Warning: Permanently added '[localhost]:9104' (ECDSA) to the list of known hosts. 2025/07/06 13:06:25 fuzzer started 2025/07/06 13:06:25 dialing manager at localhost:42083 syzkaller login: [ 59.554210] cgroup: Unknown subsys name 'net' [ 59.614538] cgroup: Unknown subsys name 'cpuset' [ 59.627526] cgroup: Unknown subsys name 'rlimit' 2025/07/06 13:06:36 syscalls: 208 2025/07/06 13:06:36 code coverage: enabled 2025/07/06 13:06:36 comparison tracing: enabled 2025/07/06 13:06:36 extra coverage: enabled 2025/07/06 13:06:36 setuid sandbox: enabled 2025/07/06 13:06:36 namespace sandbox: enabled 2025/07/06 13:06:36 Android sandbox: enabled 2025/07/06 13:06:36 fault injection: enabled 2025/07/06 13:06:36 leak checking: enabled 2025/07/06 13:06:36 net packet injection: enabled 2025/07/06 13:06:36 net device setup: enabled 2025/07/06 13:06:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/06 13:06:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/06 13:06:36 USB emulation: enabled 2025/07/06 13:06:36 hci packet injection: enabled 2025/07/06 13:06:36 wifi device emulation: enabled 2025/07/06 13:06:36 802.15.4 emulation: enabled 2025/07/06 13:06:36 fetching corpus: 0, signal 0/0 (executing program) 2025/07/06 13:06:37 starting 8 fuzzer processes 13:06:37 executing program 0: r0 = syz_io_uring_setup(0x1e24, &(0x7f0000000000)={0x0, 0x2930, 0x4, 0x1, 0x33a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000100)=0x1, 0x0, 0x4) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x50) r2 = io_uring_setup(0x5265, &(0x7f0000000240)={0x0, 0x1067, 0x4, 0x2, 0xac, 0x0, r0}) r3 = io_uring_setup(0x7701, &(0x7f00000002c0)={0x0, 0x31f5, 0x10, 0x3, 0x1e1, 0x0, r2}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x68}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4044805) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x110, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x4ec4, &(0x7f0000000440)={0x0, 0x648a, 0x0, 0x0, 0x397, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x3, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x400c041) r4 = syz_io_uring_setup(0x5aa9, &(0x7f0000000680)={0x0, 0xbf12, 0x0, 0x2, 0x349, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) syz_io_uring_setup(0x6767, &(0x7f0000000780)={0x0, 0xb171, 0x2, 0x3, 0x27f, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000800)=0x0, &(0x7f0000000840)) syz_io_uring_setup(0x2da5, &(0x7f0000000880)={0x0, 0x7cb4, 0x4, 0x3, 0x3a6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000980)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x794) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8091}, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x114, &(0x7f0000000ac0), 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x10000000) syz_io_uring_setup(0x9fb, &(0x7f0000000b00)={0x0, 0x957c, 0x2, 0x2, 0x35f, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000006, 0x8010, r3, 0x10000000) r11 = syz_io_uring_complete(r7) syz_io_uring_submit(r9, r10, &(0x7f0000000d40)=@IORING_OP_STATX={0x15, 0x5, 0x0, r11, &(0x7f0000000c00), &(0x7f0000000d00)='./file0\x00', 0x40, 0x4000}, 0x7fffffff) 13:06:37 executing program 1: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x40a, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x74}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40001) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa8, r0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40008c0}, 0x20000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x10c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x3a}}}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6a8e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @chandef_params, @NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xd}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x8}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xd}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x7}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x13}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x5}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x48085}, 0xc0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) syz_genetlink_get_family_id$net_dm(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, r0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000d00)={'syztnl2\x00', &(0x7f0000000c80)={'sit0\x00', 0x0, 0x2f, 0x1, 0x9d, 0x6, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x17, 0x10, 0x9, 0x9}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x95c023d1b8991e93}, 0xc, &(0x7f0000001100)={&(0x7f0000000f40)={0x198, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x808}, 0x4000802) 13:06:37 executing program 2: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0xff, 0xff, 0x9, 0x20, @mcast2, @dev={0xfe, 0x80, '\x00', 0x26}, 0x20, 0x7800, 0x4, 0x1000}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r0, 0x0, 0xc1, 0x0, 0x7f, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x700, 0xabee, 0x5}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x2, 0x4000, @fd_index=0x2, 0x4, &(0x7f0000000180)="0e09b3c57470e83b54194d34b25c446485e205df70094a8880068e79989ae29e11b79131ce409b36ab33cf4590e6083beada9347814874035ccb847e32be60ea7a0e1553c539d2a2b9b54f220f256c53267d45b1aeddb2736ecc408c796d1417ca8877d65786158bc414f519d9af060c501dca5f01d2c7563a307fb2d669652883fd4d1d8a2ca1f7dc0b927ee592c68c59bf46772b362934ce30e8928249d7426295858ac8fc2c8e775d920053e364cf59de60cc97ebd7045613", 0xba, 0x18, 0x1}, 0x9) r2 = syz_io_uring_complete(0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@delpolicy={0x50, 0x14, 0x404, 0x70bd2b, 0x25dfdbfb, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 0x8, 0x0, 0x2, 0x0, 0x80, 0xaad9d8f1f45d5000, r1, 0xee00}, 0x6e6bbc, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x24008814) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000400)={0x0, @l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x2}, @vsock={0x28, 0x0, 0x0, @my=0x1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x40, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)='veth1_to_team\x00', 0x1ff, 0x188, 0x7}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x29, 0xfc, 0x1, 0x0, 0x58, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7800, 0x4, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000580)={'gre0\x00', r1, 0x40, 0x8000, 0x7fffffff, 0x3, {{0x27, 0x4, 0x2, 0x33, 0x9c, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast2, @remote, {[@timestamp_addr={0x44, 0x44, 0x3e, 0x1, 0x7, [{@rand_addr=0x64010102, 0x2}, {@private=0xa010101, 0x5}, {@multicast2, 0x800}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x2}, {@loopback, 0xfffffffc}, {@local, 0x8}, {@multicast1, 0x3}, {@local, 0xc6d}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xe4, [@rand_addr=0x64010100, @multicast2, @remote, @empty]}, @timestamp_addr={0x44, 0xc, 0xff, 0x1, 0xf, [{@empty, 0x5}]}, @timestamp_prespec={0x44, 0x1c, 0x16, 0x3, 0x2, [{@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xfc2c}, {@loopback}]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl0\x00', r0, 0x4, 0x8, 0x1, 0x2a04, 0x4, @loopback, @mcast1, 0x8000, 0x7800, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6_vti0\x00', r0, 0x0, 0x3, 0xf8, 0x35, 0x8, @mcast1, @remote, 0x8, 0x0, 0x80000001, 0xee22}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', r0, 0x2f, 0x1, 0x7, 0x6, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x8, 0x5a, 0x200}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x40, 0x6, 0x38, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x80, 0x8040, 0x7, 0x5}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001180)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f00000009c0)={0x760, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x1c0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x3, 0x3, 0x6, 0x708}, {0xf722, 0x8, 0x3, 0x7fffffff}, {0x2, 0xda, 0xfc, 0x5}, {0x101, 0x5, 0x8, 0x3}, {0x3ff, 0x1, 0x0, 0xb57}, {0xe48, 0x1, 0x8, 0x3}, {0xffff, 0x5, 0x9, 0x2}, {0x9, 0x20, 0x1, 0x8}, {0xfff8, 0x5, 0x0, 0x2}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x315, 0xeb, 0x5, 0x4}, {0x8, 0x4, 0x1, 0x35}, {0x6, 0x7e, 0xc8, 0x1}, {0xf5a2, 0x4, 0x8, 0xc8c}]}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0x1, 0x81, 0x7ff}, {0x400, 0xe0, 0x7f, 0x4}, {0xd87e, 0x1, 0x6, 0x2}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6b8ae268}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r0}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xeb92}}}]}}, {{0x8, 0x1, r1}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9a}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r0}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}]}, 0x760}, 0x1, 0x0, 0x0, 0x8000}, 0xc004) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000001200)={0x0, @isdn={0x22, 0x6, 0x8, 0x3, 0x80}, @qipcrtr={0x2a, 0x1, 0x2}, @nfc={0x27, 0x1, 0x2, 0x3}, 0x7, 0x0, 0x0, 0x0, 0x400, &(0x7f00000011c0)='netpci0\x00', 0xd1, 0x1, 0xe3}) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x84, 0x13, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0xc800}, 0x14044050) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000001680)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001640)={&(0x7f0000001540)={0xe0, r12, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9a}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000c4}, 0x40044015) 13:06:37 executing program 3: r0 = socket(0x28, 0xa, 0x8) connect$packet(r0, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0xfd, 0x18, 0x1, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x8000, 0x7, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x40, 0x6, 0x5, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8000, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x39, 0x4, 0x5, 0x0, 0x12, @loopback, @mcast1, 0x80, 0x80, 0x1d74a17f, 0x7fff}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x6, 0x9, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x40, 0x7800, 0xf5e, 0x200}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x27, 0x5, 0x30, @remote, @private2, 0x10, 0x1, 0x6df, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x80, 0x3, 0x8, @empty, @private2, 0x40, 0x7, 0xddc, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x0, 0x7f, 0x0, 0x0, 0x20, @mcast2, @local, 0x8, 0x20, 0x8, 0x80}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000700)={0x6a4, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb98c}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffe1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x157def91}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x101, 0x40, 0xc0, 0x8344}, {0x4, 0xf7, 0x9, 0x9}, {0x2, 0x8d, 0x5, 0xfffffffb}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7ff, 0x8, 0xff, 0x4d2}, {0x89b, 0x7, 0x40, 0xaa}, {0x0, 0x7f, 0x8, 0xfffff944}, {0x2, 0x7, 0x1}, {0x1, 0xff, 0x40, 0x3fa6}, {0x1, 0x7, 0x8}, {0x3, 0x6, 0x20, 0x400}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x100}, 0x840) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000e80), r0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000f40)={'ip6gre0\x00', &(0x7f0000000ec0)={'sit0\x00', r7, 0x2f, 0x31, 0x4, 0x7, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x80, 0xffffff00, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001000)={'syztnl0\x00', &(0x7f0000000f80)={'syztnl0\x00', r5, 0x4, 0x80, 0xfe, 0x7fff, 0x68, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x10, 0x4, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001180)={'ip6_vti0\x00', &(0x7f0000001100)={'ip6_vti0\x00', r9, 0x2f, 0x0, 0x4, 0x0, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}, @private2, 0x1, 0x10, 0xb52, 0xfc}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001240)={'ip6_vti0\x00', &(0x7f00000011c0)={'syztnl0\x00', r9, 0x4, 0x7, 0x2b, 0x8000, 0x8, @mcast1, @local, 0x7, 0x8, 0x140c1181, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000001300)={'syztnl2\x00', &(0x7f0000001280)={'ip6tnl0\x00', r5, 0x4, 0x0, 0x2, 0x7, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x12}, 0x1, 0x20, 0x85ff, 0x6}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001b80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001580)={0x5b8, r11, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}]}}, {{0x8, 0x1, r3}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x65}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}]}}, {{0x8, 0x1, r16}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}]}}]}, 0x5b8}, 0x1, 0x0, 0x0, 0xc000}, 0x24000004) [ 71.206431] audit: type=1400 audit(1751807197.958:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:06:37 executing program 4: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffc, &(0x7f0000000000)='.dead\x00', &(0x7f0000000040)='/:%\x9c\x00') keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8, 0x1) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000100)='.dead\x00', &(0x7f0000000140)={'syz', 0x2}, r1) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "9b1fddbb54c02bb7d61e3f51692f84c4e532fa1c06b615bb8c46e8c7745c3358f5652434a9fccb334a2aca64f86219996608dfb3de29e404e844c954872dfed4", 0x3d}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x1) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$clear(0x7, r3) r4 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r3, r4) r5 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "4b3c7c1a583b11a264836bf68afc80be956d396bed5022b88f51fd139a9aed576eb22d7910b8f37ef0954f473675c3a14d48fba5b7cac3940786162d7979d52b", 0x2c}, 0x48, r2) keyctl$KEYCTL_MOVE(0x1e, r4, r5, 0xfffffffffffffffd, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "ad076acbbc40b270b70f74d33929cd663d9c9977259cd812079fdb0f3db754ac51e7ddb4877c2b8a3522ba717e179ae29c2d994fdb97937ee38c644858c152f7", 0x1c}, 0x48, r0) keyctl$unlink(0x9, r6, 0x0) r7 = getuid() r8 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc4}, &(0x7f0000000680)={0x0, "418c995f2a8f9c4b07a7c2e354588cc0dc4ed8bdf90bb499170aa78dd618b6ea8642eda7941ec50892d01982dba0273c2ac1a94b015086b8d34f0a82de582082", 0x22}, 0x48, r5) keyctl$get_persistent(0x16, r7, r8) request_key(&(0x7f0000000700)='blacklist\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)='\xf4-\x00', 0x0) 13:06:37 executing program 5: sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x5}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008840}, 0x40) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x1, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x20008010) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x42, 0x60}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400}, 0x2e004100) r1 = socket(0x28, 0x800, 0x6) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) socketpair(0xa, 0x6, 0x9, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x200, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'sit0\x00', 0x0, 0x2f, 0x3, 0x81, 0xffffffff, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x10, 0x10, 0x8, 0x7cac}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000980)={0x0, @xdp={0x2c, 0x4, 0x0, 0x6}, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, @isdn={0x22, 0x3, 0x7f, 0x9, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000940)='batadv_slave_0\x00', 0x9b, 0x4, 0x6}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001280)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000a00)={0x840, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x40, 0x3, 0x80}, {0xff8c, 0x9, 0x6, 0x1}, {0x9, 0xfa, 0x40, 0x7ff}, {0xed3, 0x80, 0x9, 0x5}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x20, 0x4, 0x8, 0x8001}, {0x0, 0x5, 0x7f, 0x200}, {0x4, 0x6, 0x9, 0x80000000}, {0x7, 0x9c, 0x1, 0x3}, {0x392, 0x78, 0x8, 0x3}, {0x1f, 0x80, 0x3}, {0x1f, 0xb8, 0x1, 0x80000001}]}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x6, 0x2, 0x2, 0x5}, {0x7, 0x9, 0x9, 0xffff17a9}, {0x3, 0xca, 0x81, 0x7ff}, {0x8, 0x3, 0x9, 0x5}, {0x3, 0x7f, 0x1, 0x1}, {0x1, 0x0, 0x20, 0x71ba}, {0xffff, 0x40, 0x1c, 0x80000001}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7, 0x0, 0x3, 0x10000}, {0x8, 0x7, 0x8}, {0x1000, 0x81, 0xe, 0x2}, {0x5f8, 0xda, 0x1f, 0xbe12}, {0x1, 0x5, 0x4, 0x8}, {0x1000, 0x4b, 0xff, 0xfffffe01}, {0x0, 0x20}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000012c0), r2) socket$inet6(0xa, 0x800, 0x8) syz_80211_inject_frame(&(0x7f0000001300)=@broadcast, &(0x7f0000001340)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x5}, @device_b, @device_b, @broadcast, {0x5, 0x7}}, @random="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"}, 0x84b) syz_genetlink_get_family_id$nl802154(&(0x7f0000001bc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x64, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="738d4ef60a0b5ff2fd237fa678b505a822547405a75edc41"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfe00}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40014) 13:06:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4080) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x5, 0x401, 0x4, @remote, @local, 0x1, 0x8787, 0x7, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x80, 0x7800, 0x9, 0x9, {{0x6, 0x4, 0x2, 0x4, 0x18, 0x67, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x14}, {[@noop]}}}}}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, @xdp={0x2c, 0x9, 0x0, 0x4}, @hci={0x1f, 0x3, 0x3}, @ethernet={0x306, @multicast}, 0x1f, 0x0, 0x0, 0x0, 0x3ff, &(0x7f0000000380)='tunl0\x00', 0xa7, 0x0, 0x800}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0xd5, 0xc0db, 0x61, @loopback, @dev={0xfe, 0x80, '\x00', 0x32}, 0x8, 0x1, 0x9, 0xfffffffa}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xe0, 0x0, 0x700, 0x0, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x4048884) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xf0, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0xbc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0xf0}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x5800200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0xc0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x7, 0x5, 0x0, 0x0, {0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800c081) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xec, 0x0, 0x9, 0xa00, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x14, 0x4, @remote}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x88, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x4}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xbd}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40420c1}, 0x10) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000d40), 0x100, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000d80)={{0x1, 0x2, 0x1, 0x3, 0x6}}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000dc0)={0x0, 0x1, 0x6, @local}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x24) 13:06:38 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x148, 0xa, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0x84, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xdb}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x401}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1f}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, ']\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x970}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7ff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xfd}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x10001}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c1) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffffc}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x890}, 0x48090) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff90, 0x73}}}}, [@crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10, r1, 0x10000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x61885010}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008090) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000800)={&(0x7f00000005c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x144, r2, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x124, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x3}, 0x0, 0x0, @broadcast, 0x7fffffff, 0x3, 0xffffd98a}}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x0, 0x9, @device_b, 0x6, 0x1f, 0x3ff}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x3f, 0x60}}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0x9d, 0x80}}, @prep={0x83, 0x25, @ext={{}, 0x1d, 0x1e, @broadcast, 0x200, @device_b, 0x343, 0x800, @broadcast, 0x5}}, @erp={0x2a, 0x1, {0x1}}, @random={0x2, 0xa8, "b0b2cce883159a89232ed28a921782a6bc073ca54e6f75d91326947108d4362c3b195f7d16f6141afb322986912132d43b5ba6bf325a2ad486342e5254b6ebf5179304139fae5ce4069f11008ca46754a495cd2c7a775b55d22a8520fb9c1abc72ccef212dd4221a7189d117c8123940d9c08e295bf55d085325b5df4cb88442dda386e17a71d078b8501c2456501dfd4e0caaaeefe78a2256382a2c4c73ff24a6b0985575e5624f"}, @cf={0x4, 0x6, {0x1f, 0x7, 0x4, 0x1ff}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x144}}, 0x24000080) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xe8, 0x7, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xa3, 0x7, 0x1, 0x0, "6129aeb885f5b2447b57c3b87326028d7ea2507c8b3911c08a682d350f99b1cd59ebbcf0c22e98c70606f89fe5add65ed84baf3a63331925a242416d1411796aca934fb078cebb5cfeb6ab51cd4eddb46f5a30f2d52b03a04c7a85db9cec059a3f82755bcfe8f06ad8373fc37e58214d1e38311b9294393568c263c552f9e4ab091f1ceb374c48f48781b824e948828da1fbffe4d4c16887885e2abff74d6f"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1c0c4}, 0x4004020) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000a80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0xc4}, 0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r1) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2020220}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x81, 0x68}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x8040) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x78, 0x4, 0xa, 0x201, 0x0, 0x0, {0x86d42a38290ff48f, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fea}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r4 = socket$inet6(0xa, 0x800, 0xffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000e40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000f00)={'ip6tnl0\x00', &(0x7f0000000e80)={'sit0\x00', r5, 0x4, 0xd9, 0x80, 0xfff, 0x40, @dev={0xfe, 0x80, '\x00', 0x2d}, @remote, 0x10, 0x80, 0x1, 0x4}}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffff01, 0x23}}}}, ["", "", "", "", "", "", ""]}, 0x20}}, 0x4010) [ 72.540242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.543864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.545329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.554811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.556474] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.557922] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.560308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.563093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.563473] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.566286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.567342] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.569004] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.572704] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.572811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.574705] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.578836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.581089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.594537] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.597757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.608746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.613566] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.616633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.620880] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.623375] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 72.626162] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 72.627785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.628869] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 72.636680] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.641610] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.643417] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.646020] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 72.647580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.648883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.649241] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.652469] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 72.653558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.660351] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.673227] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.675837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.680956] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.744604] [ 72.745408] ============================= [ 72.746251] WARNING: suspicious RCU usage [ 72.747025] 6.16.0-rc4-next-20250704 #1 Not tainted [ 72.749164] ----------------------------- [ 72.753834] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 72.757163] [ 72.757163] other info that might help us debug this: [ 72.757163] [ 72.758540] [ 72.758540] rcu_scheduler_active = 2, debug_locks = 1 [ 72.759641] 3 locks held by syz-executor.1/285: [ 72.760445] #0: ffff88800fa06400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 72.761960] #1: ffff88800b8d2618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 72.763603] #2: ffff888019bd0538 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 72.765139] [ 72.765139] stack backtrace: [ 72.765885] CPU: 0 UID: 0 PID: 285 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250704 #1 PREEMPT(voluntary) [ 72.765916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 72.765929] Call Trace: [ 72.765940] [ 72.765950] dump_stack_lvl+0xfa/0x120 [ 72.765979] lockdep_rcu_suspicious+0x152/0x1c0 [ 72.766009] proc_sys_compare+0x28a/0x340 [ 72.766033] ? __pfx_proc_sys_compare+0x10/0x10 [ 72.766059] d_same_name+0x229/0x2e0 [ 72.766106] d_alloc_parallel+0x7c1/0x1330 [ 72.766148] ? __pfx_d_alloc_parallel+0x10/0x10 [ 72.766175] ? lock_is_held_type+0x9e/0x120 [ 72.766199] ? __pfx_default_wake_function+0x10/0x10 [ 72.766234] ? __d_lookup+0x25f/0x490 [ 72.766271] lookup_open.isra.0+0x64f/0x1530 [ 72.766309] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 72.766358] ? mnt_get_write_access+0x81/0x2d0 [ 72.766381] ? mnt_get_write_access+0x1ea/0x2d0 [ 72.766413] path_openat+0xc26/0x2880 [ 72.766458] ? __lock_acquire+0x694/0x1b70 [ 72.766483] ? __pfx_path_openat+0x10/0x10 [ 72.766528] do_filp_open+0x1e8/0x450 [ 72.766562] ? __pfx_do_filp_open+0x10/0x10 [ 72.766609] ? find_held_lock+0x2b/0x80 [ 72.766641] ? alloc_fd+0x2c1/0x560 [ 72.766671] ? lock_release+0xc8/0x290 [ 72.766702] ? alloc_fd+0x2c1/0x560 [ 72.766744] do_sys_openat2+0x104/0x1b0 [ 72.766771] ? __pfx_do_sys_openat2+0x10/0x10 [ 72.766801] ? __fput+0x67b/0xb50 [ 72.766833] __x64_sys_openat+0x142/0x200 [ 72.766861] ? __pfx___x64_sys_openat+0x10/0x10 [ 72.766888] ? __pfx_fput_close_sync+0x10/0x10 [ 72.766928] do_syscall_64+0xbf/0x360 [ 72.766957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.766982] RIP: 0033:0x7ff7bfb19a04 [ 72.767002] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 72.767025] RSP: 002b:00007fff7fbedd90 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 72.767047] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007ff7bfb19a04 [ 72.767063] RDX: 0000000000080001 RSI: 00007ff7bfbd0264 RDI: 00000000ffffff9c [ 72.767078] RBP: 00007ff7bfbd0264 R08: 0000000000000000 R09: 00007fff7fbedd80 [ 72.767093] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 72.767108] R13: 00007fff7fbede30 R14: 0000000000000000 R15: 00000000000000f8 [ 72.767141] [ 74.636269] Bluetooth: hci1: command tx timeout [ 74.637056] Bluetooth: hci2: command tx timeout [ 74.637702] Bluetooth: hci0: command tx timeout [ 74.700638] Bluetooth: hci6: command tx timeout [ 74.701262] Bluetooth: hci4: command tx timeout [ 74.701339] Bluetooth: hci3: command tx timeout [ 74.763903] Bluetooth: hci7: command tx timeout [ 74.764225] Bluetooth: hci5: command tx timeout [ 76.683270] Bluetooth: hci1: command tx timeout [ 76.684401] Bluetooth: hci2: command tx timeout [ 76.684824] Bluetooth: hci0: command tx timeout [ 76.747268] Bluetooth: hci3: command tx timeout [ 76.747689] Bluetooth: hci6: command tx timeout [ 76.748041] Bluetooth: hci4: command tx timeout [ 76.811257] Bluetooth: hci5: command tx timeout [ 76.811663] Bluetooth: hci7: command tx timeout [ 78.731529] Bluetooth: hci1: command tx timeout [ 78.732431] Bluetooth: hci2: command tx timeout [ 78.733256] Bluetooth: hci0: command tx timeout [ 78.795402] Bluetooth: hci4: command tx timeout [ 78.796262] Bluetooth: hci6: command tx timeout [ 78.796927] Bluetooth: hci3: command tx timeout [ 78.859212] Bluetooth: hci7: command tx timeout [ 78.859252] Bluetooth: hci5: command tx timeout [ 80.779205] Bluetooth: hci1: command tx timeout [ 80.779310] Bluetooth: hci2: command tx timeout [ 80.779674] Bluetooth: hci0: command tx timeout [ 80.843222] Bluetooth: hci3: command tx timeout [ 80.843641] Bluetooth: hci6: command tx timeout [ 80.843655] Bluetooth: hci4: command tx timeout [ 80.907158] Bluetooth: hci7: command tx timeout [ 80.909042] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 13:06:39 Registers: info registers vcpu 0 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b5a45 RDI=ffffffff8871dee0 RBP=ffffffff8871dea0 RSP=ffff8880178772b8 R8 =0000000000000000 R9 =ffffed10014e5046 R10=000000000000005b R11=0000000000000001 R12=000000000000005b R13=0000000000000010 R14=ffffffff8871dea0 R15=ffffffff828b5a30 RIP=ffffffff828b5a9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555564945400 00000000 00000000 GS =0000 ffff8880e55f3000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f407a496efc CR3=000000002fb6d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000414c8bf1cdec4b96 XMM01=00000000000000003f847ae147ae147b XMM02=00000000000000000000000000000000 XMM03=00000000000000003f744d0460e639e4 XMM04=534d5f4c4e51464e2467736d646e6573 XMM05=54415f31313230384c4e40202c7d3478 XMM06=7b3d45444f435f4e4f534145525f5254 XMM07=415f31313230384c4e40202c7d367830 XMM08=3d45444f435f4e4f534145525f525454 XMM09=65667830202c36337830202c3678307b XMM10=7830202c7d34367830202c7d5d7d3030 XMM11=347830202c307830202c307830202c31 XMM12=0a2934313030347830202c7d30303030 XMM13=29303830303030303030306637783028 XMM14=30303030303030306637783028267b3d XMM15=202c337830202c303278307b3d293034 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff85c748e8 RCX=ffffffff8173e475 RDX=ffff888009a5d280 RSI=ffffffff8173e41b RDI=0000000000000001 RBP=0000000000000001 RSP=ffff888015cff7b0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffffff85c748e8 R15=0000000000092cc0 RIP=ffffffff84b7e12e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555566de400 00000000 00000000 GS =0000 ffff8880e56f3000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055714d4d9a80 CR3=000000002c61d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffff0000000000 XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000