Warning: Permanently added '[localhost]:25262' (ECDSA) to the list of known hosts. 2025/07/08 03:15:27 fuzzer started 2025/07/08 03:15:27 dialing manager at localhost:42083 syzkaller login: [ 60.129828] cgroup: Unknown subsys name 'net' [ 60.202031] cgroup: Unknown subsys name 'cpuset' [ 60.223439] cgroup: Unknown subsys name 'rlimit' 2025/07/08 03:15:39 syscalls: 220 2025/07/08 03:15:39 code coverage: enabled 2025/07/08 03:15:39 comparison tracing: enabled 2025/07/08 03:15:39 extra coverage: enabled 2025/07/08 03:15:39 setuid sandbox: enabled 2025/07/08 03:15:39 namespace sandbox: enabled 2025/07/08 03:15:39 Android sandbox: enabled 2025/07/08 03:15:39 fault injection: enabled 2025/07/08 03:15:39 leak checking: enabled 2025/07/08 03:15:39 net packet injection: enabled 2025/07/08 03:15:39 net device setup: enabled 2025/07/08 03:15:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/08 03:15:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/08 03:15:39 USB emulation: enabled 2025/07/08 03:15:39 hci packet injection: enabled 2025/07/08 03:15:39 wifi device emulation: enabled 2025/07/08 03:15:39 802.15.4 emulation: enabled 2025/07/08 03:15:39 fetching corpus: 0, signal 0/0 (executing program) 2025/07/08 03:15:40 starting 8 fuzzer processes 03:15:40 executing program 0: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000080)=0x80, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000000c0)={'wg0\x00', {0x2, 0x0, @loopback}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'team0\x00', {0x2, 0x0, @empty}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=0xc0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x28020}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48810}, 0x20000002) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r4) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000540)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000006c0), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000700)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}]}, 0x34}}, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000800)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000840)="eca2ba6aae3e311f62da70b180c87045", 0x10) 03:15:40 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x66, 0x3, 0x3, 0x4, 0x0, 0x3, 0xa2080, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x20}, 0x2, 0x80, 0xffff, 0x9, 0x744a801, 0x5, 0x7f, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x214bf8703164b6f5, r0, 0x8001) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/42, 0x2a, 0x1, &(0x7f0000000100)=""/100, 0x64}, &(0x7f00000001c0)=0x40) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000200)=0x80) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000240)={'syz_tun\x00'}) r1 = socket(0x1f, 0x4, 0x3) bind(r1, &(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000080) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000400)={'gre0\x00', {0x2, 0x0, @initdev}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvfrom(r2, &(0x7f0000000480)=""/18, 0x12, 0x20, &(0x7f00000004c0)=@can, 0x80) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000540)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000740)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000780)={0x53, 0x20, 0x8, {0x1, 0x80}, {0x7ff, 0x80}, @rumble={0x3ff, 0x2}}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) 03:15:40 executing program 2: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x1c}}, 0x800) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x8d0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000800)={&(0x7f00000005c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/251, 0xfb}], 0x1, &(0x7f0000000780)=""/128, 0x80}, 0x41) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000940)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x34, 0x0, "bd123c3545b94456e5cc937d1b00dab007bbcc03cfbc4905dc87e95b6e41ef1a778cb9316c26b1ed2ad613f50636b338e63b2ac9176816b6e1d377b7b6940c663ff3ceaaef843fadd33c22a5b21fde9e"}, 0xd8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000a40)=0x7, &(0x7f0000000a80)=0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000b80)={&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/117, 0x75, 0x1, &(0x7f0000000b40)=""/10, 0xa}, &(0x7f0000000bc0)=0x40) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x800002, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000001140)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001100)={&(0x7f0000000c00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c80)=""/237, 0xed}, {&(0x7f0000000d80)=""/253, 0xfd}, {&(0x7f0000000e80)=""/167, 0xa7}, {&(0x7f0000000f40)=""/78, 0x4e}, {&(0x7f0000000fc0)=""/75, 0x4b}, {&(0x7f0000001040)=""/46, 0x2e}], 0x6}, 0x0, 0x40010000}, 0x7) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000001180)=0x1, &(0x7f00000011c0)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x20, r6, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x30004804) r7 = perf_event_open$cgroup(&(0x7f0000001340)={0x4, 0x80, 0x3, 0x1, 0x2, 0x7f, 0x0, 0x6, 0x8, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x10000}, 0x10, 0x4, 0x1, 0x3, 0x7, 0x20, 0x7, 0x0, 0x1, 0x0, 0x9}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x1be) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000001400)) 03:15:40 executing program 3: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x2) r1 = accept(r0, &(0x7f0000000000)=@in6, &(0x7f0000000080)=0x80) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r1, 0xb047000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000100)=""/199, &(0x7f0000000200)=0xc7) io_uring_setup(0x1a5b, &(0x7f0000000240)={0x0, 0x6029, 0x4, 0x2, 0x22c}) r4 = io_uring_setup(0x7a87, &(0x7f00000002c0)={0x0, 0xa8ff, 0x4, 0x2, 0x1fc}) syz_io_uring_setup(0x2cb6, &(0x7f0000000340)={0x0, 0x6c62, 0x0, 0x1, 0x19f, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3c}, 0xcd9f19b2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000480)={'vlan1\x00', {0x2, 0x0, @dev}}) recvmsg(r3, &(0x7f0000000680)={&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)=""/137, 0x89}], 0x1, &(0x7f0000000640)=""/27, 0x1b}, 0x40000001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x891b, &(0x7f0000000700)={'ip6gretap0\x00', {0x2, 0x0, @initdev}}) r7 = accept4(r6, &(0x7f0000000740)=@l2tp6={0xa, 0x0, 0x0, @initdev}, &(0x7f00000007c0)=0x80, 0x447ab2c3902b2899) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000800)={'wg0\x00', {0x2, 0x0, @remote}}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000840)=0x6) [ 72.212471] audit: type=1400 audit(1751944540.689:7): avc: denied { execmem } for pid=275 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:15:40 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x4, 0x3f, 0x6f, 0x8001, 0x7fffffff, 0x8001, 0x9, 0x4}, &(0x7f0000000040)={0x8, 0x9, 0x7fffffff, 0x608, 0x3f, 0x8, 0x6, 0x1}, &(0x7f0000000080)={0x2, 0x7f, 0x14, 0x10000, 0x7, 0x9, 0x6d0, 0xfffffffffffffa3d}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, r0, 0x1) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "bdd3f2b62a269e4ed591ca66b31018df66903c2df12166292e724d43c49ac0b802f4ded9336083666f8ed3e0e128945506affc30486f7b7897e22bcb99969ec8", 0x27}, 0x48, 0x0) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000480)={0x40, 0x18, 0x0, 0xfb, "480cd62aaea7bf24d1031582aa79efa63d8711d488a12d1d7b19ebf0db8ae62e"}) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f00000004c0)) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r3, &(0x7f0000000580)='id_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r2) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, r1) r4 = add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @desc3}, &(0x7f0000000700)={0x0, "b09c3139a5a661f97e232ccad3f6f3d2b8e0470b1626d05382fe80dd69d8714a123cc4c20668a0a230dc30abfa5fcefa2094d565eff16b8fa78a08fbd349db9b", 0x22}, 0x48, r1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e20, 0xfe5, @local, 0x5a}}, 0x0, 0x0, 0x48, 0x0, "e6a88b5c0454bfd1d30eda147edf4c2432abe87694bf77d0530c4ffbab8cebf0a2ff1f16603a291eff933287855b33e3a0dc89cc4b642e9b2af043cd1e7faf54bdd908ad98ea06134ca272f9f2a8fc68"}, 0xd8) r5 = add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r5) keyctl$clear(0x7, r4) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc1}, &(0x7f0000000980)={0x0, "2a3554cb8c4b05f7c0ec07aeacc8b692991934d4f3bcfabd7ee8910bf35e22542af64a6dee36951a90c20156a431c8592bff30b7e86894fffa81eea80fcc1342", 0x3a}, 0x48, 0xfffffffffffffffb) 03:15:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0xc044404}, 0x80) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) socketpair(0x3c, 0x800, 0x101, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)={0x420, 0x3f4, 0x1, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x3c, [0x200, 0x7, 0x1, 0xfffffff9, 0xf57f, 0x7, 0xffffffff, 0x9000000, 0x9, 0x3, 0x0, 0x5, 0x9, 0x6, 0x6a6e, 0x800000, 0x1, 0xffffffff, 0x80000000, 0x7fff, 0x3, 0x4, 0x20, 0x5, 0x7f, 0x9, 0x8, 0x4, 0x9, 0x5, 0x20f, 0xf82, 0x5, 0x7fff, 0x4, 0x400, 0xd1, 0x9, 0x1000, 0x0, 0x2, 0x6f, 0x3ff, 0x1, 0x3ff, 0xffffff7f, 0x7ff, 0xb3d, 0x1, 0x4, 0x7, 0x4, 0x80000000, 0x1, 0x6, 0x800, 0x8, 0x3, 0x0, 0x8, 0x7, 0x9, 0xfffffffd, 0x8], [0x4, 0x6, 0x3ff, 0x1e, 0x470, 0x0, 0x44200000, 0x7a8, 0x2, 0x8000, 0x5, 0x8000000, 0x3, 0x4, 0x24, 0xfffffffd, 0x0, 0x4, 0x7f, 0x1, 0xffff, 0x0, 0x3, 0x95b, 0xfff, 0x8, 0x1000, 0x3, 0x0, 0x101, 0x1, 0x8, 0x433, 0x64d9, 0x4, 0x311, 0x7, 0x2, 0x5, 0x9, 0x5, 0xfc0000, 0x8, 0x9, 0x9, 0x8, 0x1, 0x5, 0xc, 0x6, 0x800, 0xfff, 0x1, 0x20, 0x67d, 0xa0000000, 0x8, 0x7, 0x3cf, 0x3, 0x0, 0x3ff, 0x100, 0x4], [0x0, 0xb5, 0x80000000, 0x8, 0x800, 0x7, 0x7ff, 0x20, 0xbd24, 0x5, 0x81, 0xffffffff, 0xa2a, 0x40, 0x7, 0x1, 0x0, 0x23, 0x6, 0x0, 0x1000, 0x4fb, 0x9, 0x7, 0x4, 0x3, 0x80, 0x10001, 0x6, 0x3, 0x4, 0xffffffff, 0x9, 0x40, 0x400, 0x63e8, 0x80000000, 0x400000, 0xcd, 0xffffffff, 0x8000, 0x7fffffff, 0x9bb, 0x1, 0xffffffff, 0x6, 0x800, 0x7, 0x1, 0x9, 0x1f, 0x5, 0xfffffffe, 0x4, 0x1ff, 0x0, 0x8, 0x0, 0x9, 0x3, 0x1, 0xb9, 0xd6f, 0x3], [0x4, 0x3f, 0x1, 0x80000000, 0xfffff4f9, 0xc1, 0x2, 0xfffffffa, 0x800, 0xea, 0x9, 0x40, 0x0, 0x6, 0x4, 0xef47, 0x401, 0x6, 0x5, 0x44, 0x3, 0x7, 0xfffffffd, 0x5, 0x40, 0x7, 0x8, 0x581, 0x1, 0xfffffffd, 0x8, 0x9, 0x79a, 0x68, 0x9, 0x0, 0x9cf9, 0x5, 0x8, 0x6, 0x2, 0xffff4bfb, 0xf0a9, 0x20, 0x824, 0x80, 0x4, 0x1f, 0xa25, 0x2, 0x401, 0xffffffe1, 0x0, 0x69, 0x7fffffff, 0x1, 0xd, 0x80000, 0x7, 0x9, 0xdac3, 0x10000, 0x200, 0x80000001]}, ["", "", "", ""]}, 0x420}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3d}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xfb}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x20040841) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0xd2bf49c81524c032, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000980), 0x200040, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x4000040) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000ac0)) ioctl$RNDZAPENTCNT(r6, 0x5204, &(0x7f0000000b00)=0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r8 = accept4(0xffffffffffffffff, &(0x7f0000000cc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000d40)=0x80, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000c80), r8) 03:15:40 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r0, 0x1) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x230, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x114, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe83}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffeff}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x5, 0x6, 0x1, 0x6}, {0x6, 0x24, 0x20, 0x6}, {0x101, 0x40, 0x9, 0xf0a}, {0x8, 0xfc, 0x6, 0x3}, {0x1, 0x2, 0x1f, 0x2}, {0x3, 0x0, 0x91, 0xb9e0000}, {0x100, 0x7, 0x7f, 0x1}, {0x9, 0x7f, 0x3d, 0x3}, {0x6, 0xfd, 0xb0, 0x9}]}}}]}}]}, 0x230}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x8010, r0, 0xeaf07000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) r5 = perf_event_open$cgroup(&(0x7f0000000400)={0x1, 0x80, 0x6, 0x9, 0x2, 0x7a, 0x0, 0x8, 0x800, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x69, 0x2, @perf_config_ext={0x4, 0x1}, 0x52488, 0x0, 0x800, 0x3, 0x2, 0x40, 0x7fff, 0x0, 0x2, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xc) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x8010, r5, 0x5) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0xfffffffffffffffe) recvmsg(r4, &(0x7f0000001740)={&(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000500)=""/209, 0xd1}, {&(0x7f0000000600)=""/15, 0xf}, {&(0x7f0000000640)=""/139, 0x8b}], 0x3, &(0x7f0000000740)=""/4096, 0x1000}, 0x40002020) socketpair(0x24, 0x800, 0x4, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000017c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000001800)) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x9) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x4c, r9, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd18}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3654446c}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x4c}}, 0xc8c0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000019c0)={'vcan0\x00'}) 03:15:41 executing program 4: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x32}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:dpkg_var_lib_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8084}, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)='./file0\x00', 0x400, 0x0, 0x1}, 0x1) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, r0, r1) request_key(&(0x7f0000000380)='logon\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='system_u:object_r:dpkg_var_lib_t:s0\x00', r1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000440)={{0x0, 0x80, 0x0, 0x8, 0x54c, 0xffffffff00000001, 0x2, 0x4, 0x7, 0x3, 0x7, 0x9, 0x31, 0xfffffffffffffe2f, 0x6}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000700)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "0b7357ecc92dc7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001700)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "2325b90e44721f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002900)={0x10000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x29, "e45ba8017c2f14"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003900)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003b00)={0x171, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1f, "d679ed5cd5dbfe"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000004b00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004d00)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x44, "0bf938550b0050"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005f00)={0x418, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x80, "14d48d924b47e3"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000006f00)={{0x0, 0x400, 0xfffffffffffffffc, 0xfffffffffffff633, 0x3, 0x2, 0x4, 0x8, 0x0, 0x800, 0x9, 0x3, 0x8, 0x5, 0x7}}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007f00)={{0x0, 0x3b75e78c, 0x2bd875a, 0x7fc000000000000, 0xfffffffffffffffe, 0x3, 0x2c, 0x80000000, 0x5, 0x1, 0x81, 0x80000001, 0x8}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000648c0)={0x4, [{r2}, {r3, r4}, {r5, r6}, {r7}, {r8}, {r9}, {}, {0x0, r10}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r12}, {r13}, {r14}, {r15}], 0x63, "75e611539c01ae"}) [ 73.458048] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.461752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.464596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.466076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.467879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.470099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.471996] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.473459] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.477695] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.478548] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.482357] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.484034] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.486152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.489000] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.499801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.502416] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.505428] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.507214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.512143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.514820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.557742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.561683] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.563996] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.565824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.567050] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.570304] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.571529] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.573604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.576123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.578866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.591527] [ 73.592493] ============================= [ 73.593111] WARNING: suspicious RCU usage [ 73.593756] 6.16.0-rc4-next-20250704 #1 Not tainted [ 73.595160] ----------------------------- [ 73.596358] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.596798] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 73.600047] [ 73.600047] other info that might help us debug this: [ 73.600047] [ 73.600290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.601678] [ 73.601678] rcu_scheduler_active = 2, debug_locks = 1 [ 73.606518] 3 locks held by syz-executor.6/282: [ 73.607241] #0: ffff888009818400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 73.608562] #1: ffff8880090e6618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 73.610024] #2: ffff88801c381cb8 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 73.610154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.611391] [ 73.611391] stack backtrace: [ 73.612944] CPU: 0 UID: 0 PID: 282 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250704 #1 PREEMPT(voluntary) [ 73.612971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 73.612983] Call Trace: [ 73.612991] [ 73.612999] dump_stack_lvl+0xfa/0x120 [ 73.613026] lockdep_rcu_suspicious+0x152/0x1c0 [ 73.613052] proc_sys_compare+0x28a/0x340 [ 73.613073] ? __pfx_proc_sys_compare+0x10/0x10 [ 73.613095] d_same_name+0x229/0x2e0 [ 73.613129] d_alloc_parallel+0x7c1/0x1330 [ 73.613171] ? __pfx_d_alloc_parallel+0x10/0x10 [ 73.613194] ? lock_is_held_type+0x9e/0x120 [ 73.613215] ? __pfx_default_wake_function+0x10/0x10 [ 73.613246] ? __d_lookup+0x25f/0x490 [ 73.613277] lookup_open.isra.0+0x64f/0x1530 [ 73.613309] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 73.613352] ? mnt_get_write_access+0x81/0x2d0 [ 73.613371] ? mnt_get_write_access+0x1ea/0x2d0 [ 73.613399] path_openat+0xc26/0x2880 [ 73.613437] ? __lock_acquire+0x694/0x1b70 [ 73.613458] ? __pfx_path_openat+0x10/0x10 [ 73.613496] do_filp_open+0x1e8/0x450 [ 73.613525] ? __pfx_do_filp_open+0x10/0x10 [ 73.613565] ? find_held_lock+0x2b/0x80 [ 73.613593] ? alloc_fd+0x2c1/0x560 [ 73.613619] ? lock_release+0xc8/0x290 [ 73.613645] ? alloc_fd+0x2c1/0x560 [ 73.613681] do_sys_openat2+0x104/0x1b0 [ 73.613704] ? __pfx_do_sys_openat2+0x10/0x10 [ 73.613730] ? __fput+0x67b/0xb50 [ 73.613757] __x64_sys_openat+0x142/0x200 [ 73.613781] ? __pfx___x64_sys_openat+0x10/0x10 [ 73.613804] ? __pfx_fput_close_sync+0x10/0x10 [ 73.613838] do_syscall_64+0xbf/0x360 [ 73.613863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.613884] RIP: 0033:0x7f8578053a04 [ 73.613901] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 73.613920] RSP: 002b:00007ffda2cb62d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 73.613940] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f8578053a04 [ 73.613953] RDX: 0000000000080001 RSI: 00007f857810a29e RDI: 00000000ffffff9c [ 73.613967] RBP: 00007f857810a29e R08: 0000000000000000 R09: 00007ffda2cb62c0 [ 73.613979] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 73.613992] R13: 00007ffda2cb6370 R14: 0000000000000000 R15: 00000000000000f8 [ 73.614020] [ 73.689797] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.697608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.704511] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 73.705630] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.767057] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.783032] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.793489] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 75.539649] Bluetooth: hci4: command tx timeout [ 75.539920] Bluetooth: hci2: command tx timeout [ 75.602585] Bluetooth: hci1: command tx timeout [ 75.603269] Bluetooth: hci5: command tx timeout [ 75.603999] Bluetooth: hci0: command tx timeout [ 75.731348] Bluetooth: hci3: command tx timeout [ 75.794421] Bluetooth: hci6: command tx timeout [ 75.858272] Bluetooth: hci7: command tx timeout [ 77.587093] Bluetooth: hci4: command tx timeout [ 77.587681] Bluetooth: hci2: command tx timeout [ 77.650256] Bluetooth: hci5: command tx timeout [ 77.650414] Bluetooth: hci1: command tx timeout [ 77.651627] Bluetooth: hci0: command tx timeout [ 77.779389] Bluetooth: hci3: command tx timeout [ 77.843295] Bluetooth: hci6: command tx timeout [ 77.907535] Bluetooth: hci7: command tx timeout [ 79.634377] Bluetooth: hci2: command tx timeout [ 79.637207] Bluetooth: hci4: command tx timeout [ 79.698254] Bluetooth: hci1: command tx timeout [ 79.698324] Bluetooth: hci5: command tx timeout [ 79.698674] Bluetooth: hci0: command tx timeout [ 79.826231] Bluetooth: hci3: command tx timeout [ 79.890436] Bluetooth: hci6: command tx timeout [ 79.954246] Bluetooth: hci7: command tx timeout [ 81.682252] Bluetooth: hci4: command tx timeout [ 81.682732] Bluetooth: hci2: command tx timeout [ 81.746286] Bluetooth: hci0: command tx timeout [ 81.747388] Bluetooth: hci5: command tx timeout [ 81.747789] Bluetooth: hci1: command tx timeout [ 81.874309] Bluetooth: hci3: command tx timeout [ 81.939223] Bluetooth: hci6: command tx timeout [ 82.002341] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 03:15:42 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=1ffff110058a5ebd RCX=ffffffff81549540 RDX=ffff88801a300000 RSI=ffffffff8154952e RDI=0000000000000001 RBP=0000000000000001 RSP=ffff88802c52f5e0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000002a R13=0000000000000200 R14=ffff888034ed9b80 R15=ffff88802c52f6a0 RIP=ffffffff81549530 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556ecbf400 00000000 00000000 GS =0000 ffff8880e55f3000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f857810a27c CR3=000000002db1a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b5a45 RDI=ffffffff8871dee0 RBP=ffffffff8871dea0 RSP=ffff888034eef500 R8 =0000000000000000 R9 =ffffed1001478046 R10=0000000000000074 R11=0000000000000001 R12=0000000000000074 R13=0000000000000010 R14=ffffffff8871dea0 R15=ffffffff828b5a30 RIP=ffffffff828b5a9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56f3000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f29f7c5d5a0 CR3=000000000f8cd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041530e2000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000