Warning: Permanently added '[localhost]:32039' (ECDSA) to the list of known hosts. 2025/07/01 22:46:58 fuzzer started 2025/07/01 22:46:58 dialing manager at localhost:37637 syzkaller login: [ 53.116696] cgroup: Unknown subsys name 'net' [ 53.180295] cgroup: Unknown subsys name 'cpuset' [ 53.196656] cgroup: Unknown subsys name 'rlimit' 2025/07/01 22:47:10 syscalls: 202 2025/07/01 22:47:10 code coverage: enabled 2025/07/01 22:47:10 comparison tracing: enabled 2025/07/01 22:47:10 extra coverage: enabled 2025/07/01 22:47:10 setuid sandbox: enabled 2025/07/01 22:47:10 namespace sandbox: enabled 2025/07/01 22:47:10 Android sandbox: enabled 2025/07/01 22:47:10 fault injection: enabled 2025/07/01 22:47:10 leak checking: enabled 2025/07/01 22:47:10 net packet injection: enabled 2025/07/01 22:47:10 net device setup: enabled 2025/07/01 22:47:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/01 22:47:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/01 22:47:10 USB emulation: enabled 2025/07/01 22:47:10 hci packet injection: enabled 2025/07/01 22:47:10 wifi device emulation: enabled 2025/07/01 22:47:10 802.15.4 emulation: enabled 2025/07/01 22:47:10 fetching corpus: 0, signal 0/0 (executing program) 2025/07/01 22:47:12 starting 8 fuzzer processes 22:47:12 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x84800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x44}}, 0xc005) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) syz_genetlink_get_family_id$fou(&(0x7f0000000440), 0xffffffffffffffff) prctl$PR_GET_TIMERSLACK(0x1e) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000004c0)={0x0, 0x9, 0x0, 0x0, 0x2}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x404401, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r4) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000005c0)={0x10001, 0x0, 0x2, 0x6c}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0xc0, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r7, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x4008044) geteuid() 22:47:12 executing program 0: unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x0, 0x12a) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1008008, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose}, {@version_u}, {@loose}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}]}}) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x88080, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x4) linkat(r0, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x2000) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x1b00822, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}, {@version_9p2000}, {@loose}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@access_uid={'access', 0x3d, 0xee00}}, {@access_any}, {@cache_loose}, {@version_u}, {@afid={'afid', 0x3d, 0x9}}, {@fscache}], [{@measure}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@euid_lt={'euid<', 0xee01}}, {@permit_directio}, {@seclabel}]}}) r2 = socket$netlink(0x10, 0x3, 0x7) mknodat$loop(r0, &(0x7f0000000440)='./file1\x00', 0x800, 0x1) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000480)={0xc9, 0x3}, 0x2) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x2, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xdad4}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x8000) syz_mount_image$iso9660(&(0x7f0000000600), &(0x7f0000000640)='./file0/file0\x00', 0x8, 0x8, &(0x7f0000000cc0)=[{&(0x7f0000000680)="a777351029945e99ebedbd3eaebf0937efd6a64ec9cce387dfaed184924347b6c8e6bab185f015c48d1c5f88d1ec5d4b49197be55707cf605a7757a106a81005544c3eedc771753eb6e18cab18eed1d1438d56f745b9a66463b11c0b996f4e4b8af9406d5a6227276b0788e235c97932cc29b0bc92560ad533518f9efe5af3f746bf31dc", 0x84, 0x6}, {&(0x7f0000000740)="bb747c06b31c74d2a022a548fa1173dc00f93e8e38825f517cd4a43a96583d5bed86ddb61f42994a98278a6a848a78633fe9afed761bf8bdc036c1fac1b968ba4a3965f39b2718ba12ce02b39a44ed76b3ac758cbd8fa3cf1ed43e925d5bc7ad0cde4b102e0f03411f1bd94bf7150c715d21df437262d98f172e514eea112937e6c0bf420d1ab58ce74a7c6629c5ac0bc883faa5c1e999449d4d4dca59600084b2d4b04639cf4518fc9bd1e1f25cc59091a0d53b5d4ade7ae6a223b60cf246fe56d9aba2b8698e0204cc338ccfbbf926abd64c885f2c3b9b9544", 0xda, 0x4}, {&(0x7f0000000840)="f0c90f697b4683b4cfb655844579b868068c421da2658c502e937bdade96c569765356ef97c45f673b928aeff0ec4bec88f6cfad67cc0a4f21e1b7c296a231987d8873d1efd3eb0792e937246eabf25a0c8939f68ba299109dcfb420ec7a15e2d08bd37784336b047c1bdc5d5365d5e6f87e5c0c6993ba4c5e3e7bad1697a2b0c0baff47362c4c5942b54b048460ec2357abb5311daacc92ba11c9216f8a7181720fe11dc416d99219eb5868056751cfa21eb3cadab3b339f915345ff89f9a80fd52f4dbc8100477ca8b07c7217474da23fc01710d7d44fb5ea78786f9", 0xdd, 0x7fffffff}, {&(0x7f0000000940)="68f0039ab59e4016ecce449c304a2f9f9f2b982acc77bd7937d56be0847735d3896562279d967781a40020387fd74f35f809a5e57ae3a0a4028a5563d88b361e4be357fef3d6513637cc128658aa3cd6b226d9b1d140d17d9764db59c8123bbec44f09c8461a74b3aeca08ccd4fdcb30404669b910a32bf68e272485bb051f3c5f2c67a7a5e7717b19143cc4831937b60fad3e3869cdc32d204a63fe3279813c33dcf1a7388c21f3979cef4ff282a788a821fd7c4ca341df4e73000ecaf8cb6842f41d24965399d2c95b315f86fc1582d60f5314ad12d1c0b28a3596b9dae394c6823cadb0784c6e5346f58910837e972ed9b55de8", 0xf5, 0x3}, {&(0x7f0000000a40)="2a11754e9d60d5aa9e9d926be47db1092ba8ba5b0c96415184c6c878fdac8d87a94affbc86eaa7ff539224c841bacf10a26d11", 0x33, 0x3}, {&(0x7f0000000a80)="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", 0xfd, 0x8}, {&(0x7f0000000b80)="0dc3ec6a7e16f13b62baf4a2720cd55675b2d87ecd6163903a610dd05f0403fc5ca5718d18d2a10787bcac4bfc081ed1ada7ff6f61d86a73a826dd3d0571cd", 0x3f, 0x9}, {&(0x7f0000000bc0)="3cb63002560877dfe3b1d613ef84853c578af577a2defb1f6fb4f98df2d97cb68fe38cb3b9d3b9b503f716c03df0f08fbdf7fc1109f8d85173f5020945e7580adb951d04c3de82dd1d95e1f95feb1297d9f9f41ad8ccb1dd5c5ee1b93f2492f991e18768b9b6fee7c3f25f6a1e0ec1402ec58b95fd352e97f109a93b0b235fa279d2ccf8457dbaa78b0e63f27878ce58eceeeddba4a34c11eef3e6c9d430b1fe36fe7c08f266e0f25e1eb5138e3c7395a3413a2fab8b4ae0a47d35841b3519c535322db054abbb85043ec81d476b02adf0a6984a1d8271", 0xd7, 0x2}], 0x40035, &(0x7f0000000d80)={[{@check_relaxed}, {@map_acorn}, {@hide}], [{@fsname={'fsname', 0x3d, '-\'('}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/sr0\x00'}}, {@dont_hash}]}) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x6c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x44) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000f40)=0x39, 0x1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000f80)={0x0, 0x83, 0x10}, &(0x7f0000000fc0)={'enc=', 'raw', ' hash=', {'sha3-256\x00'}}, &(0x7f0000001040)="d4ce0c5e93f7238d95f4d7866dec2deb1f6e952adef9d0c08ac016958d45238c1ebfbdfae8cf72ac302332f08aad0fd8a88ad3faeaf6eb8977649ada9904349a64f736f31e7fa7fab7e1fd63cc5ed8efe8808faec134d607e627a228990e462c780cbfd74bea7c1496b08f0c9981edacdbf1b22268c2edd149ecbf4f863a61925b2104", &(0x7f0000001100)="aad85473fad902cd48f1c62f6c4f470b") socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000001480)={&(0x7f0000001140), 0xc, &(0x7f0000001440)={&(0x7f0000001180)={0x290, 0x17, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x190, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1c}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x440040e0}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f0000001900)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000018c0)={&(0x7f0000001500)={{0x14}, [@NFT_MSG_NEWSET={0x134, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x26}, @NFTA_SET_USERDATA={0xe7, 0xd, 0x1, 0x0, "6e3a3340987933061ddc9dcac8dc97fd3915fad96fcbd7c2373ed75ecea089b4f474a9dd0dbb10ba83f10a584544aad2be18e2d0ef77cf704dc0646c1f050dff343d40be8b5a4e28562626a7fb563789bf6dabf4238549edb7a4d679c7d7587fcb7b1f90e31b0598f040758a60d9849e481bb4c45dbf7cfec78a835ca6466adc3f9426e58b338b334b4bd3d11ce198a7ae93b5eea1df3f1eeaa618de0ac8c2e9bca03451ed73a60613a9582932b8ad7c568ccf415b635e89cbba60018bde0e5f1fcea10838828bf7ce85a1b32916dc1ea7075e1335d59884fce4fa11711cbccf5b1e26"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xf4}]}, @NFT_MSG_DELTABLE={0x88, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x6c, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x138, 0x18, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xdc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'macvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f00000}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x3b4}, 0x1, 0x0, 0x0, 0x4004880}, 0x10000000) 22:47:12 executing program 1: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0xfffffffa, &(0x7f0000000040)=0x4) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x3, 0x1) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000100)=0x101, 0x4) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000a, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@access_client}, {}, {@access_uid}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@posixacl}, {@version_L}, {@cache_none}], [{@obj_role={'obj_role', 0x3d, '({7'}}, {@seclabel}]}}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000002c0)=0x5, &(0x7f0000000300)=0x4) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000340), &(0x7f0000000380)='./file0/file0\x00', 0xfff, 0x2, &(0x7f0000000440)=[{&(0x7f00000003c0)="9421fad697426f1c6817e7bc83accefeb180f8f497cf4d5309c6185f4aeb5479333933e18f0297059c5172fde985189fbb", 0x31, 0x10000}, {&(0x7f0000000400), 0x0, 0x800}], 0x3002010, &(0x7f0000000480)={[{'cache=none'}, {'#&$(%!()].'}], [{@smackfsdef={'smackfsdef', 0x3d, '#&\x8d-(\\\xd7(}^:'}}, {@fsname={'fsname', 0x3d, 'posixacl'}}, {@euid_gt}]}) faccessat(r1, &(0x7f0000000500)='./file0\x00', 0x12) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2dfef9f8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x280}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004840}, 0x24004004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa0, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4fba44bbd2f03a1f}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000008c0)) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900), 0x1080, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x10) 22:47:12 executing program 3: uname(&(0x7f0000000000)=""/242) uname(&(0x7f0000000100)=""/245) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x49}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) uname(&(0x7f0000000340)=""/155) uname(&(0x7f0000000400)=""/81) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000480)=0x79, &(0x7f00000004c0)=0x1) prctl$PR_SET_TSC(0x1a, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000500)='.pending_reads\x00', 0x581200, 0x120) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000540)=0x20, 0x4) syz_mount_image$nfs4(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x8, 0x5, &(0x7f0000000800)=[{&(0x7f0000000600)="eb1c0db486b415007c1b906150f5d22f4e3addbfafe58011c3b2fa8588ee7e56a79e2ea72ac622ffb59019aa232dc198ae220dbda2e58dc4f7e214d7f7abc5c10142f8b299fc93a928d5482802f4ada4ca12d4161f4f162166", 0x59, 0x323f}, {&(0x7f0000000680)="a2d12c41c832268f98f72e6dbc4a8caaf6f478f55a8e9e05e050", 0x1a, 0x1ff}, {&(0x7f00000006c0)="fba3b25eb7f9fd80b7f3d64467bf5d135db1f0cfd6255f5645ec0e0713733ea04adf135d18a009bb1a5355ce58edda961fbec80664e0", 0x36, 0x80000000}, {&(0x7f0000000700)="8d5b02273c4df2bfe8e652128531e296213261", 0x13, 0x5}, {&(0x7f0000000740)="a7a2cd03eb0686bfc72b0161bc58cd564e16cdd227b7f8f97f46fde2e5a15e258aa2a025a2d6067d0bff1c57ed870a9831a045ea274c9ea3dd1a665d38aa08b6b9357dc3bb673af68bf39b9959d25b34f390dbfc88ce02bfe77bb9eef530d6d2142c0c0170df3319183eab760b27d28787da3762eae810ffc5c9ad1f98e05a27c185ab6ab12c3a1f840a722b62d19669537ce558a1777c1636c9fef12abb5f20b14f", 0xa2, 0x9}], 0x0, &(0x7f0000000880)={[{'.pending_reads\x00'}, {'syz0\x00'}, {'#@/'}, {'.pending_reads\x00'}, {'.pending_reads\x00'}, {'+.'}], [{@context={'context', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syz0\x00'}}, {@uid_gt={'uid>', 0xee00}}]}) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000900)=0x100, &(0x7f0000000940)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000, 0x4, &(0x7f0000000980)) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, 0x0, 0x9, 0x701, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x48}}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000cc0)={'sit0\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x2, 0x9, 0x44, @local, @remote, 0x10, 0x8, 0x1, 0x9}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x8) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xf4, 0x3, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TUPLE_MASTER={0xa4, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xc7}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_LABELS_MASK={0x1c, 0x17, [0x1, 0xce1, 0xfffffff7, 0xffe1, 0x400, 0x4]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x128]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffc}, @CTA_ID={0x8}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) [ 64.028772] audit: type=1400 audit(1751410032.160:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:47:12 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x81, 0x5, 0x20, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, 0x40, 0x40, 0x3, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x6, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x7, 0x8786, 0x3ff, 0x720d44cf}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x64d2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xae}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}]}, 0x64}, 0x1, 0x0, 0x0, 0x24006800}, 0x400c000) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff}, 0x80800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x114804, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_user}, {@privport}, {@msize={'msize', 0x3d, 0x4}}, {@version_9p2000}], [{@fowner_gt={'fowner>', 0xee00}}]}}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r6, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r7}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000780)) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000800), 0x44200, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x200080c4) r10 = socket$netlink(0x10, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f00000009c0)={'syztnl0\x00', r2, 0x0, 0x20, 0x81, 0x10000, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x7800, 0x12, 0x8}}) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x48011}, 0x20000094) 22:47:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x9, 0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100)=0x1, 0x4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x7) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x24}}, 0x8084) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x14000, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x4015) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffff59f4e8e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4881}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000891}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9, 0x1}, 0xe) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000740)={0x1, 0x5, 0x8, 0x200}, 0x10) socketpair(0x10, 0xa, 0x1ff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c04}, 0x408d0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000900)={{0x0, 0x3, 0x0, 0x1, 0x100}, 0x10001, 0x2, 'id1\x00', 'timer1\x00', 0x0, 0xffffffffffff630e, 0x80000000, 0x0, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000a00)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) 22:47:12 executing program 6: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xfffffff9}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xe3d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}}, 0x40080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0xcda1f932ca3bd36d, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x90e0}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}]}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x228, 0x18, 0xa, 0x100, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x1b8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x68, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x384}, 0x1, 0x0, 0x0, 0x44005}, 0x20008050) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, 0x17, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}]}, 0x44}}, 0x820) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000900)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x46d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5a}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000bc0), 0x210300, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x134, 0x0, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x54d}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3f}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x101}}, @NFCTH_TUPLE={0xac, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}]}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x134}}, 0x0) r2 = openat$incfs(r1, &(0x7f0000000e00)='.log\x00', 0x400, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000e40)=0x1f, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e80), 0x80080, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000ec0)=0x1, 0x4) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000f00), 0x88080, 0x0) mknodat$loop(r4, &(0x7f0000000f40)='./file0\x00', 0x4, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000f80)=0x8, &(0x7f0000000fc0)=0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r1) 22:47:12 executing program 7: keyctl$link(0x8, 0x0, 0xffffffffffffffff) keyctl$update(0x2, 0x0, &(0x7f0000000000)="c2fad618a6b6f5fdb089b30375572c574244ce68e57f3dd873d90b1ad8e0f3b2a7b1d28533526480663e32a6019ab4fdf8ddd75ee1529b802a8d670adb96b5cb37f8f9dbdb4b92cea0e439f31edb6373", 0x50) keyctl$search(0xa, 0x0, &(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x1}, 0xfffffffffffffffa) r0 = add_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="168ed1fa2b5280ef7c105c43b33d973e1970ac9b9ccecf236f5ce45ea7c4012d2e23879287068d8c4ba49ffc5dd946890cd3b3d40fc5a085c657de4296272197309569acd1899149d500bc866a13f3a8217a31324020bc04ee5e6b415b5998af6ed09202567f9b8e", 0x68, 0x0) keyctl$reject(0x13, r0, 0x3, 0x1, 0xfffffffffffffffb) r1 = request_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='trusted\x00', 0xfffffffffffffffb) r2 = add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="8457cad5dda62a04449df0d3284638be970e61126cd5b28e15c1368f6e21efecc0f18788fbea292f61f7c482f06fbd3b28d2b11d47414bcbb6566fd198b7e2679f2a195e935fcfb936cf3994c139e7374d80", 0x52, r1) keyctl$revoke(0x3, r2) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r3, 0x0) keyctl$search(0xa, r0, &(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x0}, r3) r4 = socket$netlink(0x10, 0x3, 0x12) bind$netlink(r4, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc) r5 = add_key(&(0x7f0000000500)='cifs.spnego\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)="1f5eaefaf80197d4a031c782e35d6a0286f5be6f7d395b5bc8107136516db50d3eeaed8d20e3dd57bd4e08e18c1f8cdd1ca69c2409e99cc99767", 0x3a, 0xfffffffffffffff8) r6 = request_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)='id_legacy\x00', r1) keyctl$instantiate(0xc, r5, &(0x7f00000005c0)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '&%', 0x20, 0x1, 0x20, [0x33, 0x63, 0x66, 0x62, 0x30]}, 0x33, r6) keyctl$revoke(0x3, r1) keyctl$unlink(0x9, 0x0, r6) r7 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, r6, r7) [ 65.384769] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.391819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.395010] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.398386] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.399819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.401630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.403902] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.409220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.410767] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.410908] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.414481] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.415887] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.418540] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.425675] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.426325] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.428870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.433369] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.435823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.438340] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.440149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.441079] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.442365] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.445026] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.446732] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.448052] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.454807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.456696] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.462498] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.464844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.466265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.475016] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.484501] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.490997] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.492178] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.494134] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.499763] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.499968] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.502488] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.521799] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.527923] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.597658] [ 65.598227] ============================= [ 65.599120] WARNING: suspicious RCU usage [ 65.599963] 6.16.0-rc4-next-20250701 #1 Not tainted [ 65.601489] ----------------------------- [ 65.603353] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 65.606872] [ 65.606872] other info that might help us debug this: [ 65.606872] [ 65.608983] [ 65.608983] rcu_scheduler_active = 2, debug_locks = 1 [ 65.609993] 3 locks held by syz-executor.1/284: [ 65.610694] #0: ffff88800f27c400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 65.611996] #1: ffff888009392618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 65.613448] #2: ffff888019790f80 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 65.614813] [ 65.614813] stack backtrace: [ 65.615472] CPU: 0 UID: 0 PID: 284 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 65.615498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 65.615510] Call Trace: [ 65.615517] [ 65.615525] dump_stack_lvl+0xfa/0x120 [ 65.615561] lockdep_rcu_suspicious+0x152/0x1c0 [ 65.615594] proc_sys_compare+0x28a/0x340 [ 65.615614] ? __pfx_proc_sys_compare+0x10/0x10 [ 65.615636] d_same_name+0x229/0x2e0 [ 65.615659] d_alloc_parallel+0x7c1/0x1330 [ 65.615696] ? __pfx_d_alloc_parallel+0x10/0x10 [ 65.615724] ? __pfx_default_wake_function+0x10/0x10 [ 65.615754] ? __d_lookup+0x25f/0x490 [ 65.615787] lookup_open.isra.0+0x64f/0x1530 [ 65.615819] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 65.615863] ? mnt_get_write_access+0x81/0x2d0 [ 65.615884] ? mnt_get_write_access+0x1ea/0x2d0 [ 65.615912] path_openat+0xc26/0x2880 [ 65.615951] ? __lock_acquire+0x694/0x1b70 [ 65.615973] ? __pfx_path_openat+0x10/0x10 [ 65.616012] do_filp_open+0x1e8/0x450 [ 65.616042] ? __pfx_do_filp_open+0x10/0x10 [ 65.616083] ? find_held_lock+0x2b/0x80 [ 65.616111] ? alloc_fd+0x2c1/0x560 [ 65.616138] ? lock_release+0xc8/0x290 [ 65.616165] ? alloc_fd+0x2c1/0x560 [ 65.616201] do_sys_openat2+0x104/0x1b0 [ 65.616226] ? __pfx_do_sys_openat2+0x10/0x10 [ 65.616252] ? __fput+0x67b/0xb50 [ 65.616281] __x64_sys_openat+0x142/0x200 [ 65.616306] ? __pfx___x64_sys_openat+0x10/0x10 [ 65.616330] ? __pfx_fput_close_sync+0x10/0x10 [ 65.616365] do_syscall_64+0xbf/0x360 [ 65.616387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.616408] RIP: 0033:0x7efcc13daa04 [ 65.616425] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 65.616444] RSP: 002b:00007ffce8592130 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 65.616464] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007efcc13daa04 [ 65.616477] RDX: 0000000000080001 RSI: 00007efcc149129e RDI: 00000000ffffff9c [ 65.616490] RBP: 00007efcc149129e R08: 0000000000000000 R09: 00007ffce8592120 [ 65.616503] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 65.616515] R13: 00007ffce85921d0 R14: 0000000000000000 R15: 00000000000000f8 [ 65.616543] [ 67.468278] Bluetooth: hci0: command tx timeout [ 67.531677] Bluetooth: hci4: command tx timeout [ 67.531742] Bluetooth: hci1: command tx timeout [ 67.532504] Bluetooth: hci5: command tx timeout [ 67.533688] Bluetooth: hci2: command tx timeout [ 67.595856] Bluetooth: hci7: command tx timeout [ 67.597080] Bluetooth: hci6: command tx timeout [ 67.597109] Bluetooth: hci3: command tx timeout [ 69.516420] Bluetooth: hci0: command tx timeout [ 69.580653] Bluetooth: hci4: command tx timeout [ 69.581395] Bluetooth: hci5: command tx timeout [ 69.582064] Bluetooth: hci1: command tx timeout [ 69.582108] Bluetooth: hci2: command tx timeout [ 69.644806] Bluetooth: hci7: command tx timeout [ 69.644874] Bluetooth: hci6: command tx timeout [ 69.645546] Bluetooth: hci3: command tx timeout [ 71.563725] Bluetooth: hci0: command tx timeout [ 71.627751] Bluetooth: hci5: command tx timeout [ 71.628646] Bluetooth: hci2: command tx timeout [ 71.628679] Bluetooth: hci1: command tx timeout [ 71.629354] Bluetooth: hci4: command tx timeout [ 71.691960] Bluetooth: hci3: command tx timeout [ 71.692766] Bluetooth: hci6: command tx timeout [ 71.693453] Bluetooth: hci7: command tx timeout [ 73.611889] Bluetooth: hci0: command tx timeout [ 73.676100] Bluetooth: hci4: command tx timeout [ 73.676260] Bluetooth: hci1: command tx timeout [ 73.676514] Bluetooth: hci5: command tx timeout [ 73.677670] Bluetooth: hci2: command tx timeout [ 73.741673] Bluetooth: hci7: command tx timeout [ 73.742083] Bluetooth: hci6: command tx timeout [ 73.742453] Bluetooth: hci3: command tx timeout VM DIAGNOSIS: 22:47:13 Registers: info registers vcpu 0 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b9285 RDI=ffffffff8871efa0 RBP=ffffffff8871ef60 RSP=ffff88800702f2b8 R8 =0000000000000000 R9 =ffffed1001724046 R10=000000000000005b R11=0000000000000001 R12=000000000000005b R13=0000000000000010 R14=ffffffff8871ef60 R15=ffffffff828b9270 RIP=ffffffff828b92dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558701c400 00000000 00000000 GS =0000 ffff8880e55f2000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007efcc1416ca0 CR3=0000000030a5f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff888015f944e0 RCX=ffffffff81e07051 RDX=ffff8880158c8000 RSI=0000000000000008 RDI=ffff888015f94298 RBP=0000000000008000 RSP=ffff8880158c7a60 R8 =0000000000000001 R9 =ffffed1002bf2853 R10=0000000000008000 R11=0000000000000001 R12=ffff888015f94508 R13=ffff888015f94298 R14=0000000000000000 R15=ffff88800f0bc428 RIP=ffffffff81aeff18 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f14d1a96900 00000000 00000000 GS =0000 ffff8880e56f2000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f14d0eb8fd0 CR3=000000000b7b5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=494e4f544f4e4f4d5f454352554f535f XMM01=49545f43494e4f544f4e4f4d5f454352 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=76fedb01a739766e0000000000133f90 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=ddb251f1ae1bfbee00000000000ae988 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000