Warning: Permanently added '[localhost]:38674' (ECDSA) to the list of known hosts. 2025/07/02 03:33:05 fuzzer started 2025/07/02 03:33:05 dialing manager at localhost:37637 syzkaller login: [ 50.869584] cgroup: Unknown subsys name 'net' [ 50.940305] cgroup: Unknown subsys name 'cpuset' [ 50.958550] cgroup: Unknown subsys name 'rlimit' 2025/07/02 03:33:17 syscalls: 210 2025/07/02 03:33:17 code coverage: enabled 2025/07/02 03:33:17 comparison tracing: enabled 2025/07/02 03:33:17 extra coverage: enabled 2025/07/02 03:33:17 setuid sandbox: enabled 2025/07/02 03:33:17 namespace sandbox: enabled 2025/07/02 03:33:17 Android sandbox: enabled 2025/07/02 03:33:17 fault injection: enabled 2025/07/02 03:33:17 leak checking: enabled 2025/07/02 03:33:17 net packet injection: enabled 2025/07/02 03:33:17 net device setup: enabled 2025/07/02 03:33:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/02 03:33:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/02 03:33:17 USB emulation: enabled 2025/07/02 03:33:17 hci packet injection: enabled 2025/07/02 03:33:17 wifi device emulation: enabled 2025/07/02 03:33:17 802.15.4 emulation: enabled 2025/07/02 03:33:17 fetching corpus: 0, signal 0/0 (executing program) 2025/07/02 03:33:18 starting 8 fuzzer processes 03:33:18 executing program 0: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000000)={0x3, 0xffffffff, 0x8, 0x0, 0x7fffffff, 0x1000}) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x5b1, 0x80800) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000080)={0x2, 0x3, 0x6, 0x10001, 0x7, 0xffffffff}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x95076719d985506b, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c840}, 0x20000000) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004890}, 0x800) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c1}, 0x44091) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c8c1}, 0x44) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1b}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040000}, 0x40010) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r3, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x32}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8001) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf0}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x417581464b9eb1d1}, 0x20000000) r4 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000c00)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x4, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@posixacl}], [{@context={'context', 0x3d, 'user_u'}}]}}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 03:33:18 executing program 1: sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xfe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x810) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080c}, 0x1) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x42}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r7, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket(0xf, 0x1, 0x3) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x80010) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x6c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "531064c8b039db27a25179118e4bd231a7b30bf09ca37bc489db30e6098499cb"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "45746d8a45f66f3448d42da11be8da81"}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r9, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xbd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) 03:33:18 executing program 2: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = geteuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_any}, {@cache_fscache}, {@loose}, {@fscache}, {@access_any}, {@cache_mmap}, {@privport}, {@access_client}, {@privport}], [{@context={'context', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@uid_eq={'uid', 0x3d, r0}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r2}}, {@pcr={'pcr', 0x3d, 0xa}}, {@uid_gt={'uid>', r3}}]}}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r5, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/234, 0xea}, {&(0x7f0000000700)=""/212, 0xd4}], 0x5, &(0x7f0000000880)=""/10, 0xa}, 0x0, 0x123, 0x1, {0x1}}, 0x400) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000009c0), 0xb4640, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.net/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x80084, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@loose}, {@mmap}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@mmap}, {@nodevmap}, {@fscache}, {@loose}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'pcr'}}, {@fowner_gt={'fowner>', r1}}]}}) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f0000000b00)) r8 = perf_event_open$cgroup(&(0x7f0000000b80)={0x1, 0x80, 0x5, 0x1f, 0xc1, 0x81, 0x0, 0x9, 0x1d0041, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa69, 0x0, @perf_bp={&(0x7f0000000b40), 0x9}, 0x8, 0xbc2d, 0xff, 0x2, 0x6, 0x5, 0x3, 0x0, 0x53e, 0x0, 0x6}, 0xffffffffffffffff, 0xd, r6, 0x0) ioctl$PERF_EVENT_IOC_ID(r8, 0x80082407, &(0x7f0000000c00)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000c40)='*/@\x00') r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/self/attr/exec\x00', 0x2, 0x0) r10 = pidfd_getfd(r4, r9, 0x0) process_madvise(r10, &(0x7f0000000d80)=[{&(0x7f0000000cc0)="e5324e0055cc02cf92654b0cd7fabe09a621e220acd33e9244fc46fd3d6b6ef5d6a7de214f7ed46f966b189c03346b522eff1a17d4d35cba3ea6a232d07ca8344837c349c24f7bd914ce8e40b84aa3bd7c2e082fd92bbe75d33dc9e3a6e41fd608cc43e542720397f584067d2224eafccb84d7733d3f316aa41c81277ad6079dbf44da0e75079977d848001fc1d7604d31dc586285f194efd63b9fca5a", 0x9d}], 0x1, 0x6a, 0x0) 03:33:18 executing program 7: ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x2030, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x80000001, 0x0, 0x9, 0x4}, 0xf7af) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x68dd96ff811c7ebf, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x810, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="b198480256f252c687acc9bf88c2303ed5ef19e570a4a47fca0f05632e66cc05e098ac973ec5aaeb50ec", 0x2a}, {&(0x7f0000000240)="66b9d5ed9e85995b7a8e319c0bcd1d15ba3fdd15ee04d04bc0ce8125f0c8e6b93f7e6524ad894c5a7b8c90efe4d38f8a5d200c07cbab0a69bc2ac07f0f37e925c8ca6b61aa48c8326414617d0188c2b5b959d7b54db48ed25de2d87002c470044fabf4cefec6ade5264cebb600e1d6dbbecd294d7053da34d41cfd80c4410d7711a5448fba7675764c3eb52c239e57c2fcf489c02cd1f2024c669fd3f125502588235a60cd136d68b3220524f92ede90c125b9236f3fcf7395238be6b6ca15733fcc13bfa54d49343f7e76875ef9", 0xce}], 0x2}, 0x0, 0x81, 0x1}, 0x1f) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x24}}, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000005c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r3, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x22400000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x100}, 0x80) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r5, 0x404, 0x70bd2c, 0x1, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'vxcan1\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8009) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r6, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40c4) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x100}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x830}, 0x40044) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x9}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xfe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x200448c0) ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000b80)={0x3, 0xbe, 0xd4, 0x81, 0x50, 0xff}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xee8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040081}, 0x800) 03:33:18 executing program 3: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={0x0, 0x71, 0x3d}, &(0x7f0000000040)={'enc=', 'raw', ' hash=', {'wp512-generic\x00'}}, &(0x7f00000000c0)="260a128ef7a97e4d2cce9a8dc94c88cc63fb4b51eb2c6ffcbcd3f1c3cf91ce3899c30caae06f95b9a5ea48cff8afd33a0bbc14a44663e3d8208b5ae5ad255066199b4dd7ec68962e007b503e08c2fac0f572e05e3de68e7709dd6e2dec06b195f21b870990331f1f5ef717f3507af9a072", &(0x7f0000000140)=""/61) shmget(0x3, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r0 = add_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="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", 0x1000, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff9, r0, 0x1) r1 = add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$get_keyring_id(0x0, r1, 0x0) r2 = request_key(&(0x7f00000012c0)='.request_key_auth\x00', &(0x7f0000001300)={'syz', 0x1}, &(0x7f0000001340)='trusted\x00', r0) keyctl$assume_authority(0x10, r2) keyctl$instantiate(0xc, r1, &(0x7f0000001380)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:', 'trusted\x00', 0x20, 0x8}, 0x30, r0) r3 = request_key(&(0x7f00000013c0)='pkcs7_test\x00', &(0x7f0000001400)={'syz', 0x3}, &(0x7f0000001440)=' hash=', r1) keyctl$assume_authority(0x10, r3) keyctl$negate(0xd, r0, 0x9, r2) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) add_key$fscrypt_v1(&(0x7f00000014c0), &(0x7f0000001500)={'fscrypt:', @desc3}, &(0x7f0000001540)={0x0, "49de247ec8b0808df0e93616d54f92672f84078790045cc7c5d24e91a69661ff0acee039295ae31743f900edfaff4c5aca308340f5bab287d31c0dd3c8db329c", 0x35}, 0x48, r3) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x4000001) r4 = add_key(&(0x7f00000016c0)='trusted\x00', &(0x7f0000001700)={'syz', 0x3}, &(0x7f0000001740)="8deebba844c4d9d2975378bf3056df87ef02672b51e3b9db27677969671f3f396ed95bbc0a3fb1178e499bef589f17412d7deafc0897e9a2fc62e65b281b874ae42ad9b7a1fc288f670ecf28b4705e54ed7f42beb03f6186ebfd18aedb9d3d87d600da356f061b19cd71d186bf5d54fb57", 0x71, r3) keyctl$get_keyring_id(0x0, r4, 0x1) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xbd}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004011) add_key$keyring(&(0x7f0000001900), &(0x7f0000001940)={'syz', 0x2}, 0x0, 0x0, r1) [ 63.071969] audit: type=1400 audit(1751427198.296:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:33:18 executing program 5: ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x100000000) r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xbd50) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x63) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0xf7, 0x64, 0x4, 0x0, 0x9, 0x40, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x800, 0xffff, 0x7, 0x6, 0x8, 0x9, 0x400, 0x0, 0xfff, 0x0, 0x3}, 0x0, 0x7, r0, 0x1) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x1010, r2, 0x9) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xb6, 0x80, 0x7f, 0xff, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0xffffffff7fffffff, 0x5}, 0x200, 0xc6c, 0x2, 0x2, 0x0, 0x7, 0x3ff, 0x0, 0x1f, 0x0, 0x80}, 0x0, 0x2, r2, 0x3) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000140)) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0), 0x4) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x6, 0x20, 0x39, 0x4, 0x0, 0x20, 0xe054, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x200, 0x100}, 0x1444, 0xfffffffffffffff8, 0xb08d, 0x1, 0x3, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xc, r1, 0xa) r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xb4, 0x81, 0xf8, 0x0, 0x0, 0x401, 0x5112, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000280), 0x1}, 0x48148, 0x9, 0x7, 0x3, 0x3, 0x200, 0x9, 0x0, 0x582b7c96, 0x0, 0x2}, 0xffffffffffffffff, 0x2, r3, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000340)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000380)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000003c0)={'filter\x00', 0x88, "3c288a3bb8ee0c5e03ed0495f7e0ef08cf08b456646676f351f46c10c13296939de5d49948b1fb622543fbd844c1c4c2df49ef07b4b5045ef7ad472d4bac392d9051dbf70f9a454812d8df9f59ad3b3496228722fcbdd2de5250e00f55c224c14381b135752c090585eebec1c7a49326eca6e186bf059b38116a91cb6e6dfd7fb1db16344fa69558"}, &(0x7f0000000480)=0xac) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000004c0)=0x3ff) r5 = syz_open_dev$vcsu(&(0x7f0000000580), 0x9, 0x80000) perf_event_open$cgroup(&(0x7f0000000500)={0x2, 0x80, 0x4, 0x3, 0x1f, 0xf2, 0x0, 0x200, 0x80, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x81, 0x0, @perf_config_ext={0xe9b}, 0x4000, 0x6a, 0x1ff, 0x2, 0xffff, 0x3, 0x3, 0x0, 0x1, 0x0, 0xff}, r1, 0x8, r5, 0x2) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xcccb}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="3491d6cb1316"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000841) 03:33:18 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000080)={{0x2, 0x0, 0xffffffff, 0x1}, 0x2407, 0x9}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000100)) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x200) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x2000}, r0}, 0x7fffffff) ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_DOMAIN={0x13, 0x1, '/dev/snd/timer\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080d1}, 0x40) r4 = syz_io_uring_complete(0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000380)={{0x2, 0x3, 0x2, 0x1, 0x200}}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000003c0)={{0x0, 0x3, 0x1ff, 0x2, 0x6}, 0x3, 0x80000001}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440), 0x101800, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x22000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f00000004c0)) 03:33:18 executing program 4: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}]}, 0x1c}}, 0x20000800) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x81}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x44050) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip_vti0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008894}, 0x80) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x400c044) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x40}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x80}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20002800}, 0x8001) r8 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) [ 64.284892] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.288482] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.290530] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.292246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.294230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.295810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.299641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.301503] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.304968] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.309444] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.312502] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.322223] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.324430] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.337566] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.340764] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.343036] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.347543] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.350654] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.358065] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.360259] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.361930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.378204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.385585] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.390254] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.391951] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.394617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.401718] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.403381] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.405152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.406938] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.408620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.409424] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.411309] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.412631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.413250] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.420092] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.431188] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.434442] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.440389] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.443136] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 64.665610] [ 64.666445] ============================= [ 64.667471] WARNING: suspicious RCU usage [ 64.668165] 6.16.0-rc4-next-20250701 #1 Not tainted [ 64.669281] ----------------------------- [ 64.674897] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 64.676287] [ 64.676287] other info that might help us debug this: [ 64.676287] [ 64.677531] [ 64.677531] rcu_scheduler_active = 2, debug_locks = 1 [ 64.678558] 3 locks held by syz-executor.0/285: [ 64.679306] #0: ffff88800f8f6400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 64.680700] #1: ffff88800c1fa618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 64.682241] #2: ffff88801c102538 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 64.683674] [ 64.683674] stack backtrace: [ 64.684392] CPU: 0 UID: 0 PID: 285 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 64.684421] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 64.684433] Call Trace: [ 64.684441] [ 64.684450] dump_stack_lvl+0xfa/0x120 [ 64.684488] lockdep_rcu_suspicious+0x152/0x1c0 [ 64.684515] proc_sys_compare+0x28a/0x340 [ 64.684537] ? __pfx_proc_sys_compare+0x10/0x10 [ 64.684561] d_same_name+0x229/0x2e0 [ 64.684585] d_alloc_parallel+0x7c1/0x1330 [ 64.684624] ? __pfx_d_alloc_parallel+0x10/0x10 [ 64.684654] ? __pfx_default_wake_function+0x10/0x10 [ 64.684686] ? __d_lookup+0x25f/0x490 [ 64.684721] lookup_open.isra.0+0x64f/0x1530 [ 64.684756] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 64.684802] ? mnt_get_write_access+0x81/0x2d0 [ 64.684824] ? mnt_get_write_access+0x1ea/0x2d0 [ 64.684855] path_openat+0xc26/0x2880 [ 64.684897] ? __lock_acquire+0x694/0x1b70 [ 64.684920] ? __pfx_path_openat+0x10/0x10 [ 64.684962] do_filp_open+0x1e8/0x450 [ 64.685001] ? __pfx_do_filp_open+0x10/0x10 [ 64.685045] ? find_held_lock+0x2b/0x80 [ 64.685075] ? alloc_fd+0x2c1/0x560 [ 64.685104] ? lock_release+0xc8/0x290 [ 64.685132] ? alloc_fd+0x2c1/0x560 [ 64.685172] do_sys_openat2+0x104/0x1b0 [ 64.685198] ? __pfx_do_sys_openat2+0x10/0x10 [ 64.685226] ? rcu_read_unlock+0x2d/0xb0 [ 64.685249] ? lock_release+0xc8/0x290 [ 64.685278] __x64_sys_openat+0x142/0x200 [ 64.685305] ? __pfx___x64_sys_openat+0x10/0x10 [ 64.685338] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 64.685377] do_syscall_64+0xbf/0x360 [ 64.685400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.685423] RIP: 0033:0x7f395dd58a04 [ 64.685440] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 64.685461] RSP: 002b:00007ffcc9fdcd40 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 64.685482] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f395dd58a04 [ 64.685496] RDX: 0000000000080001 RSI: 00007f395ddfef61 RDI: 00000000ffffff9c [ 64.685510] RBP: 00007f395ddfef61 R08: 0000000000000000 R09: 00007ffcc9fdcd30 [ 64.685524] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 64.685537] R13: 00007ffcc9fdcde0 R14: 0000000000000000 R15: 00000000000000f8 [ 64.685567] [ 66.375585] Bluetooth: hci0: command tx timeout [ 66.376801] Bluetooth: hci3: command tx timeout [ 66.377344] Bluetooth: hci1: command tx timeout [ 66.440316] Bluetooth: hci2: command tx timeout [ 66.504164] Bluetooth: hci7: command tx timeout [ 66.504711] Bluetooth: hci5: command tx timeout [ 66.505398] Bluetooth: hci6: command tx timeout [ 66.505875] Bluetooth: hci4: command tx timeout [ 68.426160] Bluetooth: hci3: command tx timeout [ 68.426628] Bluetooth: hci1: command tx timeout [ 68.427803] Bluetooth: hci0: command tx timeout [ 68.487561] Bluetooth: hci2: command tx timeout [ 68.552129] Bluetooth: hci4: command tx timeout [ 68.552536] Bluetooth: hci7: command tx timeout [ 68.552914] Bluetooth: hci6: command tx timeout [ 68.553487] Bluetooth: hci5: command tx timeout [ 70.473029] Bluetooth: hci0: command tx timeout [ 70.473486] Bluetooth: hci1: command tx timeout [ 70.473859] Bluetooth: hci3: command tx timeout [ 70.536044] Bluetooth: hci2: command tx timeout [ 70.600096] Bluetooth: hci4: command tx timeout [ 70.600491] Bluetooth: hci5: command tx timeout [ 70.600869] Bluetooth: hci6: command tx timeout [ 70.601356] Bluetooth: hci7: command tx timeout [ 72.520116] Bluetooth: hci3: command tx timeout [ 72.520579] Bluetooth: hci1: command tx timeout [ 72.520967] Bluetooth: hci0: command tx timeout [ 72.584056] Bluetooth: hci2: command tx timeout [ 72.648281] Bluetooth: hci6: command tx timeout [ 72.648689] Bluetooth: hci7: command tx timeout [ 72.649182] Bluetooth: hci5: command tx timeout [ 72.649578] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 03:33:20 Registers: info registers vcpu 0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b9285 RDI=ffffffff8871efa0 RBP=ffffffff8871ef60 RSP=ffff8880165f72b8 R8 =0000000000000000 R9 =ffffed1001733046 R10=000000000000002d R11=0000000000000001 R12=000000000000002d R13=0000000000000010 R14=ffffffff8871ef60 R15=ffffffff828b9270 RIP=ffffffff828b92dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555725d400 00000000 00000000 GS =0000 ffff8880e55f2000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f082c4578e0 CR3=000000003407d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000ff000000000000000000 XMM01=00ff0000000001002e6f732e6362696c XMM02=312e312e6f732e6f747079726362696c XMM03=00000000000000000000000000000000 XMM04=000000000000ff000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff888015997de8 RCX=0000000000000000 RDX=ffff888015997e14 RSI=ffffffff81c63a17 RDI=ffff888015997e14 RBP=ffff8880091631f0 RSP=ffff888015997c98 R8 =0000000000000000 R9 =ffffffff85d25940 R10=0000000000000000 R11=0000000000000000 R12=00000000000007ff R13=0000000000000000 R14=ffff888009163218 R15=0000000000000000 RIP=ffffffff81b5a442 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56f2000 00000000 00000000 LDT=0000 fffffe0b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2d7ab3c269 CR3=000000000a09d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000