Warning: Permanently added '[localhost]:46729' (ECDSA) to the list of known hosts. 2025/01/28 07:26:06 fuzzer started 2025/01/28 07:26:07 dialing manager at localhost:40883 syzkaller login: [ 74.190839] cgroup: Unknown subsys name 'net' [ 74.281468] cgroup: Unknown subsys name 'cpuset' [ 74.312761] cgroup: Unknown subsys name 'rlimit' [ 80.185429] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 07:26:24 syscalls: 2217 2025/01/28 07:26:24 code coverage: enabled 2025/01/28 07:26:24 comparison tracing: enabled 2025/01/28 07:26:24 extra coverage: enabled 2025/01/28 07:26:24 setuid sandbox: enabled 2025/01/28 07:26:24 namespace sandbox: enabled 2025/01/28 07:26:24 Android sandbox: enabled 2025/01/28 07:26:24 fault injection: enabled 2025/01/28 07:26:24 leak checking: enabled 2025/01/28 07:26:24 net packet injection: enabled 2025/01/28 07:26:24 net device setup: enabled 2025/01/28 07:26:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 07:26:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 07:26:24 USB emulation: enabled 2025/01/28 07:26:24 hci packet injection: enabled 2025/01/28 07:26:24 wifi device emulation: enabled 2025/01/28 07:26:24 802.15.4 emulation: enabled 2025/01/28 07:26:24 fetching corpus: 50, signal 14738/16154 (executing program) 2025/01/28 07:26:24 fetching corpus: 100, signal 18046/20673 (executing program) 2025/01/28 07:26:24 fetching corpus: 150, signal 20780/24401 (executing program) 2025/01/28 07:26:24 fetching corpus: 200, signal 21926/26558 (executing program) 2025/01/28 07:26:24 fetching corpus: 250, signal 22768/28378 (executing program) 2025/01/28 07:26:24 fetching corpus: 300, signal 24487/30824 (executing program) 2025/01/28 07:26:24 fetching corpus: 350, signal 25305/32504 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/33660 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/34700 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/35776 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/36781 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/37838 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/38879 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/39918 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/40964 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/41975 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/43001 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/44057 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/45062 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/46070 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/47073 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/48138 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/49166 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/50239 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/51276 (executing program) 2025/01/28 07:26:24 fetching corpus: 371, signal 25487/52301 (executing program) 2025/01/28 07:26:25 fetching corpus: 371, signal 25487/52642 (executing program) 2025/01/28 07:26:25 fetching corpus: 371, signal 25487/52642 (executing program) 2025/01/28 07:26:28 starting 8 fuzzer processes 07:26:28 executing program 0: lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000140)=0x80) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40, 0x103) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) getpeername$unix(r1, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) execveat(r1, &(0x7f0000000280)='./file1\x00', &(0x7f0000000400)=[&(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='trusted.overlay.redirect\x00', &(0x7f00000003c0)='{*)#*-/***(&}\x00'], &(0x7f0000000440), 0x1000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x7, 0x9}}, './file1\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x8002) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3, {0x1ff}}, './file0\x00'}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000540)={{r2}, 0x0, 0x14, @unused=[0x1200000000000000, 0xc4, 0x3d, 0x1], @subvolid=0x20}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000001540), 0x100, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000015c0)={0x0, @loopback, @initdev}, &(0x7f0000001600)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000001740)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0x90, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x2400c08e}, 0x22000084) move_mount(0xffffffffffffffff, &(0x7f0000001780)='./file1\x00', r5, &(0x7f00000017c0)='./file1\x00', 0x82) getdents(r2, &(0x7f0000001800)=""/220, 0xdc) sendmsg$nl_generic(r1, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x30, 0x30, 0x8, 0x70bd25, 0x25dfdbfe, {0x5}, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x5, 0x96, 0x0, 0x0, @str='\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x8002) lsetxattr$security_ima(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40), &(0x7f0000001a80)=@sha1={0x1, "6dfe213d899954813292a3ac3acb89dc1952c9cb"}, 0x15, 0x4) ioctl$SCSI_IOCTL_START_UNIT(r5, 0x5) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r2, {0x80000001}}, './file0\x00'}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000002240)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002200)={&(0x7f0000001e40)={0x3b4, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r6}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xb4, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x1, 0x9, 0x2, 0x9}, {0x4, 0xa1, 0x0, 0x9}, {0x5954, 0x1, 0x2, 0x7}, {0x6, 0xff, 0x8, 0x8000}, {0xefcf, 0x2, 0x9}, {0xfff9, 0xfa, 0x80, 0x8001}, {0x1, 0x6, 0xff, 0xfa0}, {0x4, 0x5, 0x9, 0x5}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x4}}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x10000}, 0x4004000) 07:26:28 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x1, r0}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000080)={'ip_vti0\x00', {0x2, 0x0, @multicast1}}) bind(0xffffffffffffffff, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xfffffff7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc, 0x1}, 0x80) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:memory_device_t:s0\x00', 0x25, 0x2) r2 = dup2(0xffffffffffffffff, r1) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000001c0)={'ip_vti0\x00', {0x2, 0x0, @private}}) getpeername(r2, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000003c0)={r4, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) r5 = openat$cgroup_type(r2, &(0x7f0000000400), 0x2, 0x0) pidfd_getfd(r2, r5, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000440)=""/219, &(0x7f0000000540)=0xdb) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000580)=0xfffffffe, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r6, 0x8911, &(0x7f0000000600)={'veth0_vlan\x00', @ifru_ivalue}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000640), 0xb0400, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf0, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}, {{0x8, 0x1, r3}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x200, 0x6, 0x40, 0x71473196}, {0x9, 0x1, 0xff, 0x20}, {0xffe1, 0x3f, 0x6, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f0}}, {0x8, 0x6, r4}}}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20}, 0x4040004) openat2(r7, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x2, 0x14, 0x8}, 0x18) 07:26:28 executing program 2: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000000)={0x100000001, 0x7fffffff, 0x4, 0x7, 0x3, [{0x7, 0x58f, 0xfffffffffffffffe, '\x00', 0x1b82}, {0x1d7, 0x3ff, 0xb8, '\x00', 0x1}, {0x8000, 0x6, 0x5, '\x00', 0x1}]}) r0 = syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x270, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000180)="d3876d3c1b68ecffcce5d94a7a61f0591d566710cd8e827bfcb60ef9b78152c579bc8ba68d82f8918c9e6b1ddf732ddef5f6cae2e4c64a30be84fa8115978a18d7b551e7d0267195b1f564ed02499f920da63dc504f679555c9182614861d016772fadb660d30530844106bd62a2b72223b6cd74a9705ac6d9de0632c14dceaa35faec5aa6b7fb311dd5f9a0de9ed63337809e8c7d2f381bb66640341fad83f48c174e9e780f23f46c1db51905255f41808141d0a9d33c86e80daec5dd0b102f15d404ea482f530de8bee49af8cf9c88b4b04866d063", 0xd6, 0x3}, {&(0x7f0000000280)='\\t', 0x2, 0xc6}], 0x10401, &(0x7f0000000300)={[{@block}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', 0xee00}}, {@subj_user={'subj_user', 0x3d, '\xf9%-!:}%'}}, {@pcr={'pcr', 0x3d, 0x7}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$-'}}]}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000003c0)={0x4, 0x1000, "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"}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)={0xd4, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9ff4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffe}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb3b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x88}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001600)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x5, 0x6, 0x8, 0x80000000, 0x7ff, 0x1}, {0x5, 0x6a7, 0x2, 0xffffffffffffffff, 0x7, 0xd7000000000}], ['\x00', '\x00']}) readv(r0, &(0x7f0000001880)=[{&(0x7f0000001740)=""/42, 0x2a}, {&(0x7f0000001780)=""/90, 0x5a}, {&(0x7f0000001800)=""/121, 0x79}], 0x3) r3 = syz_mount_image$nfs4(&(0x7f00000018c0), &(0x7f0000001900)='./file0\x00', 0x4, 0x1, &(0x7f0000001a40)=[{&(0x7f0000001940)="07516404b6fd817d17a9c1ab0a82f68e7d37fe1a487cd1510266dfc64809540a7dd509beb4423e02b0e96fe3dd3b728d68fa147d5135e09469c1afd0dc5eea61d6774a9e3c575b042e5d35533cf47f5e20e04505c7d9c09309e88e4f2f77aa12f86aa9551ba4d647f12246fdf92560dd61669b6c317194e018e1e4ab4019e2b780956cd6d368a16a1470b7f438349a8a99f4259c3fa9c49fac9f0c4b2e78e8147c5974a2753604e04198d5361fbd6aa2a5574ddf9cebcae3d78f38b9e3bfa96efb4cefa63dce453c", 0xc8, 0x1b}], 0xa000, &(0x7f0000001a80)={[{'pcr'}, {'iso9660\x00'}, {'%%-'}, {'block'}, {'block'}, {'fowner<'}, {'\x00'}, {'0000:00:10.0\x00'}, {'$-'}, {'pci\x00'}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'iso9660\x00'}}]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001b80)={{r3}, 0x0, 0x14, @inherit={0x80, &(0x7f0000001b00)={0x0, 0x7, 0x5, 0xf17, {0x6, 0x7, 0x847, 0x8, 0x1000}, [0x32b, 0x7fffffff, 0x1f, 0x2, 0x8, 0x3b2, 0x101]}}, @name="6269784c238cc470449ae0d4e02ad727e93d7684fcdfca6d7c27113fcbf6e11d3263ce063c8ce0aaea652a80b95cfb620811e4043750b4670624e17e9efe1e30da760caab00b57c2410977afa39dad4d9b0aa804a6c2a8ebfdea9bc9be04da8a9d2707d8b41ea5a69b8dfb4fab91f16ed4e98a44649698d00481c1caea150fee306959cb13be12db408c77bed31678ab5572c08569f8d3a67a5a57bbd1d8dfc6f5e0b1ab90d3c27428aa97878f9329c99e7fc77c8b15b511084d7d75284eefbd3deffbdfec20dd49bb316728f89bcf5f0215c495573367b700deef2a54c4c06c795edbd82cd4889e1916c106b5552d4c65777a0d76d3259d16cafc0b270501f20c291df85a60af991025f8b92e61de6137a06b29369370a2abb72749cef4a8285dcad2df45acb0a7cc6688e8b716941d758d68fd6472df1c9f6ac34b61fe62c33bc9a4eeecc59fe4deb036dae947543ad5b0befdccf70950e7a2e6d9153e0adebf30eac1e58a6ee804e0a11c5e2adbaef33f921b486b13ddda36179444d02e3118998837e470e1c749ed953d235eb88525344a9a64e8f53199aa2e1c1620f514971f569814a1b1b66624c95308c07e1d953a1c270dde5186617f35e0d9bb2a5cb50f9411bff5dfbf2d5ef8d67d0370b7e8bb8d0821419ef992a1341c1bcf8105501897e46648cec70e376d2bfe6c47548376a5900d479f7d107c3c291a586a14f71db623a24b458ea874142e5f19212f8881e37e3d2055b626c4c36ab8149060536ca2cd308010ef717c774239f0562acf9d39d93a68bbe1a0cbca79124d7e8a1a6b5b7a77f706b38a2c59ca320a8fba8e30bd25d63dcc6fd21b098ef9953cb7a34dfde18991674eebc876c603ec66f41c35b4e7a1aff8ea0f16206d1340480e12c245cfa72916fd4305b7d1f13f333742fc9dbf8798d7e8eb2b6b343c428f92fb31defaa6bbaa363b105ad2bac36d901f4024fc5bbd8cafa102ed8757e34a1c449d12d046b284ed135ccee171ca29fe454054f9a858c6e340ef28e2ec8df1a1214286a0c7331cde8509600832947ad677109e00dc3aee482265f23e04de323c3434223564cfbcc827a804cbbc43220994be994139575c4ddb26e93c7c4fd65f1e8461cf9f1b6a10e88eecbc06877492751702f900973811cd61a7cc07f95cd089ab7565adc307d5f761d280cf3f9ae4019578d24d9d941c7d863781d034fc9ce3ac28188585d6dc94cbd437efd8f674580e773474fa331305131144baab15c3beee14fa935156c45198ffd783a75dbe9c7abfaa418745b567065018d053036e00e7ea8985267cb6992105547c907c6443ba2eabf2af0c91d921ea6f11c4a22cc109010987c9a59190431e4cb232913d5bd7b95b3b59905f242bf112b2a0fc4297ce77396a8a1f0fd0d62c4b41a41216d66bddeb88bc65b589b425762827a811f6cea8b3a28ef1556cecb8faff82fbc876515b3014b5551d475d88dd87e79fd71829d0593718168aabd3fc6740ed06bf1aac8c82113d14fcb21caa088b878cc4ab0dfc6942cf5f46483b8da6384e4ddf472f3b82ad4d401851338aecd83a549102b8b91b1d932b3d9091b5979af164851dc62a6638db3cfda058368d4b7f384ae0fadba7b585e9a5907c554a3511d6e560f8c84f634f32f68f1c12112502327829f7f436a1473ad0e1c1d183225f0d919ebe0cc1c651964fd1a2afffeab9481fb2419bb83c59fdf8594fe8ed5c77b9bf6275f1a2b980b4b5a8b0b0318cfb41a4ffa1a660845157d365dbfde252e5d73e3f358dffd142720b3a3c0b688dd0370e47b56683a732f3a0c6e386df3a96b8c7521acb03702f3d93575a7410dd4a9f40658921a1e399a3697a163efaa8b1e5e5176d2278b1fdfc5779d4b5e9f4328e2701a14c54b62e1b99051225dd9c065e04d4490dd8a3301782ac3b7a91846b8b821469659f52691668c056ff472ffb43e9509bf9f2737ae006637ace32e6705082097f96c981a3ec248b8d153c14c012ae62e2f4dc3eed97b70637495d4391e26090d65d75126a242a58619de151c0e7330ea2ca42d33664b7561942a1b81ffcf03dc7d692479d2d2b1aa6d99fd7e12da02e297510b2706c020b6b94a399713a78ad777084f41044064ea78834d9eab9dd1ebf4be8e8ca06bfdab6f3cd365553d82629be13264ef80b2d3f9187f909357ac876605833b3c4ccc2b05297a4ddc379d1532352cd16c0ced676a626426f88fa181ee45dfb73f9c7946b29f09aa4f37db38fa68d02d10ccc2ea61ff68e07496593df8cd4101be4a44e2a894d05451854d37dfcaf669585846e64357914803302d36f997a55a7875ec54933862ecfd35c1220f4310b8a058cda5fe10f20ed2f6b2f9601a706969f9f413695a1c4a184bdbb5e4c36ab9d34e0f293dd81ac91712990cb590bc35282765ee24e751ba651e9ebc8bde7d6fe73f4490cb0dd931ca51ab7682d0f6e839ace845134251f102b0e9a09d02a969c15fc7f61b6c9b570569b7075c6d3d32607d42361b9ae370b62e2d413f5ec30229ae881ab39162d43e7f29732eb8564bc9dcaaddc3f7b404129e8bb642e9db231ac1e1caa9eaf0f5d9c26efc2f6ddd282cb697e86a832228413889cbf7f68af52465ea2914e7cd672e332b2418e78cf75dc4609390eadc7c515911af962330704bcaa88d409c3e4bd0d6a6e9e816ddfa428dddee27413c4b3c1988bf5117d13f81102750444db3813b5eac93598a62e07e17f618f49d541af15310c7beab8d62230a4b1661331a723a65907c936ef66c31fe01b6c2462ec37148592f56bab74daba43cc5e297e715e8fa185e5bb3062b705d66f183e974de49fae994d31afb25aa8265b998e49e631be8df18ee60f172e531c34c8bff95a97d1e771cdebd83df7515f36c0420b6e1e3f71859f56c92294daf001c44df136293425b96dc5332292e8b871877c165c6de157113075e10d1e33b78ab04d382149d5499d5f47eaed17881a1107bb811cdb613247e7a76732b6112014965f84d2294b095c7154b4c6c78009869ac007b7fd3fde077a5296e7ccd07e5bdb6caea0a837debd92f14e839f72fe538509b7824caed9b66f520cf00dbfa56d9ef4df7f2b91697a6fc29b773bd410258086d7dd8a14a810994ffbd4bac77ecf3bb41877bf7779d703799d85ec488e4551e639e22039e7f42c6fc053fc387f8dffe5574e44baa2c27a16c6ba6843df3650285e847d4fce459bf5384552f9e95cf03a52ea6aee79eb3dc592ac4c0e46af114a6b8bccc061b2cad8af2ac06db04184365eb1c0082b3942872cc8968924fcb1a1e10edb43eb8de67d33b7bd606c09a5ad9b27887b7b61e25a0b7d221bb319407902a877e446bf63321a11f4ebab7bcab5f28d7fbe36453dd4d889cc9e93cc4ead8cc7b91be23b48f7b97164922ee6c6160149e0e6fa42361704c793eaec29fa8a7b0b3dce26a1b46fc3d04e08f185fbb82b3b96d54a9835d8015e376b6237bb1bcb51625e44aa08e792105382dd4a332e4e9cf21c2ea173cc57ff90654f53d9ff98d68429e61758705842adca2771ba64aaeca4b8c5dc06a983b964fead83d1db1d6b032f84d85b2045ce9ce7a46f7f26690d99ae5c492f53cb5b75f7ab507022e17691c4f543222d2c55cc2c2ab3d47337a39f5153561e754d89e5043a0e6b03a7bd41628e11f473e9e3cd6cf83c3b48eec5ad8adc39bf952f8e5fe3bb0697ee93cce5156d0a47f17239d13f507cd83ad49a7a5e5613ab3c70126253216cbed52311cdf043d59b06f76c64bd9f571a40e4b5fcdfd450017b194b5a1d03b662dd726e2a38f72bb8172523fb4b749d7633abc5e1866b85e99e5cdb59691af8407dd4079cc81d32409d0bb7705880f9963fedf49d6bbab5ffbdae59915d08780a3be54cdcd123a8f40ab323d00fc12abf879f400d63e77808a7f3f8b5ab1dac7a71e7f79a7d6f342f129a9079096c4c78b05b49fc6ca9f39af69780a2ad0c25f65703f42141bff5992a278623f4c6e7048999a1ed0a9bf9bcc0b2189d5b727b990d5657dd87467fc6dec84ac1659139f3c351eb78e3240828bb2e5127ada2496499cd6c157bd0772ef8db81874940ac40ead9febb5f01aacfd99ebe4818ee61c643c5a15adb1120ec5a6731801295a6a21c87e419f82a865cc8cf8df688ba51f8fb4ec0f9e86dbbcd3432d7acc626a964fe04fbeaa69ad986c395483fae64b41779dc23aa2746cfb803af51c605e4e4ad330b54c5d20d5a061827d7560424cea72207a6107fa702acb92f12ecc044cf8e0b85c632d71459c0f8d1470ebd38bcb53b93dc0e34059be8cc784201a6311964a6ad7dcde515a50d3071d1fcdb4127674302bda74017b2db2d07eb0380f7405344f3f6104fe333c2f12ab8eb7247a0e69d5f1dcad322f36a14025fe2c5cc2cdf44fafa10a2644c294a982c496fe86314112e541afcbb7f296d89cb39cc1c2270cea7661b71c5ffcbfa5450793399b0cf22606bc2b1a224d7fb2f6aeb72cbc3d5fee765f2ad322f963ae34c35ba2100a94ad9c846a7091ef945ab9df9efc4f69ae7c1fc4bd6212d51fdc391ba67ccbe98f8cbe91157b1e2cbf9fd67878f2b3defec135682003bf10b291612a4e871a2bad144d84508a7a961fd858b95f55b3f0f8bd80486e5cfa97ec605892ff076a6ac017ab0fe2a02cc71e51bcc93835aafef610174637abaee3945a7d1ac1b9f729639ad4a45ea17554218e8e2297cd5d76755389f2962f6176f898798490cf9027c3891d0c734f8d73d7514fac7ac9d072886de6d81b24c2b9a5e0cb70b0071479dc63c94787fd7935fc3da1136b5bc6113705a2bc1c4ef5676c1ee2c7845f1137973c3c8a8da675e2af28077443f1a9e3969c34e755daa5fe58914cdc65ded65d12c55c5ed392df80e5f85a5b1c7f315c3fb3551ab6bb031d92897d24a9b39298f6753d7771b4e50252c7f4bdbfa140da971f68649130281bc69b8458076f1f281b48d6d319321284c735a96243a8f14bf41b55ed16f8e0471308a7b135047543b5d4bd1ecf3a09cdeb09db14f5699dba5b0fc655799048990072e5a7bf7387128cb84ab9baa4973f2e8966ed791ff4da5a28e731d53441d6d69f03ee64e4b7cfa6ffb481ed165a2d19e9b73588ddb880e01ffc3a7dc8db9d00ebd23b7ff685343bb63eda1864d34f812a10e5e3c1ad6ed4b44097a8d24e5c4d095d7ed77dd24a5152e026cd976cb837dacf1ad6f8645576d6ad4188c0e294f54aa6cea8ce0003c99878e2298511473e7e9f792928acdaacb27666751855643a68cce159a2a0826f24f504d67ebd99f62f4d09e67bda9f837ce6f493d1a194b7a7df87e75abe3300adcb937eb37d97cebd4a3b84c39c6f0681a801b63c3b86330bf9050463a395e980afc05db8d88491dce836bd846e13bfc5997a70e20f299a14258181c1431d370990ebd087bcf828d6eb5e9a635275e3c2106acd79c559c08fa3b574933ba1ee97ad37cc5fca61bf2f58534418d5a08d273822eee7be369d627cb63cf33878988b2fdeea9a8ff9febdb50a611ae58b4442fc6675c74867aa0e44d29fdafb1109b9589f391e367fdacb3be54c24f4479ddb5576462f1e5540a16f5fda672027ee93d320811644b9f644e7218879308861a0708406fc4ec73809ff4f804d92794e6609fe53fe4e51a1db8c283d2fc3d78811d11153dbd619b8e8f6d16907a"}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000002b80)) syz_read_part_table(0x1, 0x1, &(0x7f0000002cc0)=[{&(0x7f0000002bc0)="585217e24a1d6391b99a01a5b10bf3462d07b9485cd217e8d67157445bfe3494eab567b60c67b1e1ef191fa402d6488fd4d1b2f65f461e18ec1d532d2abea3c9f6e321bf8937383ad3ef2bda98b6dcebaa529aceffe8c8f79f1f75e65df3fcd4474c420ac96dd7a56e08d67b96c8b854a46075cf8a599307877721fcaad93786ee0996f2323806cd455748df83d72338f0cb71b1cf676f100ebcde284a54539e0fb2dc38af51d1edea990c9f3f49b47526d329c905c284f07d6e82d82e80047dace40e96cb345a5c88067281dbd6c3e907a98e8ea4bcff148efd3112dbc773d8f0da2d0924a8b5aff5a53a60f6a153a7838aeb8b", 0xf4, 0x9c54}]) symlink(&(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40)='./file0\x00') r5 = openat2(r3, &(0x7f0000002d80)='./file0\x00', &(0x7f0000002dc0)={0x527040, 0x101, 0x5e0794dd85445e5e}, 0x18) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000002e00)='%%-', &(0x7f0000002e40)='./file0\x00', r3) getpeername(r4, &(0x7f0000002e80)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000002f00)=0x80) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002f40)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @multicast1}, 0x132, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x8, 0x8001}) 07:26:28 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = dup(r1) faccessat2(r2, &(0x7f0000000040)='./file0\x00', 0x22, 0x180) ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x9]}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x8001}, {r4, 0x3048}], 0x2, &(0x7f0000000200), &(0x7f0000000240)={[0x8]}, 0x8) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0xad) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x5d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x80) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000380)=0x2, &(0x7f00000003c0)=0x2) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000400)={0x0, 0x10001, 0x5, 0x4, 0x3f}) poll(&(0x7f0000000440)=[{r4, 0x800}], 0x1, 0x6) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000480), &(0x7f00000004c0)={'U-', 0x3ff}, 0x16, 0x1) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000500), 0x2) r5 = open_tree(r3, &(0x7f0000000540)='./file0\x00', 0x80800) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000580)=0xfffffff8, &(0x7f00000005c0)=0x4) flistxattr(r4, &(0x7f0000000600)=""/216, 0xd8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) bind$bt_sco(r5, &(0x7f0000000700)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 07:26:28 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20008000) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048081}, 0x8005) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x100, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8b5}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x30000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd20380f}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff3d2b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffeb}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x26b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff6cf1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd1c8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x50) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x6d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000018}, 0x20044000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x98, r0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x29}}}}, [@NL80211_ATTR_VENDOR_DATA={0x77, 0xc5, "1b867410c9054ea97d7221ca1d61dd58b523f85ac37fb54580bcfe2693f37b8162654e8b437c1e1d004945d957c496e25ff2e149b8108586eb0bc11fc9c06373da1a2abceebba0dc0f5481ec7d1cf586f7ffa0d18d7d6fb295c0d6f004bb9d7f5769c88bb6b9460d7817aa25bca56bd04e2bad"}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x22004049) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0xc008805) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xe4, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9d}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xada5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xad}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6ac}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x24}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = accept4(r1, 0x0, &(0x7f0000000a00), 0x80000) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x44f}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048804) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x8011) r4 = open$dir(&(0x7f0000000c40)='./file0\x00', 0x400200, 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x800}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008081) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r1, {r6}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000001000)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x130, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0xe}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb7, 0xac, "d3d1b4b3323a62bf41a44863dc9ce1c9481ae9b5ddd9b530f3d3cece1f2483e0616e6de1c37dcd747337c724b45bf241bfeb6253115cc0681c21768d92827d5ebf6fd09d69f2a3c4a3ff1f793c7603a7fc3bdf8577aa8d699043578e300cdcd46b1c0e56f5d328c0bfd2d496f7a31b8b8534885c59fcde35f44f3b1da28a5d82d27bef547b876c4368db0aea261d6c43766836393eefb9f4efbc267a2a9d5b227fcb570085ceb95e12c5160397f52cd5b1b376"}, @NL80211_ATTR_STA_FLAGS={0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xfff9}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xe}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x2b, 0xbe, "0b875ab51137f849050f69c94f5d585e38673a3ac938746249129c935009be68f27e8022a8cf79"}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 07:26:28 executing program 4: mlockall(0x4) mlockall(0x0) mlockall(0x0) mlockall(0x1) mlockall(0x3) mlockall(0x0) mlockall(0x1) mlockall(0x0) mlockall(0x3) mlockall(0x4) mlockall(0x2) mlockall(0x4) mlockall(0x1) mlockall(0x4) mlockall(0x0) mlockall(0x2) mlockall(0x7) mlockall(0x1) mlockall(0x0) mlockall(0x4) [ 95.434381] audit: type=1400 audit(1738049188.649:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:26:28 executing program 6: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x200000) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{0xa6c4, 0x8, 0x5, 0x81}, {0x400, 0x2, 0x8, 0x1}, {0x0, 0x40, 0x0, 0x3}, {0x6, 0xe7, 0x3, 0xfffffff8}, {0x7, 0x1, 0xab, 0x1ff}, {0x1ff, 0x80, 0x6, 0x401}, {0x0, 0xdb, 0xc3, 0xffffffff}, {0x1, 0x4, 0x2, 0x9}, {0x1f, 0x9, 0x2, 0xff}]}) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r4 = accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000001080)={{r5}, r0, 0x16, @unused=[0x87, 0x1, 0x101, 0x7], @devid=r6}) r7 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000002080), 0x2, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000020c0)='/sys/module/hid_logitech', 0x191000, 0x29) ioctl$BTRFS_IOC_ADD_DEV(r7, 0x5000940a, &(0x7f0000002100)={{r8}, "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"}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000003100)={{0x80, 0x6}, 0x100, './file0\x00'}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003240)='/sys/dev/char', 0x20000, 0x70) bind$unix(r9, &(0x7f0000003280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) fsetxattr$trusted_overlay_redirect(r9, &(0x7f0000003300), &(0x7f0000003340)='./file0\x00', 0x8, 0x2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000003380)) r10 = clone3(&(0x7f0000003900)={0x180000, &(0x7f0000003740), &(0x7f0000003780), &(0x7f00000037c0), {0x1a}, &(0x7f0000003800)=""/38, 0x26, &(0x7f0000003840)=""/117, &(0x7f00000038c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x8, {r1}}, 0x58) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000003980)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000003a80)=0xe8) sendmmsg$unix(r1, &(0x7f0000008880)=[{{&(0x7f00000033c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000036c0)=[{&(0x7f0000003440)="5608d55799dcf299373ac85b72c1d443238edbe9634da90c001c0c274ec8", 0x1e}, {&(0x7f0000003480)="58f65514b13a3f320abdc2530c378f6b4e2c6f71fd5e0ab5a403071775cb58723321ce8ea66ee14d621029043de6897e85e91e520c3b6e9b8a35d42d8a13a642560c558b13cd083aaecd05abf71f906abd2641441b0388deb78cbb0f3c29b6dc66e025cbf9c27acf7c318151d6dbdcbaeaf90f54e22a09b2dd7afdf7706a341c2ef42ea1d8fc583711", 0x89}, {&(0x7f0000003540)="4cb98b35b37b501930d5107a2c18895088062a5ad0fc375b1174cc0bd54ea008614f9ab9eb44a3fd494978c8d92b5d37cca3557a7882a061993c4cc680591222cadaaba338c09ecbaffaa50df6e5e1530b", 0x51}, {&(0x7f00000035c0)="5da4719631d28002f4b007677131a38d771c98416d3be59f092104b8ec546f1854af6999f5ba139da6ac6bb5abe00d43a99a419c8d906653437e407f2dc66f83d79cc46015d9f42dc3537f21740f0b518554d4ef1b3e116543571c6e8185f0f8d13f85b988650c437002281c8b96c04e11eb6e96d7685b3a429e88ad30e523484754641b64f916631bcabed6c8345d3baa58e7fe9e9ef01de3a268d9cc43521830109e4e2b2c10c5024b9ddee1f2d0a8ce20e783b8683dbd58ff815fe344", 0xbe}, {&(0x7f0000003680)}], 0x5, &(0x7f0000008780)=[@cred={{0x1c, 0x1, 0x2, {r10, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r2, r4, r9]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r1, r4]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0xf0, 0x80000}}], 0x1, 0x0) 07:26:28 executing program 7: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x9, 0xfffffff8}, {0xa3, 0x6}, 0xfff}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x2, 0x2c1400) r2 = syz_open_pts(0xffffffffffffffff, 0x80) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x8) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000100)={0x0, 0x3, 0x80000000}) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000500)={{0x8, 0x6}, {0x6, 0x44d8}, 0x9}) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000000580)={0x0, 0x9}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001580), 0x4f6040, 0x0) pidfd_getfd(r1, r5, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000001600)={0x4, 0x80, 0x4, 0x40, 0x1f, 0x81, 0x0, 0xff, 0x1e, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f00000015c0), 0x2}, 0x8, 0x4, 0x7f, 0x6, 0x984e, 0x7, 0x9, 0x0, 0x0, 0x0, 0x91}, r1, 0xd, r1, 0x5) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000001680)=0x101) r7 = syz_open_dev$sg(&(0x7f00000016c0), 0x3ff, 0xe0000) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001700)={r3, 0x68, 0x1, [0x4, 0x9, 0x4, 0x5, 0x9], [0x5, 0xfdce, 0x7, 0x1, 0xfffffffffffff3fc, 0x8000, 0x4, 0xffffffff, 0x6, 0x4, 0x1, 0x0, 0x1000, 0x9f, 0x80, 0x2, 0xffffffffffffffff, 0x3, 0x9, 0x4c42, 0x7, 0x6d, 0x8, 0x9, 0x401, 0x9b, 0x7, 0xfff, 0xf0, 0x7, 0x8d, 0x40, 0x0, 0x800, 0x4, 0x4c, 0x0, 0x1f, 0x7, 0xfff, 0x6, 0x6, 0xd7, 0x7fff, 0xa69, 0x2, 0x4, 0x3, 0x0, 0xa2, 0x3, 0x5, 0x6, 0x20, 0x0, 0x101, 0x2, 0x2, 0x3, 0x2, 0x0, 0x7fffffff, 0x401, 0x8000, 0x2, 0x100000000, 0x3, 0x816, 0x401, 0xff, 0x6, 0x4, 0x5, 0x8558, 0x7fffffff, 0xefa2, 0x6a, 0x2, 0xfff, 0x3, 0xfffffffffffffffb, 0x8, 0x6e70, 0x1, 0x0, 0x8, 0xbcae, 0xbf58, 0x8, 0x97, 0x8, 0xc589, 0x9, 0x0, 0x25, 0xfffffffffffffffe, 0x7, 0x6, 0x1, 0x80, 0x80, 0x80, 0x9, 0x1, 0x0, 0x8001, 0x4, 0x7fffffff, 0x100000001, 0xf023, 0x0, 0x8, 0x5, 0xfffffffffffffffa, 0x2, 0x101, 0x7, 0x7, 0x1, 0x20, 0x3]}) ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f0000001b40)={r8, "4b40d6479c5e28a00b8d452c9ee641d6"}) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002b40), 0x180, 0x0) sendmsg$nl_netfilter(r9, &(0x7f0000003080)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003040)={&(0x7f0000002bc0)={0x468, 0x3, 0x1, 0x201, 0x70bd2c, 0x25dfdbfe, {0x1, 0x0, 0x9}, [@typed={0x2c, 0x33, 0x0, 0x0, @binary="fccccf2f04d21ee62311fd44235eb38036129e23897610091bc18369be301f3ff3c92d4b66ddf49f"}, @nested={0x242, 0x71, 0x0, 0x1, [@typed={0x14, 0x6c, 0x0, 0x0, @ipv6=@private2}, @generic="480f219f280e9aeb97e86eb7700a624b16273cf3b412800f50d37aa7e724268ddb48706e3dcafe5b27ccecf16b6df60707f3b7d14593dd4ff8094df8511b55c92bf58256d4798a80571ff893c44280835a2993a6bd5b7914abe7570ebea072fc3c", @generic="b1666189b1f4", @generic="959cbd9ed0135b4db377bc15018ae0c2e884c989c5257030625a2ba57c2003b1151560d3323561082161f779dbfbc15601adb4ff64212f6d98cf674d47f9595673390170701e5144852114533098dc6a50cca6e836c24400d1a57b564627163d01a7891714c5dfab1e66ed87913c21fe4a5d3f15aa35e538a09ac02c839eaeb40ca97fc10b4f9d34857c", @typed={0xc, 0x65, 0x0, 0x0, @u64=0xfffffffffffffeff}, @typed={0x34, 0x20, 0x0, 0x0, @binary="a94324092c6effb267ad97271dccbb0567d86a3153cb7a6f1066b411fc08b2e1ae18e113cddbad05770a58ba827e20ac"}, @typed={0xc, 0x92, 0x0, 0x0, @u64=0x5}, @generic="37ff2bf08a9aebb7f816ebd21ad1f359885a726d12ee99503e6a780acf7c1f44e168956f0fa118f0e236ddec6938597cdd232ba650f8191adbe540d88592511c9ec3a7fb919f3116c6a6bfd280f36aa1810ff337eaad94ddaf6205b5342e90ee52869f8211204347c8421b3830efc71b8307ea8c97a8e9e6ea3a597e4a8eea5fb5be2b816ecec9bf0affe38581a8305e26cfdb4028ae5532fec5cf12765db886a48790165ebe52ac5e4bc4741913f1f29cd50f5ceddf71b7f1444bd2fb7c38d458cca0adaa168abfda8568ba1f532d24eef1697197cdd71be7fa076b44cc090591897798392ec5663dc8cb3533"]}, @generic="eea4abbf0398201593fd29c80fd38b720ce911e54816263381afa46b37a5a7098d3ba0c127aaad296be26aa56d00707e98faee3609bf7b357766f6490b354cd58b771794cfc227caba3c6241a6742e3f806f7bee9c71af5ecb58dcb24ab06305277fecc8c4bc830239e62cdbc1b040b0653427f96ee360c8673ee5230ec1dd1c3c40b0f156a316f692f545f052fb45f06f55216d0e561b9db4a9ef0a0a6367d341e1", @nested={0x137, 0x5a, 0x0, 0x1, [@typed={0xa3, 0x2b, 0x0, 0x0, @binary="79c3a4b1e0fafaca18cf2f71fda3d1e6886c438acf0725dc03d61534fbf215f14e52c360eb95ce4736c22b509e86a4cea7a6e56a46ec3cc6b0ad780c01209aa22c7050a8b345962118fa391503724d478682fac34ad8ba38375fd13320674a73e6af70986b5dd7d51772d9cc8d46d076a5b8d1d937570fb72563be8ee3b01402d613be70e87080e44d0bea3ebca02a4d587ac424b93ac4e0e3319913f06ea9"}, @generic="d0b5085796f2ecc158736c4d21cae949db538fc26aa3c1dba8561c0bda85641c22aec353cd7737d95c6b97e35e2a0477564c2bdd58a1d38c80035fcb4ec2cd7627ec40676e3c49f497f32347fb0ba8cd0a6265e01258c7a6e0e5a139e79c053b13b4bb368a05c1d9682192cd0ab1f738807d0bea5b17f7b419dc01d55088c792b993bd84edbc006f55715f7f38b278"]}, @typed={0x8, 0x5c, 0x0, 0x0, @u32=0x1}]}, 0x468}, 0x1, 0x0, 0x0, 0x1}, 0x20048051) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000030c0), 0x28000, 0x0) ioctl$EXT4_IOC_GETSTATE(r10, 0x40046629, &(0x7f0000003100)) [ 96.754278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.756262] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.759251] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.761991] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.763965] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.765353] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.776656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.778716] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.780219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.784878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.786782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.788247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.811944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.813323] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.820549] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.821519] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.824727] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.825991] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.829196] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.831280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.840545] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.845785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.852978] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.854524] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.892425] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.901527] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.914767] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.931424] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.956571] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 96.964307] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.979873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.990899] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 97.012652] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 97.015486] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.034615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.047291] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 97.063704] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 97.071349] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 97.072396] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 97.076676] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.078360] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 97.079997] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.117246] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 97.170795] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 97.201457] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 97.271832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 97.289413] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 97.298376] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 98.785009] Bluetooth: hci1: command tx timeout [ 98.848170] Bluetooth: hci0: command tx timeout [ 98.912264] Bluetooth: hci3: command tx timeout [ 98.912840] Bluetooth: hci2: command tx timeout [ 99.040893] Bluetooth: hci4: command tx timeout [ 99.168302] Bluetooth: hci6: command tx timeout [ 99.233340] Bluetooth: hci5: command tx timeout [ 99.424261] Bluetooth: hci7: command tx timeout [ 100.832962] Bluetooth: hci1: command tx timeout [ 100.896330] Bluetooth: hci0: command tx timeout [ 100.960908] Bluetooth: hci3: command tx timeout [ 100.961869] Bluetooth: hci2: command tx timeout [ 101.088336] Bluetooth: hci4: command tx timeout [ 101.218251] Bluetooth: hci6: command tx timeout [ 101.280205] Bluetooth: hci5: command tx timeout [ 101.472293] Bluetooth: hci7: command tx timeout [ 102.881268] Bluetooth: hci1: command tx timeout [ 102.944179] Bluetooth: hci0: command tx timeout [ 103.008296] Bluetooth: hci3: command tx timeout [ 103.008791] Bluetooth: hci2: command tx timeout [ 103.136408] Bluetooth: hci4: command tx timeout [ 103.264824] Bluetooth: hci6: command tx timeout [ 103.328241] Bluetooth: hci5: command tx timeout [ 103.520506] Bluetooth: hci7: command tx timeout [ 104.928362] Bluetooth: hci1: command tx timeout [ 104.992300] Bluetooth: hci0: command tx timeout [ 105.056251] Bluetooth: hci2: command tx timeout [ 105.056878] Bluetooth: hci3: command tx timeout [ 105.184334] Bluetooth: hci4: command tx timeout [ 105.312202] Bluetooth: hci6: command tx timeout [ 105.376223] Bluetooth: hci5: command tx timeout [ 105.569159] Bluetooth: hci7: command tx timeout [ 153.566649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.567500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.856489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.857178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.062332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.062995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.253842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.254786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.559219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.560310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:27:29 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = dup(r1) faccessat2(r2, &(0x7f0000000040)='./file0\x00', 0x22, 0x180) ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x9]}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x8001}, {r4, 0x3048}], 0x2, &(0x7f0000000200), &(0x7f0000000240)={[0x8]}, 0x8) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0xad) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x5d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x80) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000380)=0x2, &(0x7f00000003c0)=0x2) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000400)={0x0, 0x10001, 0x5, 0x4, 0x3f}) poll(&(0x7f0000000440)=[{r4, 0x800}], 0x1, 0x6) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000480), &(0x7f00000004c0)={'U-', 0x3ff}, 0x16, 0x1) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000500), 0x2) r5 = open_tree(r3, &(0x7f0000000540)='./file0\x00', 0x80800) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000580)=0xfffffff8, &(0x7f00000005c0)=0x4) flistxattr(r4, &(0x7f0000000600)=""/216, 0xd8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) bind$bt_sco(r5, &(0x7f0000000700)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) [ 156.605338] [ 156.605568] ====================================================== [ 156.606087] WARNING: possible circular locking dependency detected [ 156.606607] 6.13.0-next-20250124 #1 Not tainted [ 156.606979] ------------------------------------------------------ [ 156.608355] kworker/u8:0/11 is trying to acquire lock: [ 156.609393] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 156.611457] [ 156.611457] but task is already holding lock: [ 156.613032] ffff88803acf0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 156.615021] [ 156.615021] which lock already depends on the new lock. [ 156.615021] [ 156.616865] [ 156.616865] the existing dependency chain (in reverse order) is: [ 156.617476] [ 156.617476] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 156.618039] __mutex_lock+0x13d/0xb50 [ 156.618444] wiphy_register+0x1b2e/0x25d0 [ 156.618872] ieee80211_register_hw+0x23a4/0x3d60 [ 156.619338] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 156.619824] init_mac80211_hwsim+0x389/0x870 [ 156.620274] do_one_initcall+0xf9/0x640 [ 156.620699] kernel_init_freeable+0x53d/0x7a0 [ 156.621155] kernel_init+0x1e/0x2d0 [ 156.621527] ret_from_fork+0x48/0x80 [ 156.621901] ret_from_fork_asm+0x1a/0x30 [ 156.622325] [ 156.622325] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 156.622834] __lock_acquire+0x29fd/0x4580 [ 156.623234] lock_acquire+0x19b/0x520 [ 156.623602] __mutex_lock+0x13d/0xb50 [ 156.623980] unregister_netdevice_many_notify+0x1612/0x1c80 [ 156.624490] unregister_netdevice_queue+0x224/0x2e0 [ 156.624940] _cfg80211_unregister_wdev+0x57b/0x700 [ 156.625396] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 156.625846] ieee80211_unregister_hw+0x55/0x3a0 [ 156.626275] hwsim_exit_net+0x3a0/0x730 [ 156.626654] ops_exit_list+0xb3/0x180 [ 156.627019] cleanup_net+0x546/0xad0 [ 156.627381] process_one_work+0x8ee/0x1a10 [ 156.627796] worker_thread+0x674/0xe70 [ 156.628187] kthread+0x3ab/0x720 [ 156.628541] ret_from_fork+0x48/0x80 [ 156.628890] ret_from_fork_asm+0x1a/0x30 [ 156.629291] [ 156.629291] other info that might help us debug this: [ 156.629291] [ 156.629914] Possible unsafe locking scenario: [ 156.629914] [ 156.630403] CPU0 CPU1 [ 156.630765] ---- ---- [ 156.631126] lock(&rdev->wiphy.mtx); [ 156.631448] lock(rtnl_mutex); [ 156.631910] lock(&rdev->wiphy.mtx); [ 156.632417] lock(rtnl_mutex); [ 156.632705] [ 156.632705] *** DEADLOCK *** [ 156.632705] [ 156.633194] 4 locks held by kworker/u8:0/11: [ 156.633569] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 156.634435] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 156.635270] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 156.636043] #3: ffff88803acf0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 156.636920] [ 156.636920] stack backtrace: [ 156.637301] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1 [ 156.637338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 156.637360] Workqueue: netns cleanup_net [ 156.637400] Call Trace: [ 156.637410] [ 156.637421] dump_stack_lvl+0xca/0x120 [ 156.637478] print_circular_bug+0x47b/0x750 [ 156.637524] check_noncircular+0x2e9/0x3c0 [ 156.637566] ? __pfx_check_noncircular+0x10/0x10 [ 156.637608] ? hlock_class+0x4e/0x130 [ 156.637638] ? mark_lock+0xac/0xed0 [ 156.637679] ? srso_return_thunk+0x5/0x5f [ 156.637734] ? timerqueue_del+0x83/0x150 [ 156.637777] ? lockdep_lock+0xba/0x1b0 [ 156.637835] ? __pfx_lockdep_lock+0x10/0x10 [ 156.637897] __lock_acquire+0x29fd/0x4580 [ 156.637951] ? __pfx___lock_acquire+0x10/0x10 [ 156.637994] ? lock_release+0x20f/0x6f0 [ 156.638038] ? __pfx_lock_release+0x10/0x10 [ 156.638086] lock_acquire+0x19b/0x520 [ 156.638129] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 156.638178] ? __pfx_lock_acquire+0x10/0x10 [ 156.638223] ? srso_return_thunk+0x5/0x5f [ 156.638278] ? lock_release+0x20f/0x6f0 [ 156.638321] ? srso_return_thunk+0x5/0x5f [ 156.638376] ? lock_is_held_type+0x9e/0x120 [ 156.638431] ? srso_return_thunk+0x5/0x5f [ 156.638490] __mutex_lock+0x13d/0xb50 [ 156.638542] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 156.638587] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 156.638633] ? srso_return_thunk+0x5/0x5f [ 156.638688] ? synchronize_rcu_expedited+0x38a/0x420 [ 156.638732] ? __pfx___mutex_lock+0x10/0x10 [ 156.638786] ? __pfx_autoremove_wake_function+0x10/0x10 [ 156.638840] ? srso_return_thunk+0x5/0x5f [ 156.638895] ? kasan_quarantine_put+0x84/0x1e0 [ 156.638956] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 156.638991] ? srso_return_thunk+0x5/0x5f [ 156.639050] unregister_netdevice_many_notify+0x1612/0x1c80 [ 156.639096] ? __virt_addr_valid+0x2e8/0x5d0 [ 156.639149] ? __pfx_lock_release+0x10/0x10 [ 156.639193] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 156.639240] ? find_held_lock+0x2c/0x110 [ 156.639298] ? srso_return_thunk+0x5/0x5f [ 156.639355] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 156.639415] ? srso_return_thunk+0x5/0x5f [ 156.639470] ? lock_release+0x20f/0x6f0 [ 156.639515] ? __pfx_lock_release+0x10/0x10 [ 156.639558] ? srso_return_thunk+0x5/0x5f [ 156.639613] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 156.639660] ? srso_return_thunk+0x5/0x5f [ 156.639720] unregister_netdevice_queue+0x224/0x2e0 [ 156.639764] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 156.639807] ? up_write+0x195/0x520 [ 156.639862] _cfg80211_unregister_wdev+0x57b/0x700 [ 156.639914] ? srso_return_thunk+0x5/0x5f [ 156.639973] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 156.640012] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 156.640050] ? srso_return_thunk+0x5/0x5f [ 156.640105] ? srso_return_thunk+0x5/0x5f [ 156.640160] ? synchronize_rcu+0x1ff/0x260 [ 156.640203] ieee80211_unregister_hw+0x55/0x3a0 [ 156.640247] hwsim_exit_net+0x3a0/0x730 [ 156.640289] ? __pfx_hwsim_exit_net+0x10/0x10 [ 156.640330] ? srso_return_thunk+0x5/0x5f [ 156.640393] ? netdev_run_todo+0x788/0x1040 [ 156.640440] ? srso_return_thunk+0x5/0x5f [ 156.640497] ? __pfx_hwsim_exit_net+0x10/0x10 [ 156.640540] ops_exit_list+0xb3/0x180 [ 156.640582] cleanup_net+0x546/0xad0 [ 156.640627] ? __pfx_cleanup_net+0x10/0x10 [ 156.640680] process_one_work+0x8ee/0x1a10 [ 156.640745] ? __pfx_lock_acquire+0x10/0x10 [ 156.640790] ? __pfx_process_one_work+0x10/0x10 [ 156.640849] ? srso_return_thunk+0x5/0x5f [ 156.640903] ? move_linked_works+0x172/0x270 [ 156.640949] ? srso_return_thunk+0x5/0x5f [ 156.641003] ? assign_work+0x196/0x240 [ 156.641061] worker_thread+0x674/0xe70 [ 156.641119] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 156.641171] ? __pfx_worker_thread+0x10/0x10 [ 156.641231] kthread+0x3ab/0x720 [ 156.641283] ? __pfx_kthread+0x10/0x10 [ 156.641335] ? srso_return_thunk+0x5/0x5f [ 156.641390] ? finish_task_switch.isra.0+0x206/0x840 [ 156.641441] ? __pfx_kthread+0x10/0x10 [ 156.641495] ret_from_fork+0x48/0x80 [ 156.641526] ? __pfx_kthread+0x10/0x10 [ 156.641578] ret_from_fork_asm+0x1a/0x30 [ 156.641645] 07:27:30 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = dup(r1) faccessat2(r2, &(0x7f0000000040)='./file0\x00', 0x22, 0x180) ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x9]}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x8001}, {r4, 0x3048}], 0x2, &(0x7f0000000200), &(0x7f0000000240)={[0x8]}, 0x8) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0xad) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x5d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x80) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000380)=0x2, &(0x7f00000003c0)=0x2) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000400)={0x0, 0x10001, 0x5, 0x4, 0x3f}) poll(&(0x7f0000000440)=[{r4, 0x800}], 0x1, 0x6) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000480), &(0x7f00000004c0)={'U-', 0x3ff}, 0x16, 0x1) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000500), 0x2) r5 = open_tree(r3, &(0x7f0000000540)='./file0\x00', 0x80800) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000580)=0xfffffff8, &(0x7f00000005c0)=0x4) flistxattr(r4, &(0x7f0000000600)=""/216, 0xd8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) bind$bt_sco(r5, &(0x7f0000000700)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 07:27:31 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = dup(r1) faccessat2(r2, &(0x7f0000000040)='./file0\x00', 0x22, 0x180) ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x9]}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x8001}, {r4, 0x3048}], 0x2, &(0x7f0000000200), &(0x7f0000000240)={[0x8]}, 0x8) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0xad) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x5d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x80) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000380)=0x2, &(0x7f00000003c0)=0x2) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000400)={0x0, 0x10001, 0x5, 0x4, 0x3f}) poll(&(0x7f0000000440)=[{r4, 0x800}], 0x1, 0x6) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000480), &(0x7f00000004c0)={'U-', 0x3ff}, 0x16, 0x1) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000500), 0x2) r5 = open_tree(r3, &(0x7f0000000540)='./file0\x00', 0x80800) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000580)=0xfffffff8, &(0x7f00000005c0)=0x4) flistxattr(r4, &(0x7f0000000600)=""/216, 0xd8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) bind$bt_sco(r5, &(0x7f0000000700)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) [ 158.848737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.850628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.852627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.856487] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.858912] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.861333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.906932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.908706] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.910469] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.913714] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.916354] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.917956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 07:27:32 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = dup(r1) faccessat2(r2, &(0x7f0000000040)='./file0\x00', 0x22, 0x180) ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x9]}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x8001}, {r4, 0x3048}], 0x2, &(0x7f0000000200), &(0x7f0000000240)={[0x8]}, 0x8) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0xad) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x5d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x80) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000380)=0x2, &(0x7f00000003c0)=0x2) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000400)={0x0, 0x10001, 0x5, 0x4, 0x3f}) poll(&(0x7f0000000440)=[{r4, 0x800}], 0x1, 0x6) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000480), &(0x7f00000004c0)={'U-', 0x3ff}, 0x16, 0x1) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000500), 0x2) r5 = open_tree(r3, &(0x7f0000000540)='./file0\x00', 0x80800) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000580)=0xfffffff8, &(0x7f00000005c0)=0x4) flistxattr(r4, &(0x7f0000000600)=""/216, 0xd8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) [ 159.086162] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 159.089389] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.094381] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.098338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.101554] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 159.103484] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 159.160578] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.169569] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 159.171596] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 159.172997] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.177493] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 159.178051] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 159.178782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.180154] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 159.183636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.185529] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 159.191977] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 159.193807] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 159.195053] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.201034] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.202686] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 159.204039] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.206782] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 159.210398] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 159.212952] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 159.214578] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 159.221986] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 159.223328] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 159.226291] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 159.243260] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 07:27:33 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = dup(r1) faccessat2(r2, &(0x7f0000000040)='./file0\x00', 0x22, 0x180) ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x9]}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x8001}, {r4, 0x3048}], 0x2, &(0x7f0000000200), &(0x7f0000000240)={[0x8]}, 0x8) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0xad) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x5d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x80) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000380)=0x2, &(0x7f00000003c0)=0x2) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000400)={0x0, 0x10001, 0x5, 0x4, 0x3f}) poll(&(0x7f0000000440)=[{r4, 0x800}], 0x1, 0x6) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000480), &(0x7f00000004c0)={'U-', 0x3ff}, 0x16, 0x1) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000500), 0x2) r5 = open_tree(r3, &(0x7f0000000540)='./file0\x00', 0x80800) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000580)=0xfffffff8, &(0x7f00000005c0)=0x4) flistxattr(r4, &(0x7f0000000600)=""/216, 0xd8) [ 160.930114] Bluetooth: hci2: command tx timeout [ 160.930601] Bluetooth: hci0: command tx timeout [ 161.121116] Bluetooth: hci3: command tx timeout 07:27:34 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = dup(r1) faccessat2(r2, &(0x7f0000000040)='./file0\x00', 0x22, 0x180) ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x9]}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x8001}, {r4, 0x3048}], 0x2, &(0x7f0000000200), &(0x7f0000000240)={[0x8]}, 0x8) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0xad) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x5d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x80) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000380)=0x2, &(0x7f00000003c0)=0x2) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000400)={0x0, 0x10001, 0x5, 0x4, 0x3f}) poll(&(0x7f0000000440)=[{r4, 0x800}], 0x1, 0x6) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000480), &(0x7f00000004c0)={'U-', 0x3ff}, 0x16, 0x1) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000500), 0x2) r5 = open_tree(r3, &(0x7f0000000540)='./file0\x00', 0x80800) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000580)=0xfffffff8, &(0x7f00000005c0)=0x4) [ 161.249130] Bluetooth: hci7: command tx timeout [ 161.313288] Bluetooth: hci4: command tx timeout [ 161.313742] Bluetooth: hci5: command tx timeout [ 161.314214] Bluetooth: hci6: command tx timeout 07:27:35 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = dup(r1) faccessat2(r2, &(0x7f0000000040)='./file0\x00', 0x22, 0x180) ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x9]}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x8001}, {r4, 0x3048}], 0x2, &(0x7f0000000200), &(0x7f0000000240)={[0x8]}, 0x8) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0xad) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x5d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x80) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000380)=0x2, &(0x7f00000003c0)=0x2) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000400)={0x0, 0x10001, 0x5, 0x4, 0x3f}) poll(&(0x7f0000000440)=[{r4, 0x800}], 0x1, 0x6) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000480), &(0x7f00000004c0)={'U-', 0x3ff}, 0x16, 0x1) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000500), 0x2) open_tree(r3, &(0x7f0000000540)='./file0\x00', 0x80800) [ 162.976218] Bluetooth: hci2: command tx timeout [ 162.976694] Bluetooth: hci0: command tx timeout [ 163.169148] Bluetooth: hci3: command tx timeout [ 163.296172] Bluetooth: hci7: command tx timeout [ 163.361245] Bluetooth: hci6: command tx timeout [ 163.361713] Bluetooth: hci5: command tx timeout 07:27:36 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = dup(r1) faccessat2(r2, &(0x7f0000000040)='./file0\x00', 0x22, 0x180) ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x9]}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x8001}, {r4, 0x3048}], 0x2, &(0x7f0000000200), &(0x7f0000000240)={[0x8]}, 0x8) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0xad) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x5d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x80) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000380)=0x2, &(0x7f00000003c0)=0x2) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000400)={0x0, 0x10001, 0x5, 0x4, 0x3f}) poll(&(0x7f0000000440)=[{r4, 0x800}], 0x1, 0x6) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000480), &(0x7f00000004c0)={'U-', 0x3ff}, 0x16, 0x1) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000500), 0x2) [ 163.362189] Bluetooth: hci4: command tx timeout [ 165.025356] Bluetooth: hci0: command tx timeout [ 165.026418] Bluetooth: hci2: command tx timeout [ 165.216184] Bluetooth: hci3: command tx timeout [ 165.344217] Bluetooth: hci7: command tx timeout [ 165.408190] Bluetooth: hci4: command tx timeout [ 165.408989] Bluetooth: hci5: command tx timeout [ 165.409864] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 07:27:30 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88800ecf9bc0 RCX=ffffffff81429a0f RDX=ffff88800ecf9bc0 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000200000 RSP=ffff88800f277db8 R8 =0000000000000000 R9 =ffffed1001dc8780 R10=0000000000200000 R11=0000000000000000 R12=ffff888076ed8ff9 R13=ffffffff88650048 R14=ffff88800ecf9bc0 R15=0000000000000086 RIP=ffffffff81429a11 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffa4e724428 CR3=000000000bd0a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed1001ca5046 R10=0000000000000063 R11=6f6c206863696877 R12=0000000000000063 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c24a4d6470 CR3=000000000d148000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c0000b35d0000000c0005a15c0 XMM04=000000c0006d25c0000000c0006d2400 XMM05=000000c0006d2780000000c0006d2700 XMM06=000000c0006d2a40000000c0006d28c0 XMM07=000000c000888140000000c0006d2b00 XMM08=000000c0006d3ac0000000c0006d3a00 XMM09=000000c0006d3cc0000000c0006d3bc0 XMM10=000000c0008bb840000000c0006d3d80 XMM11=000000c000408100000000c000408040 XMM12=000000c000408640000000c000408200 XMM13=000000c000408b00000000c0004088c0 XMM14=000000c000408d00000000c000408bc0 XMM15=000000c000409140000000c000408d80