Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 58.152482] scp (236) used greatest stack depth: 23344 bytes left Warning: Permanently added '[localhost]:3883' (ECDSA) to the list of known hosts. 2025/01/25 22:25:31 fuzzer started 2025/01/25 22:25:31 dialing manager at localhost:40883 [ 60.820404] cgroup: Unknown subsys name 'net' [ 60.914122] cgroup: Unknown subsys name 'cpuset' [ 60.943641] cgroup: Unknown subsys name 'rlimit' [ 66.503517] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 22:25:48 syscalls: 2217 2025/01/25 22:25:48 code coverage: enabled 2025/01/25 22:25:48 comparison tracing: enabled 2025/01/25 22:25:48 extra coverage: enabled 2025/01/25 22:25:48 setuid sandbox: enabled 2025/01/25 22:25:48 namespace sandbox: enabled 2025/01/25 22:25:48 Android sandbox: enabled 2025/01/25 22:25:48 fault injection: enabled 2025/01/25 22:25:48 leak checking: enabled 2025/01/25 22:25:48 net packet injection: enabled 2025/01/25 22:25:48 net device setup: enabled 2025/01/25 22:25:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 22:25:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 22:25:48 USB emulation: enabled 2025/01/25 22:25:48 hci packet injection: enabled 2025/01/25 22:25:48 wifi device emulation: enabled 2025/01/25 22:25:48 802.15.4 emulation: enabled 2025/01/25 22:25:48 fetching corpus: 50, signal 9540/10815 (executing program) 2025/01/25 22:25:48 fetching corpus: 76, signal 9850/12327 (executing program) 2025/01/25 22:25:48 fetching corpus: 76, signal 9850/13556 (executing program) 2025/01/25 22:25:48 fetching corpus: 76, signal 9850/14771 (executing program) 2025/01/25 22:25:48 fetching corpus: 76, signal 9850/15951 (executing program) 2025/01/25 22:25:48 fetching corpus: 76, signal 9850/17179 (executing program) 2025/01/25 22:25:48 fetching corpus: 76, signal 9850/18358 (executing program) 2025/01/25 22:25:48 fetching corpus: 76, signal 9850/19592 (executing program) 2025/01/25 22:25:48 fetching corpus: 76, signal 9850/20810 (executing program) 2025/01/25 22:25:48 fetching corpus: 76, signal 9850/22040 (executing program) 2025/01/25 22:25:48 fetching corpus: 76, signal 9850/23267 (executing program) 2025/01/25 22:25:48 fetching corpus: 76, signal 9850/24444 (executing program) 2025/01/25 22:25:48 fetching corpus: 76, signal 9850/25139 (executing program) 2025/01/25 22:25:48 fetching corpus: 76, signal 9850/25139 (executing program) 2025/01/25 22:25:52 starting 8 fuzzer processes 22:25:52 executing program 0: readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/137, 0x89) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x5640cdd7753df095, 0x60) umount2(&(0x7f0000000140)='./file0\x00', 0x1e) chown(&(0x7f0000000180)='./file0\x00', 0xee01, 0x0) getpeername(r0, &(0x7f00000001c0)=@ieee802154, &(0x7f0000000240)=0x80) r1 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x420080, 0x1a8}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@known='security.apparmor\x00', &(0x7f00000003c0)=""/4096, 0x1000) mount_setattr(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x800, &(0x7f0000001400)={0x4, 0x3, 0xa0000, {r0}}, 0x20) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2800) getpeername(r4, &(0x7f0000001480)=@alg, &(0x7f0000001500)=0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000001540)={{0x1, 0x1, 0x18, r3, {0x1ff}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000001580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) lsetxattr$trusted_overlay_upper(&(0x7f00000015c0)='./file1\x00', &(0x7f0000001600), &(0x7f0000001640)={0x0, 0xfb, 0x3b, 0x0, 0x5, "e6c8036547094c4bf28cbb9d332876ba", "49207f9529648e557803156bdc9dfb0b44dc51302bb294e78e7c192a10b4079422a4f7e78f91"}, 0x3b, 0x5) r7 = openat2(0xffffffffffffff9c, &(0x7f0000001680)='./file1\x00', &(0x7f00000016c0)={0x80, 0x130, 0x18}, 0x18) r8 = signalfd(r6, &(0x7f0000001700)={[0xfff]}, 0x8) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001740)='net/tcp\x00') r10 = syz_mount_image$tmpfs(&(0x7f0000001780), &(0x7f00000017c0)='./file0\x00', 0x4, 0x1, &(0x7f0000001880)=[{&(0x7f0000001800)="acf35a908e00a3462ca97045b7b8718182800586468d1eceff6bd0e388a73da4e1ad2e884f6a89f8f6e8c72a8907341d645d66a39505959bfd734d3e124d0b9da89f8c7ba6c10d", 0x47, 0x100000001}], 0x980001, &(0x7f00000018c0)={[{@gid={'gid', 0x3d, 0xee00}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@nr_inodes={'nr_inodes', 0x3d, [0x2d, 0x30, 0x38, 0x36]}}, {@size={'size', 0x3d, [0x2d]}}, {@size={'size', 0x3d, [0xb121ac3e9330d75e, 0x5c]}}, {@mode={'mode', 0x3d, 0x6}}, {@nr_inodes={'nr_inodes', 0x3d, [0x78, 0x35, 0x30, 0x74, 0x65, 0x37]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x37]}}], [{@uid_lt={'uid<', 0xffffffffffffffff}}]}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f00000019c0)={0x80000001, 0x0, &(0x7f0000001980)=[r8, r5, r0, r9, r10, r2, r0, r4, r4]}, 0x9) mount$cgroup(0x0, &(0x7f0000001a00)='./file1\x00', &(0x7f0000001a40), 0x821000, &(0x7f0000001a80)={[{@name={'name', 0x3d, 'tmpfs\x00'}}, {@name={'name', 0x3d, '%'}}], [{@smackfsroot={'smackfsroot', 0x3d, '!'}}, {@seclabel}, {@context={'context', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, 'tmpfs\x00'}}]}) 22:25:52 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x7}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'rose0\x00', 0x3}, 0x18) getsockname$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) r1 = accept$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000001c0)={0x8, @rand_addr=0x64010100, 0x4e21, 0x0, 'wlc\x00', 0x4, 0x0, 0x40}, 0x2c) r2 = syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x4, &(0x7f0000000500)=[{&(0x7f0000000280)="7d3b5a050c72ea52412feb12a92aa5e4b17fbdb6495a2af8191eeb355e5d1fdd3b65b12639ee17ae4ffda70363fb418cf1a32f8bcec6cb79450d1f1626e68fc744accb07abb43d640832f03d5caceef1357dbd869f80c052959b57255aea229127a9daec1c92eb5b219ee33c14f6f7fb87fed768a96ffdee3b3aebefaa41230145", 0x81, 0x6}, {&(0x7f0000000340)="b2195f61ee077e33732c47f925aaf34d03971a35d709fc48789b6e8fa7633519151acae944718b1d3fc636f2dd17d1031eb657b4b66388fe436eb0869f345b741696af3eb4472d56a810adaddd804d159e2dd94c3ee584c48269574c25a8955977963c9e5652965c16dfdd5da963116baf4a39f280302a0d6bb248", 0x7b, 0x45}, {&(0x7f00000003c0)="2ea6a140083655f562ffe917ef9c56351afdc8027aab8680d656f37b48c3ddefbd5ef3a8ce8907864a4d3e8f4a3f19a9b4ae7fdd77784f1999d8f2996875a326f9de97ae992824f142609adcf1b8ebf32a31d197e4d81a4d6b75385db510ef29378946043abb9b651dd9bb878e91263eb93888f5a028c0647db658e05ff21df3f44f872e61d4034abc33706bad65f810ad8f15dfee6ccfd9c852d7a4aec082be150ed44ae8e7d47b8736b17c084e315db22eed974641e0003da06657c0e22c96b49148dd2ceed4b82f3fbe79f0966e7b77f7b68ab27733452ebb98510d7a13ac6c368a6f52cc2ecc4d31dee6890b29e1ff8cdc8fbb977b", 0xf7, 0x2}, {&(0x7f00000004c0)="e46c401749deeb1a5e19c88b6238174ae7fbdc3fc24524", 0x17, 0x3}], 0x808038, &(0x7f0000000580)={[{@check_strict}, {@block={'block', 0x3d, 0xc00}}, {@map_normal}, {@nojoliet}], [{@smackfshat={'smackfshat', 0x3d, '@,@,\v#-'}}, {@obj_user={'obj_user', 0x3d, 'wlc\x00'}}, {@uid_eq}, {@appraise_type}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000740)=0xe8) r4 = accept4$inet(r0, &(0x7f0000000780)={0x2, 0x0, @dev}, &(0x7f00000007c0)=0x10, 0x80000) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000800)={{0x2, 0x4e24, @local}, {0x306}, 0xe, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 'veth0_to_hsr\x00'}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000880)=0x1) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f00000008c0)="c05cd62f834af40154f4", 0xa) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000900)={0x8}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000940)={{0xc, @local, 0x4e22, 0x2, 'lblcr\x00', 0x22, 0x0, 0xf}, {@rand_addr=0x64010102, 0x4e20, 0x4, 0x5, 0x0, 0x1f}}, 0x44) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f00000009c0)={@dev={0xac, 0x14, 0x14, 0x43}, @multicast2, @multicast2}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'sit0\x00', r3, 0x0, 0x0, 0x31, 0x200, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x700, 0x40, 0x4241, 0x10}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x13c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) 22:25:52 executing program 2: sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffff1f4, 0x11}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4014}, 0x4) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x4900, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c035}, 0x40801) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x69}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008000}, 0x44000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000380)=0x2, 0x4) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x6a, 0x2a, [@cf={0x4, 0x6, {0x60, 0x3f, 0x92de}}, @peer_mgmt={0x75, 0x16, {0x1, 0x0, @void, @val=0x2, @val="c5952ea44541d85c5011686f637f0526"}}, @random={0x1, 0x44, "d41809afac3cdd78c3be9c1360bdbfa545dd4f8f66b4d97fc546536b06eb8fc33f99c75a145adfdf77a0dfe83f68b069f416bc8c9effe57466ca15caf19747eebf7145ff"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1ff}, @NL80211_ATTR_IE={0x80, 0x2a, [@supported_rates={0x1, 0x3, [{0x48}, {0xb}, {0x60, 0x1}]}, @mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random_vendor={0xdd, 0x5c, "acc4a82966d4dceb7759a0010e72abcc1d3e2a0a7bc0f3fce4e8ad1c90db425a55279db511f1a80ed6fc9674744ea72fbb9c40cfbdc7479e3fa562d8e4afc864ff02ee6a03a62dfd447ef0209eb555e542cd18d53f76c7710df6f0e8"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0x24, 0xe0}}]}]}, 0x108}}, 0x84000) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x404800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)={0x2a0, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x35bd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x52f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1000, @private0, 0x1ff}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "7b920767981f44d1f3af56d7d1da8dce1d8349d05d6ea826"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa9, 0x3, "0a5edb85c8ba0bc8df08f8d2b47bc0b507e91abf936b71fc2b565188c38e922b92ce72f0ba5c713c92a28ecdb9e1906a41899b2133612661dc665c4cf8323e5e6b3278a55e174e561411297a7738a60d5542d146ae7498b496116f45a5549fd4d8a88a4593e93c6d1cbc9217abd63fe13165f7dfd5776bae0058a908187b5eb99f8d82c298df1ffe891213d0fd707fe1345aaf9953d7608d71e1fbe87939cf000db8348983"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "a555cc220e6b49cdb75fb3a03550c1b8bad301d35eedb8b2c43e68"}}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe719}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa4d}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4004}, 0x31) r1 = socket(0x1f, 0x1, 0xfffffffd) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000940)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000ac0)={{r3}, 0x2, &(0x7f0000000a80)=[0x2, 0x8], 0x401, 0x6, [0x1f, 0x0, 0x3, 0xff]}) pipe(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x3020c00}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000040) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000d40), r0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000dc0)={0x0, @l2={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, @xdp={0x2c, 0x9, 0x0, 0xd}, @rc={0x1f, @any, 0xe0}, 0x6, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000d80)='veth1_macvtap\x00', 0x4, 0x101, 0x4}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000ec0)={'ip6tnl0\x00', &(0x7f0000000e40)={'sit0\x00', 0x0, 0x29, 0x5, 0x40, 0x3, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8000, 0x80, 0x1, 0x7}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001200)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000000f00)={0x298, r7, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x9, 0x1, 0xe7}, {0x2, 0x2, 0x0, 0xfffff69c}, {0x7, 0xa9, 0x1, 0x1f}, {0x3ff, 0xc4, 0x5, 0x6}, {0x2, 0x9, 0x9, 0xffff}, {0x800, 0x8, 0x20, 0xf2ec}, {0x0, 0xde, 0xbb, 0x5}, {0x6ce, 0xd7, 0x3f, 0x7}, {0x8d, 0x8, 0x4, 0x10000000}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x5aed, 0x81, 0x3f, 0x80000000}, {0x0, 0x5a, 0xdd, 0xfffffffb}, {0x4, 0x8, 0x7f, 0x7}, {0x14e, 0x1, 0x3f, 0x1f}, {0x9, 0x8, 0x8, 0x2}, {0xffff, 0x4, 0x4, 0x93}, {0xfff, 0x9, 0x4, 0x6}, {0x0, 0x6, 0x1, 0x1}, {0xfff, 0x8, 0x7f}, {0x9, 0x9, 0x6, 0x4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x840}, 0x80) connect(r2, &(0x7f0000001240)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7ffe}, 0x80) 22:25:52 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0xc, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x40) getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000200)=""/244, &(0x7f0000000300)=0xf4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004400}, 0x20000800) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x190, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdfd3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xbc}}]}, 0x190}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), r2) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44890}, 0x40000c0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000840)) r5 = accept4(r0, &(0x7f0000000880)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000900)=0x80, 0x80000) recvfrom$packet(r5, &(0x7f0000000940)=""/4096, 0x1000, 0x20, &(0x7f0000001940)={0x11, 0x2, 0x0, 0x1, 0x7, 0x6, @multicast}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x14, 0x2, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x850) recvmsg(r0, &(0x7f0000001f40)={&(0x7f0000001a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001b00)=""/216, 0xd8}, {&(0x7f0000001c00)=""/79, 0x4f}, {&(0x7f0000001c80)=""/176, 0xb0}, {&(0x7f0000001d40)=""/148, 0x94}, {&(0x7f0000001e00)=""/84, 0x54}], 0x5, &(0x7f0000001f00)=""/11, 0xb}, 0x20000000) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001fc0)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, @in={0x2, 0x4e24, @loopback}, @xdp={0x2c, 0x4, 0x0, 0xb}, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffca, 0x4, 0x7}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x20008881) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x40184) r8 = syz_open_dev$vcsa(&(0x7f0000002200), 0x0, 0x81) sendmsg$NL80211_CMD_START_P2P_DEVICE(r8, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) 22:25:52 executing program 4: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x2020, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={'veth1_virt_wifi\x00', {0x2, 0x0, @private}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000280)) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)=""/149, &(0x7f0000000380)=0x95) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000003c0)={'HL\x00'}, &(0x7f0000000400)=0x1e) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x20c80, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x2, 0x1002, 0x0, 0x0, {0xe, 0x0, 0xa}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000640), &(0x7f0000000680)=0x4) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000006c0), &(0x7f0000000700)=0x10) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x1) preadv(r3, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/95, 0x5f}, {&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/44, 0x2c}, {&(0x7f00000008c0)=""/235, 0xeb}, {&(0x7f00000009c0)=""/155, 0x9b}], 0x5, 0xff, 0xffff0001) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000b40)=@req={0x28, &(0x7f0000000b00)={'caif0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}}}) fcntl$getownex(r0, 0x10, &(0x7f0000000b80)) r4 = accept4$inet6(r2, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000c00)=0x1c, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000c40)={0x8, 'dummy0\x00', {'veth0_to_bridge\x00'}, 0x80}) 22:25:52 executing program 5: ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r0 = dup(0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040041}, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xb0f2f49909e7f97c}, 0x40080) r3 = fcntl$dupfd(r0, 0x0, r1) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x288, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf9}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa47}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x865}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x10001, @local, 0x7}}}}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1953}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40008}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r5, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004081}, 0x894) flock(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r4, {0xee00}}, './file0\x00'}) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f0000000740)={0x7ff, 0x5}) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ff}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1404c070}, 0x4080) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r8, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x20091}, 0xab05299312fe1a91) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000a00)) [ 81.586515] audit: type=1400 audit(1737843952.749:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:25:52 executing program 6: r0 = getpid() capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x23, 0x101, 0x7ff, 0x0, 0xe7a6, 0x3}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/245, 0xf5}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/2, 0x2}], 0x3, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}], 0x2, 0x40002024, &(0x7f0000001500)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0xfffffffffffffff7, &(0x7f0000001540)=""/110) setpgid(r2, r1) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000015c0)=0x0) pidfd_open(r6, 0x0) recvmmsg$unix(r4, &(0x7f0000005e00)=[{{&(0x7f0000001600)=@abs, 0x6e, &(0x7f0000001740)=[{&(0x7f0000001680)=""/176, 0xb0}], 0x1, &(0x7f0000001780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001800)=""/184, 0xb8}, {&(0x7f00000018c0)=""/177, 0xb1}, {&(0x7f0000001980)=""/1, 0x1}, {&(0x7f00000019c0)=""/167, 0xa7}, {&(0x7f0000001a80)=""/105, 0x69}], 0x5, &(0x7f0000001b80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001c80)=""/132, 0x84}], 0x1, &(0x7f0000001d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000001e80)=""/128, 0x80}, {&(0x7f0000001f00)=""/96, 0x60}, {&(0x7f0000001f80)=""/240, 0xf0}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/11, 0xb}, {&(0x7f0000002180)=""/71, 0x47}, {&(0x7f0000002200)=""/4, 0x4}, {&(0x7f0000002240)=""/223, 0xdf}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/4096, 0x1000}], 0xa}}, {{&(0x7f0000004400)=@abs, 0x6e, &(0x7f0000005840)=[{&(0x7f0000004480)=""/45, 0x2d}, {&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f00000054c0)=""/242, 0xf2}, {&(0x7f00000055c0)=""/187, 0xbb}, {&(0x7f0000005680)=""/240, 0xf0}, {&(0x7f0000005780)=""/164, 0xa4}], 0x6, &(0x7f00000058c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f00000059c0)=@abs, 0x6e, &(0x7f0000005b00)=[{&(0x7f0000005a40)=""/12, 0xc}, {&(0x7f0000005a80)=""/71, 0x47}], 0x2, &(0x7f0000005b40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xa8}}, {{&(0x7f0000005c00), 0x6e, &(0x7f0000005d80)=[{&(0x7f0000005c80)=""/169, 0xa9}, {&(0x7f0000005d40)=""/42, 0x2a}], 0x2, &(0x7f0000005dc0)=[@cred={{0x1c}}], 0x20}}], 0x7, 0x60, 0x0) setpriority(0x2, r13, 0x0) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000005fc0)=0x0) capget(&(0x7f0000006000)={0x19980330, r14}, &(0x7f0000006040)={0x0, 0xe28, 0x7ff, 0x3d6e, 0x8409, 0x8001}) r15 = fork() capset(&(0x7f0000006080)={0x20080522, r15}, &(0x7f00000060c0)={0x400000, 0x101, 0x873a, 0x1, 0x7, 0x1000}) setsockopt$inet6_mtu(r11, 0x29, 0x17, &(0x7f0000006100)=0x1, 0x4) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000006140)={0x0}, &(0x7f0000006180)=0xc) capset(&(0x7f00000061c0)={0x20071026, r16}, &(0x7f0000006200)={0x7fff, 0x3, 0xdb000000, 0x7ff, 0x8, 0xff}) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000006240)={0x7, 0xffffffffffffff80, 0x0, 0x9, 0xffffffe0, 0x1f}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000006280)={{0x1, 0x1, 0x18, r12, {0x2}}, './file0\x00'}) getsockopt$inet6_udp_int(r17, 0x11, 0x67, &(0x7f00000062c0), &(0x7f0000006300)=0x4) sendmsg$NL80211_CMD_NEW_MPATH(r10, &(0x7f0000006440)={&(0x7f0000006340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000006400)={&(0x7f0000006380)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x81184) 22:25:52 executing program 7: ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) lseek(0xffffffffffffffff, 0x80000000, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x101000, 0x3) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x2, 0x7, 0x99, 0x7fffffff}, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0x20) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"36a82b77ab20be9ae0e8a32652a29a83", 0x0, 0x0, {0x1, 0x9}, {0x5, 0x3}, 0x8, [0x9, 0x5, 0x8000, 0x9, 0x245bc5ea, 0x1, 0x3, 0x7fffffff, 0x7fff, 0x800, 0x77, 0x7fff, 0xa8b, 0x5, 0x8]}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000200)) r1 = dup3(r0, r0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) r2 = syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x4000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000002c0)={0x10000000}) r3 = eventfd2(0x6a, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000300)) r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0xa0303, 0x1a) ioctl$FIONCLEX(r4, 0x5450) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = syz_open_dev$rtc(&(0x7f00000003c0), 0x2, 0x80) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) [ 83.083322] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.088907] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.090725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.093762] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.097404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.101994] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.104078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.106329] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.107999] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.109664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.111938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.121864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.127590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.138313] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.141870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.147195] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.163138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.171655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.173468] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.179730] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.181188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.186316] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.192823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.194776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.198049] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.198763] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.212839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.216291] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.219998] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.222709] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.225051] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.236318] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.239646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.241121] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.247659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.250150] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.252054] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.254128] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.274053] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.285813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.288626] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.290546] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.294163] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.299111] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.301089] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.329067] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.336220] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.339453] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.225848] Bluetooth: hci2: command tx timeout [ 85.289933] Bluetooth: hci1: command tx timeout [ 85.290704] Bluetooth: hci0: command tx timeout [ 85.353498] Bluetooth: hci4: command tx timeout [ 85.354566] Bluetooth: hci6: command tx timeout [ 85.417468] Bluetooth: hci5: command tx timeout [ 85.418167] Bluetooth: hci3: command tx timeout [ 85.482541] Bluetooth: hci7: command tx timeout [ 87.274954] Bluetooth: hci2: command tx timeout [ 87.337522] Bluetooth: hci1: command tx timeout [ 87.338010] Bluetooth: hci0: command tx timeout [ 87.401693] Bluetooth: hci6: command tx timeout [ 87.402181] Bluetooth: hci4: command tx timeout [ 87.466485] Bluetooth: hci3: command tx timeout [ 87.466965] Bluetooth: hci5: command tx timeout [ 87.530371] Bluetooth: hci7: command tx timeout [ 89.322487] Bluetooth: hci2: command tx timeout [ 89.385526] Bluetooth: hci0: command tx timeout [ 89.386029] Bluetooth: hci1: command tx timeout [ 89.450454] Bluetooth: hci4: command tx timeout [ 89.450944] Bluetooth: hci6: command tx timeout [ 89.513807] Bluetooth: hci5: command tx timeout [ 89.514308] Bluetooth: hci3: command tx timeout [ 89.578500] Bluetooth: hci7: command tx timeout [ 91.369467] Bluetooth: hci2: command tx timeout [ 91.433609] Bluetooth: hci1: command tx timeout [ 91.434289] Bluetooth: hci0: command tx timeout [ 91.497472] Bluetooth: hci6: command tx timeout [ 91.498161] Bluetooth: hci4: command tx timeout [ 91.562854] Bluetooth: hci5: command tx timeout [ 91.563666] Bluetooth: hci3: command tx timeout [ 91.625550] Bluetooth: hci7: command tx timeout [ 145.610041] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.613489] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.615687] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.623315] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.632759] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.641779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.643624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.649070] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.650308] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.652292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.654588] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.655471] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.670601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.674600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.675955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.687418] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.689727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.693991] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.695683] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.701648] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.703294] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.704278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.717258] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.720310] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.736804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.739480] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.742668] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.745610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.747044] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.749259] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.776686] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.780772] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.784793] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.786700] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.788159] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.793552] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.805449] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.818465] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.821230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.836221] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.836637] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.840532] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.845784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.847579] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.848687] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 145.861996] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.869539] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.875539] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.689593] Bluetooth: hci1: command tx timeout [ 147.689731] Bluetooth: hci0: command tx timeout [ 147.753610] Bluetooth: hci3: command tx timeout [ 147.817423] Bluetooth: hci2: command tx timeout [ 147.881526] Bluetooth: hci4: command tx timeout [ 147.881639] Bluetooth: hci5: command tx timeout [ 147.945836] Bluetooth: hci6: command tx timeout [ 148.010534] Bluetooth: hci7: command tx timeout [ 149.737588] Bluetooth: hci0: command tx timeout [ 149.740431] Bluetooth: hci1: command tx timeout [ 149.801414] Bluetooth: hci3: command tx timeout [ 149.865563] Bluetooth: hci2: command tx timeout [ 149.929429] Bluetooth: hci4: command tx timeout [ 149.930489] Bluetooth: hci5: command tx timeout [ 149.994456] Bluetooth: hci6: command tx timeout [ 150.059354] Bluetooth: hci7: command tx timeout [ 151.785430] Bluetooth: hci1: command tx timeout [ 151.785460] Bluetooth: hci0: command tx timeout [ 151.850655] Bluetooth: hci3: command tx timeout [ 151.915478] Bluetooth: hci2: command tx timeout [ 151.978794] Bluetooth: hci5: command tx timeout [ 151.979116] Bluetooth: hci4: command tx timeout [ 152.043502] Bluetooth: hci6: command tx timeout [ 152.106541] Bluetooth: hci7: command tx timeout [ 153.833395] Bluetooth: hci0: command tx timeout [ 153.834460] Bluetooth: hci1: command tx timeout [ 153.898111] Bluetooth: hci3: command tx timeout [ 153.961417] Bluetooth: hci2: command tx timeout [ 154.025573] Bluetooth: hci5: command tx timeout [ 154.026019] Bluetooth: hci4: command tx timeout [ 154.089444] Bluetooth: hci6: command tx timeout [ 154.154395] Bluetooth: hci7: command tx timeout [ 207.797544] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.799898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.806609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.815239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.819266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.821238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.866788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.868857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.870609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.875178] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.878768] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.880517] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.928623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.939985] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.953696] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.958633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.963674] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.964737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.073734] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.087541] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.113140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.120953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.125499] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.133696] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.139711] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.153484] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.155157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.179544] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.196879] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.204670] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.217709] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.227597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.235971] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.254532] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.266691] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.274593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.350598] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.354525] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 208.357662] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.362679] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.364010] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 208.420837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 208.441647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.446601] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 208.465701] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.483768] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 208.485781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 208.496524] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.898603] Bluetooth: hci0: command tx timeout [ 209.962397] Bluetooth: hci1: command tx timeout [ 210.026397] Bluetooth: hci2: command tx timeout [ 210.218246] Bluetooth: hci3: command tx timeout [ 210.281546] Bluetooth: hci4: command tx timeout [ 210.346490] Bluetooth: hci5: command tx timeout [ 210.601477] Bluetooth: hci6: command tx timeout [ 210.601539] Bluetooth: hci7: command tx timeout [ 211.947351] Bluetooth: hci0: command tx timeout [ 212.010488] Bluetooth: hci1: command tx timeout [ 212.073391] Bluetooth: hci2: command tx timeout [ 212.267405] Bluetooth: hci3: command tx timeout [ 212.331366] Bluetooth: hci4: command tx timeout [ 212.393545] Bluetooth: hci5: command tx timeout [ 212.649517] Bluetooth: hci6: command tx timeout [ 212.650008] Bluetooth: hci7: command tx timeout [ 213.993940] Bluetooth: hci0: command tx timeout [ 214.058180] Bluetooth: hci1: command tx timeout [ 214.121409] Bluetooth: hci2: command tx timeout [ 214.313796] Bluetooth: hci3: command tx timeout [ 214.379336] Bluetooth: hci4: command tx timeout [ 214.441372] Bluetooth: hci5: command tx timeout [ 214.699030] Bluetooth: hci7: command tx timeout [ 214.699056] Bluetooth: hci6: command tx timeout [ 216.041462] Bluetooth: hci0: command tx timeout [ 216.106264] Bluetooth: hci1: command tx timeout [ 216.169608] Bluetooth: hci2: command tx timeout [ 216.361433] Bluetooth: hci3: command tx timeout [ 216.426543] Bluetooth: hci4: command tx timeout [ 216.489396] Bluetooth: hci5: command tx timeout [ 216.745450] Bluetooth: hci6: command tx timeout [ 216.745484] Bluetooth: hci7: command tx timeout [ 264.860816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.861641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.011337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.012005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.221424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.222081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.579691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.580396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.975639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.976461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.242492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.243162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.377369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.378045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.725509] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 266.775234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.776076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:28:58 executing program 4: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x2020, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={'veth1_virt_wifi\x00', {0x2, 0x0, @private}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000280)) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)=""/149, &(0x7f0000000380)=0x95) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000003c0)={'HL\x00'}, &(0x7f0000000400)=0x1e) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x20c80, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x2, 0x1002, 0x0, 0x0, {0xe, 0x0, 0xa}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000640), &(0x7f0000000680)=0x4) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000006c0), &(0x7f0000000700)=0x10) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x1) preadv(r3, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/95, 0x5f}, {&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/44, 0x2c}, {&(0x7f00000008c0)=""/235, 0xeb}, {&(0x7f00000009c0)=""/155, 0x9b}], 0x5, 0xff, 0xffff0001) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000b40)=@req={0x28, &(0x7f0000000b00)={'caif0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}}}) fcntl$getownex(r0, 0x10, &(0x7f0000000b80)) r4 = accept4$inet6(r2, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000c00)=0x1c, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000c40)={0x8, 'dummy0\x00', {'veth0_to_bridge\x00'}, 0x80}) [ 266.984501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.985158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:28:58 executing program 4: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x2020, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={'veth1_virt_wifi\x00', {0x2, 0x0, @private}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000280)) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)=""/149, &(0x7f0000000380)=0x95) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000003c0)={'HL\x00'}, &(0x7f0000000400)=0x1e) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x20c80, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x2, 0x1002, 0x0, 0x0, {0xe, 0x0, 0xa}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000640), &(0x7f0000000680)=0x4) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000006c0), &(0x7f0000000700)=0x10) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x1) preadv(r3, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/95, 0x5f}, {&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/44, 0x2c}, {&(0x7f00000008c0)=""/235, 0xeb}, {&(0x7f00000009c0)=""/155, 0x9b}], 0x5, 0xff, 0xffff0001) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000b40)=@req={0x28, &(0x7f0000000b00)={'caif0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}}}) fcntl$getownex(r0, 0x10, &(0x7f0000000b80)) r4 = accept4$inet6(r2, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000c00)=0x1c, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000c40)={0x8, 'dummy0\x00', {'veth0_to_bridge\x00'}, 0x80}) 22:28:58 executing program 4: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x2020, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={'veth1_virt_wifi\x00', {0x2, 0x0, @private}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000280)) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)=""/149, &(0x7f0000000380)=0x95) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000003c0)={'HL\x00'}, &(0x7f0000000400)=0x1e) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x20c80, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x2, 0x1002, 0x0, 0x0, {0xe, 0x0, 0xa}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000640), &(0x7f0000000680)=0x4) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000006c0), &(0x7f0000000700)=0x10) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x1) preadv(r3, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/95, 0x5f}, {&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/44, 0x2c}, {&(0x7f00000008c0)=""/235, 0xeb}, {&(0x7f00000009c0)=""/155, 0x9b}], 0x5, 0xff, 0xffff0001) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000b40)=@req={0x28, &(0x7f0000000b00)={'caif0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}}}) fcntl$getownex(r0, 0x10, &(0x7f0000000b80)) r4 = accept4$inet6(r2, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000c00)=0x1c, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000c40)={0x8, 'dummy0\x00', {'veth0_to_bridge\x00'}, 0x80}) 22:28:58 executing program 7: ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) lseek(0xffffffffffffffff, 0x80000000, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x101000, 0x3) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x2, 0x7, 0x99, 0x7fffffff}, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0x20) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"36a82b77ab20be9ae0e8a32652a29a83", 0x0, 0x0, {0x1, 0x9}, {0x5, 0x3}, 0x8, [0x9, 0x5, 0x8000, 0x9, 0x245bc5ea, 0x1, 0x3, 0x7fffffff, 0x7fff, 0x800, 0x77, 0x7fff, 0xa8b, 0x5, 0x8]}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000200)) r1 = dup3(r0, r0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) r2 = syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x4000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000002c0)={0x10000000}) r3 = eventfd2(0x6a, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000300)) r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0xa0303, 0x1a) ioctl$FIONCLEX(r4, 0x5450) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = syz_open_dev$rtc(&(0x7f00000003c0), 0x2, 0x80) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) [ 267.489121] [ 267.489352] ====================================================== [ 267.489880] WARNING: possible circular locking dependency detected [ 267.490402] 6.13.0-next-20250124 #1 Not tainted [ 267.490795] ------------------------------------------------------ [ 267.492183] kworker/u8:1/64 is trying to acquire lock: [ 267.493355] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 267.495461] [ 267.495461] but task is already holding lock: [ 267.496883] ffff88802fed8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 267.498759] [ 267.498759] which lock already depends on the new lock. [ 267.498759] [ 267.499868] [ 267.499868] the existing dependency chain (in reverse order) is: [ 267.500498] [ 267.500498] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 267.501067] __mutex_lock+0x13d/0xb50 [ 267.501470] wiphy_register+0x1b2e/0x25d0 [ 267.501895] ieee80211_register_hw+0x23a4/0x3d60 [ 267.502361] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 267.502848] init_mac80211_hwsim+0x389/0x870 [ 267.503299] do_one_initcall+0xf9/0x640 [ 267.503717] kernel_init_freeable+0x53d/0x7a0 [ 267.504179] kernel_init+0x1e/0x2d0 [ 267.504544] ret_from_fork+0x48/0x80 [ 267.504915] ret_from_fork_asm+0x1a/0x30 [ 267.505337] [ 267.505337] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 267.505858] __lock_acquire+0x29fd/0x4580 [ 267.506276] lock_acquire+0x19b/0x520 [ 267.506665] __mutex_lock+0x13d/0xb50 [ 267.507067] unregister_netdevice_many_notify+0x1612/0x1c80 [ 267.507604] unregister_netdevice_queue+0x224/0x2e0 [ 267.508082] _cfg80211_unregister_wdev+0x57b/0x700 [ 267.508571] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 267.509048] ieee80211_unregister_hw+0x55/0x3a0 [ 267.509502] hwsim_exit_net+0x3a0/0x730 [ 267.509902] ops_exit_list+0xb3/0x180 [ 267.510288] cleanup_net+0x546/0xad0 [ 267.510666] process_one_work+0x8ee/0x1a10 [ 267.511107] worker_thread+0x674/0xe70 [ 267.511516] kthread+0x3ab/0x720 [ 267.511880] ret_from_fork+0x48/0x80 [ 267.512263] ret_from_fork_asm+0x1a/0x30 [ 267.512685] [ 267.512685] other info that might help us debug this: [ 267.512685] [ 267.513342] Possible unsafe locking scenario: [ 267.513342] [ 267.513838] CPU0 CPU1 [ 267.514223] ---- ---- [ 267.514609] lock(&rdev->wiphy.mtx); [ 267.514949] lock(rtnl_mutex); [ 267.515442] lock(&rdev->wiphy.mtx); [ 267.515968] lock(rtnl_mutex); [ 267.516286] [ 267.516286] *** DEADLOCK *** [ 267.516286] [ 267.516777] 4 locks held by kworker/u8:1/64: [ 267.517167] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 267.518045] #1: ffff88800bb57d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 267.518901] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 267.519694] #3: ffff88802fed8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 267.520605] [ 267.520605] stack backtrace: [ 267.520988] CPU: 1 UID: 0 PID: 64 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250124 #1 [ 267.521024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 267.521046] Workqueue: netns cleanup_net [ 267.521085] Call Trace: [ 267.521094] [ 267.521105] dump_stack_lvl+0xca/0x120 [ 267.521163] print_circular_bug+0x47b/0x750 [ 267.521207] check_noncircular+0x2e9/0x3c0 [ 267.521247] ? srso_return_thunk+0x5/0x5f [ 267.521302] ? __pfx_check_noncircular+0x10/0x10 [ 267.521341] ? hlock_class+0x4e/0x130 [ 267.521371] ? mark_lock+0xac/0xed0 [ 267.521408] ? srso_return_thunk+0x5/0x5f [ 267.521462] ? sched_clock+0x37/0x60 [ 267.521517] ? lockdep_lock+0xba/0x1b0 [ 267.521573] ? __pfx_lockdep_lock+0x10/0x10 [ 267.521633] __lock_acquire+0x29fd/0x4580 [ 267.521685] ? __pfx___lock_acquire+0x10/0x10 [ 267.521726] ? lock_release+0x20f/0x6f0 [ 267.521769] ? __pfx_lock_release+0x10/0x10 [ 267.521815] lock_acquire+0x19b/0x520 [ 267.521856] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 267.521904] ? __pfx_lock_acquire+0x10/0x10 [ 267.521946] ? srso_return_thunk+0x5/0x5f [ 267.522000] ? lock_release+0x20f/0x6f0 [ 267.522042] ? srso_return_thunk+0x5/0x5f [ 267.522095] ? lock_is_held_type+0x9e/0x120 [ 267.522148] ? srso_return_thunk+0x5/0x5f [ 267.522205] __mutex_lock+0x13d/0xb50 [ 267.522255] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 267.522299] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 267.522343] ? srso_return_thunk+0x5/0x5f [ 267.522396] ? synchronize_rcu_expedited+0x38a/0x420 [ 267.522439] ? __pfx___mutex_lock+0x10/0x10 [ 267.522491] ? __pfx_autoremove_wake_function+0x10/0x10 [ 267.522544] ? srso_return_thunk+0x5/0x5f [ 267.522597] ? kasan_quarantine_put+0x84/0x1e0 [ 267.522656] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 267.522690] ? srso_return_thunk+0x5/0x5f [ 267.522747] unregister_netdevice_many_notify+0x1612/0x1c80 [ 267.522791] ? __virt_addr_valid+0x2e8/0x5d0 [ 267.522842] ? __pfx_lock_release+0x10/0x10 [ 267.522885] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 267.522930] ? find_held_lock+0x2c/0x110 [ 267.522986] ? srso_return_thunk+0x5/0x5f [ 267.523041] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 267.523105] ? srso_return_thunk+0x5/0x5f [ 267.523158] ? lock_release+0x20f/0x6f0 [ 267.523201] ? __pfx_lock_release+0x10/0x10 [ 267.523242] ? srso_return_thunk+0x5/0x5f [ 267.523295] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 267.523341] ? srso_return_thunk+0x5/0x5f [ 267.523399] unregister_netdevice_queue+0x224/0x2e0 [ 267.523441] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 267.523483] ? up_write+0x195/0x520 [ 267.523536] _cfg80211_unregister_wdev+0x57b/0x700 [ 267.523586] ? srso_return_thunk+0x5/0x5f [ 267.523643] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 267.523680] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 267.523717] ? srso_return_thunk+0x5/0x5f [ 267.523770] ? srso_return_thunk+0x5/0x5f [ 267.523823] ? synchronize_rcu+0x1ff/0x260 [ 267.523864] ieee80211_unregister_hw+0x55/0x3a0 [ 267.523907] hwsim_exit_net+0x3a0/0x730 [ 267.523947] ? __pfx_hwsim_exit_net+0x10/0x10 [ 267.523987] ? srso_return_thunk+0x5/0x5f [ 267.524040] ? netdev_run_todo+0x788/0x1040 [ 267.524087] ? __pfx_hwsim_exit_net+0x10/0x10 [ 267.524128] ops_exit_list+0xb3/0x180 [ 267.524177] cleanup_net+0x546/0xad0 [ 267.524219] ? __pfx_cleanup_net+0x10/0x10 [ 267.524271] process_one_work+0x8ee/0x1a10 [ 267.524335] ? __pfx_lock_acquire+0x10/0x10 [ 267.524377] ? __pfx_process_one_work+0x10/0x10 [ 267.524434] ? srso_return_thunk+0x5/0x5f [ 267.524487] ? move_linked_works+0x172/0x270 [ 267.524530] ? srso_return_thunk+0x5/0x5f [ 267.524583] ? assign_work+0x196/0x240 [ 267.524639] worker_thread+0x674/0xe70 [ 267.524695] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 267.524745] ? srso_return_thunk+0x5/0x5f [ 267.524798] ? __pfx_worker_thread+0x10/0x10 [ 267.524856] kthread+0x3ab/0x720 [ 267.524905] ? __pfx_kthread+0x10/0x10 [ 267.524955] ? srso_return_thunk+0x5/0x5f [ 267.525008] ? finish_task_switch.isra.0+0x206/0x840 [ 267.525058] ? __pfx_kthread+0x10/0x10 [ 267.525110] ret_from_fork+0x48/0x80 [ 267.525140] ? __pfx_kthread+0x10/0x10 [ 267.525191] ret_from_fork_asm+0x1a/0x30 [ 267.525255] 22:28:58 executing program 4: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x2020, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={'veth1_virt_wifi\x00', {0x2, 0x0, @private}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000280)) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)=""/149, &(0x7f0000000380)=0x95) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000003c0)={'HL\x00'}, &(0x7f0000000400)=0x1e) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x20c80, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x2, 0x1002, 0x0, 0x0, {0xe, 0x0, 0xa}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000640), &(0x7f0000000680)=0x4) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000006c0), &(0x7f0000000700)=0x10) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x1) preadv(r3, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/95, 0x5f}, {&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/44, 0x2c}, {&(0x7f00000008c0)=""/235, 0xeb}, {&(0x7f00000009c0)=""/155, 0x9b}], 0x5, 0xff, 0xffff0001) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000b40)=@req={0x28, &(0x7f0000000b00)={'caif0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}}}) fcntl$getownex(r0, 0x10, &(0x7f0000000b80)) accept4$inet6(r2, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000c00)=0x1c, 0x0) 22:28:58 executing program 7: ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) lseek(0xffffffffffffffff, 0x80000000, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x101000, 0x3) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x2, 0x7, 0x99, 0x7fffffff}, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0x20) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"36a82b77ab20be9ae0e8a32652a29a83", 0x0, 0x0, {0x1, 0x9}, {0x5, 0x3}, 0x8, [0x9, 0x5, 0x8000, 0x9, 0x245bc5ea, 0x1, 0x3, 0x7fffffff, 0x7fff, 0x800, 0x77, 0x7fff, 0xa8b, 0x5, 0x8]}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000200)) r1 = dup3(r0, r0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) r2 = syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x4000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000002c0)={0x10000000}) r3 = eventfd2(0x6a, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000300)) r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0xa0303, 0x1a) ioctl$FIONCLEX(r4, 0x5450) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = syz_open_dev$rtc(&(0x7f00000003c0), 0x2, 0x80) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) 22:28:58 executing program 4: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x2020, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={'veth1_virt_wifi\x00', {0x2, 0x0, @private}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000280)) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)=""/149, &(0x7f0000000380)=0x95) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000003c0)={'HL\x00'}, &(0x7f0000000400)=0x1e) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x20c80, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x2, 0x1002, 0x0, 0x0, {0xe, 0x0, 0xa}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000640), &(0x7f0000000680)=0x4) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000006c0), &(0x7f0000000700)=0x10) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x1) preadv(r3, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/95, 0x5f}, {&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/44, 0x2c}, {&(0x7f00000008c0)=""/235, 0xeb}, {&(0x7f00000009c0)=""/155, 0x9b}], 0x5, 0xff, 0xffff0001) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000b40)=@req={0x28, &(0x7f0000000b00)={'caif0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}}}) fcntl$getownex(r0, 0x10, &(0x7f0000000b80)) 22:28:58 executing program 7: ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) lseek(0xffffffffffffffff, 0x80000000, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x101000, 0x3) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x2, 0x7, 0x99, 0x7fffffff}, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0x20) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"36a82b77ab20be9ae0e8a32652a29a83", 0x0, 0x0, {0x1, 0x9}, {0x5, 0x3}, 0x8, [0x9, 0x5, 0x8000, 0x9, 0x245bc5ea, 0x1, 0x3, 0x7fffffff, 0x7fff, 0x800, 0x77, 0x7fff, 0xa8b, 0x5, 0x8]}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000200)) r1 = dup3(r0, r0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) r2 = syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x4000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000002c0)={0x10000000}) r3 = eventfd2(0x6a, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000300)) r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0xa0303, 0x1a) ioctl$FIONCLEX(r4, 0x5450) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = syz_open_dev$rtc(&(0x7f00000003c0), 0x2, 0x80) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) [ 269.817400] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.821709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.825137] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.845370] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.848606] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.850029] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.014850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.017826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.020983] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.024848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.028271] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.033021] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.065472] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.070121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.071964] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.074915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.077828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 270.079928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.130726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.143373] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.156025] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.157862] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.159163] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.164368] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.165727] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.167102] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.174497] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.175196] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.176678] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.178610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.179746] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.183679] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.188825] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 270.189736] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.214611] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 270.217403] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.913638] Bluetooth: hci0: command tx timeout [ 272.105587] Bluetooth: hci2: command tx timeout [ 272.106064] Bluetooth: hci1: command tx timeout [ 272.297645] Bluetooth: hci6: command tx timeout [ 272.298131] Bluetooth: hci4: command tx timeout [ 272.298705] Bluetooth: hci5: command tx timeout [ 273.962525] Bluetooth: hci0: command tx timeout [ 274.154575] Bluetooth: hci1: command tx timeout [ 274.155048] Bluetooth: hci2: command tx timeout [ 274.346805] Bluetooth: hci5: command tx timeout [ 274.347268] Bluetooth: hci4: command tx timeout [ 274.348196] Bluetooth: hci6: command tx timeout [ 276.010396] Bluetooth: hci0: command tx timeout [ 276.201351] Bluetooth: hci2: command tx timeout [ 276.201814] Bluetooth: hci1: command tx timeout [ 276.393384] Bluetooth: hci6: command tx timeout [ 276.393852] Bluetooth: hci4: command tx timeout [ 276.394257] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 22:28:58 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88803cec7b38 RCX=ffffffff84a0ee7b RDX=0000000000000004 RSI=ffffffff84a0eecb RDI=0000000000000000 RBP=dffffc0000000000 RSP=ffff88803cec77d8 R8 =0000000000000000 R9 =fffffbfff0c80980 R10=0000000000000001 R11=0000000000000003 R12=ffff88800d569540 R13=ffffed10079d8f6e R14=ffff88803cec7b75 R15=0000000000000000 RIP=ffffffff84a0ef1a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007efec56051f0 CR3=000000002f5ba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800bb56d20 R8 =0000000000000000 R9 =ffffed100134f046 R10=000000000000005b R11=6f6c206863696877 R12=000000000000005b R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b30f28000 CR3=0000000018bb4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000