Warning: Permanently added '[localhost]:29852' (ECDSA) to the list of known hosts. 2025/07/08 03:20:01 fuzzer started 2025/07/08 03:20:02 dialing manager at localhost:42083 syzkaller login: [ 51.068759] cgroup: Unknown subsys name 'net' [ 51.139924] cgroup: Unknown subsys name 'cpuset' [ 51.165282] cgroup: Unknown subsys name 'rlimit' 2025/07/08 03:20:13 syscalls: 201 2025/07/08 03:20:13 code coverage: enabled 2025/07/08 03:20:13 comparison tracing: enabled 2025/07/08 03:20:13 extra coverage: enabled 2025/07/08 03:20:13 setuid sandbox: enabled 2025/07/08 03:20:13 namespace sandbox: enabled 2025/07/08 03:20:13 Android sandbox: enabled 2025/07/08 03:20:13 fault injection: enabled 2025/07/08 03:20:13 leak checking: enabled 2025/07/08 03:20:13 net packet injection: enabled 2025/07/08 03:20:13 net device setup: enabled 2025/07/08 03:20:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/08 03:20:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/08 03:20:13 USB emulation: enabled 2025/07/08 03:20:13 hci packet injection: enabled 2025/07/08 03:20:13 wifi device emulation: enabled 2025/07/08 03:20:13 802.15.4 emulation: enabled 2025/07/08 03:20:13 fetching corpus: 0, signal 0/0 (executing program) 2025/07/08 03:20:15 starting 8 fuzzer processes 03:20:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58bcd9a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1be5558}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ca6243e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7da25d44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bbc19db}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b5}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5508cb29}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d5a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6530}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x410f9380}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4040890}, 0xc811) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x28000c0}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf8, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_DATA={0x30, 0xc5, "551a3a92639b67f3afff7c71c2c29fd3e2d12899ce9c0787daff0f208d4c2218b7f9ae3f81f1b056e9a5bf7d"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x99, 0xc5, "810e77d8c2b6f211ec888b5780d4d135fe2aa3ce7201242acf66fe4e432e92bd05015bc9dca530176498090c8e9b4cf5d8451426a2b6dfa986f53020df43c47af561b730a1f2bf15299c01479dc9f1d322b86cdea0abaabead9c4c2523e01910fddd20fcdb4e4774b223c3e4392c01f227d1ee35c743048f9c93e339cad8b4495bc4b6e640aa77652d0341cc8b82eb54c14377aa69"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x404c810) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x80840}, 0x24000000) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000500), r0) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4c041) r5 = syz_open_dev$mouse(&(0x7f0000000600), 0x5, 0x200000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048884}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r6) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x2000, 0x0) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r7, 0x2, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f00000008c0), 0x7c1, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r7, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000b80)={&(0x7f0000000a00), 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xf0, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_RRK={0xc3, 0xfc, "ee8681c6e08737514bc65e4723066be1bb33e2ba69f3e083a2ae19d8955f8d677b980f838f334d07b27488f6522b9b5fe5aa852a26183cb67b061dc6fd65a28080f43c6c0a6514aaba3ac15ee7dfc46fb5ce305f6d9a956789bdc4ea88af4c67df503120c27a0e658b6763a9a6fb789a391d4b5af9edde4bfa0cfd9bda34af00d9697741d38833c4890ef48e4878825ae1d53cdc9bce566d954df282dd02dbfa6252c09d279c5326397061b9afa511a4c2dbc13897ec13b00dd210ab082d8e"}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PBSS={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x48400}, 0x90) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 03:20:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x10) r3 = syz_open_dev$mouse(&(0x7f0000000140), 0x3271c043, 0x40002) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}}, 0x21) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1a, 0xfffffffc, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000000) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x84051400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x3, 0x29b4, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}}, 0x4080) syz_genetlink_get_family_id$fou(&(0x7f0000000480), r3) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000540)={0x2fc, 0x14, 0x10, 0x70bd28, 0x25dfdbfb, {0x2a, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x73, 0x1, "860d9caefb5571a70a3f9be2ba126a440299a46572327b765654c1c661e03e7884cdddb1b154ce2b5c6868ebcfe9f1bab92c9749cc6c9cbd64368f97e88a56f7bcca57dfade939923e73eacb04f407e7ba484326bd665202b119349726f441578b2d45a049c7d197631b1a09f81e75"}, @INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "9c848579e59bcff37da1d25845b9f8936220d5fed2c9b0cc81e954ac40b0db175636a3275e9adb7e25"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "1172ceb854c6d00d6fabe32d9539faeae148d9cdbaef4d0a90353e3c3725835e3436c3119dec39f8cee199c27de1105d437a299bb4374c96668d37ba792812eac837884098e435693be6ae8c0fa2be82fc8dbf1ae1de5d1488a8d6f3235e7b0adf1b372077a7cb9d1a3f00db11a914243cf25f3905ded926669d5034ff8743bd87107fb58b410783d1972a714ed6ec8f34884e0da317a5da883525881fcf85ff7b5cfc7fd6788da14e0d2edbe6dc3201271d30a89defb90655d86fc3b2d1fedf17d2a3286ad23e7ed351553821859bf197db80e0720e839e0a3030d965e1c761fb338363f394"}, @INET_DIAG_REQ_BYTECODE={0xd0, 0x1, "d0cca5bb682f5d73a27b8d64f1cbe02eb4c0dbbea57ea8cac7aef6c41ec11a04c3d30b98761b7dea83a2e4e8e5a9f4d43dd7dfed9bf07cd76582323a529e853f73ee5a885a7318911d6234c68a4cc44d1c08d05320ad5b292464f99d0f8592116a7d88277340e9cff1f2b8b166737bde56c3b29ed474498604c7c10e4984145256afeb691b645f792c6819b3b1abb4c870176b182ffd4073b960c2580e5738e8ddfb855b722c496fd9039dbcc8f818421c5ebeac47812c5e3f9c089884962474518f338c9f8daa574bd5e02d"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "8b2d5798c53be738d17419bf1c725d573770129248f97d2b999f5f12c9da06ff364c466606dd48daf95388fbeaea05fd2a93ce98f1e79a822bab9a17f62f9628ab52a4a2c19be68d479259f8b39a77f8e69925f7815ae4fb451db96018a5320974555f48b3e0059eabdd065bcd3f8c1a27098a2076f5bd005126b7f471dd852de6eeeb"}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x841}, 0x40) r5 = getpgid(0x0) ptrace$pokeuser(0x6, r5, 0xbf8, 0x8e1) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0xea11c0655e1c5a61}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x78, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7e02f3ae79b3f17e, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0xfb0f0dc92e56ca28) syz_genetlink_get_family_id$net_dm(&(0x7f0000000a00), r1) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x204209}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r6, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000844) ptrace$getregs(0xc, r5, 0x7, &(0x7f0000000b80)=""/12) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r6, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x19, 0x7, @udp='udp:syz0\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x400400c}, 0x200400c2) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 03:20:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000050}, 0x1) r1 = socket(0x0, 0x3, 0x9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0xd8da1f40826a261b, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) process_vm_readv(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/167, 0xa7}], 0x2, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/165, 0xa5}], 0x1, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000015c0), 0x2000, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001700)={'batadv0\x00', 0x0}) r7 = syz_open_dev$mouse(&(0x7f0000001740), 0x80000000, 0x80000) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000001b40)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b00)={&(0x7f00000018c0)={0x22c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4004080}, 0x44004) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x30, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x300440a0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001cc0), r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x30, r8, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x3600114ee444b9e8}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_TID={0xc}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x884) 03:20:15 executing program 3: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x102044c8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x91) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x10) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x840) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x28}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfb}]}, 0x34}, 0x1, 0x0, 0x0, 0x200040f0}, 0x44000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x38}}, 0x20000000) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000006c0), 0x111640, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r5) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r0, 0xe06, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r5) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x5c, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008801}, 0x5000) 03:20:15 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'nr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x170, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) r6 = syz_open_dev$mouse(&(0x7f0000000400), 0x37, 0x480580) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r6) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r8, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f0}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x44000) timerfd_settime(r6, 0x0, &(0x7f0000000580)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000005c0)) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4000) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x403, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) r9 = syz_open_dev$mouse(&(0x7f0000000800), 0x6, 0x200082) sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r8, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x762aa7af}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r9) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r9) sendmsg$ETHTOOL_MSG_DEBUG_GET(r9, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r10, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) [ 63.392546] audit: type=1400 audit(1751944815.166:7): avc: denied { execmem } for pid=272 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:20:15 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80101032}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xac}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x43f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}}, 0x41) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x840) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffd}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x8004) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000700), 0x280000, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, r3, 0x900, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_I_TEI={0x8}]}, 0x64}}, 0x8810) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r5, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb1b9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x108008}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x84, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x1}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x16a}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3ff}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7ff}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x40) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4f6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4e0}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000811) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), r4) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xfffffff8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) 03:20:15 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004040}, 0x40) r1 = socket(0x11, 0x800, 0x1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x10001, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}}, 0x40010) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x70}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x80400d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}]}, 0x2c}}, 0x4000010) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400102}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x5b}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) modify_ldt$read(0x0, &(0x7f0000000700)=""/163, 0xa3) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000007c0)={0x28, 0x30, 0xc, 0x19, 0xb, 0xfffffbff, 0x2, 0x6d, 0xffffffffffffffff}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000940)) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000980)) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r3, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x76}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 03:20:15 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x208200, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000001) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbfe}, 0x1c}}, 0x4000040) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8110210}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa86445dede2fb51a}, 0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r3, 0x10, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x200400c0}, 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xf, 0x13, [{0x2, 0x1}, {0x1b, 0x1}, {0x18}, {0x30}, {0x24, 0x1}, {0x16}, {0xc}, {0x6c, 0x1}, {0x5}, {0x2d}, {0x3, 0x1}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x20048050) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, 0x0, 0x11, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0x16}, {}, {0x18, 0x1}, {0x6, 0x1}, {0x9, 0x1}, {0x18}, {0x49b8f24a6d9cff40}, {0xb, 0x1}, {0x30}, {0xb, 0x1}, {0x48}, {0xb, 0x1}, {0xb, 0x1}, {0x30}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x80) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000a80), 0x355940, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'ipvlan0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x54, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x54}}, 0x4000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x50, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0xc024) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000d80), 0xc, &(0x7f0000001200)={&(0x7f0000000dc0)={0x440, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36fccdf0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48145ff0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb322}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ee1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a33}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ae79de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f1c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49a5a9e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4514b9e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41f7d26c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9335}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6959}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53bc}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa631}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac93}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57748b13}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x58f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77366414}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4474}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e7c471}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33b7dbd6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1383906b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab6e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6eb76c55}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8348}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf049}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9a36175}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x491f80ca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13456e05}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x174, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e22cc5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76fa4cfa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d7e4935}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d65bf65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18eebebf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2742e04c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3662b989}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ac64563}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f26d00f}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cedfaff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54065efa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44883b66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26a7873f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x244be4fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ba8bade}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52b6838c}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd29fd54}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36b8f74f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b091518}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcf496fd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x9c, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6574}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a472c02}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d8f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17a9f6b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fc21c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f053664}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa65a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9a7}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f6503b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a71}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x498713e3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a8a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbdbd}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad67}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7a1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67b1c6ed}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3db8a447}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b64e830}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2514}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d76}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x70c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3231}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ada45c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa56ce86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x290b}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5387a5e3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bd5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15470f56}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5843466a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf2f9259}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x440}, 0x1, 0x0, 0x0, 0x24000001}, 0x80) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x120, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008090) [ 64.622611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.626199] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.628926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.633794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.640899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.684804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.691688] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.694545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.696934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.698174] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.703379] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.706541] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.708570] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.709842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.711086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.717473] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.720020] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.724780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.727750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.729495] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.734169] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.735751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.753786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.756590] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.759875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.762627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.776986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.801645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.807070] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.808768] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.815202] [ 64.815982] ============================= [ 64.816718] WARNING: suspicious RCU usage [ 64.817431] 6.16.0-rc4-next-20250704 #1 Not tainted [ 64.820358] ----------------------------- [ 64.824644] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 64.825925] [ 64.825925] other info that might help us debug this: [ 64.825925] [ 64.827297] [ 64.827297] rcu_scheduler_active = 2, debug_locks = 1 [ 64.828425] 3 locks held by syz-executor.4/282: [ 64.829256] #0: ffff88800f548400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 64.830797] #1: ffff88800ba4a618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 64.832492] #2: ffff8880195f7270 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 64.834094] [ 64.834094] stack backtrace: [ 64.834868] CPU: 1 UID: 0 PID: 282 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250704 #1 PREEMPT(voluntary) [ 64.834898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 64.834911] Call Trace: [ 64.834919] [ 64.834931] dump_stack_lvl+0xfa/0x120 [ 64.834972] lockdep_rcu_suspicious+0x152/0x1c0 [ 64.835007] proc_sys_compare+0x28a/0x340 [ 64.835029] ? __pfx_proc_sys_compare+0x10/0x10 [ 64.835054] d_same_name+0x229/0x2e0 [ 64.835094] d_alloc_parallel+0x7c1/0x1330 [ 64.835133] ? __pfx_d_alloc_parallel+0x10/0x10 [ 64.835162] ? __pfx_default_wake_function+0x10/0x10 [ 64.835197] ? __d_lookup+0x25f/0x490 [ 64.835240] lookup_open.isra.0+0x64f/0x1530 [ 64.835276] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 64.835323] ? mnt_get_write_access+0x81/0x2d0 [ 64.835345] ? mnt_get_write_access+0x1ea/0x2d0 [ 64.835375] path_openat+0xc26/0x2880 [ 64.835418] ? __lock_acquire+0x694/0x1b70 [ 64.835442] ? __pfx_path_openat+0x10/0x10 [ 64.835485] do_filp_open+0x1e8/0x450 [ 64.835518] ? __pfx_do_filp_open+0x10/0x10 [ 64.835563] ? find_held_lock+0x2b/0x80 [ 64.835595] ? alloc_fd+0x2c1/0x560 [ 64.835624] ? lock_release+0xc8/0x290 [ 64.835653] ? alloc_fd+0x2c1/0x560 [ 64.835693] do_sys_openat2+0x104/0x1b0 [ 64.835719] ? __pfx_do_sys_openat2+0x10/0x10 [ 64.835748] ? __fput+0x67b/0xb50 [ 64.835778] __x64_sys_openat+0x142/0x200 [ 64.835805] ? __pfx___x64_sys_openat+0x10/0x10 [ 64.835830] ? __pfx_fput_close_sync+0x10/0x10 [ 64.835869] do_syscall_64+0xbf/0x360 [ 64.835897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.835920] RIP: 0033:0x7f74c067aa04 [ 64.835945] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 64.835976] RSP: 002b:00007ffcccd35ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 64.836003] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f74c067aa04 [ 64.836018] RDX: 0000000000080001 RSI: 00007f74c0731286 RDI: 00000000ffffff9c [ 64.836033] RBP: 00007f74c0731286 R08: 0000000000000000 R09: 00007ffcccd35ec0 [ 64.836047] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 64.836060] R13: 00007ffcccd35f70 R14: 0000000000000000 R15: 00000000000000f8 [ 64.836092] [ 64.873651] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.874281] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.923702] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.927751] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.929408] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.940699] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.969498] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.979935] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.004576] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.004793] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.717616] Bluetooth: hci0: command tx timeout [ 66.780447] Bluetooth: hci3: command tx timeout [ 66.844332] Bluetooth: hci2: command tx timeout [ 66.844961] Bluetooth: hci1: command tx timeout [ 67.037303] Bluetooth: hci5: command tx timeout [ 67.038070] Bluetooth: hci4: command tx timeout [ 67.100464] Bluetooth: hci7: command tx timeout [ 67.164300] Bluetooth: hci6: command tx timeout [ 68.765405] Bluetooth: hci0: command tx timeout [ 68.829341] Bluetooth: hci3: command tx timeout [ 68.894104] Bluetooth: hci2: command tx timeout [ 68.894611] Bluetooth: hci1: command tx timeout [ 69.086244] Bluetooth: hci4: command tx timeout [ 69.086696] Bluetooth: hci5: command tx timeout [ 69.149454] Bluetooth: hci7: command tx timeout [ 69.214363] Bluetooth: hci6: command tx timeout [ 70.814248] Bluetooth: hci0: command tx timeout [ 70.876399] Bluetooth: hci3: command tx timeout [ 70.941338] Bluetooth: hci2: command tx timeout [ 70.941779] Bluetooth: hci1: command tx timeout [ 71.133329] Bluetooth: hci4: command tx timeout [ 71.133793] Bluetooth: hci5: command tx timeout [ 71.197371] Bluetooth: hci7: command tx timeout [ 71.261247] Bluetooth: hci6: command tx timeout [ 72.862247] Bluetooth: hci0: command tx timeout [ 72.925458] Bluetooth: hci3: command tx timeout [ 72.988350] Bluetooth: hci2: command tx timeout [ 72.988768] Bluetooth: hci1: command tx timeout [ 73.181375] Bluetooth: hci4: command tx timeout [ 73.181842] Bluetooth: hci5: command tx timeout [ 73.246230] Bluetooth: hci7: command tx timeout [ 73.309385] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 03:20:16 Registers: info registers vcpu 0 RAX=00000000c1e6653e RBX=ffff8880094f8000 RCX=f27087f8c1e6653e RDX=000000009163fb2f RSI=00000000e44f3501 RDI=00000000a87e68b7 RBP=ffff8880094f8a58 RSP=ffff888009547310 R8 =0000000000000003 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff8880094f8ad0 R13=0000000075b33030 R14=0000000000000000 R15=0000000000000003 RIP=ffffffff8151947a RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd01614a900 00000000 00000000 GS =0000 ffff8880e55f3000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4f4f9a6070 CR3=000000000f60e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f5bde7ac7c000007f5bde7ac7c8 XMM02=00007f5bde7ac7e000007f5bde7ac7c0 XMM03=00007f5bde7ac7c800007f5bde7ac7c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b5a45 RDI=ffffffff8871dee0 RBP=ffffffff8871dea0 RSP=ffff88801399f2b8 R8 =0000000000000000 R9 =ffffed10013e6046 R10=000000000000002d R11=0000000000000001 R12=000000000000002d R13=0000000000000010 R14=ffffffff8871dea0 R15=ffffffff828b5a30 RIP=ffffffff828b5a9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555557df4400 00000000 00000000 GS =0000 ffff8880e56f3000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f74c06b6ca0 CR3=000000002ebd7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000