Warning: Permanently added '[localhost]:40236' (ECDSA) to the list of known hosts. 2025/07/02 10:50:00 fuzzer started 2025/07/02 10:50:01 dialing manager at localhost:45015 syzkaller login: [ 50.568349] cgroup: Unknown subsys name 'net' [ 50.633731] cgroup: Unknown subsys name 'cpuset' [ 50.646378] cgroup: Unknown subsys name 'rlimit' 2025/07/02 10:50:11 syscalls: 2214 2025/07/02 10:50:11 code coverage: enabled 2025/07/02 10:50:11 comparison tracing: enabled 2025/07/02 10:50:11 extra coverage: enabled 2025/07/02 10:50:11 setuid sandbox: enabled 2025/07/02 10:50:11 namespace sandbox: enabled 2025/07/02 10:50:11 Android sandbox: enabled 2025/07/02 10:50:11 fault injection: enabled 2025/07/02 10:50:11 leak checking: enabled 2025/07/02 10:50:11 net packet injection: enabled 2025/07/02 10:50:11 net device setup: enabled 2025/07/02 10:50:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/02 10:50:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/02 10:50:11 USB emulation: enabled 2025/07/02 10:50:11 hci packet injection: enabled 2025/07/02 10:50:11 wifi device emulation: enabled 2025/07/02 10:50:11 802.15.4 emulation: enabled 2025/07/02 10:50:11 fetching corpus: 50, signal 22182/23913 (executing program) 2025/07/02 10:50:11 fetching corpus: 100, signal 32720/35942 (executing program) 2025/07/02 10:50:11 fetching corpus: 150, signal 38724/43264 (executing program) 2025/07/02 10:50:11 fetching corpus: 200, signal 44461/50217 (executing program) 2025/07/02 10:50:12 fetching corpus: 250, signal 47469/54494 (executing program) 2025/07/02 10:50:12 fetching corpus: 300, signal 50796/59021 (executing program) 2025/07/02 10:50:12 fetching corpus: 350, signal 53133/62532 (executing program) 2025/07/02 10:50:12 fetching corpus: 400, signal 56196/66652 (executing program) 2025/07/02 10:50:12 fetching corpus: 450, signal 58005/69572 (executing program) 2025/07/02 10:50:12 fetching corpus: 500, signal 61218/73709 (executing program) 2025/07/02 10:50:12 fetching corpus: 550, signal 64412/77791 (executing program) 2025/07/02 10:50:12 fetching corpus: 600, signal 67030/81253 (executing program) 2025/07/02 10:50:12 fetching corpus: 650, signal 69749/84735 (executing program) 2025/07/02 10:50:12 fetching corpus: 700, signal 72326/88023 (executing program) 2025/07/02 10:50:12 fetching corpus: 750, signal 74688/91083 (executing program) 2025/07/02 10:50:12 fetching corpus: 800, signal 75869/93111 (executing program) 2025/07/02 10:50:12 fetching corpus: 850, signal 76951/95062 (executing program) 2025/07/02 10:50:12 fetching corpus: 900, signal 78418/97302 (executing program) 2025/07/02 10:50:13 fetching corpus: 950, signal 79736/99321 (executing program) 2025/07/02 10:50:13 fetching corpus: 1000, signal 81727/101876 (executing program) 2025/07/02 10:50:13 fetching corpus: 1050, signal 83142/103930 (executing program) 2025/07/02 10:50:13 fetching corpus: 1100, signal 84749/106111 (executing program) 2025/07/02 10:50:13 fetching corpus: 1150, signal 87345/108989 (executing program) 2025/07/02 10:50:13 fetching corpus: 1200, signal 88720/110949 (executing program) 2025/07/02 10:50:13 fetching corpus: 1250, signal 89666/112513 (executing program) 2025/07/02 10:50:13 fetching corpus: 1300, signal 90666/114102 (executing program) 2025/07/02 10:50:13 fetching corpus: 1350, signal 92164/116077 (executing program) 2025/07/02 10:50:13 fetching corpus: 1400, signal 93346/117719 (executing program) 2025/07/02 10:50:13 fetching corpus: 1450, signal 94873/119513 (executing program) 2025/07/02 10:50:13 fetching corpus: 1500, signal 96166/121186 (executing program) 2025/07/02 10:50:14 fetching corpus: 1550, signal 97385/122806 (executing program) 2025/07/02 10:50:14 fetching corpus: 1600, signal 98667/124390 (executing program) 2025/07/02 10:50:14 fetching corpus: 1650, signal 99572/125723 (executing program) 2025/07/02 10:50:14 fetching corpus: 1700, signal 100236/126935 (executing program) 2025/07/02 10:50:14 fetching corpus: 1750, signal 100839/128067 (executing program) 2025/07/02 10:50:14 fetching corpus: 1800, signal 101613/129310 (executing program) 2025/07/02 10:50:14 fetching corpus: 1850, signal 102361/130424 (executing program) 2025/07/02 10:50:14 fetching corpus: 1900, signal 103292/131688 (executing program) 2025/07/02 10:50:14 fetching corpus: 1950, signal 104301/132955 (executing program) 2025/07/02 10:50:14 fetching corpus: 2000, signal 105089/134083 (executing program) 2025/07/02 10:50:14 fetching corpus: 2050, signal 105923/135260 (executing program) 2025/07/02 10:50:14 fetching corpus: 2100, signal 106828/136411 (executing program) 2025/07/02 10:50:15 fetching corpus: 2150, signal 107406/137407 (executing program) 2025/07/02 10:50:15 fetching corpus: 2200, signal 108251/138438 (executing program) 2025/07/02 10:50:15 fetching corpus: 2250, signal 109244/139575 (executing program) 2025/07/02 10:50:15 fetching corpus: 2300, signal 110092/140612 (executing program) 2025/07/02 10:50:15 fetching corpus: 2350, signal 110453/141449 (executing program) 2025/07/02 10:50:15 fetching corpus: 2400, signal 111168/142412 (executing program) 2025/07/02 10:50:15 fetching corpus: 2450, signal 111919/143372 (executing program) 2025/07/02 10:50:15 fetching corpus: 2500, signal 112466/144233 (executing program) 2025/07/02 10:50:15 fetching corpus: 2550, signal 113006/145064 (executing program) 2025/07/02 10:50:15 fetching corpus: 2600, signal 113499/145853 (executing program) 2025/07/02 10:50:15 fetching corpus: 2650, signal 114231/146730 (executing program) 2025/07/02 10:50:15 fetching corpus: 2700, signal 114743/147497 (executing program) 2025/07/02 10:50:16 fetching corpus: 2750, signal 115411/148298 (executing program) 2025/07/02 10:50:16 fetching corpus: 2800, signal 115916/149054 (executing program) 2025/07/02 10:50:16 fetching corpus: 2850, signal 116434/149829 (executing program) 2025/07/02 10:50:16 fetching corpus: 2900, signal 117005/150583 (executing program) 2025/07/02 10:50:16 fetching corpus: 2950, signal 117338/151301 (executing program) 2025/07/02 10:50:16 fetching corpus: 3000, signal 117844/152036 (executing program) 2025/07/02 10:50:16 fetching corpus: 3050, signal 118465/152767 (executing program) 2025/07/02 10:50:16 fetching corpus: 3100, signal 118919/153431 (executing program) 2025/07/02 10:50:16 fetching corpus: 3150, signal 119447/154112 (executing program) 2025/07/02 10:50:16 fetching corpus: 3200, signal 120115/154788 (executing program) 2025/07/02 10:50:16 fetching corpus: 3250, signal 120707/155453 (executing program) 2025/07/02 10:50:16 fetching corpus: 3300, signal 121304/156111 (executing program) 2025/07/02 10:50:17 fetching corpus: 3350, signal 121889/156711 (executing program) 2025/07/02 10:50:17 fetching corpus: 3400, signal 122241/157309 (executing program) 2025/07/02 10:50:17 fetching corpus: 3450, signal 122636/157911 (executing program) 2025/07/02 10:50:17 fetching corpus: 3500, signal 123245/158504 (executing program) 2025/07/02 10:50:17 fetching corpus: 3550, signal 123759/159074 (executing program) 2025/07/02 10:50:17 fetching corpus: 3600, signal 124489/159643 (executing program) 2025/07/02 10:50:17 fetching corpus: 3650, signal 125566/160255 (executing program) 2025/07/02 10:50:17 fetching corpus: 3700, signal 126121/160816 (executing program) 2025/07/02 10:50:17 fetching corpus: 3750, signal 126394/161336 (executing program) 2025/07/02 10:50:17 fetching corpus: 3800, signal 127111/161832 (executing program) 2025/07/02 10:50:17 fetching corpus: 3850, signal 127523/162337 (executing program) 2025/07/02 10:50:18 fetching corpus: 3900, signal 127779/162792 (executing program) 2025/07/02 10:50:18 fetching corpus: 3950, signal 128287/163286 (executing program) 2025/07/02 10:50:18 fetching corpus: 4000, signal 128880/163761 (executing program) 2025/07/02 10:50:18 fetching corpus: 4050, signal 129328/164216 (executing program) 2025/07/02 10:50:18 fetching corpus: 4100, signal 129563/164622 (executing program) 2025/07/02 10:50:18 fetching corpus: 4150, signal 129969/164789 (executing program) 2025/07/02 10:50:18 fetching corpus: 4200, signal 130841/164789 (executing program) 2025/07/02 10:50:18 fetching corpus: 4250, signal 131464/164789 (executing program) 2025/07/02 10:50:18 fetching corpus: 4300, signal 131957/164789 (executing program) 2025/07/02 10:50:18 fetching corpus: 4350, signal 132296/164789 (executing program) 2025/07/02 10:50:18 fetching corpus: 4400, signal 132780/164789 (executing program) 2025/07/02 10:50:19 fetching corpus: 4450, signal 133114/164789 (executing program) 2025/07/02 10:50:19 fetching corpus: 4500, signal 133489/164789 (executing program) 2025/07/02 10:50:19 fetching corpus: 4550, signal 133796/164789 (executing program) 2025/07/02 10:50:19 fetching corpus: 4600, signal 134289/164789 (executing program) 2025/07/02 10:50:19 fetching corpus: 4650, signal 134724/164789 (executing program) 2025/07/02 10:50:19 fetching corpus: 4700, signal 135043/164789 (executing program) 2025/07/02 10:50:19 fetching corpus: 4750, signal 135381/164789 (executing program) 2025/07/02 10:50:19 fetching corpus: 4800, signal 135836/164789 (executing program) 2025/07/02 10:50:19 fetching corpus: 4850, signal 136329/164789 (executing program) 2025/07/02 10:50:19 fetching corpus: 4900, signal 137600/164789 (executing program) 2025/07/02 10:50:19 fetching corpus: 4950, signal 137984/164789 (executing program) 2025/07/02 10:50:19 fetching corpus: 5000, signal 138196/164789 (executing program) 2025/07/02 10:50:20 fetching corpus: 5050, signal 138581/164789 (executing program) 2025/07/02 10:50:20 fetching corpus: 5100, signal 138996/164789 (executing program) 2025/07/02 10:50:20 fetching corpus: 5150, signal 139318/164789 (executing program) 2025/07/02 10:50:20 fetching corpus: 5200, signal 139671/164789 (executing program) 2025/07/02 10:50:20 fetching corpus: 5250, signal 140029/164789 (executing program) 2025/07/02 10:50:20 fetching corpus: 5300, signal 140300/164789 (executing program) 2025/07/02 10:50:20 fetching corpus: 5350, signal 140706/164789 (executing program) 2025/07/02 10:50:20 fetching corpus: 5400, signal 140975/164789 (executing program) 2025/07/02 10:50:20 fetching corpus: 5450, signal 141355/164789 (executing program) 2025/07/02 10:50:20 fetching corpus: 5500, signal 141831/164789 (executing program) 2025/07/02 10:50:20 fetching corpus: 5550, signal 142164/164789 (executing program) 2025/07/02 10:50:20 fetching corpus: 5600, signal 142404/164789 (executing program) 2025/07/02 10:50:20 fetching corpus: 5650, signal 142717/164789 (executing program) 2025/07/02 10:50:20 fetching corpus: 5700, signal 143065/164789 (executing program) 2025/07/02 10:50:20 fetching corpus: 5750, signal 143352/164789 (executing program) 2025/07/02 10:50:21 fetching corpus: 5800, signal 143540/164789 (executing program) 2025/07/02 10:50:21 fetching corpus: 5850, signal 143943/164789 (executing program) 2025/07/02 10:50:21 fetching corpus: 5900, signal 144367/164789 (executing program) 2025/07/02 10:50:21 fetching corpus: 5950, signal 144593/164789 (executing program) 2025/07/02 10:50:21 fetching corpus: 6000, signal 144869/164789 (executing program) 2025/07/02 10:50:21 fetching corpus: 6050, signal 145243/164793 (executing program) 2025/07/02 10:50:21 fetching corpus: 6100, signal 145526/164793 (executing program) 2025/07/02 10:50:21 fetching corpus: 6150, signal 145748/164793 (executing program) 2025/07/02 10:50:21 fetching corpus: 6200, signal 146106/164793 (executing program) 2025/07/02 10:50:21 fetching corpus: 6250, signal 146479/164793 (executing program) 2025/07/02 10:50:21 fetching corpus: 6300, signal 146731/164793 (executing program) 2025/07/02 10:50:21 fetching corpus: 6350, signal 146948/164793 (executing program) 2025/07/02 10:50:21 fetching corpus: 6400, signal 147169/164793 (executing program) 2025/07/02 10:50:22 fetching corpus: 6450, signal 147483/164793 (executing program) 2025/07/02 10:50:22 fetching corpus: 6500, signal 147836/164793 (executing program) 2025/07/02 10:50:22 fetching corpus: 6550, signal 148018/164793 (executing program) 2025/07/02 10:50:22 fetching corpus: 6600, signal 148298/164793 (executing program) 2025/07/02 10:50:22 fetching corpus: 6650, signal 148534/164793 (executing program) 2025/07/02 10:50:22 fetching corpus: 6700, signal 148784/164793 (executing program) 2025/07/02 10:50:22 fetching corpus: 6750, signal 149068/164793 (executing program) 2025/07/02 10:50:22 fetching corpus: 6800, signal 149346/164793 (executing program) 2025/07/02 10:50:22 fetching corpus: 6850, signal 149557/164793 (executing program) 2025/07/02 10:50:22 fetching corpus: 6900, signal 149736/164793 (executing program) 2025/07/02 10:50:22 fetching corpus: 6950, signal 150131/164793 (executing program) 2025/07/02 10:50:22 fetching corpus: 7000, signal 150353/164793 (executing program) 2025/07/02 10:50:22 fetching corpus: 7050, signal 150680/164793 (executing program) 2025/07/02 10:50:23 fetching corpus: 7100, signal 150926/164793 (executing program) 2025/07/02 10:50:23 fetching corpus: 7150, signal 151206/164793 (executing program) 2025/07/02 10:50:23 fetching corpus: 7200, signal 151403/164793 (executing program) 2025/07/02 10:50:23 fetching corpus: 7250, signal 151675/164793 (executing program) 2025/07/02 10:50:23 fetching corpus: 7300, signal 152253/164793 (executing program) 2025/07/02 10:50:23 fetching corpus: 7350, signal 152526/164793 (executing program) 2025/07/02 10:50:23 fetching corpus: 7400, signal 152689/164793 (executing program) 2025/07/02 10:50:23 fetching corpus: 7450, signal 152995/164793 (executing program) 2025/07/02 10:50:23 fetching corpus: 7500, signal 153349/164793 (executing program) 2025/07/02 10:50:23 fetching corpus: 7550, signal 153595/164793 (executing program) 2025/07/02 10:50:23 fetching corpus: 7600, signal 153957/164793 (executing program) 2025/07/02 10:50:23 fetching corpus: 7650, signal 154267/164793 (executing program) 2025/07/02 10:50:24 fetching corpus: 7700, signal 154577/164793 (executing program) 2025/07/02 10:50:24 fetching corpus: 7750, signal 154815/164793 (executing program) 2025/07/02 10:50:24 fetching corpus: 7800, signal 155023/164793 (executing program) 2025/07/02 10:50:24 fetching corpus: 7850, signal 155328/164793 (executing program) 2025/07/02 10:50:24 fetching corpus: 7900, signal 155484/164795 (executing program) 2025/07/02 10:50:24 fetching corpus: 7950, signal 155704/164795 (executing program) 2025/07/02 10:50:24 fetching corpus: 8000, signal 155925/164795 (executing program) 2025/07/02 10:50:24 fetching corpus: 8050, signal 156115/164795 (executing program) 2025/07/02 10:50:24 fetching corpus: 8100, signal 156261/164795 (executing program) 2025/07/02 10:50:24 fetching corpus: 8150, signal 156611/164795 (executing program) 2025/07/02 10:50:24 fetching corpus: 8200, signal 156831/164795 (executing program) 2025/07/02 10:50:24 fetching corpus: 8250, signal 157021/164795 (executing program) 2025/07/02 10:50:24 fetching corpus: 8300, signal 157247/164795 (executing program) 2025/07/02 10:50:24 fetching corpus: 8350, signal 157470/164795 (executing program) 2025/07/02 10:50:25 fetching corpus: 8400, signal 157647/164795 (executing program) 2025/07/02 10:50:25 fetching corpus: 8450, signal 157931/164795 (executing program) 2025/07/02 10:50:25 fetching corpus: 8500, signal 158165/164795 (executing program) 2025/07/02 10:50:25 fetching corpus: 8550, signal 158355/164795 (executing program) 2025/07/02 10:50:25 fetching corpus: 8600, signal 158561/164795 (executing program) 2025/07/02 10:50:25 fetching corpus: 8650, signal 158762/164795 (executing program) 2025/07/02 10:50:25 fetching corpus: 8700, signal 158918/164795 (executing program) 2025/07/02 10:50:25 fetching corpus: 8750, signal 159238/164795 (executing program) 2025/07/02 10:50:25 fetching corpus: 8800, signal 159457/164795 (executing program) 2025/07/02 10:50:25 fetching corpus: 8850, signal 159736/164795 (executing program) 2025/07/02 10:50:25 fetching corpus: 8900, signal 159895/164795 (executing program) 2025/07/02 10:50:25 fetching corpus: 8950, signal 160127/164795 (executing program) 2025/07/02 10:50:25 fetching corpus: 9000, signal 160406/164795 (executing program) 2025/07/02 10:50:25 fetching corpus: 9050, signal 160594/164795 (executing program) 2025/07/02 10:50:25 fetching corpus: 9100, signal 160785/164795 (executing program) 2025/07/02 10:50:26 fetching corpus: 9150, signal 160911/164795 (executing program) 2025/07/02 10:50:26 fetching corpus: 9200, signal 161091/164795 (executing program) 2025/07/02 10:50:26 fetching corpus: 9250, signal 161273/164795 (executing program) 2025/07/02 10:50:26 fetching corpus: 9300, signal 161487/164795 (executing program) 2025/07/02 10:50:26 fetching corpus: 9350, signal 161698/164795 (executing program) 2025/07/02 10:50:26 fetching corpus: 9400, signal 161843/164795 (executing program) 2025/07/02 10:50:26 fetching corpus: 9450, signal 162081/164795 (executing program) 2025/07/02 10:50:26 fetching corpus: 9500, signal 162211/164795 (executing program) 2025/07/02 10:50:26 fetching corpus: 9550, signal 162385/164795 (executing program) 2025/07/02 10:50:26 fetching corpus: 9600, signal 162577/164795 (executing program) 2025/07/02 10:50:26 fetching corpus: 9650, signal 162863/164795 (executing program) 2025/07/02 10:50:26 fetching corpus: 9700, signal 163025/164795 (executing program) 2025/07/02 10:50:27 fetching corpus: 9750, signal 163200/164795 (executing program) 2025/07/02 10:50:27 fetching corpus: 9800, signal 163388/164795 (executing program) 2025/07/02 10:50:27 fetching corpus: 9850, signal 163505/164795 (executing program) 2025/07/02 10:50:27 fetching corpus: 9854, signal 163524/164795 (executing program) 2025/07/02 10:50:27 fetching corpus: 9854, signal 163524/164795 (executing program) 2025/07/02 10:50:28 starting 8 fuzzer processes 10:50:28 executing program 0: getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x2}, &(0x7f0000000040)=0x28) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0xe18, 0x70bd25, 0x4, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x16c, r0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x200}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xbc, 0x3, 0x1, 0x3, 0x0, 0x0, {0xd, 0x0, 0x4}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfc3d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_NAT_DST={0x78, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x32}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000640)={0x5, 0x40, '\x00', 0x1, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffd}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe953}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xed}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x29}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x261c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000000}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c800}, 0x4000081) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/psched\x00') bind$unix(r4, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) rmdir(&(0x7f0000000880)='./file0\x00') syncfs(r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x20, 0x7800, 0x100, 0x8, {{0x1c, 0x4, 0x2, 0x0, 0x70, 0x64, 0x0, 0x40, 0x4, 0x0, @loopback, @private=0xa010102, {[@rr={0x7, 0x13, 0x49, [@loopback, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xb, 0x6, [@private=0xa010101, @private=0xa010101]}, @cipso={0x86, 0x2d, 0x0, [{0x1, 0xf, "54dc937d9f57bfc1e6510c3700"}, {0x7, 0xa, "830ed4eb988aa6a0"}, {0x6, 0x6, "526eead0"}, {0x0, 0x4, "a108"}, {0x2, 0x4, "c540"}]}, @generic={0x86, 0x11, "bf6692e534a6df2e8e727f833ebdd1"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x6, 0x41d, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7800, 0x7800, 0x4, 0x20}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x6, 0x7f, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x8, 0x80, 0xdc}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x5, 0x1000, 0x44, @loopback, @private1, 0x60, 0x7800, 0x4, 0x7}}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000d40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xb8, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x11) 10:50:28 executing program 1: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x1, 0x40, 0x3, 0x2, 0x2, 0x7fffffff, 0x8, 0x7, 0xfffffffe}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x672d24f1f777120f, 0x4c, 0x1, 0x8d4e315, 0x9, 0x2, 0x200, 0x4, 0x1}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x6, 0x28, 0x1c8000, 0x2, 0x1e, 0x0, 0x7, 0x6}, 0x0) r1 = fork() sched_setattr(r1, &(0x7f0000000200)={0x38, 0x2, 0x46, 0x8, 0x1, 0x2, 0xfff, 0x7, 0x2, 0xfffffffe}, 0x0) sched_setattr(r1, &(0x7f0000000240)={0x38, 0x6, 0x10000040, 0x8, 0x1ff, 0x2, 0x2, 0x7, 0x9, 0x27d}, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000280), &(0x7f00000002c0)=0x10) r2 = getpgid(r1) sched_setattr(r2, &(0x7f0000000300)={0x38, 0x2, 0x1, 0xff, 0x6, 0x1, 0x8286, 0x0, 0x5, 0x11a}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/33, 0x21}, {&(0x7f0000000400)=""/125, 0x7d}, {&(0x7f0000000480)=""/6, 0x6}, {&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f00000005c0)=""/212, 0xd4}], 0x6, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0xc0221cb1062fbc65) sched_setattr(r3, &(0x7f00000007c0)={0x38, 0x3, 0x22, 0xfffffffe, 0x3, 0x1, 0x2, 0x2, 0x8000, 0x40}, 0x0) sched_setattr(r2, &(0x7f0000000800)={0x38, 0x3, 0x20, 0x0, 0x0, 0x6, 0x80, 0x1, 0x4, 0x3}, 0x0) r4 = fork() sched_setattr(r4, &(0x7f0000000840)={0x38, 0x2, 0x0, 0x1, 0x4800, 0x8, 0x5, 0x6b4bb947, 0x80000000, 0x7ff}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000880)={0x38, 0x2, 0x41, 0x7fff, 0x5, 0x6, 0x7, 0x7, 0x3f, 0x1}, 0x0) r6 = getpgrp(r3) sched_setattr(r6, &(0x7f00000008c0)={0x38, 0x6, 0x10000048, 0xc8, 0x2, 0x3f, 0xa8, 0x9, 0x101, 0x6}, 0x0) [ 78.189390] audit: type=1400 audit(1751453428.780:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:50:28 executing program 6: ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000040)={0x100000000, 0x8, [0xe2, 0x40, 0x734b8d5f, 0x1], &(0x7f0000000000)=[0x0]}) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040004) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0xc, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x4081) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x210e40, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x140, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x100, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf3, 0x5, "27e3e8e51eb2428548b0870abecb3bbca4001d557f48e47009b226f0c086c75c876a9cfbe6a477d60507336dc7755f772c0b56f5b0b7d0ae7dd4519bf6e3a944caf8792490cb18469e1356cad0b0deada7776b08df8a4187968e3c529ba8c87c9cd8640bd349beabc9bf6417627c0bb2e9194c80b7da358aba7fb549265e3e16708ace0665792f87dc383984ca76c564014eefe803fccde331962e24d43ad464f3767a57d6ebcdcef8ea06a16f144f465eb14b46e9383f12fed6deb9c94e117ea14dd3792328feddbc96694eff89280523da59e1d064d5204297631655ca38d9d4112341721d35a15780ab01c65994"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004000) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000005c0)={0x0, 0x1f, 0x8}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000009c0), 0x41, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000a00)={0xd14c, 0x4e9, 0x8001, 0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r2) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, r5, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x800) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000d80)={0x1, &(0x7f0000000d40)=[{0x6, 0x1}]}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r1, {0x4ee0}}, './file0\x00'}) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, 0xb, 0x6, 0x107, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4eed595d}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x40008c5) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000f00)={0x800, 0x5, 0xff, 0x9, 0x5, "2b6ff779f8a16be4"}) 10:50:28 executing program 2: r0 = syz_io_uring_setup(0x534e, &(0x7f0000000000)={0x0, 0xb972, 0x10, 0x1, 0x3de}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) close_range(r0, r1, 0x2) io_setup(0x9, &(0x7f0000000140)=0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42001, 0x0) io_cancel(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0xc5ce, r1, &(0x7f0000000180)="f4495a051b56751433e0b96b50d8c09edc35e5e6d64e6ee4a63623f3aebf6a5ad708f713cd013942d197cd408ec5b8a25d2392d5734c2191127e413a565449f24042b175ad210793cfb238cfcfbf7530bd607e5dcd3634b5921a50a8639061994f1ccb69bd326704b69f8575287d1f2f870fe2beb402a486e075333cbd6658473ccf2cbf828292581bbcd6857d48095b87f91fbf40bb6ec61617adcf1812f2503c91e4060ddbf330a9d4b672cf3b6c6f3bf22dcf5e3076f98c40e731e6466f52489069fb", 0xc4, 0x4, 0x0, 0x2, r3}, &(0x7f0000000300)) r4 = accept4$inet(r3, &(0x7f0000000400)={0x2, 0x0, @empty}, &(0x7f0000000440)=0x10, 0x800) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x4}, 0x68) r5 = open(&(0x7f0000000500)='./file0\x00', 0x80000, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) io_submit(r2, 0x3, &(0x7f00000007c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0xfffc, r5, &(0x7f0000000540)="de82cecfb5dd496a1fd260375f6a55222e91bb3490c92ba9b854a47a5cab73381a51dadd75ca568b1141", 0x2a, 0x7, 0x0, 0x3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0xff, r6, &(0x7f00000005c0)="b1980476e3a9d62d97b75c74a14cc9010d548197cd4d243ed58a5a5026fd4e3ec45d19ac5ac7c8b889ef9ca893aec6875ce9455b58dd36d6a2a3a64d30c832cae750779393c0598d34a940cfb95aa3fd4d3108a3fae6c502e421d259150535d61c0f9f4fad7addaa48f31b310720d69d6d04d5d6bb34e3dec58335928f7e1b90f6ce27a7d073c1d98b040f43aedf", 0x8e, 0x5, 0x0, 0x1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x8000, r7, &(0x7f0000000700)="43f4279e76329086f748e82dced2c842f9f53675a2f9851285afd4aa1a8f908b2da46a2a9a7b52003b72e890b6770145558f374e8f1883247be5096ca3cd99c7d88a0071b0371132d48bbf97526bfd2ed3bfa9e2fb8b45b8951e844f9e4b2b26d91c98c183", 0x65, 0x3, 0x0, 0x1, r3}]) pipe2(&(0x7f0000000800)={0xffffffffffffffff}, 0x80000) syz_io_uring_setup(0x7102, &(0x7f0000000840)={0x0, 0xd79f, 0x0, 0x1, 0x3e8, 0x0, r8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000940)=""/243, 0xf3}, {&(0x7f0000000a40)=""/36, 0x24}, {&(0x7f0000000a80)=""/126, 0x7e}, {&(0x7f0000000b00)=""/69, 0x45}, {&(0x7f0000000b80)=""/245, 0xf5}, {&(0x7f0000000c80)=""/3, 0x3}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/226, 0xe2}, {&(0x7f0000001dc0)=""/176, 0xb0}], 0x9) pidfd_send_signal(r8, 0x0, &(0x7f0000001f40)={0x15, 0x7f, 0x80000000}, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001fc0), 0x84080, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000002000)={{0x0, 0x800, 0x8001, 0x2, 0x8, 0xffff, 0x2, 0x2, 0x6, 0xdf9, 0x5, 0x1, 0x6, 0xfffffffffffffffe, 0x6}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r9 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r9, 0x0, 0x61, &(0x7f00000020c0)={'filter\x00', 0xb8, "8b5b83b686cdc5c2f7bc0c16f2b68836b57b5d3aee17936c3ba2a85590ed75c6ef5bddc1587b9018a30fe7be0199ab02babaa3a9490bda22e4b773cc45ee901e35ccee00c0a5e5b589ad8a054296524ef9b52f91c7a37511edbecb97342156f40978743f47fcfcc8098c0822b3aded1b32717f8da15afaf31d42b2f39f403ec1d00b1e9ab41f3aaef7c9bcdca685ece302ef5a59b4459f6be3931019e5bfa6e3f5e7cf8adeb1b91cd8cc8ade10903cea93934b07d1e02077"}, &(0x7f00000021c0)=0xdc) 10:50:28 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40841) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8000, 0x79}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "b33b700592b6959a2016280d556fbd72"}, @NL80211_ATTR_PMKID={0x14, 0x55, "72f23aaeb2d1759971179d3f881dd57e"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x30}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @random="33bd41941ec5"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x800}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6278b4f03a3a97c516ff7cbe3351fb8"}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x4000804) sendmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x10000, @mcast1, 0x6, 0x4}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)="3ffab36fc5585155dd5e757f4ad14b5eedf71a4bafb82e3009be254ad80bd087bc6c07a142d30fa6cd833778548f14ccb94bce736dde617a9ae177f4fe3e092ae4b229b9e323ead4e209db88c4c12ed65e1364bf41a274fcc17208cc626a92fe34f562e895c9a0b2c37b320eca62849e1a3d3489ab26eea1e41076a32bfeb04b5c8836c2a925d3a86acd9a513a7dc1a2c954250eef2e755c93f843de68a437a692abeb4e00c325e1af96b5af3a42d0f8e8e84f27ab934459ec973c81ab01d2b72f4d7cd5b3de0b3b8b0940a886b5b3ffd8957803b38eddd5cc0345f1ec45e830566bad045baef0cdcbed61679e97b3", 0xef}, {&(0x7f0000000480)="5bae08507cb278030e9cc428cfc65f8a229156685f8aa16df20b56e294da64eeea57fa9f9188cef0860c1ba3045fdb2d7aa1a52833f366907b2a211d6c40c7d6aa762ffe4a796412fab7", 0x4a}, {&(0x7f0000000500)="6b797f976913ed8c02131551", 0xc}, {&(0x7f0000000540)="a53b6759394169c3cb5bbe1dd3b1b554f12308109eac4f9b686f577a7958a3e4b86f95496a6bfbebad4c14094c637eec83601a4ba58e7f60bceb59c6b5dee6873831bcb7821a0bc6565ab0f5f95e4c25b289505407e6ee3278aec04f881c7c99a8b1a27386b40540766052b5296c45d462e720f53ebee51d8a210d0e0999621df40d66e11ef16f24f6a87b142616277cd1b4c921941168f12f8d76efa0ac25c876584c64ec61201956248a0c817f2d6ba6a32f0779ef7449c2ea2d400acf1655def751ae", 0xc4}, {&(0x7f0000000640)="d3b9cf816c50282b0ec9afced33b1e07e277aff5e90fd4340d6cf6a4569586fb786bf279ef1873c93232f1107fad3474338ac638af98e567a64d03", 0x3b}], 0x5}}], 0x1, 0x40000c9) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'ip6gre0\x00', 0x0, 0x2f, 0x3f, 0x1, 0xfffffffc, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x20, 0x40, 0x6, 0x9}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xf4, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x240000c0}, 0x48880) r4 = socket$inet6_udp(0xa, 0x2, 0x0) fremovexattr(r4, &(0x7f0000000b40)=@known='system.advise\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x6c}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2c009}, 0x4000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x2b}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000001) sync_file_range(r4, 0xfff, 0x3, 0x4) pipe2(&(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r8 = fcntl$dupfd(r7, 0x406, r4) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), r6) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f0000001480)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001440)={&(0x7f00000012c0)={0x150, r9, 0x62c, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x2406c001}, 0x44000) 10:50:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3d}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, r3, 0x1, 0x70bd25, 0x5, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x34, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd75e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x585efaa9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f20f14e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8627}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x3}, {0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x2c}}, 0x406c800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1f}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r2) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r7, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2004041}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r8) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x10400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x4f}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40040) 10:50:28 executing program 7: prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x4) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x0) prctl$PR_SET_FPEMU(0xa, 0x0) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x1) 10:50:28 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x2000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x0) r2 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffc000/0x2000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x3000) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000000)=""/158) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x4000) r3 = shmget(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f00000000c0)=""/4096) r4 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_RMID(r4, 0x0) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x3000) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000010c0)=""/83) shmctl$IPC_RMID(r1, 0x0) get_mempolicy(&(0x7f0000001140), &(0x7f0000001180), 0x5, &(0x7f0000ffd000/0x1000)=nil, 0x2) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 79.326477] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.329119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.332059] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.337201] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.339948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.382893] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.387015] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.394249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.401073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.408635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.455219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.457658] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.461647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.469998] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.472389] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.479389] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.482097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.483365] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.484950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.486169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.487366] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.495348] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.496646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.500668] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.502364] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.554927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 79.576483] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.578887] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.581630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.596167] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 79.597382] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.601753] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 79.613752] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 79.620691] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 79.621836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 79.626902] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 79.628683] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 79.631247] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 79.632707] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 79.640174] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 79.878874] [ 79.879832] ============================= [ 79.880429] WARNING: suspicious RCU usage [ 79.881231] 6.16.0-rc4-next-20250702 #1 Not tainted [ 79.883976] ----------------------------- [ 79.888316] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 79.889414] [ 79.889414] other info that might help us debug this: [ 79.889414] [ 79.890586] [ 79.890586] rcu_scheduler_active = 2, debug_locks = 1 [ 79.891564] 3 locks held by syz-executor.6/285: [ 79.892234] #0: ffff88800a268400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 79.893562] #1: ffff88800c05a618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 79.895024] #2: ffff88801777d0f8 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 79.896373] [ 79.896373] stack backtrace: [ 79.897052] CPU: 1 UID: 0 PID: 285 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 79.897079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 79.897090] Call Trace: [ 79.897098] [ 79.897106] dump_stack_lvl+0xfa/0x120 [ 79.897130] lockdep_rcu_suspicious+0x152/0x1c0 [ 79.897157] proc_sys_compare+0x28a/0x340 [ 79.897179] ? __pfx_proc_sys_compare+0x10/0x10 [ 79.897202] d_same_name+0x229/0x2e0 [ 79.897225] d_alloc_parallel+0x7c1/0x1330 [ 79.897262] ? __pfx_d_alloc_parallel+0x10/0x10 [ 79.897290] ? __pfx_default_wake_function+0x10/0x10 [ 79.897321] ? __d_lookup+0x25f/0x490 [ 79.897354] lookup_open.isra.0+0x64f/0x1530 [ 79.897387] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 79.897432] ? mnt_get_write_access+0x81/0x2d0 [ 79.897453] ? mnt_get_write_access+0x1ea/0x2d0 [ 79.897482] path_openat+0xc26/0x2880 [ 79.897528] ? __lock_acquire+0x694/0x1b70 [ 79.897550] ? __pfx_path_openat+0x10/0x10 [ 79.897591] do_filp_open+0x1e8/0x450 [ 79.897621] ? __pfx_do_filp_open+0x10/0x10 [ 79.897664] ? find_held_lock+0x2b/0x80 [ 79.897693] ? alloc_fd+0x2c1/0x560 [ 79.897720] ? lock_release+0xc8/0x290 [ 79.897747] ? alloc_fd+0x2c1/0x560 [ 79.897795] do_sys_openat2+0x104/0x1b0 [ 79.897820] ? __pfx_do_sys_openat2+0x10/0x10 [ 79.897846] ? rcu_read_unlock+0x2d/0xb0 [ 79.897869] ? lock_release+0xc8/0x290 [ 79.897897] __x64_sys_openat+0x142/0x200 [ 79.897922] ? __pfx___x64_sys_openat+0x10/0x10 [ 79.897954] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 79.897992] do_syscall_64+0xbf/0x360 [ 79.898016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.898037] RIP: 0033:0x7ff007713a04 [ 79.898053] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 79.898073] RSP: 002b:00007ffe9d96e100 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 79.898093] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007ff007713a04 [ 79.898106] RDX: 0000000000080001 RSI: 00007ff0077b9f61 RDI: 00000000ffffff9c [ 79.898119] RBP: 00007ff0077b9f61 R08: 0000000000000000 R09: 00007ffe9d96e0f0 [ 79.898132] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 79.898145] R13: 00007ffe9d96e1a0 R14: 0000000000000000 R15: 00000000000000f8 [ 79.898174] [ 81.356037] Bluetooth: hci0: command tx timeout [ 81.483624] Bluetooth: hci1: command tx timeout [ 81.547766] Bluetooth: hci3: command tx timeout [ 81.547997] Bluetooth: hci2: command tx timeout [ 81.612089] Bluetooth: hci4: command tx timeout [ 81.675804] Bluetooth: hci6: command tx timeout [ 81.675851] Bluetooth: hci5: command tx timeout [ 81.739633] Bluetooth: hci7: command tx timeout [ 83.404323] Bluetooth: hci0: command tx timeout [ 83.531615] Bluetooth: hci1: command tx timeout [ 83.595820] Bluetooth: hci3: command tx timeout [ 83.595856] Bluetooth: hci2: command tx timeout [ 83.659640] Bluetooth: hci4: command tx timeout [ 83.723599] Bluetooth: hci5: command tx timeout [ 83.724029] Bluetooth: hci6: command tx timeout [ 83.787569] Bluetooth: hci7: command tx timeout [ 85.451576] Bluetooth: hci0: command tx timeout [ 85.580587] Bluetooth: hci1: command tx timeout [ 85.643607] Bluetooth: hci2: command tx timeout [ 85.644070] Bluetooth: hci3: command tx timeout [ 85.707711] Bluetooth: hci4: command tx timeout [ 85.772343] Bluetooth: hci6: command tx timeout [ 85.772781] Bluetooth: hci5: command tx timeout [ 85.835826] Bluetooth: hci7: command tx timeout [ 87.501178] Bluetooth: hci0: command tx timeout [ 87.628162] Bluetooth: hci1: command tx timeout [ 87.691573] Bluetooth: hci2: command tx timeout [ 87.692677] Bluetooth: hci3: command tx timeout [ 87.755672] Bluetooth: hci4: command tx timeout [ 87.819569] Bluetooth: hci5: command tx timeout [ 87.819762] Bluetooth: hci6: command tx timeout [ 87.883753] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 10:50:30 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8225bf0a RDX=ffff88801611d280 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000007 RSP=ffff888018e9f938 R8 =0000000000000000 R9 =00000001fdffffff R10=0000000000000007 R11=0000000000000001 R12=ffff88800b6daa00 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff817397d8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55ef000 00000000 00000000 LDT=0000 fffffe2500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f299e0b9269 CR3=000000003cca8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828ba3e5 RDI=ffffffff88722060 RBP=ffffffff88722020 RSP=ffff88801641f2b8 R8 =0000000000000000 R9 =ffffed10015f3046 R10=000000000000002d R11=0000000000000001 R12=000000000000002d R13=0000000000000010 R14=ffffffff88722020 R15=ffffffff828ba3d0 RIP=ffffffff828ba43d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556eb3e400 00000000 00000000 GS =0000 ffff8880e56ef000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f304c118028 CR3=000000003d08d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff000000000000ffff000000000000 XMM02=ffffff0000ff00000000000000000000 XMM03=ffff0000ffffffff0000000000000000 XMM04=ffffffffffffff00ffffffffff000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000