Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:58446' (ECDSA) to the list of known hosts. 2025/07/06 02:45:20 fuzzer started 2025/07/06 02:45:20 dialing manager at localhost:42083 syzkaller login: [ 45.234708] cgroup: Unknown subsys name 'net' [ 45.301106] cgroup: Unknown subsys name 'cpuset' [ 45.320112] cgroup: Unknown subsys name 'rlimit' 2025/07/06 02:45:31 syscalls: 201 2025/07/06 02:45:31 code coverage: enabled 2025/07/06 02:45:31 comparison tracing: enabled 2025/07/06 02:45:31 extra coverage: enabled 2025/07/06 02:45:31 setuid sandbox: enabled 2025/07/06 02:45:31 namespace sandbox: enabled 2025/07/06 02:45:31 Android sandbox: enabled 2025/07/06 02:45:31 fault injection: enabled 2025/07/06 02:45:31 leak checking: enabled 2025/07/06 02:45:31 net packet injection: enabled 2025/07/06 02:45:31 net device setup: enabled 2025/07/06 02:45:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/06 02:45:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/06 02:45:31 USB emulation: enabled 2025/07/06 02:45:31 hci packet injection: enabled 2025/07/06 02:45:31 wifi device emulation: enabled 2025/07/06 02:45:31 802.15.4 emulation: enabled 2025/07/06 02:45:31 fetching corpus: 0, signal 0/0 (executing program) 2025/07/06 02:45:31 starting 8 fuzzer processes 02:45:31 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x404400, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x3, 0x7, 0x801, 0x0, 0x0, {0x3}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xba}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x9bc3e4de6703b0db}, 0x4000040) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x104, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0x80}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x19}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4094}, 0x1) r2 = syz_open_dev$vcsu(&(0x7f00000004c0), 0x8, 0x0) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1f8, 0x0, 0x510, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x7b, 0x45, "156dd7af3fd2fdc35d82056d16dade09f62019c2b335639970c5e229acee13d6302d915cd95943626217316b5ecbc282f56c548ed91636359c1f314c06c549abd267c455d309c07fb6090bc2a854825c6cb8e0243d5b8dd45a514fa6db6270030283ebe173035c67e92b019d5e8bf9d86b5434d19e0f31"}, @NL80211_ATTR_TESTDATA={0x71, 0x45, "9d54c69422a940ecd7b69ff6d5364fdbf35795fc0575895cc3b1fadb7c300892048a8f352b826a4c7234a9ed4404db7ad01a662935c52ec60c3f0ad96c6d3fb49b55e7fc2758cd0f5fc6ab495bfd740691b5ca607a18b2e043525fcd8960ecdd15afd67ed7ebb118299ae8118d"}, @NL80211_ATTR_TESTDATA={0x16, 0x45, "9e9ad1a32783f658fad318a2ee6d2abafc0e"}, @NL80211_ATTR_TESTDATA={0xd9, 0x45, "eb8980d5bbc8b910707c157c79b037c5bb7d302e1153fb047cf655979cec9bd3b5a320da550545c9c88e532e2b061a300771fd7383ea775bb7f7119e34443ba2a057dfab1cbda01e4566e7e86aea60aa4f3b6f10ca44101eda487fed6748cfb04c56378dc88a939f5b212558ca1999263724f08e47e43e212f62adfe0ceed8f7f8615dbbaebedc1b039da0671a8ae3772a2e6f727ae1514a02aaf23997899ba9788b20027b5d3da5970b94d91842e859a75445a76862ba6fedbde035d6215823af503b555bec11aede49f888d64a6aab87fadf8ca2"}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) socketpair(0x29, 0x800, 0x1, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0xc080}, 0x895) accept4(0xffffffffffffffff, &(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000980)=0x80, 0x80800) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004}, 0x8004) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x810) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r5, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x40001) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x1) fsmount(r2, 0x0, 0x71) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x4c, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x99}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffc1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x10000080) recvmmsg(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000f40)=@nl=@proc, 0x80, &(0x7f0000001480)=[{&(0x7f0000000fc0)=""/43, 0x2b}, {&(0x7f0000001000)=""/246, 0xf6}, {&(0x7f0000001100)=""/227, 0xe3}, {&(0x7f0000001200)=""/73, 0x49}, {&(0x7f0000001280)=""/237, 0xed}, {&(0x7f0000001380)=""/238, 0xee}], 0x6}, 0x1f}, {{&(0x7f0000001500)=@can, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001580)=""/171, 0xab}, {&(0x7f0000001640)}, {&(0x7f0000001680)=""/168, 0xa8}, {&(0x7f0000001740)=""/204, 0xcc}, {&(0x7f0000001840)=""/84, 0x54}, {&(0x7f00000018c0)=""/114, 0x72}, {&(0x7f0000001940)=""/188, 0xbc}, {&(0x7f0000001a00)=""/228, 0xe4}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/54, 0x36}], 0xa, &(0x7f0000001cc0)=""/4096, 0x1000}, 0xa0}], 0x2, 0x40000000, &(0x7f0000002d40)={0x0, 0x989680}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000002e40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44c04}, 0x20000080) 02:45:32 executing program 3: fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='sync\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000040)=0x3ff, 0x4) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0xa0901, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)=']&#&\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000180)='*\x00', &(0x7f00000001c0)='./file0\x00', r0) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0xd3, 0x10800) io_uring_setup(0x21c7, &(0x7f0000000240)={0x0, 0x700b, 0x4, 0x3, 0xde, 0x0, r1}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x80) r3 = syz_io_uring_setup(0x2384, &(0x7f0000000300)={0x0, 0x11a6, 0x0, 0x0, 0x46, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='sync\x00', 0x0, r3) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000400)={"0f3d2b018a9f15ef13192c8f2bce1005", 0x0, 0x0, {0x2}, {0x2, 0x7fff}, 0x9, [0x6, 0x2a78, 0x7f, 0x40, 0x81, 0x1, 0x612, 0x7fff, 0x800, 0xffffffffffffff81, 0x0, 0x5, 0xa3, 0x1ff, 0x80, 0x1f]}) clock_gettime(0x0, &(0x7f0000007e00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000007c40)=[{{&(0x7f0000003380)=@generic, 0x80, &(0x7f0000004580)=[{&(0x7f0000003400)=""/220, 0xdc}, {&(0x7f0000003500)=""/91, 0x5b}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f00000045c0)=""/15, 0xf}, 0xd626}, {{&(0x7f0000004600)=@phonet, 0x80, &(0x7f0000005940)=[{&(0x7f0000004680)=""/67, 0x43}, {&(0x7f0000004700)=""/204, 0xcc}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/192, 0xc0}, {&(0x7f00000058c0)=""/1, 0x1}, {&(0x7f0000005900)=""/16, 0x10}], 0x6, &(0x7f00000059c0)=""/233, 0xe9}}, {{&(0x7f0000005ac0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000006c40)=[{&(0x7f0000005b40)=""/200, 0xc8}, {&(0x7f0000005c40)=""/4096, 0x1000}], 0x2}, 0x4}, {{&(0x7f0000006c80)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000006d00), 0x0, &(0x7f0000006d40)=""/28, 0x1c}, 0x22e6}, {{0x0, 0x0, &(0x7f0000006fc0)=[{&(0x7f0000006d80)=""/116, 0x74}, {&(0x7f0000006e00)=""/128, 0x80}, {&(0x7f0000006e80)=""/8, 0x8}, {&(0x7f0000006ec0)=""/236, 0xec}], 0x4}, 0x4}, {{&(0x7f0000007000)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000007740)=[{&(0x7f0000007080)=""/158, 0x9e}, {&(0x7f0000007140)=""/176, 0xb0}, {&(0x7f0000007200)=""/70, 0x46}, {&(0x7f0000007280)=""/252, 0xfc}, {&(0x7f0000007380)=""/247, 0xf7}, {&(0x7f0000007480)=""/173, 0xad}, {&(0x7f0000007540)=""/217, 0xd9}, {&(0x7f0000007640)=""/233, 0xe9}], 0x8, &(0x7f00000077c0)=""/195, 0xc3}, 0x40}, {{&(0x7f00000078c0)=@phonet, 0x80, &(0x7f0000007b80)=[{&(0x7f0000007940)=""/135, 0x87}, {&(0x7f0000007a00)=""/144, 0x90}, {&(0x7f0000007ac0)=""/71, 0x47}, {&(0x7f0000007b40)=""/42, 0x2a}], 0x4, &(0x7f0000007bc0)=""/102, 0x66}, 0x10000}], 0x7, 0x40000020, &(0x7f0000007e40)={r4, r5+10000000}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000007f40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007f00)={&(0x7f0000007e80)={0x4c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000007f80), r7) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000008080)={&(0x7f0000007fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000008040)={&(0x7f0000008000)={0x2c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xe}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000050) getitimer(0x2, &(0x7f00000080c0)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000081c0)={&(0x7f0000008100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000008180)={&(0x7f0000008140)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4000804) 02:45:32 executing program 2: r0 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r0, 0x1) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x400100, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) socketpair(0x27, 0x6, 0xffff, &(0x7f0000000100)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) r3 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000140)=r3, 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x2, 0x0) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, r4, &(0x7f00000001c0)="a93b94ff5d23db2135da4e878a29df5ac01e78bb8f1588001d5f", 0x1a, 0xffffffffffffffff, 0x0, 0x1}, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x101081, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000300)={'wg1\x00'}) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000340)=0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000380)=0x1e, 0x4) mmap$binder(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1, 0x11, r4, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', r5, 0x29, 0xf1, 0x8, 0xfffff42a, 0x4, @loopback, @loopback, 0x700, 0x7, 0x4593d8e1, 0x2}}) r6 = syz_open_dev$vcsu(&(0x7f0000000580), 0x4, 0x4000) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xc8, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40045}, 0x24000810) 02:45:32 executing program 0: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x48851) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100b, 0x2}) socketpair(0x2c, 0x1, 0x3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0xd8b90b4376334c0f) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000300)={0x2}) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000340)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x209}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb9b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r3 = syz_open_dev$vcsu(&(0x7f00000004c0), 0x9, 0x280) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r3) r4 = accept4(r3, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000580)=0x80, 0x800) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x25e9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000e0}, 0x1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffbff}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004041}, 0x4004000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000800)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, &(0x7f0000000840)) read$eventfd(r3, &(0x7f0000000880), 0x8) r6 = accept4(r0, &(0x7f00000008c0)=@nl=@proc, &(0x7f0000000940)=0x80, 0x80000) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x0, 0x52a, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c010}, 0x40004) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000bc0)={0x20, 0x0, &(0x7f0000000a80)=[@request_death={0x400c630e, 0x3}, @enter_looper, @dead_binder_done], 0xf3, 0x0, &(0x7f0000000ac0)="793b99b95259f0429991b423964ebbbfce311a423f4ac81244e8994a90c6fc83f6df6c27a98986ed3b7ff94c865fdc0cdd35e029d61cbc35b47cb149414844fe8f674f1a024cb54d7ecc5039a637bf08c7a360f49a5a93c49c6b4e5bed8e20781f7340d2d58ff3cb265281614f2d9a85d873be22300354a0ff46a21c3974b88bb325d1765004cc432ba971f8637d877108caf79f5b3a02ff4d7b1ea67fb2106f002613bc5cf92b3d36a604ce48df61ad3f810df1af1cd8aba3fa6b4ee2a22be7ec0b06d124f5d8b26157438706df736fed7a3b1fbba757ee22bc200b367996d713e9e11e37fa7f55fe1bf9ad2cfe9a1700706c"}) [ 56.080550] audit: type=1400 audit(1751769932.021:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:45:32 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x0) recvmmsg(r0, &(0x7f0000005dc0)=[{{&(0x7f0000000080)=@alg, 0x80, &(0x7f0000003340)=[{&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/142, 0x8e}, {&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/43, 0x2b}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/91, 0x5b}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x8}, 0x7}, {{&(0x7f00000033c0)=@tipc=@id, 0x80, &(0x7f0000003640)=[{&(0x7f0000003440)=""/83, 0x53}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/88, 0x58}, {&(0x7f0000003580)=""/164, 0xa4}], 0x4, &(0x7f0000003680)=""/76, 0x4c}, 0x1}, {{&(0x7f0000003700)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003780)=""/65, 0x41}, {&(0x7f0000003800)=""/61, 0x3d}, {&(0x7f0000003840)=""/91, 0x5b}, {&(0x7f00000038c0)=""/32, 0x20}, {&(0x7f0000003900)=""/97, 0x61}, {&(0x7f0000003980)=""/83, 0x53}], 0x6, &(0x7f0000003a80)=""/179, 0xb3}, 0x8000}, {{&(0x7f0000003b40)=@nfc, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003bc0)=""/30, 0x1e}, {&(0x7f0000003c00)=""/118, 0x76}, {&(0x7f0000003c80)=""/121, 0x79}, {&(0x7f0000003d00)=""/145, 0x91}], 0x4, &(0x7f0000003e00)=""/235, 0xeb}, 0x1ff}, {{&(0x7f0000003f00)=@isdn, 0x80, &(0x7f0000005080)=[{&(0x7f0000003f80)=""/94, 0x5e}, {&(0x7f0000004000)=""/6, 0x6}, {&(0x7f0000004040)=""/35, 0x23}, {&(0x7f0000004080)=""/4096, 0x1000}], 0x4, &(0x7f00000050c0)=""/121, 0x79}, 0x3ff}, {{&(0x7f0000005140)=@ax25={{}, [@bcast, @rose, @remote, @null, @rose, @null, @netrom, @rose]}, 0x80, &(0x7f0000005540)=[{&(0x7f00000051c0)=""/50, 0x32}, {&(0x7f0000005200)=""/182, 0xb6}, {&(0x7f00000052c0)=""/24, 0x18}, {&(0x7f0000005300)=""/190, 0xbe}, {&(0x7f00000053c0)=""/232, 0xe8}, {&(0x7f00000054c0)}, {&(0x7f0000005500)=""/27, 0x1b}], 0x7, &(0x7f00000055c0)=""/117, 0x75}, 0x81}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000005640)=""/97, 0x61}, {&(0x7f00000056c0)=""/128, 0x80}, {&(0x7f0000005740)=""/244, 0xf4}, {&(0x7f0000005840)=""/237, 0xed}, {&(0x7f0000005940)=""/190, 0xbe}, {&(0x7f0000005a00)=""/26, 0x1a}, {&(0x7f0000005a40)=""/34, 0x22}], 0x7, &(0x7f0000005b00)=""/143, 0x8f}, 0xfffff001}, {{&(0x7f0000005bc0)=@xdp, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000005c40)=""/12, 0xc}, {&(0x7f0000005c80)=""/13, 0xd}], 0x2, &(0x7f0000005d00)=""/169, 0xa9}, 0x6bb5}], 0x8, 0x100, &(0x7f0000005fc0)) r1 = socket$netlink(0x10, 0x3, 0x5) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000006100)={&(0x7f0000006000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000060c0)={&(0x7f0000006040)={0x6c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xb11}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x41) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006140)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd_index=0x3, 0x6, 0x7, 0x3, 0x9}, 0xff) r2 = syz_open_dev$vcsu(&(0x7f0000006180), 0x200, 0x400000) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000006280)={&(0x7f00000061c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000006240)={&(0x7f0000006200)={0x28, 0x15, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000062c0), &(0x7f0000006300)) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000006340)={0x6c, @remote, 0x4e20, 0x1, 'dh\x00', 0x4, 0x8, 0x4}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000006380)={0x2f, @broadcast, 0x4e21, 0x2, 'lblc\x00', 0x3a, 0x48, 0x77}, 0x2c) r3 = accept4$inet(r0, &(0x7f00000063c0)={0x2, 0x0, @initdev}, &(0x7f0000006400)=0x10, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000006440)={{0xef, @remote, 0x4e20, 0x2, 'fo\x00', 0x5, 0x9, 0x58}, {@multicast2, 0x4e23, 0x2000, 0x4, 0x3, 0x96}}, 0x44) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000006600)={&(0x7f00000064c0)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f00000065c0)={&(0x7f0000006500)={0xa0, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8799}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6c6}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x11}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x46}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x14008854}, 0x40000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000006700)={&(0x7f0000006640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000066c0)={&(0x7f0000006680)={0x14, 0x3, 0x2, 0x95ed34d67bfba8ae, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000006780), r2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000006880)={&(0x7f0000006740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006840)={&(0x7f00000067c0)={0x44, r5, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x44}}, 0x44000) timerfd_gettime(r2, &(0x7f00000068c0)) accept4(r0, &(0x7f0000006900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000006980)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000006a80)={&(0x7f00000069c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006a40)={&(0x7f0000006a00)={0x2c, r5, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) 02:45:32 executing program 7: r0 = syz_io_uring_setup(0xb, &(0x7f0000000000)={0x0, 0xf159, 0x10, 0x1, 0x12b}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) set_robust_list(&(0x7f0000000200)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)}}, 0x18) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000240)=0x3f, 0x4) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9) socketpair(0x5, 0x3, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x2b38, &(0x7f00000002c0)={0x0, 0xb9e3, 0x4, 0x0, 0x287, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) r5 = syz_io_uring_complete(r3) mmap$binder(&(0x7f0000d85000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x97) timerfd_settime(r5, 0x0, &(0x7f00000003c0)={{0x77359400}}, &(0x7f0000000400)) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000c4e000/0x2000)=nil, 0x2000, 0x8, 0x8010, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, &(0x7f0000000440)="727ca5aef9d75d4608326a70febcf44d48af21189172898f6280afbfe40f402f7f6be9479c6fce3bbbe59bc477d08d1812604212f88f8f2983133c838745f04c90dfefdb5154d5e2a5c6ed7783cbc3aa4be84d8855bf96f37a857e029c4bfdf1e13fad781ffa583226750c873129f4d7261fd213ec35adbae85c307716", 0x8, 0x0, 0x1, {0x1}}, 0x4) r7 = syz_open_dev$vcsu(&(0x7f0000000500), 0x6f, 0x40) timerfd_gettime(r7, &(0x7f0000000540)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f00000006c0)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000700)='./file0\x00', 0xffffffffffffff9c) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000003f40)=[{{&(0x7f0000000740)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/166, 0xa6}, {&(0x7f0000001880)}, {&(0x7f00000018c0)=""/209, 0xd1}], 0x4, &(0x7f0000001a00)=""/185, 0xb9}, 0x2}, {{&(0x7f0000001ac0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/253, 0xfd}], 0x2}, 0x7f}, {{&(0x7f0000002c80)=@x25, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d00)=""/141, 0x8d}], 0x1, &(0x7f0000002e00)=""/85, 0x55}, 0x1}, {{&(0x7f0000002e80)=@isdn, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002f00)=""/4096, 0x1000}], 0x1}, 0x8}], 0x4, 0x0, &(0x7f0000004040)={0x0, 0x3938700}) recvmmsg(r5, &(0x7f000000a1c0)=[{{&(0x7f00000040c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000005480)=[{&(0x7f0000004140)=""/136, 0x88}, {&(0x7f0000004200)=""/36, 0x24}, {&(0x7f0000004240)=""/39, 0x27}, {&(0x7f0000004280)=""/227, 0xe3}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/195, 0xc3}], 0x6, &(0x7f0000005500)=""/4096, 0x1000}, 0x343}, {{&(0x7f0000006500)=@xdp, 0x80, &(0x7f00000076c0)=[{&(0x7f0000006580)=""/104, 0x68}, {&(0x7f0000006600)=""/59, 0x3b}, {&(0x7f0000006640)=""/4096, 0x1000}, {&(0x7f0000007640)=""/74, 0x4a}], 0x4, &(0x7f0000007700)=""/181, 0xb5}, 0x8}, {{&(0x7f00000077c0)=@nfc, 0x80, &(0x7f0000007940)=[{&(0x7f0000007840)}, {&(0x7f0000007880)=""/128, 0x80}, {&(0x7f0000007900)=""/12, 0xc}], 0x3}}, {{&(0x7f0000007980)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000007ec0)=[{&(0x7f0000007a00)=""/245, 0xf5}, {&(0x7f0000007b00)=""/216, 0xd8}, {&(0x7f0000007c00)=""/145, 0x91}, {&(0x7f0000007cc0)=""/26, 0x1a}, {&(0x7f0000007d00)=""/163, 0xa3}, {&(0x7f0000007dc0)=""/195, 0xc3}], 0x6, &(0x7f0000007f40)=""/138, 0x8a}, 0xffff}, {{&(0x7f0000008000)=@x25, 0x80, &(0x7f0000008400)=[{&(0x7f0000008080)=""/37, 0x25}, {&(0x7f00000080c0)=""/249, 0xf9}, {&(0x7f00000081c0)=""/24, 0x18}, {&(0x7f0000008200)=""/28, 0x1c}, {&(0x7f0000008240)=""/186, 0xba}, {&(0x7f0000008300)=""/83, 0x53}, {&(0x7f0000008380)=""/109, 0x6d}], 0x7, &(0x7f0000008480)=""/94, 0x5e}, 0x794}, {{0x0, 0x0, &(0x7f0000009500)=[{&(0x7f0000008500)=""/4096, 0x1000}], 0x1, &(0x7f0000009540)=""/184, 0xb8}, 0x6}, {{&(0x7f0000009600)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000009900)=[{&(0x7f0000009680)=""/197, 0xc5}, {&(0x7f0000009780)=""/37, 0x25}, {&(0x7f00000097c0)=""/49, 0x31}, {&(0x7f0000009800)=""/185, 0xb9}, {&(0x7f00000098c0)=""/36, 0x24}], 0x5}, 0x6}, {{&(0x7f0000009980)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000009dc0)=[{&(0x7f0000009a00)=""/61, 0x3d}, {&(0x7f0000009a40)=""/165, 0xa5}, {&(0x7f0000009b00)=""/155, 0x9b}, {&(0x7f0000009bc0)=""/160, 0xa0}, {&(0x7f0000009c80)=""/162, 0xa2}, {&(0x7f0000009d40)=""/119, 0x77}], 0x6, &(0x7f0000009e40)=""/231, 0xe7}, 0x1}, {{&(0x7f0000009f40)=@can, 0x80, &(0x7f000000a180)=[{&(0x7f0000009fc0)=""/50, 0x32}, {&(0x7f000000a000)=""/253, 0xfd}, {&(0x7f000000a100)=""/105, 0x69}], 0x3}, 0x2}], 0x9, 0x2, &(0x7f000000a400)) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f000000a500)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f000000a4c0)={&(0x7f000000a440)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x810) openat$hwrng(0xffffffffffffff9c, &(0x7f000000a540), 0x40000, 0x0) 02:45:32 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "b341f58d8aa92c424d2796cf2106e234"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000885}, 0x54) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x3200, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xd000010}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r3 = accept4(r1, &(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000380)=0x80, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004050}, 0x4) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x1, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8b2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x29, 0x2, 0x56, 0x80, 0xa2, @local, @remote, 0x20, 0x7, 0x5, 0x5}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x8011) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x8c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x400}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x101}, @NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x63aa0aac}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_QUOTA={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x15218296}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008040}, 0x51) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, r2, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000040}, 0x20044084) r7 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r7, &(0x7f0000006c00)=[{{&(0x7f0000000d00)=@nfc, 0x80, &(0x7f0000003040)=[{&(0x7f0000000d80)=""/68, 0x44}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/100, 0x64}, {&(0x7f0000001ec0)=""/216, 0xd8}, {&(0x7f0000001fc0)=""/53, 0x35}, {&(0x7f0000002000)=""/63, 0x3f}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x8, &(0x7f00000030c0)=""/214, 0xd6}, 0x1ff}, {{&(0x7f00000031c0)=@caif=@util, 0x80, &(0x7f0000003380)=[{&(0x7f0000003240)=""/175, 0xaf}, {&(0x7f0000003300)=""/94, 0x5e}], 0x2, &(0x7f00000033c0)=""/4096, 0x1000}, 0x3ff}, {{&(0x7f00000043c0)=@alg, 0x80, &(0x7f00000045c0)=[{&(0x7f0000004440)=""/224, 0xe0}, {&(0x7f0000004540)=""/104, 0x68}], 0x2, &(0x7f0000004600)=""/46, 0x2e}, 0xcd}, {{&(0x7f0000004640)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005b00)=[{&(0x7f00000046c0)=""/252, 0xfc}, {&(0x7f00000047c0)=""/4096, 0x1000}, {&(0x7f00000057c0)=""/139, 0x8b}, {&(0x7f0000005880)=""/63, 0x3f}, {&(0x7f00000058c0)=""/195, 0xc3}, {&(0x7f00000059c0)=""/235, 0xeb}, {&(0x7f0000005ac0)=""/25, 0x19}], 0x7}, 0x20}, {{&(0x7f0000005b80)=@nfc_llcp, 0x80, &(0x7f0000006180)=[{&(0x7f0000005c00)=""/188, 0xbc}, {&(0x7f0000005cc0)=""/132, 0x84}, {&(0x7f0000005d80)=""/80, 0x50}, {&(0x7f0000005e00)=""/148, 0x94}, {&(0x7f0000005ec0)=""/69, 0x45}, {&(0x7f0000005f40)=""/144, 0x90}, {&(0x7f0000006000)=""/152, 0x98}, {&(0x7f00000060c0)=""/95, 0x5f}, {&(0x7f0000006140)=""/53, 0x35}], 0x9, &(0x7f0000006240)=""/36, 0x24}, 0x7}, {{&(0x7f0000006280)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000064c0)=[{&(0x7f0000006300)=""/246, 0xf6}, {&(0x7f0000006400)=""/156, 0x9c}], 0x2, &(0x7f0000006500)=""/20, 0x14}, 0x8000}, {{&(0x7f0000006540)=@nl=@unspec, 0x80, &(0x7f0000006a40)=[{&(0x7f00000065c0)=""/149, 0x95}, {&(0x7f0000006680)=""/33, 0x21}, {&(0x7f00000066c0)=""/104, 0x68}, {&(0x7f0000006740)=""/141, 0x8d}, {&(0x7f0000006800)=""/124, 0x7c}, {&(0x7f0000006880)=""/42, 0x2a}, {&(0x7f00000068c0)=""/17, 0x11}, {&(0x7f0000006900)=""/8, 0x8}, {&(0x7f0000006940)=""/253, 0xfd}], 0x9, &(0x7f0000006b00)=""/209, 0xd1}, 0x5}], 0x7, 0x41, &(0x7f0000006dc0)) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000006e40), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000006f00)={&(0x7f0000006e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000006ec0)={&(0x7f0000006e80)={0x20, r8, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_FWMARK={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40804) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000007000)={&(0x7f0000006f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006fc0)={&(0x7f0000006f80)={0x2c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x100}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000890) 02:45:32 executing program 4: r0 = syz_io_uring_complete(0x0) r1 = io_uring_setup(0x6f9e, &(0x7f0000000040)={0x0, 0xadf, 0x0, 0x2, 0x137}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='-+%!\x00', 0x0, r1) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x101000) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='-+%!\x00', 0x0, r0) r3 = socket$inet(0x2, 0x4, 0xffffffff) r4 = accept4$inet(r3, &(0x7f0000000140)={0x2, 0x0, @private}, &(0x7f0000000180)=0x10, 0x800) r5 = io_uring_setup(0x20b, &(0x7f00000001c0)={0x0, 0x2dcb, 0x0, 0x3, 0x38e, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x4000010, r5, 0x10000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0xcc, 0x0, &(0x7f0000000400)=[@dead_binder_done, @increfs_done={0x40106308, 0x3}, @release, @decrefs, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@handle={0x73682a85, 0xa}, @flat=@weak_handle={0x77682a85, 0x108b, 0x1}, @flat=@binder={0x73622a85, 0x100}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x1000}, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/20, 0x14, 0x2, 0x21}, @fda={0x66646185, 0x1, 0x0, 0x40}, @fd={0x66642a85, 0x0, r3}}, &(0x7f00000003c0)={0x0, 0x28, 0x48}}}], 0xee, 0x0, &(0x7f0000000500)="a6f66c41f942665943cc85a16dfbd73b9fc5d140a103d745147023ecb037c24081c097e7be02577f9b2650c8ffb88962f5d80ebedf594b6c6f69dcba22a6454da8315310b781215002fc725b2f157eed2a88728d6fe5b3ef1b5936de42d65b7f19e02cca1cdebfa75af45473434e9cfa805321447690c7c8bd5ac73bc04d82b204d0f0354f9217aea7ccee4564f0bd317c848a7e3f62a37b7ff71530fbf4e095fc23eb1244a2fb92dee461dccbf186690b12c635622eda539537846d3120b209d1a5653fba0ed3de21802d21b3c5d0a36ece7b543b99e309944b7d86bee50abfc5250d8b6d37b18399d4a81a3c8e"}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000640)=0x19, 0x4) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x8000, 0x0) timerfd_gettime(r6, &(0x7f00000006c0)) r7 = socket$inet(0x2, 0x800, 0x401) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000000700)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "3c8d3944d8239d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000001700)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000001b00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001d00)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "01949aab5e20db"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f000006bf00)={0x5, [{}, {}, {0x0, r8}, {r9}, {}, {r10}, {}, {r11, r12}], 0x2, "02da54381715ff"}) [ 57.255496] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.258004] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.262930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.267393] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.271169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.320395] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.324476] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.325970] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.329608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.332992] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.336071] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.340672] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.342210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.347486] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.354837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.390833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.392794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.394522] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.398812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.403993] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.438371] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.445139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.447090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.458452] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 57.464448] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.467537] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.469087] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 57.470910] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 57.472804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 57.478246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 57.485226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 57.496190] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 57.503658] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 57.511491] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 57.520502] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 57.569966] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 57.578552] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 57.610426] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 57.647823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 57.655090] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 57.939370] [ 57.939996] ============================= [ 57.940942] WARNING: suspicious RCU usage [ 57.941856] 6.16.0-rc4-next-20250704 #1 Not tainted [ 57.944132] ----------------------------- [ 57.945414] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 57.948553] [ 57.948553] other info that might help us debug this: [ 57.948553] [ 57.951444] [ 57.951444] rcu_scheduler_active = 2, debug_locks = 1 [ 57.952459] 3 locks held by syz-executor.5/284: [ 57.953139] #0: ffff88800f48e400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 57.954474] #1: ffff8880092be618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 57.955957] #2: ffff888018754248 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 57.957321] [ 57.957321] stack backtrace: [ 57.957979] CPU: 0 UID: 0 PID: 284 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250704 #1 PREEMPT(voluntary) [ 57.958007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 57.958019] Call Trace: [ 57.958027] [ 57.958036] dump_stack_lvl+0xfa/0x120 [ 57.958063] lockdep_rcu_suspicious+0x152/0x1c0 [ 57.958090] proc_sys_compare+0x28a/0x340 [ 57.958111] ? __pfx_proc_sys_compare+0x10/0x10 [ 57.958133] d_same_name+0x229/0x2e0 [ 57.958168] d_alloc_parallel+0x7c1/0x1330 [ 57.958203] ? __pfx_d_alloc_parallel+0x10/0x10 [ 57.958229] ? __pfx_default_wake_function+0x10/0x10 [ 57.958260] ? __d_lookup+0x25f/0x490 [ 57.958300] lookup_open.isra.0+0x64f/0x1530 [ 57.958332] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 57.958374] ? mnt_get_write_access+0x81/0x2d0 [ 57.958394] ? mnt_get_write_access+0x1ea/0x2d0 [ 57.958421] path_openat+0xc26/0x2880 [ 57.958459] ? __lock_acquire+0x694/0x1b70 [ 57.958481] ? __pfx_path_openat+0x10/0x10 [ 57.958519] do_filp_open+0x1e8/0x450 [ 57.958548] ? __pfx_do_filp_open+0x10/0x10 [ 57.958588] ? find_held_lock+0x2b/0x80 [ 57.958616] ? alloc_fd+0x2c1/0x560 [ 57.958642] ? lock_release+0xc8/0x290 [ 57.958669] ? alloc_fd+0x2c1/0x560 [ 57.958704] do_sys_openat2+0x104/0x1b0 [ 57.958730] ? __pfx_do_sys_openat2+0x10/0x10 [ 57.958757] ? rcu_read_unlock+0x2d/0xb0 [ 57.958779] ? lock_release+0xc8/0x290 [ 57.958806] __x64_sys_openat+0x142/0x200 [ 57.958830] ? __pfx___x64_sys_openat+0x10/0x10 [ 57.958860] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 57.958913] do_syscall_64+0xbf/0x360 [ 57.958950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.958979] RIP: 0033:0x7f264ae00a04 [ 57.958995] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 57.959015] RSP: 002b:00007ffed178a8c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 57.959035] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f264ae00a04 [ 57.959048] RDX: 0000000000080001 RSI: 00007f264aea6f61 RDI: 00000000ffffff9c [ 57.959061] RBP: 00007f264aea6f61 R08: 0000000000000000 R09: 00007ffed178a8b0 [ 57.959074] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 57.959087] R13: 00007ffed178a960 R14: 0000000000000000 R15: 00000000000000f8 [ 57.959115] [ 59.347713] Bluetooth: hci0: command tx timeout [ 59.410525] Bluetooth: hci2: command tx timeout [ 59.410563] Bluetooth: hci1: command tx timeout [ 59.475626] Bluetooth: hci3: command tx timeout [ 59.538461] Bluetooth: hci4: command tx timeout [ 59.602397] Bluetooth: hci6: command tx timeout [ 59.602419] Bluetooth: hci5: command tx timeout [ 59.730644] Bluetooth: hci7: command tx timeout [ 61.394950] Bluetooth: hci0: command tx timeout [ 61.458438] Bluetooth: hci1: command tx timeout [ 61.458866] Bluetooth: hci2: command tx timeout [ 61.522498] Bluetooth: hci3: command tx timeout [ 61.586441] Bluetooth: hci4: command tx timeout [ 61.650509] Bluetooth: hci6: command tx timeout [ 61.650543] Bluetooth: hci5: command tx timeout [ 61.779115] Bluetooth: hci7: command tx timeout [ 63.442386] Bluetooth: hci0: command tx timeout [ 63.507387] Bluetooth: hci2: command tx timeout [ 63.507931] Bluetooth: hci1: command tx timeout [ 63.570482] Bluetooth: hci3: command tx timeout [ 63.634898] Bluetooth: hci4: command tx timeout [ 63.698348] Bluetooth: hci5: command tx timeout [ 63.698829] Bluetooth: hci6: command tx timeout [ 63.826400] Bluetooth: hci7: command tx timeout [ 65.490453] Bluetooth: hci0: command tx timeout [ 65.554508] Bluetooth: hci1: command tx timeout [ 65.555991] Bluetooth: hci2: command tx timeout [ 65.618336] Bluetooth: hci3: command tx timeout [ 65.682361] Bluetooth: hci4: command tx timeout [ 65.746364] Bluetooth: hci5: command tx timeout [ 65.746416] Bluetooth: hci6: command tx timeout [ 65.874572] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 02:45:34 Registers: info registers vcpu 0 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b5a45 RDI=ffffffff8871dee0 RBP=ffffffff8871dea0 RSP=ffff88802faff2b8 R8 =0000000000000000 R9 =ffffed10016e5046 R10=0000000000000065 R11=0000000000000001 R12=0000000000000065 R13=0000000000000010 R14=ffffffff8871dea0 R15=ffffffff828b5a30 RIP=ffffffff828b5a9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557e3d3400 00000000 00000000 GS =0000 ffff8880e55f3000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f58372038e0 CR3=00000000318dc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff878b58c8 RBX=ffff8880349b9b80 RCX=41f228329cd5e128 RDX=00000000be62fc80 RSI=00000000a7dde039 RDI=ffff8880349ba600 RBP=ffff8880349ba5d8 RSP=ffff888034a6f880 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff8880349ba600 R13=00000000000009d3 R14=0000000000000001 R15=41f228329cd5e128 RIP=ffffffff815199f6 RFL=00000013 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56f3000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5ff702dde0 CR3=000000001c8d0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000