247972] [ 215.248543] CPU0 CPU1 [ 215.248989] ---- ---- [ 215.249439] lock(&rdev->wiphy.mtx); [ 215.249837] lock(rtnl_mutex); [ 215.250408] lock(&rdev->wiphy.mtx); [ 215.251029] lock(rtnl_mutex); [ 215.251382] [ 215.251382] *** DEADLOCK *** [ 215.251382] [ 215.251958] 4 locks held by kworker/u8:0/11: [ 215.252399] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 215.253422] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 215.254397] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 215.255309] #3: ffff888024208768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 215.256331] [ 215.256331] stack backtrace: [ 215.256762] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250122 #1 [ 215.257541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 215.258320] Workqueue: netns cleanup_net [ 215.258737] Call Trace: [ 215.258989] [ 215.259217] dump_stack_lvl+0xca/0x120 [ 215.259632] print_circular_bug+0x47b/0x750 [ 215.260071] check_noncircular+0x2e9/0x3c0 [ 215.260502] ? __pfx_check_noncircular+0x10/0x10 [ 215.260974] ? hlock_class+0x4e/0x130 [ 215.261352] ? mark_lock+0xac/0xed0 [ 215.261734] ? srso_return_thunk+0x5/0x5f [ 215.262177] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 215.262641] ? lockdep_lock+0xba/0x1b0 [ 215.263058] ? __pfx_lockdep_lock+0x10/0x10 [ 215.263515] __lock_acquire+0x29fd/0x4580 [ 215.263945] ? __pfx___lock_acquire+0x10/0x10 [ 215.264402] ? lock_release+0x20f/0x6f0 [ 215.264814] ? __pfx_lock_release+0x10/0x10 [ 215.265258] lock_acquire+0x19b/0x520 [ 215.265660] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.266242] ? __pfx_lock_acquire+0x10/0x10 [ 215.266679] ? srso_return_thunk+0x5/0x5f [ 215.267113] ? lock_release+0x20f/0x6f0 [ 215.267518] ? srso_return_thunk+0x5/0x5f [ 215.267955] ? lock_is_held_type+0x9e/0x120 [ 215.268404] ? srso_return_thunk+0x5/0x5f [ 215.268844] __mutex_lock+0x13d/0xb50 [ 215.269246] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.269838] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.270419] ? srso_return_thunk+0x5/0x5f [ 215.270852] ? synchronize_rcu_expedited+0x38a/0x420 [ 215.271369] ? __pfx___mutex_lock+0x10/0x10 [ 215.271819] ? __pfx_autoremove_wake_function+0x10/0x10 [ 215.272356] ? srso_return_thunk+0x5/0x5f [ 215.272800] ? kasan_quarantine_put+0x84/0x1e0 [ 215.273284] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 215.273740] ? srso_return_thunk+0x5/0x5f [ 215.274178] unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.274739] ? __virt_addr_valid+0x2e8/0x5d0 [ 215.275196] ? __pfx_lock_release+0x10/0x10 [ 215.275640] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 215.276242] ? find_held_lock+0x2c/0x110 [ 215.276674] ? srso_return_thunk+0x5/0x5f [ 215.277109] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 215.277633] ? srso_return_thunk+0x5/0x5f [ 215.278073] ? lock_release+0x20f/0x6f0 [ 215.278479] ? __pfx_lock_release+0x10/0x10 [ 215.278916] ? srso_return_thunk+0x5/0x5f [ 215.279350] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 215.279873] ? srso_return_thunk+0x5/0x5f [ 215.280312] unregister_netdevice_queue+0x224/0x2e0 [ 215.280812] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 215.281353] ? up_write+0x195/0x520 [ 215.281753] _cfg80211_unregister_wdev+0x57b/0x700 [ 215.282256] ? srso_return_thunk+0x5/0x5f [ 215.282703] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 215.283200] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 215.283754] ? srso_return_thunk+0x5/0x5f [ 215.284197] ? srso_return_thunk+0x5/0x5f [ 215.284636] ? synchronize_rcu+0x1ff/0x260 [ 215.285072] ieee80211_unregister_hw+0x55/0x3a0 [ 215.285558] hwsim_exit_net+0x3a0/0x730 [ 215.285965] ? __pfx_hwsim_exit_net+0x10/0x10 [ 215.286420] ? srso_return_thunk+0x5/0x5f [ 215.286849] ? netdev_run_todo+0x788/0x1040 [ 215.287293] ? __pfx_hwsim_exit_net+0x10/0x10 [ 215.287749] ops_exit_list+0xb3/0x180 [ 215.288139] cleanup_net+0x546/0xad0 [ 215.288533] ? __pfx_cleanup_net+0x10/0x10 [ 215.288979] process_one_work+0x8ee/0x1a10 [ 215.289438] ? __pfx_lock_acquire+0x10/0x10 [ 215.289872] ? __pfx_process_one_work+0x10/0x10 [ 215.290358] ? srso_return_thunk+0x5/0x5f [ 215.290795] ? move_linked_works+0x172/0x270 [ 215.291248] ? srso_return_thunk+0x5/0x5f [ 215.291679] ? assign_work+0x196/0x240 [ 215.292096] worker_thread+0x674/0xe70 [ 215.292519] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 215.293050] ? __pfx_worker_thread+0x10/0x10 [ 215.293522] kthread+0x3ab/0x720 [ 215.293892] ? __pfx_kthread+0x10/0x10 [ 215.294301] ? srso_return_thunk+0x5/0x5f [ 215.294734] ? finish_task_switch.isra.0+0x206/0x840 [ 215.295250] ? __pfx_kthread+0x10/0x10 [ 215.295657] ret_from_fork+0x48/0x80 [ 215.296030] ? __pfx_kthread+0x10/0x10 [ 215.296438] ret_from_fork_asm+0x1a/0x30 [ 215.296875] [ 216.572246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.573072] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.573701] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.578047] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.581045] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.581678] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.627649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.629587] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.630201] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.634745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.637474] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.640280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.700633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.707560] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.708499] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.710992] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.712017] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.712570] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.761760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.766972] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.775536] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.778093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.782026] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.783272] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.829351] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.837536] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.841374] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.842250] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.852420] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.853283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.861925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.868863] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.875943] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.882445] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.890586] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.895023] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.899178] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.905170] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.908612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.908901] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.911772] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.917386] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.933248] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.940262] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.942862] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.965493] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.987450] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.995713] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.607428] Bluetooth: hci0: command tx timeout [ 218.671367] Bluetooth: hci1: command tx timeout [ 218.734682] Bluetooth: hci2: command tx timeout [ 218.863379] Bluetooth: hci3: command tx timeout [ 218.927366] Bluetooth: hci5: command tx timeout [ 218.990543] Bluetooth: hci4: command tx timeout [ 219.054550] Bluetooth: hci7: command tx timeout [ 219.055010] Bluetooth: hci6: command tx timeout [ 220.655447] Bluetooth: hci0: command tx timeout [ 220.719498] Bluetooth: hci1: command tx timeout [ 220.782883] Bluetooth: hci2: command tx timeout [ 220.910921] Bluetooth: hci3: command tx timeout [ 220.977355] Bluetooth: hci5: command tx timeout [ 221.039468] Bluetooth: hci4: command tx timeout [ 221.104388] Bluetooth: hci6: command tx timeout [ 221.104475] Bluetooth: hci7: command tx timeout [ 222.703531] Bluetooth: hci0: command tx timeout [ 222.767501] Bluetooth: hci1: command tx timeout [ 222.832390] Bluetooth: hci2: command tx timeout [ 222.959385] Bluetooth: hci3: command tx timeout [ 223.023365] Bluetooth: hci5: command tx timeout [ 223.087382] Bluetooth: hci4: command tx timeout [ 223.151479] Bluetooth: hci7: command tx timeout [ 223.151696] Bluetooth: hci6: command tx timeout [ 224.751364] Bluetooth: hci0: command tx timeout [ 224.815377] Bluetooth: hci1: command tx timeout [ 224.879458] Bluetooth: hci2: command tx timeout [ 225.007376] Bluetooth: hci3: command tx timeout [ 225.071382] Bluetooth: hci5: command tx timeout [ 225.135454] Bluetooth: hci4: command tx timeout [ 225.199386] Bluetooth: hci7: command tx timeout [ 225.199458] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 05:09:04 Registers: info registers vcpu 0 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283e865 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=0000000000000001 R11=3a6b636f6c206762 R12=000000000000000a R13=0000000000000001 R14=ffff888008fea010 R15=ffff8880095deeb8 RIP=ffffffff8283e8bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005621e71f35c0 CR3=0000000015ee2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000000000000000002f74656e XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=ffffffff0000000200005621e71f9ac0 XMM05=00005621e71f9e7000005621e71f9e90 XMM06=00005621e71fb6400000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000310000000000000040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88800f0b8000 RBX=ffffffff85e8f928 RCX=ffffffff81429a4a RDX=1ffff11001d5f180 RSI=0000000000000008 RDI=ffff88800eaf8c00 RBP=00000000ffffffff RSP=ffff88800f0c7dd0 R8 =0000000000000000 R9 =ffffed1001d5f180 R10=ffff88800eaf8c07 R11=ffff88800f0b84b8 R12=ffffffff85e8fff9 R13=ffff888008c50378 R14=ffff88800f0b8000 R15=0000000000000086 RIP=ffffffff81aef6e6 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd16d889b98 CR3=0000000015ee2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=ffffffff0000000200005621e71f9ac0 XMM05=00005621e71f9e7000005621e71f9e90 XMM06=00005621e71fb6400000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000310000000000000040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000