Warning: Permanently added '[localhost]:46971' (ECDSA) to the list of known hosts. 2025/07/01 21:00:50 fuzzer started 2025/07/01 21:00:50 dialing manager at localhost:37637 syzkaller login: [ 49.599806] cgroup: Unknown subsys name 'net' [ 49.662281] cgroup: Unknown subsys name 'cpuset' [ 49.689540] cgroup: Unknown subsys name 'rlimit' 2025/07/01 21:01:02 syscalls: 207 2025/07/01 21:01:02 code coverage: enabled 2025/07/01 21:01:02 comparison tracing: enabled 2025/07/01 21:01:02 extra coverage: enabled 2025/07/01 21:01:02 setuid sandbox: enabled 2025/07/01 21:01:02 namespace sandbox: enabled 2025/07/01 21:01:02 Android sandbox: enabled 2025/07/01 21:01:02 fault injection: enabled 2025/07/01 21:01:02 leak checking: enabled 2025/07/01 21:01:02 net packet injection: enabled 2025/07/01 21:01:02 net device setup: enabled 2025/07/01 21:01:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/01 21:01:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/01 21:01:02 USB emulation: enabled 2025/07/01 21:01:02 hci packet injection: enabled 2025/07/01 21:01:02 wifi device emulation: enabled 2025/07/01 21:01:02 802.15.4 emulation: enabled 2025/07/01 21:01:02 fetching corpus: 0, signal 0/0 (executing program) 2025/07/01 21:01:03 starting 8 fuzzer processes 21:01:03 executing program 0: waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x2, &(0x7f0000000080)) r0 = fork() waitid(0x0, r0, &(0x7f0000000140), 0x1, &(0x7f00000001c0)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f0000000280)=""/41) r1 = getpid() sched_rr_get_interval(r1, &(0x7f00000002c0)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000300)={0x5}) ioctl$CDROM_SELECT_DISK(0xffffffffffffffff, 0x5322, 0x7) select(0x40, &(0x7f0000000340)={0x800, 0xc00000, 0x3, 0x10000, 0x0, 0x7e0980, 0x20, 0x1}, &(0x7f0000000380)={0x3ff, 0x80000000, 0x1400, 0x0, 0x80000000, 0x7fff, 0x6e00, 0x1fe}, &(0x7f00000003c0)={0x6, 0x0, 0xc0b, 0x5ea, 0x65fd, 0x5, 0x5, 0xb103}, &(0x7f0000000400)={0x77359400}) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8, 0x0, 0xffff, 0x1}, 0x80000001) mincore(&(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000480)=""/166) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000540)='ns/cgroup\x00') prctl$PR_GET_FPEXC(0xb, &(0x7f0000000580)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) r4 = fork() sched_rr_get_interval(r4, &(0x7f0000000600)) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80008008}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1f}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x14015) sched_rr_get_interval(r1, &(0x7f0000000740)) 21:01:03 executing program 1: sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1f}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4881}, 0x40000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, 0x0, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xde33}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x50) socketpair(0x23, 0x80000, 0x6, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xa, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804c0c1}, 0x24080020) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, 0x3, 0x7, 0x401, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf05c}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8ab}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8880}, 0x24040044) r2 = socket(0x28, 0x80000, 0x8) bind$bt_l2cap(r2, &(0x7f0000000680)={0x1f, 0x6913, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x1}, 0xe) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xac, 0x3, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xdf17}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xec2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x48afd5e}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x778}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4000084) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000020}, 0x4008054) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x5, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048940}, 0x84) r4 = syz_open_dev$vcsu(&(0x7f0000000b80), 0x80000000, 0x20000) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c00)={0x210, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4e}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7e19201fb27b02db36377ec8db11646bd40084aa894b74ea"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8210a63f3e07f675ebb7bd9142d0b091a8a46c6ca3aff206"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eb714257adedc13f7c2beec8ddcac54a87d7b2c8a0578682"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "353f58ab1674f464744e5eedd9aeea6f64e707238cb0d110"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "632115fd984a82a45565524ceebec6876e9aa658bf70872a"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x210}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r5 = socket(0x1, 0x1, 0x7ff) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000010c0)={'ip_vti0\x00', &(0x7f0000001000)={'erspan0\x00', 0x0, 0x80, 0x0, 0x40, 0x7, {{0x1d, 0x4, 0x0, 0x9, 0x74, 0x65, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010102, @remote, {[@noop, @rr={0x7, 0x17, 0x17, [@multicast1, @broadcast, @multicast1, @remote, @loopback]}, @rr={0x7, 0x13, 0x69, [@loopback, @rand_addr=0x64010101, @remote, @broadcast]}, @ssrr={0x89, 0x17, 0x8, [@rand_addr=0x64010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010101, @private=0xa010100]}, @noop, @ssrr={0x89, 0xf, 0xb6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @end, @timestamp_prespec={0x44, 0xc, 0x14, 0x3, 0x3, [{@private=0xa010102, 0x6c}]}]}}}}}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40050}, 0x20048005) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000001200), 0x4) 21:01:03 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x5, 0x3, {{0xd, 0x4, 0x3, 0x1, 0x34, 0x65, 0x0, 0xf4, 0x29, 0x0, @broadcast, @local, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x77, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x83, 0x9, "5f953e51da0cfe"}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x80, 0x40, 0x0, 0x0, {{0xd, 0x4, 0x3, 0x2d, 0x34, 0x65, 0x0, 0xca, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0xc5, 0x0, 0x1, [0x7ff, 0x8, 0x7, 0x2, 0x9000, 0x4, 0xfffffffd]}]}}}}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000500)={0x650, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r0}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6d}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd90}}}]}}]}, 0x650}}, 0x8000) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10280005}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x400}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x60, r7, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0xc, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x4000010) r8 = syz_open_dev$vcsu(&(0x7f0000001000), 0x1fffffffc00, 0x1) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x60, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000001140)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000001240)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000001300)={'ip_vti0\x00', &(0x7f0000001280)={'ip_vti0\x00', r9, 0x1, 0x1, 0x7fffffff, 0x101, {{0xb, 0x4, 0x1, 0x7, 0x2c, 0x65, 0x0, 0x3, 0x2f, 0x0, @loopback, @multicast2, {[@ssrr={0x89, 0x17, 0xde, [@dev={0xac, 0x14, 0x14, 0x1d}, @local, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x30}]}]}}}}}) r10 = syz_open_dev$vcsu(&(0x7f0000001340), 0x2, 0x480082) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r10, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0x8c, 0x2, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2b}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x41) r11 = socket(0x1f, 0x1, 0xfffffffe) sendmsg$GTP_CMD_GETPDP(r11, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x50, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x10890}, 0x85) [ 62.422838] audit: type=1400 audit(1751403663.931:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:01:03 executing program 3: r0 = socket(0x28, 0x5, 0x7ff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x15, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x64}}, 0x20008000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r1 = syz_open_dev$sg(&(0x7f0000000280), 0xfffffffffffffffa, 0x2) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000002c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x1, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x20000000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa0, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc69a}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x76}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x180d}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5139f281}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8040}, 0x4000800) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5c}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x20008045) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc4, r3, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) r4 = syz_open_dev$vcsu(&(0x7f0000000900), 0x7fff, 0x40000) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x94, 0x2, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2b}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000040) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, 0x3, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfea}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x401}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000800}, 0x4) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x80, 0x0, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x72fd}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xb64a}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2f180}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xedc}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) mount$9p_fd(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80), 0x1000000, &(0x7f0000000dc0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}], [{@uid_eq}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@hash}, {@context={'context', 0x3d, 'user_u'}}]}}) 21:01:03 executing program 4: r0 = socket(0x22, 0x6, 0x3ff) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x8000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000c40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000280)={0x964, 0x1, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [{{0x254, 0x1, {{0x0, 0x4}, 0x0, 0x9, 0xa0c, 0xa6f, 0x16, 'syz0\x00', "4e39e05c081118c434d8a16d003400f0f4be6fb244edcb1a546384392ac89475", "b42f8e2f9629f4fa0409889f7c3a755d274d4207f373383b890f289ad39fbfa4", [{0x4, 0x5, {0x2, 0x7}}, {0x40, 0x0, {0x1, 0x6}}, {0xfbb, 0x3, {0x1, 0x3}}, {0x7e3, 0x9, {0x1, 0x3f}}, {0x7d, 0x9, {0x0, 0x7ff}}, {0x8, 0x8}, {0x800, 0x20, {0x3, 0x81}}, {0x1ff, 0x40, {0x0, 0x101}}, {0x7fff, 0x7, {0x2, 0x9}}, {0x5, 0x3, {0x3, 0x3f2}}, {0x8, 0x1ff, {0x0, 0xcf5a}}, {0xff, 0x1, {0x1, 0xda9d}}, {0xc9ef, 0x7, {0x0, 0x3f}}, {0x4, 0x2, {0x0, 0x494}}, {0x2, 0x1, {0x3, 0x1f}}, {0x7, 0x4, {0x1, 0x100}}, {0x8, 0x7, {0x3, 0x400}}, {0x3, 0x3, {0x2, 0x80000001}}, {0x401, 0x3, {0x0, 0x5}}, {0x80, 0x6, {0x3, 0x401}}, {0xfa, 0x6, {0x3, 0x9}}, {0x8, 0x3, {0x1, 0x1}}, {0xf001, 0x8906, {0x1, 0x8000}}, {0x3, 0x6, {0x1, 0x10000}}, {0x101, 0x81, {0x2, 0x5}}, {0x6, 0x4}, {0x200, 0x2, {0x0, 0x9}}, {0x4, 0xa104, {0x3, 0x4}}, {0x3, 0x6, {0x2, 0x8001}}, {0x2, 0x9, {0x0, 0x8}}, {0xfff, 0x401, {0x0, 0xf1c2b8}}, {0xff, 0x3, {0x3, 0x8f19}}, {0x9d4, 0xd5eb, {0x3, 0x4}}, {0x9c7a, 0x20, {0x0, 0x8000}}, {0x1f, 0x6f, {0x1, 0xb08}}, {0x4, 0x4, {0x1, 0xfffffffc}}, {0x3a8a, 0x3, {0x1, 0x5}}, {0x800, 0x0, {0x3, 0xffff764a}}, {0x1, 0x8, {0x3, 0x1}}, {0x7, 0x55, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x7fff}, 0x6, 0xfd, 0xc7, 0xfff7, 0x1b, 'syz1\x00', "e4115e5058d89070867d52a2d1caded8d109b08f6c75bf10061671654a17eb6e", "f34af373c755d093362afae9c0ceda239a7358d806efa3aa8ad9562e8ad0f8fe", [{0xa42, 0x0, {0x0, 0x3}}, {0x8, 0x7, {0x1, 0x6a3}}, {0x4, 0x0, {0x2, 0x3}}, {0x8001, 0x5, {0x0, 0xba0b}}, {0x1, 0x1f, {0x3, 0x5}}, {0x3, 0xf33, {0x1, 0x6}}, {0x0, 0x401, {0x2, 0x8001}}, {0x169, 0x6, {0x1, 0xc}}, {0x3, 0x0, {0x3, 0x9}}, {0x0, 0x2, {0x0, 0x2}}, {0x9, 0x0, {0x3, 0xfffffff7}}, {0x2, 0xeb5, {0x0, 0x1000}}, {0x3, 0x200, {0x2, 0x1000}}, {0x1, 0x2, {0x3, 0xffffffff}}, {0xfffa, 0x9, {0x3, 0xb36}}, {0x101, 0xef, {0x2, 0xffff8000}}, {0xa80, 0x1, {0x3, 0x8}}, {0x6, 0xffcf, {0x3bf4323a253f2915, 0xce3d}}, {0xc2, 0x100, {0x1, 0x81}}, {0xffff, 0x2, {0x0, 0x5}}, {0x7f, 0x3, {0x1, 0x1ff}}, {0x20, 0x0, {0x3, 0xffff7fff}}, {0x4, 0x5, {0x1, 0x1ae}}, {0x7f, 0x3, {0x2, 0x7}}, {0x80, 0x6, {0x3, 0x10001}}, {0x9, 0x5000, {0x3, 0x6}}, {0x40, 0x4, {0x1, 0xcc62}}, {0x20, 0x7fff, {0x3, 0xfffffc01}}, {0x1f, 0x7, {0x2, 0x7}}, {0x0, 0xfffe, {0x3, 0x6}}, {0x8, 0x8, {0x3, 0xc5}}, {0x1ff, 0x4, {0x3, 0x7}}, {0xe7, 0x9, {0x2, 0x5}}, {0x0, 0x800, {0x2, 0x3}}, {0x401, 0x1, {0x0, 0x4}}, {0x8, 0x1, {0x1, 0x10001}}, {0x9, 0x0, {0x2, 0x5}}, {0x2, 0xffe0, {0x1, 0x10000}}, {0x3, 0xffd8, {0x1, 0x80000001}}, {0x8000, 0x4, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x0, 0x24, 0x8, 0x7f, 0xc, 'syz0\x00', "96c93308841067ce6964cd0c035c6d7ed6d29a111eb251802cf4ac8370319d0c", "bc52130dae8d5c07e7e83068605b0e7fd15893b8ed52c946b30d0caa53eea8dd", [{0x8, 0x200, {0x2, 0x7}}, {0x57, 0x200, {0x0, 0x40c}}, {0x2, 0x8, {0x0, 0x81}}, {0x0, 0x40, {0x2}}, {0x8, 0x6f6f, {0x1, 0x5}}, {0x39b7, 0xfffc, {0x2, 0xc03}}, {0x2fa, 0x0, {0x2, 0x7f}}, {0x0, 0x8, {0x0, 0xffffffff}}, {0x8, 0x7, {0x0, 0x8}}, {0x401, 0x9, {0x0, 0x3}}, {0x6, 0x2, {0x3, 0x6}}, {0x8001, 0x535f, {0x1, 0x3e5}}, {0x4, 0xffff, {0x2, 0xffffffff}}, {0x3, 0x3ff, {0x3, 0x6}}, {0x7f, 0x3, {0x1, 0x81}}, {0x81, 0x100, {0x2, 0x8}}, {0x1000, 0x81, {0x3, 0x4c}}, {0x3ff, 0x3f, {0x3, 0x1ff}}, {0x0, 0x2, {0x0, 0x1a14}}, {0x40, 0x2, {0x2, 0x7ff}}, {0x1, 0x3, {0x0, 0x9}}, {0x0, 0x4, {0x1, 0x80000000}}, {0xfffe, 0x0, {0x3, 0x5fc}}, {0x1, 0x785, {0x0, 0x1ff}}, {0x3e, 0x0, {0x3, 0xfff}}, {0x9, 0x2, {0x2, 0x9}}, {0x2, 0x2, {0x1, 0x8}}, {0x6, 0x0, {0x1, 0x4a}}, {0x400, 0xea, {0x2, 0x8000}}, {0x800, 0x3f, {0x3, 0x2}}, {0x1, 0x6, {0x0, 0x6}}, {0x3d5b, 0x0, {0x3, 0x4}}, {0x400, 0x3, {0x2, 0x1}}, {0x9, 0x101, {0x2, 0x8}}, {0x2, 0x2, {0x1, 0x8001}}, {0x2, 0x9, {0x3, 0x7}}, {0x38, 0xe5b, {0x3, 0xd0}}, {0x40, 0x3, {0x0, 0xf42}}, {0x3, 0x3, {0x2, 0x400}}, {0x898a, 0x9, {0x3, 0x5a}}]}}}, {{0x254, 0x1, {{0x0, 0x40}, 0x6, 0x1, 0x6, 0x1e00, 0xc, 'syz0\x00', "3cc0582625a6a648129dc844adbcd9ae2e873bfea659f44e2411ae364c2ac0f8", "bc570cd20c232cf180846e846d7ac2b75518ddc2acd13ef7acc480dd92241717", [{0xfff7, 0x1f, {0x0, 0xdf32}}, {0x80, 0x6, {0x3, 0x100}}, {0x3, 0x6, {0x3, 0x2c2d}}, {0x7, 0x3, {0x2, 0x3de3}}, {0x29, 0x7f, {0x1, 0x8}}, {0x20, 0x4, {0x0, 0x400}}, {0xf1a, 0x100, {0x0, 0x800}}, {0x21a4, 0xdba7, {0x3, 0x1ff}}, {0x4, 0x6f, {0x0, 0x1}}, {0x4, 0x8, {0x1, 0x3f}}, {0x4, 0xfff, {0x3, 0x4}}, {0x4, 0xff01, {0x2}}, {0x3f, 0x7, {0x3, 0x3}}, {0x0, 0x37, {0x3, 0x8}}, {0x81, 0x7, {0x3, 0x400}}, {0x3a, 0x1f, {0x1}}, {0x5, 0x40, {0x0, 0x800}}, {0x4, 0x0, {0x2, 0x3}}, {0xfd, 0xff, {0x1, 0x91f}}, {0x0, 0x87f, {0x0, 0x7fffffff}}, {0x8, 0x1, {0x0, 0xffffffff}}, {0x42b, 0x0, {0x0, 0x9}}, {0x8, 0x7d22, {0x3, 0x2}}, {0x7f, 0x0, {0x1, 0x20}}, {0x2, 0x3, {0x3}}, {0x0, 0xfff, {0x1, 0x200}}, {0x4, 0x81, {0x0, 0x5aa}}, {0x9, 0x1, {0x2, 0x18c7}}, {0x9, 0x80, {0x0, 0x7}}, {0x8, 0x1000, {0x0, 0x6}}, {0x81, 0x7, {0x0, 0x3}}, {0xa16e, 0x5, {0x2, 0x7}}, {0x1, 0x8, {0x3, 0x1f}}, {0x20, 0x6, {0x3, 0x80000000}}, {0xab5c, 0x32f5, {0x3, 0x4f1a}}, {0x8, 0x36, {0x0, 0x7}}, {0x1ff, 0x9, {0x0, 0x9}}, {0x100, 0x1, {0x0, 0x3}}, {0x9, 0x1ff, {0x0, 0x7fffffff}}, {0x7, 0xfc, {0x2, 0x4}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4028015}, 0x44) r1 = socket(0x25, 0x6, 0x7f) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_NET_NS_FD={0x8}, @GTPA_NET_NS_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x7c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xc8b8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x5}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x844) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, 0x34}}, 0x4) socketpair(0xb, 0xa, 0x400, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000001080), r3) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80100406}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, r6, 0x20, 0x70bd29, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FLOW={0x6}]}, 0x2c}}, 0x8810) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x1, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000012c0), r5) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0x94, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffd}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}]}, 0x94}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x3c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0xc, 0x0, 0x21}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040840}, 0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, 0x14, 0x2, 0x101, 0x70bd29, 0x25dfdbfd, {0xc, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 21:01:03 executing program 5: r0 = socket(0x11, 0x6, 0xffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "879ccd"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6d2ce0739f5f6772b7863a3e35"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000040) r2 = syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x200) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r2) ioctl$CDROM_CHANGER_NSLOTS(r2, 0x5328) r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x72, 0x400180) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000200)) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, 0xa, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'macsec0\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'syzkaller0\x00'}}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}}]}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = syz_open_dev$vcsu(&(0x7f00000003c0), 0xd1f7, 0x800) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000400)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10, 0x8010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000580)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x80}}, 0x1c) r6 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x6, 0x14080) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x3, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x800}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c1}, 0x20008000) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x138, 0x3, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x20}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}, @CTA_TUPLE_ORIG={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xf}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x9, 0x8}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x2, 0x7b}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x3, 0x1}}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4080}, 0x4) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r8, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x44000) 21:01:04 executing program 6: sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0xd, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x2044}, 0x8881) r0 = syz_open_dev$vcsu(&(0x7f00000002c0), 0xd6b, 0x4040) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1bc, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x39}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9498724d9ce6788793ec16fdace78f05d196330fb5a6cbd0"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "62e2afbf3b29cac1b7339f3221d9704c5dada3388db6d0c5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bebe7c7943fb230f971197f5c02a7843fca2096001a71269"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a37cedefd4c66a7d3175a9d548aad71353ff100577c37bd2"}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6e8de7fa5d16c06f375649bb62bb07f66ed7d1afb939d81b"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c7f9e84f5104cd24688c775481690042f2545378f24d9109"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "79c88ac161e1048ad29d5016b6b5bd603948b81ed1391686"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x1bc}, 0x1, 0x0, 0x0, 0x50}, 0xc1) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa0, 0x3, 0x7, 0x201, 0x0, 0x0, {0x3}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x200}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000001}]}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x400}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x20}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffe00}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000051) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20040100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, 0x2, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_REPLY={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x8004) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000009c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffb}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair(0xb, 0x80000, 0x1, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4085) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x6c, 0x5, 0x6, 0x301, 0x0, 0x0, {0x4, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x5c, 0x5, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048000) socketpair(0x3e, 0x2, 0x6, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x58, 0x3, 0x7, 0x801, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFACCT_PKTS={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xc8b}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x40c0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x3c, 0x2, 0x8, 0x301, 0x0, 0x0, {0xf, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4008090) 21:01:04 executing program 7: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x8040) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x80000001) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000000c0)) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000100)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000280)) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000002c0)) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r1 = syz_open_dev$sg(&(0x7f0000000300), 0x1, 0xa000) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000340)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffb, 0x7f, 0x40, @scatter={0x1, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/190, 0xbe}]}, &(0x7f0000000480)="e06d839dd602e3deb83f8123d35e96348ed9373c381d1f6892bb5b0c8f6e9f698466d02cde0087a804d3bb6b4a9e8a3b3edafb57bd6c75fb75f9c474ebd5d879668fc414143ef6702ce01bcd2e1f377beac7506746aa5c03f251cc01d621827156df5cd88ca007b97e0fd35a39d5697298473d88e7fe35dd22ad2da4f0b07f", &(0x7f0000000500)=""/91, 0x1, 0x4, 0x3, &(0x7f0000000580)}) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x3000)=nil) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000640)) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r2 = syz_open_dev$vcsu(&(0x7f0000000680), 0x4, 0x30040) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000006c0)) [ 63.716288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.718313] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.719809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.722268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.723736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.725570] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.727357] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.728768] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.731776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.735742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.738410] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.740267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.745047] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.746680] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.748214] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.764884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.766816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.769698] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.775136] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.787338] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.788946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.792704] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.794700] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 63.796696] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.798666] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 63.801070] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.807920] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.811458] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.820212] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 63.827044] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 63.888600] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 63.901203] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 63.904447] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 63.906819] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 63.910714] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 63.915165] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 63.923743] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 63.923847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 63.933157] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 63.937823] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 64.150163] [ 64.150873] ============================= [ 64.151761] WARNING: suspicious RCU usage [ 64.152720] 6.16.0-rc4-next-20250701 #1 Not tainted [ 64.154822] ----------------------------- [ 64.157380] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 64.160736] [ 64.160736] other info that might help us debug this: [ 64.160736] [ 64.162106] [ 64.162106] rcu_scheduler_active = 2, debug_locks = 1 [ 64.163252] 3 locks held by syz-executor.2/282: [ 64.164093] #0: ffff88800f344400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 64.165617] #1: ffff88800b9ee618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 64.167307] #2: ffff8880168a2b18 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 64.168915] [ 64.168915] stack backtrace: [ 64.169680] CPU: 1 UID: 0 PID: 282 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 64.169708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 64.169720] Call Trace: [ 64.169728] [ 64.169737] dump_stack_lvl+0xfa/0x120 [ 64.169777] lockdep_rcu_suspicious+0x152/0x1c0 [ 64.169806] proc_sys_compare+0x28a/0x340 [ 64.169828] ? __pfx_proc_sys_compare+0x10/0x10 [ 64.169853] d_same_name+0x229/0x2e0 [ 64.169877] d_alloc_parallel+0x7c1/0x1330 [ 64.169926] ? __pfx_d_alloc_parallel+0x10/0x10 [ 64.169956] ? __pfx_default_wake_function+0x10/0x10 [ 64.169989] ? __d_lookup+0x25f/0x490 [ 64.170024] lookup_open.isra.0+0x64f/0x1530 [ 64.170056] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 64.170099] ? mnt_get_write_access+0x81/0x2d0 [ 64.170120] ? mnt_get_write_access+0x1ea/0x2d0 [ 64.170149] path_openat+0xc26/0x2880 [ 64.170188] ? __lock_acquire+0x694/0x1b70 [ 64.170208] ? __pfx_path_openat+0x10/0x10 [ 64.170248] do_filp_open+0x1e8/0x450 [ 64.170277] ? __pfx_do_filp_open+0x10/0x10 [ 64.170318] ? find_held_lock+0x2b/0x80 [ 64.170345] ? alloc_fd+0x2c1/0x560 [ 64.170372] ? lock_release+0xc8/0x290 [ 64.170398] ? alloc_fd+0x2c1/0x560 [ 64.170435] do_sys_openat2+0x104/0x1b0 [ 64.170459] ? __pfx_do_sys_openat2+0x10/0x10 [ 64.170486] ? __pfx___schedule+0x10/0x10 [ 64.170521] __x64_sys_openat+0x142/0x200 [ 64.170545] ? __pfx___x64_sys_openat+0x10/0x10 [ 64.170569] ? __pfx_fput_close_sync+0x10/0x10 [ 64.170604] do_syscall_64+0xbf/0x360 [ 64.170626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.170647] RIP: 0033:0x7f42bc8c0a04 [ 64.170663] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 64.170683] RSP: 002b:00007ffc7acf02f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 64.170702] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f42bc8c0a04 [ 64.170716] RDX: 0000000000080001 RSI: 00007f42bc97729e RDI: 00000000ffffff9c [ 64.170729] RBP: 00007f42bc97729e R08: 0000000000000000 R09: 00007ffc7acf02e0 [ 64.170742] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 64.170754] R13: 00007ffc7acf0390 R14: 0000000000000000 R15: 00000000000000f8 [ 64.170782] [ 65.800625] Bluetooth: hci2: command tx timeout [ 65.800634] Bluetooth: hci1: command tx timeout [ 65.864577] Bluetooth: hci3: command tx timeout [ 65.864645] Bluetooth: hci4: command tx timeout [ 65.865437] Bluetooth: hci0: command tx timeout [ 65.865499] Bluetooth: hci5: command tx timeout [ 65.992030] Bluetooth: hci6: command tx timeout [ 65.993583] Bluetooth: hci7: command tx timeout [ 67.849058] Bluetooth: hci1: command tx timeout [ 67.849784] Bluetooth: hci2: command tx timeout [ 67.912120] Bluetooth: hci4: command tx timeout [ 67.912669] Bluetooth: hci0: command tx timeout [ 67.913976] Bluetooth: hci3: command tx timeout [ 67.914497] Bluetooth: hci5: command tx timeout [ 68.040975] Bluetooth: hci7: command tx timeout [ 68.041479] Bluetooth: hci6: command tx timeout [ 69.896970] Bluetooth: hci2: command tx timeout [ 69.897414] Bluetooth: hci1: command tx timeout [ 69.960035] Bluetooth: hci5: command tx timeout [ 69.960476] Bluetooth: hci3: command tx timeout [ 69.960846] Bluetooth: hci0: command tx timeout [ 69.961993] Bluetooth: hci4: command tx timeout [ 70.090043] Bluetooth: hci6: command tx timeout [ 70.090487] Bluetooth: hci7: command tx timeout [ 71.944968] Bluetooth: hci1: command tx timeout [ 71.945404] Bluetooth: hci2: command tx timeout [ 72.007990] Bluetooth: hci0: command tx timeout [ 72.008388] Bluetooth: hci3: command tx timeout [ 72.008763] Bluetooth: hci4: command tx timeout [ 72.009164] Bluetooth: hci5: command tx timeout [ 72.135951] Bluetooth: hci7: command tx timeout [ 72.136353] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 21:01:05 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84ba7d8e RDX=ffffed1002d14561 RSI=0000000000000004 RDI=ffff8880168a2b00 RBP=ffff8880168a2b00 RSP=ffff88803288fc78 R8 =0000000000000000 R9 =ffffed1002d14560 R10=ffff8880168a2b03 R11=0000000000000001 R12=1ffff11006511f90 R13=0000000000000003 R14=ffffed1002d14560 R15=ffff88803288fcb0 RIP=ffffffff84ba7d9f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555609d3400 00000000 00000000 GS =0000 ffff8880e55f2000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055944ba15688 CR3=0000000033096000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b9285 RDI=ffffffff8871efa0 RBP=ffffffff8871ef60 RSP=ffff88801665f2b8 R8 =0000000000000000 R9 =ffffed10016b6046 R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=0000000000000010 R14=ffffffff8871ef60 R15=ffffffff828b9270 RIP=ffffffff828b92dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558265d400 00000000 00000000 GS =0000 ffff8880e56f2000 00000000 00000000 LDT=0000 fffffe0100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8288d086f4 CR3=0000000029f67000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f8288d1747000007f8288d16f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000