Warning: Permanently added '[localhost]:49588' (ECDSA) to the list of known hosts. 2025/07/02 16:58:00 fuzzer started 2025/07/02 16:58:00 dialing manager at localhost:45015 syzkaller login: [ 59.088584] cgroup: Unknown subsys name 'net' [ 59.160607] cgroup: Unknown subsys name 'cpuset' [ 59.180560] cgroup: Unknown subsys name 'rlimit' 2025/07/02 16:58:11 syscalls: 219 2025/07/02 16:58:11 code coverage: enabled 2025/07/02 16:58:11 comparison tracing: enabled 2025/07/02 16:58:11 extra coverage: enabled 2025/07/02 16:58:11 setuid sandbox: enabled 2025/07/02 16:58:11 namespace sandbox: enabled 2025/07/02 16:58:11 Android sandbox: enabled 2025/07/02 16:58:11 fault injection: enabled 2025/07/02 16:58:11 leak checking: enabled 2025/07/02 16:58:11 net packet injection: enabled 2025/07/02 16:58:11 net device setup: enabled 2025/07/02 16:58:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/02 16:58:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/02 16:58:11 USB emulation: enabled 2025/07/02 16:58:11 hci packet injection: enabled 2025/07/02 16:58:11 wifi device emulation: enabled 2025/07/02 16:58:11 802.15.4 emulation: enabled 2025/07/02 16:58:11 fetching corpus: 0, signal 0/0 (executing program) 2025/07/02 16:58:13 starting 8 fuzzer processes 16:58:13 executing program 0: socketpair(0x2c, 0xa, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x2) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x2) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000140)=0x10001, 0x4) sendmsg$802154_raw(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14, &(0x7f0000000280)={&(0x7f00000001c0)="1a50546bed176b9aaeadf11711a8049a838dafa0d6069e6002c53eb77b0e8e9ba55337c8486c8855b3e23855f99ed6fdcabe8131a3143cc41b9eb3a424b97707f4812294257b446d830bc5689e4322e8c43b74e55e95f41d58508b1edb78b6c1f9cdfb8f647cb51615bd19db547e9281dcb61e959b8fcb7d2f2d0fb790e98dae6b21df3b40886c82938970c519cc94cb157ffd3341e629806af524c7266613692160e3a628ae6c367375f37939bff554117e84edfbaaff7da150", 0xba}, 0x1, 0x0, 0x0, 0x80}, 0x881) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000300)=0x7fff, &(0x7f0000000340)=0x4) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000380)=0x8001, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000440)='!\\[\x00', 0x0, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000004c0)={0x4, &(0x7f0000000480)=[{0x7c66, 0xc, 0xb, 0x1}, {0x3f, 0x0, 0x80, 0x4}, {0x3, 0x40, 0x7, 0xdbf}, {0x800, 0x3f, 0x3, 0x2}]}) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4001000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf8, 0x453, 0x300, 0x70bd29, 0x25dfdbff, "eaa7c5e6a676f94d715ed0c2d8b31be84da5a9cb381b2c18d4b17cd521c733e0d953cbe5877d7500b46717ba27466314f39edea97b749a7a6f926e71830fbbe31576de27a0443641416c069c8e69a086e5fe25b1fb43b8e4634681a8ecae7ad9cb1f7b8f81cf9224eaaa07e8fbe2cdc091b79e79d102df822decee765db1b1d998e1c156496aa5e778e9e26ed294f44e0e51aa90228bcd046757e0dd26ea30effe473079d5647ed39f3436174a9d00a5b91f0c80f7f3f4d41366bad2324116526a680bdb5484872ee0f666ad5b80835edfeb72eb4483a402fc1d734ac5552decd4c136ea06", ["", "", "", "", "", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000006c0)=@ccm_128={{0x304}, "5c37f31a6ded343e", "a56781fd49cb9d08cff2471865ed4463", "5ccf142c", "a2584393c8f69e64"}, 0x28) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000740)={0x430, 0x3f3, 0x400, 0x70bd28, 0x25dfdbff, {0x10, 0x0, 0x19, [0x1f, 0x2, 0x5, 0x5, 0x2, 0x3, 0x200, 0x9, 0x10001, 0x8, 0x7ff, 0x7, 0x9686, 0x7, 0x2, 0x7, 0x565a845b, 0xffff, 0x2, 0x7, 0x200, 0x8, 0x7, 0x9, 0x5, 0xffffff7f, 0x7, 0x5, 0x6, 0x16917502, 0x2, 0x3, 0xffffff9d, 0x0, 0x8, 0x8, 0xcf3, 0xdb, 0xf31d, 0x7, 0x6, 0x1, 0x7fff, 0x6, 0x100, 0x2, 0x1, 0x20, 0x4, 0xfffffff9, 0x101, 0x800, 0x1, 0xf7d7, 0x6, 0x101, 0x18, 0x2, 0x3f, 0x7, 0x8, 0x80000001, 0x7f, 0x1], [0x80000001, 0x6, 0xa, 0xffff, 0x2, 0x8, 0x7, 0xfffffffc, 0x4, 0x5, 0x8, 0x8, 0x0, 0x1, 0x3, 0x3, 0x84, 0x0, 0x3ff, 0x8, 0xdf, 0x6, 0x27b03e55, 0x2fe, 0x4, 0xfffff800, 0x3, 0x5, 0x1f, 0x2, 0x3ab7, 0x1, 0x5, 0x675, 0x8, 0x4, 0x1ff, 0xff, 0x6, 0x800, 0x80000001, 0x7fffffff, 0x4, 0x66, 0x6, 0x400, 0x1, 0x7, 0x0, 0x7, 0x0, 0x3, 0x81, 0x1, 0x2, 0x5, 0xffffffff, 0x1, 0x8, 0x29, 0x9, 0x7, 0x8a6, 0x2], [0x8, 0x4, 0x8001, 0x80000001, 0x0, 0x5, 0x3, 0x4, 0x1, 0x200, 0xfffffff1, 0x8bc5, 0x0, 0xffff, 0x9, 0xbdb, 0x8, 0x8, 0x2, 0x2, 0x5, 0x7f, 0x3, 0x5, 0x9, 0xc2ec, 0xbe, 0x1f, 0xbbc, 0x1000, 0x9, 0x10000, 0x2, 0x200, 0x0, 0x80000000, 0x1ff, 0x44b5, 0x9, 0x1, 0x81, 0x5, 0x19, 0x400, 0x1, 0x5, 0x3, 0x5, 0x401, 0x101, 0x7f, 0x4, 0x3, 0x0, 0xff, 0x40, 0x200, 0x1, 0x5, 0xffff, 0x2943, 0xf9, 0x10000, 0x5], [0x3, 0x8, 0xfff, 0x8001, 0x8000, 0x1, 0x4, 0x9, 0x9, 0x200, 0x7ff, 0x4, 0xffffff92, 0x4, 0x4, 0x6, 0x20, 0xfffff801, 0xfffff000, 0xff, 0xffff, 0x20, 0x7, 0x554, 0x4, 0x1c0, 0x5e6, 0x100, 0x639, 0x40, 0x3, 0xffff, 0x1, 0x7, 0x4, 0x4, 0x3, 0xffff, 0x40, 0x6, 0x3, 0x2, 0x3, 0xfffffff8, 0x7, 0x20, 0x8, 0x23db755c, 0x90, 0x1, 0x0, 0xfffffffd, 0x4, 0xaed, 0x4, 0xff, 0x6, 0xfffffbff, 0x401, 0x3ff, 0x401, 0x8, 0x0, 0x7], 0xd, ['}%#$^]\x00', '!\\[\x00', '@\x00']}, [""]}, 0x430}, 0x1, 0x0, 0x0, 0x40010}, 0x54080) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000c00)=0x3a, 0x1) fspick(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x1) bind$bt_sco(r1, &(0x7f0000000c80), 0x8) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000cc0)=0x1, 0x4) socket$nl_audit(0x10, 0x3, 0x9) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) 16:58:13 executing program 2: setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000000)="392fcf96578d0c80635b0c3ae0e4a4c2b7f1c4190abc1be713ed4bdb7852ef933c6334b1f16eb132f8e0d9505d2a689f7da29e2486654e379528189e1cab13e257d0e2e10edb84fbeec424f641fc5658aaeecbeec71f040bed13be81a75239e561860087d6fb3d9a0889c112c163a0faf2ac0bc09b24a95c9365770bbdc00f387e02c09e", 0x84) r0 = socket(0x3, 0x5, 0x20200000) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f00000000c0)="448588702cef675291650caec8779d10", 0x10) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000140)={r1, r2+60000000}, 0x1, 0x1, 0x1}, 0x401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000240)={0x100000000, 0x5, 0x4, 0x7, 0x0, 0xff, 0x10001, 0x1000}, &(0x7f0000000280)={0x2, 0x0, 0x8, 0x6, 0x0, 0x46dd, 0x1f, 0x2}, &(0x7f00000002c0)={0x7fffffff, 0x5, 0x8, 0xc6c, 0x0, 0x7, 0x1, 0xffffffffffffffff}, &(0x7f0000000340)={r3, r4+60000000}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x5]}, 0x8}) clock_gettime(0x0, &(0x7f00000018c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001880)=[{{&(0x7f0000000400)=@qipcrtr, 0x80, &(0x7f0000001740)=[{&(0x7f0000000480)=""/8, 0x8}, {&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f0000000540)=""/69, 0x45}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/173, 0xad}, {&(0x7f0000001680)=""/172, 0xac}], 0x6, &(0x7f00000017c0)=""/136, 0x88}, 0x8000}], 0x1, 0x40000000, &(0x7f0000001900)={r5, r6+10000000}) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000001940)={0x3f, 0x7d}, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000001980)={@desc={0x1, 0x0, @desc1}}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000019c0), 0x4) socketpair(0x25, 0xa, 0xb8da, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000006f00)=[{{&(0x7f0000001a40)=@isdn, 0x80, &(0x7f0000003c40)=[{&(0x7f0000001ac0)=""/140, 0x8c}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/12, 0xc}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/96, 0x60}], 0x5, &(0x7f0000003cc0)=""/179, 0xb3}, 0x7ff}, {{&(0x7f0000003d80)=@qipcrtr, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003e00)=""/191, 0xbf}], 0x1, &(0x7f0000003f00)=""/180, 0xb4}, 0x3}, {{&(0x7f0000003fc0)=@ll, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004040)=""/182, 0xb6}, {&(0x7f0000004100)=""/174, 0xae}], 0x2, &(0x7f0000004200)=""/181, 0xb5}, 0x5}, {{&(0x7f00000042c0)=@generic, 0x80, &(0x7f0000005480)=[{&(0x7f0000004340)=""/123, 0x7b}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/184, 0xb8}], 0x3, &(0x7f00000054c0)=""/210, 0xd2}, 0x9}, {{&(0x7f00000055c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000005840)=[{&(0x7f0000005640)=""/221, 0xdd}, {&(0x7f0000005740)=""/194, 0xc2}], 0x2, &(0x7f0000005880)=""/68, 0x44}, 0x3}, {{0x0, 0x0, &(0x7f0000005980)=[{&(0x7f0000005900)=""/104, 0x68}], 0x1, &(0x7f00000059c0)=""/48, 0x30}, 0x1}, {{0x0, 0x0, &(0x7f0000005bc0)=[{&(0x7f0000005a00)=""/173, 0xad}, {&(0x7f0000005ac0)=""/209, 0xd1}], 0x2}, 0x6}, {{&(0x7f0000005c00)=@phonet, 0x80, &(0x7f0000006e80)=[{&(0x7f0000005c80)=""/4096, 0x1000}, {&(0x7f0000006c80)=""/141, 0x8d}, {&(0x7f0000006d40)=""/147, 0x93}, {&(0x7f0000006e00)=""/118, 0x76}], 0x4, &(0x7f0000006ec0)=""/19, 0x13}, 0x6}], 0x8, 0x60, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f00000071c0)={&(0x7f0000007100), 0xc, &(0x7f0000007180)={&(0x7f0000007140)={0x28, 0x3f7, 0x20, 0x70bd27, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24044041}, 0x20004000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x13, 0xffffffffffffffff, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r8, &(0x7f00000072c0)={&(0x7f0000007200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007280)={&(0x7f0000007240)={0x28, 0x3f7, 0x1, 0x70bd25, 0x25dfdbfc, {0x7, 0x7, './file0', './file1'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x840) 16:58:13 executing program 1: setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0xffff, 0x2) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x2) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "8b11fc92316f30b8", "2a3f1970f0f19c2e4dba9bf8b28a52eb51e21029ec26e75ea5857ddb715b4304", "13fa1ebf", "6592fff4df4c7306"}, 0x38) r0 = socket$nl_audit(0x10, 0x3, 0x9) clock_gettime(0x0, &(0x7f0000001d40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001c40)=[{{&(0x7f0000000100)=@phonet, 0x80, &(0x7f0000001340)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/153, 0x99}, {&(0x7f0000001240)=""/196, 0xc4}], 0x3, &(0x7f0000001380)=""/194, 0xc2}, 0x5}, {{&(0x7f0000001480)=@alg, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001500)=""/192, 0xc0}], 0x1}, 0x81}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001600)=""/165, 0xa5}, {&(0x7f00000016c0)=""/208, 0xd0}, {&(0x7f00000017c0)=""/19, 0x13}, {&(0x7f0000001800)=""/74, 0x4a}, {&(0x7f0000001880)=""/203, 0xcb}], 0x5}, 0x4}, {{&(0x7f0000001a00)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001a80)=""/148, 0x94}, {&(0x7f0000001b40)=""/140, 0x8c}], 0x2}, 0x1}], 0x4, 0x40000000, &(0x7f0000001d80)={r1, r2+60000000}) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000001dc0)=0x7, 0x4) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000022c0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x11000000}, 0xc, &(0x7f0000002280)={&(0x7f0000001e40)={0x438, 0x3f3, 0x400, 0x70bd2c, 0x25dfdbfb, {0x6, 0x2, 0x17, [0x81, 0x100, 0x7, 0x10000, 0x1, 0x7f, 0x8, 0x2de, 0x2, 0x53, 0x6, 0x3, 0x81, 0x4, 0x8, 0x1, 0x2, 0x0, 0x2, 0x6, 0x2, 0x5, 0x1, 0x7fff, 0x8, 0x800, 0x7ff, 0x5, 0x7, 0x7, 0x7, 0xffffff81, 0x0, 0x36cc, 0x0, 0x10d76f64, 0x7fff, 0x40, 0xffffffff, 0x8, 0x6, 0x8000, 0x8000, 0x8, 0x80, 0xcc458c2b, 0x5555, 0x100, 0x6, 0x7200, 0x80000001, 0x6, 0x1, 0x1a, 0x10001, 0x1, 0x5, 0x10000, 0x3, 0x9, 0x7, 0x0, 0x6, 0x80000000], [0x4, 0x80000001, 0x3, 0x2, 0x0, 0x40, 0x31f, 0x94, 0xfffffffe, 0x7, 0x58c4, 0x0, 0x7ff, 0x1f, 0x0, 0x9, 0x1, 0xd, 0x0, 0x1b, 0x3, 0x9, 0x6, 0x8, 0x7, 0x1, 0x3, 0x5, 0x4, 0xffffffff, 0x100, 0x9, 0x7, 0x10001, 0x4, 0x2, 0x91, 0x5, 0x0, 0x6, 0xfffffffd, 0x3, 0x4, 0x3, 0x5, 0x2b, 0x5, 0x5, 0x9, 0x10000, 0x10001, 0x7, 0x1, 0x9, 0x3, 0x2989, 0x8, 0x9, 0xfffffbff, 0x8, 0x2, 0x6b, 0x6, 0x2], [0x2, 0x1, 0x8, 0x4, 0x6, 0x9, 0xec4, 0x0, 0xffff, 0x9, 0xffff, 0x6, 0x7, 0x3, 0x0, 0x1, 0x8, 0x0, 0x4, 0x0, 0x6, 0x8, 0x9, 0x1, 0x10e, 0x6, 0x435, 0xfff, 0x5, 0x9, 0x7fff, 0x5, 0x7, 0x4, 0xffffff84, 0x200, 0x5, 0x400, 0x9, 0x5, 0x8, 0x0, 0x7, 0xffffc4db, 0x7, 0x18, 0x7, 0x3f, 0x34, 0x7fffffff, 0x20, 0x5, 0xac90f03, 0x5, 0x3, 0x3, 0x0, 0x9, 0x1, 0x9, 0xfff, 0x0, 0x2a40, 0x7fff], [0x1000, 0x400, 0x20000, 0x9, 0x7, 0x4a9, 0x4e1, 0x5, 0x9, 0xff, 0x1ec, 0x6, 0x6, 0x7f, 0x9, 0x7f, 0x1d5, 0x5, 0x16, 0x800, 0x5, 0x3, 0xe1f, 0x800, 0x3, 0x3, 0x0, 0xffff7fff, 0xffffffff, 0xcf, 0xfffffff9, 0x8, 0x3, 0x4, 0x800, 0xeff, 0x4cf, 0x3, 0x0, 0xfffffff9, 0x8, 0x7ff8000, 0x4, 0xfffffc01, 0x80000001, 0xfffff800, 0xfffffbff, 0x9, 0xc3, 0x0, 0x20, 0x5, 0x8, 0xb2, 0x3, 0x400, 0x7, 0x1c00000, 0x8, 0x9, 0x9, 0x4, 0x2], 0x18, ['\xb5-],\x00', ':*]\x00', '&:-)^*\x00', '.\x00', '*\x1f*@\\\x00']}, ["", "", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x8004}, 0x14000804) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x95) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000002400)=[@sack_perm, @timestamp], 0x2) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000002440)=@ccm_128={{0x304}, "4c7e57f611a2d438", "f26e2cab1f5ca3aebe4b122cd158729d", "5f50abe2", "b777954f16eadcf5"}, 0x28) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000002540)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x18, 0x3f9, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004070}, 0x14805) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000002580)=@unlock_all, 0xb) recvmmsg(r0, &(0x7f0000002f40)=[{{&(0x7f00000025c0)=@alg, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002640)=""/121, 0x79}], 0x1}, 0x80000000}, {{&(0x7f0000002700)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002780)=""/226, 0xe2}, {&(0x7f0000002880)=""/188, 0xbc}, {&(0x7f0000002940)=""/166, 0xa6}, {&(0x7f0000002a00)=""/193, 0xc1}, {&(0x7f0000002b00)=""/24, 0x18}, {&(0x7f0000002b40)=""/233, 0xe9}], 0x6}, 0xfffffffc}, {{&(0x7f0000002cc0)=@alg, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002d40)=""/232, 0xe8}], 0x1, &(0x7f0000002e80)=""/163, 0xa3}, 0xe1}], 0x3, 0x40010000, &(0x7f0000003000)={0x77359400}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8001) clock_gettime(0x0, &(0x7f0000005900)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003140)=""/145, 0x91}, {&(0x7f0000003200)=""/55, 0x37}, {&(0x7f0000003240)=""/175, 0xaf}, {&(0x7f0000003300)=""/185, 0xb9}, {&(0x7f00000033c0)=""/130, 0x82}, {&(0x7f0000003480)=""/3, 0x3}, {&(0x7f00000034c0)=""/196, 0xc4}, {&(0x7f00000035c0)=""/161, 0xa1}], 0x8, &(0x7f0000003700)=""/214, 0xd6}, 0xe64}, {{&(0x7f0000003800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/209, 0xd1}, {&(0x7f0000004980)=""/237, 0xed}, {&(0x7f0000004a80)=""/74, 0x4a}, {&(0x7f0000004b00)=""/161, 0xa1}, {&(0x7f0000004bc0)=""/254, 0xfe}], 0x6, &(0x7f0000004d40)=""/91, 0x5b}, 0x5}, {{&(0x7f0000004dc0)=@tipc=@id, 0x80, &(0x7f0000005180)=[{&(0x7f0000004e40)=""/95, 0x5f}, {&(0x7f0000004ec0)}, {&(0x7f0000004f00)=""/143, 0x8f}, {&(0x7f0000004fc0)=""/112, 0x70}, {&(0x7f0000005040)=""/67, 0x43}, {&(0x7f00000050c0)=""/60, 0x3c}, {&(0x7f0000005100)=""/18, 0x12}, {&(0x7f0000005140)=""/51, 0x33}], 0x8, &(0x7f0000005200)=""/153, 0x99}, 0xb192}, {{&(0x7f00000052c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000005780)=[{&(0x7f0000005340)=""/183, 0xb7}, {&(0x7f0000005400)=""/251, 0xfb}, {&(0x7f0000005500)=""/8, 0x8}, {&(0x7f0000005540)=""/245, 0xf5}, {&(0x7f0000005640)=""/62, 0x3e}, {&(0x7f0000005680)=""/211, 0xd3}], 0x6}, 0x80}], 0x4, 0x40000002, &(0x7f0000005940)={r3, r4+60000000}) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000005980)=0xea9, 0x4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000005a00), r6) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000007180)={&(0x7f00000059c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000007140)={&(0x7f0000007100)={0x34, r7, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x40080) 16:58:13 executing program 3: getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x8780, &(0x7f0000000040)=0x2) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x13, &(0x7f00000000c0)=0x4) r0 = syz_mount_image$nfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xffffffff00000001, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="2dc6d371361b71efe979b4a36c9f2925935673b97b0a4127138ccdfad394e37feefdbca685177a89b6ffa6f75d4b608ee436083653e8", 0x36}], 0x142404, &(0x7f0000000200)={[{}, {'%-'}, {}, {}, {').'}, {}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x200) recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/238, 0xee}], 0x1}, 0x8}, {{&(0x7f0000000440)=@x25={0x9, @remote}, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/71, 0x47}, {&(0x7f0000000600)=""/45, 0x2d}, {&(0x7f0000000640)=""/242, 0xf2}, {&(0x7f0000000740)=""/34, 0x22}], 0x5, &(0x7f0000000800)}, 0x80000001}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000840)=""/114, 0x72}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/249, 0xf9}], 0x3, &(0x7f0000001a00)=""/13, 0xd}, 0xfffffff8}], 0x3, 0x40002042, &(0x7f0000001b00)={0x0, 0x989680}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000001b40)='.\x00', &(0x7f0000001b80)='./file0\x00', r0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001bc0)='./file1\x00', &(0x7f0000001c00)={0x4100, 0x0, 0x8}, 0x18) mknodat(r1, &(0x7f0000001c40)='./file0\x00', 0x4, 0x8) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000001c80)={0x3f}, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001cc0)={0xffffff81, 0x7f, 0x9, 0x9, 0x5}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000001d00)={0x8, 0x11, 0xb1, 0x7ff, 0xf0000000}, 0x14) mknodat(r1, &(0x7f0000001d40)='./file0\x00', 0x8000, 0x2a13) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000006d00)={&(0x7f0000006c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000006cc0)={&(0x7f0000006c40)={0x54, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc1b}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a1c}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c800}, 0x8041) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000006e00)={&(0x7f0000006d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000006dc0)={&(0x7f0000006d80)={0x2c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x844) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000006e40)={@desc={0x1, 0x0, @auto="a4ccb6342c2d5974"}}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000006fc0)={&(0x7f0000006e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000006f80)={&(0x7f0000006f00)={0x5c, 0x0, 0x200, 0x3, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x81}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xa4272d6a0795e8f6}, 0x20000001) [ 71.222413] audit: type=1400 audit(1751475493.278:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:58:13 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcea}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1c000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x200000d0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2d, 0xff, 0x6, 0x5, 0x46, @local, @mcast1, 0x7, 0x80, 0xfff, 0x63}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}}, 0x0) r1 = syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x7ff, 0x2, &(0x7f0000000440)=[{&(0x7f0000000340)="b2f6757d7c34a3e2de92e09609098dfe263e7d9c668935f352a54cf324721acf33336af23a5376b8644098377cee9a163dd2637ab46d79352c9fbc6280c71813f9433527eb10a8026448b9a59f5f1326e839c1441959a943e0b049c9044f70472455d8736a3f123a58c5943cbcbcc487c073e055abbe0e835a3ce155", 0x7c, 0x6}, {&(0x7f00000003c0)="5f3cdbb471b10765b5f30a1d50caa0d67f0c1feb38dc083f8303c949999fa15218fa02e78c2ca6947417162e0cf1be3eda640378de999a7d20f235679430734b4e55f7e09ca762bfeafdbad6ddcdcfb51a55711a59570603", 0x58, 0x6e83}], 0x50800, &(0x7f0000000480)={[{@overriderock}, {@hide}, {@nocompress}, {@utf8}, {@mode={'mode', 0x3d, 0x3}}, {@dmode={'dmode', 0x3d, 0x8}}, {@cruft}, {@map_off}, {@dmode={'dmode', 0x3d, 0xad3b}}, {@overriderock}], [{@dont_hash}, {@context={'context', 0x3d, 'user_u'}}, {@dont_measure}]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000540)={@desc={0x1, 0x0, @auto="93fb10bf704101bf"}}) socketpair(0xb, 0x80000, 0x2, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) r4 = accept(r2, &(0x7f00000006c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000740)=0x80) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004001) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r5, 0x8, 0x1f, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000a00)='batadv\x00', &(0x7f0000000a40)='./file0\x00', r1) mknodat$null(r1, &(0x7f0000000a80)='./file0\x00', 0x200, 0x103) recvmmsg(r3, &(0x7f0000000f40)=[{{&(0x7f0000000ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000b40)=""/145, 0x91}, {&(0x7f0000000c00)=""/84, 0x54}, {&(0x7f0000000c80)=""/103, 0x67}, {&(0x7f0000000d00)=""/171, 0xab}, {&(0x7f0000000dc0)=""/133, 0x85}], 0x5, &(0x7f0000000f00)=""/32, 0x20}, 0x2}], 0x1, 0x23, &(0x7f0000000f80)={0x0, 0x989680}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000001040)={'syztnl0\x00', &(0x7f0000000fc0)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0xf8, 0x6, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x8, 0x8016, 0x8, 0x7}}) write$eventfd(0xffffffffffffffff, &(0x7f0000001080)=0x8, 0x8) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0), 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x4c, r5, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x60, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8b}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x400) 16:58:13 executing program 5: sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2d, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000011}, 0x44) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x3e9, 0x1, 0x70bd29, 0x25dfdbfb, {0xd, 0x0, 0x0, 0xffffffffffffffff, 0xffffffff, 0x5, 0x57, 0x9610, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000811}, 0x20008080) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000200)=0x401, 0x2) r0 = socket(0x23, 0x5, 0xbe1) bind$bt_sco(r0, &(0x7f0000000240), 0x8) r1 = accept(0xffffffffffffffff, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000300)=0x80) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x4) r2 = socket(0x2c, 0x1, 0xd6c1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r3, 0x8ef2bbd180a78bfd, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040011}, 0x1) fsopen(&(0x7f0000000540)='esdfs\x00', 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000a40)={0x0, 0xffffffffffffffff, 0x80, 0x9, @scatter={0x4, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=""/83, 0x53}, {&(0x7f0000000600)=""/213, 0xd5}, {&(0x7f0000000700)=""/18, 0x12}, {&(0x7f0000000740)=""/217, 0xd9}]}, &(0x7f0000000880)="c93cfa3c4951e055816b92b2f027965a5c1c63bcc446d29f8550ad3064ddd470ed1225b913653032de9996b00b5dc6b2392419acc0ba98cf329e7ded83a1eb48b0c8a8f974055176d91d9ac56038f004c9b3441be13e67423f966ec224c58a2f193fd8ff0069d306e66413711cce6734371e2c20770690091584a171caa3172f", &(0x7f0000000900)=""/251, 0x7fff, 0x30, 0x0, &(0x7f0000000a00)}) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000ac0)={0x1}, 0x2) sendmsg$AUDIT_USER(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x3ed, 0x100, 0x70bd26, 0x25dfdbfc, "402c922e533e1cc3d8c0e7c3cf057bba1fe7e119934bf133cd6c26adcbf8fcc78467130f5d9342445720cce98ad0b86ffcf89bf4", ["", ""]}, 0x44}}, 0x4040) accept(r1, &(0x7f0000000c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000cc0)=0x80) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x20, 0x3fa, 0x20, 0x70bd2c, 0x25dfdbfe, {0x1, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f00000012c0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001280)={&(0x7f0000000e40)={0x42c, 0x3f3, 0x4, 0x70bd25, 0x25dfdbfc, {0x3, 0x2, 0x18, [0x2, 0x6, 0x2, 0x64, 0x1a5, 0x48, 0x1f, 0x24c385f2, 0x6ab, 0x1, 0xd1d8, 0x5, 0x3, 0x5, 0x0, 0x6, 0x200, 0x1, 0x80000001, 0x2, 0x2, 0x8, 0x9, 0x8, 0xd6, 0x5, 0x9, 0x3, 0xfffffffa, 0x8, 0x9611, 0x8, 0x1, 0x6, 0x9, 0x9, 0x80000001, 0x5, 0x200, 0x2c, 0x1f, 0x8, 0x81, 0xed, 0x8, 0x5, 0xd, 0x100, 0x7f, 0x7fffffff, 0x7, 0x2, 0x100, 0x200000, 0xe, 0x4, 0x5, 0x6, 0x4, 0x1ff, 0x6, 0x8000, 0x4, 0x7], [0x3ff, 0x8001, 0x1, 0x1, 0x7, 0x6, 0x8, 0x0, 0x80000001, 0x9, 0x7fffffff, 0x10001, 0x0, 0x1f, 0x5, 0xffff, 0x9, 0x3f, 0x800, 0xb8b8, 0x9, 0x1, 0x5, 0x9, 0x1f, 0x7, 0x0, 0xfffff801, 0x4c4e, 0x9, 0x0, 0x5, 0xef, 0x7, 0x3, 0x8, 0x1, 0xffffffff, 0x1000000, 0x9, 0x9, 0x3, 0x7fffffff, 0x6, 0x0, 0x40, 0x6, 0x2, 0xffffffff, 0x9711, 0x2, 0x9, 0x80000000, 0x0, 0x80, 0x4, 0x7, 0xd678, 0x81, 0x401, 0x8, 0x8, 0x84e, 0x10fa], [0x6, 0x9, 0x2, 0x8, 0x381, 0x7ff, 0x4, 0x8, 0xce, 0x2, 0x1f, 0x8, 0x2, 0xfff, 0x1, 0x4, 0xfffffff7, 0x2, 0x20, 0x0, 0x5, 0x8, 0x2, 0x8001, 0x74, 0x5, 0x4, 0x3, 0x10001, 0x81, 0x3, 0x1, 0xbaf7a71a, 0x1, 0x7ff, 0x20, 0x8, 0x800, 0x4, 0x1, 0x2, 0x9, 0x8, 0x800, 0x695, 0x9, 0x8, 0x1, 0x80000001, 0x1, 0x5, 0x705, 0x2, 0x5, 0xffffffff, 0xf85, 0x3, 0x9, 0x4, 0x7fffffff, 0x6, 0x9, 0x80000000, 0x2], [0x4, 0x7fff, 0x7cb5, 0xbaa, 0xfff, 0xe15d, 0x20, 0x2, 0xe0, 0xfffffffe, 0x0, 0x401, 0x8000, 0x40, 0x10001, 0x2, 0x3, 0x9, 0x186, 0x7ff, 0x0, 0x800, 0x80000000, 0x40, 0x7, 0xfffffffb, 0xcec9, 0x7b1, 0x4, 0x1, 0x8833, 0x3, 0x401, 0x2, 0xffffffff, 0x6, 0x2, 0x0, 0xfffffffd, 0x7, 0x3, 0xffff, 0x2, 0x3, 0x9, 0x0, 0x0, 0x761, 0x8, 0x26, 0x4bb2f3a6, 0x101, 0x4, 0xda7d, 0x1, 0x80000000, 0x1, 0x80000001, 0x5, 0x7f, 0x400, 0x8, 0xc923, 0x5], 0xc, ['-:[!()/\x00', '))\\\x00']}, ["", "", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x4040040}, 0x40000) r5 = syz_mount_image$iso9660(&(0x7f0000001300), &(0x7f0000001340)='./file0\x00', 0x6, 0x3, &(0x7f0000001580)=[{&(0x7f0000001380)="1405c629b798930d5b1a852e895a3b6481abb1f26ef4c83fe9060444577726b34d95052e7d61743e2120a971fa96b44e5258cd31c9afdf64d86224f2499e72ea6f91431a3117f1c3716ffa7357414b", 0x4f, 0xffffffff00000001}, {&(0x7f0000001400)="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", 0xfb, 0x4}, {&(0x7f0000001500)="1fb5983d047f9721ab55af8805fcc5e172810e3154e413c785fc2f6e2df53d7e763ccbd29c44f6771cf0edb145a113e83369ab956153964fe29efacc54ce7ba302ab496fb10d9bbedb0a41b9b692e3caca08286e0be8327ac66b", 0x5a, 0x10001}], 0x400, &(0x7f0000001600)={[{@overriderock}], [{@subj_role={'subj_role', 0x3d, '{}[+{@}^+,-'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '(-'}}, {@fsname={'fsname', 0x3d, '\\:@-['}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@subj_role={'subj_role', 0x3d, 'esdfs\x00'}}, {@pcr={'pcr', 0x3d, 0x30}}, {@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x64, 0x30, 0x62, 0x34, 0x61, 0x64, 0x63], 0x2d, [0x38, 0x65, 0x0, 0x39], 0x2d, [0x0, 0x30, 0x0, 0x8], 0x2d, [0x35, 0x66, 0x38, 0x35], 0x2d, [0x66, 0x32, 0x34, 0x30, 0x64, 0x61, 0x61, 0x65]}}}]}) mkdirat(r5, &(0x7f0000001700)='./file0\x00', 0x20) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000001740)=0x200, &(0x7f0000001780)=0x2) 16:58:13 executing program 6: ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/4096) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000001000)={{0x2, 0x0, 0x7, 0x0, 0x5}, 0x1, 0x3, 0x8}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r0 = eventfd(0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000001080)=r0, 0x1) accept(0xffffffffffffffff, &(0x7f00000010c0)=@ethernet={0x0, @multicast}, &(0x7f0000001140)=0x80) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000011c0)={{0xffffffffffffffff, 0x3, 0x4, 0x0, 0x7}, 0x1ff, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0x4, 0xae, 0x6, 0x7fff}) r3 = accept(r2, 0x0, &(0x7f00000012c0)) recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000001300)=@xdp, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001380)=""/25, 0x19}], 0x1, &(0x7f0000001400)=""/35, 0x23}, 0x8001}], 0x1, 0x40002040, &(0x7f0000001480)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000014c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000001500)=r1, 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001540)='!\'--*\\[\'\x00', 0x0, r4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001580), 0x200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000015c0)={0x0, 0x7fffffff, 0x9, 0x0, 0x4}) read$eventfd(0xffffffffffffffff, &(0x7f0000001640), 0x8) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000001680)) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000001700)='\x00', 0x0, 0xffffffffffffffff) 16:58:13 executing program 7: sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3e8, 0x200, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2000c0d4}, 0x20040000) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x3fa, 0x100, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x18c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x150, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8ebc32603429a94c431ebf280ffb29739e388fa03a53eb35428e3109e92d1c0e"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "858360fb7fc6b8f4ab580e76b423146108ed8c04823ef190aedfc50f007c57f9"}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c6258264d33af04ab07bb91486d45e373eb17b10c514fcc807b11e729c8fff2f"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d40dabb6d5015f38dc0dba06920628015b0f4c9890bbf6f50dd5d12d63413903"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "862496b418282f1452b9b5bd7af4862b6c32253f26f3d73476a7089f1ff12780"}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8080}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000005c0)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan3\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r5) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x24000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x160, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVICE={0x40, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVICE={0x3c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1ff}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x401}]}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}]}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVICE={0x50, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xea6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVICE={0x48, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xb408ab9f79f43b00}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24048000) [ 72.488648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.491230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.494453] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.497365] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.501997] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.504807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.506922] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.510110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.512826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.514343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.516999] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.524444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.526360] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.541891] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.560468] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.565327] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.570314] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.572242] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 72.573822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.575002] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 72.577180] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.580159] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.583658] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.585525] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.587859] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.590092] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 72.594546] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.598466] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.600005] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 72.601300] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.609233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.610611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.613681] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.616550] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.616994] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.617997] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 72.630188] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.638507] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.659412] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.661399] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.666830] [ 72.667389] ============================= [ 72.668055] WARNING: suspicious RCU usage [ 72.668666] 6.16.0-rc4-next-20250702 #1 Not tainted [ 72.669745] ----------------------------- [ 72.675796] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 72.676904] [ 72.676904] other info that might help us debug this: [ 72.676904] [ 72.678077] [ 72.678077] rcu_scheduler_active = 2, debug_locks = 1 [ 72.679069] 3 locks held by syz-executor.2/281: [ 72.679785] #0: ffff88800fc4c400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 72.681130] #1: ffff8880091d2618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 72.682601] #2: ffff888018fb96d8 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 72.683989] [ 72.683989] stack backtrace: [ 72.684663] CPU: 0 UID: 0 PID: 281 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 72.684696] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 72.684708] Call Trace: [ 72.684715] [ 72.684724] dump_stack_lvl+0xfa/0x120 [ 72.684748] lockdep_rcu_suspicious+0x152/0x1c0 [ 72.684775] proc_sys_compare+0x28a/0x340 [ 72.684796] ? __pfx_proc_sys_compare+0x10/0x10 [ 72.684820] d_same_name+0x229/0x2e0 [ 72.684843] d_alloc_parallel+0x7c1/0x1330 [ 72.684880] ? __pfx_d_alloc_parallel+0x10/0x10 [ 72.684904] ? lock_is_held_type+0x9e/0x120 [ 72.684938] ? __pfx_default_wake_function+0x10/0x10 [ 72.684969] ? __d_lookup+0x25f/0x490 [ 72.685003] lookup_open.isra.0+0x64f/0x1530 [ 72.685037] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 72.685082] ? mnt_get_write_access+0x81/0x2d0 [ 72.685102] ? mnt_get_write_access+0x1ea/0x2d0 [ 72.685132] path_openat+0xc26/0x2880 [ 72.685172] ? __lock_acquire+0x694/0x1b70 [ 72.685193] ? __pfx_path_openat+0x10/0x10 [ 72.685234] do_filp_open+0x1e8/0x450 [ 72.685265] ? __pfx_do_filp_open+0x10/0x10 [ 72.685308] ? find_held_lock+0x2b/0x80 [ 72.685337] ? alloc_fd+0x2c1/0x560 [ 72.685364] ? lock_release+0xc8/0x290 [ 72.685391] ? alloc_fd+0x2c1/0x560 [ 72.685429] do_sys_openat2+0x104/0x1b0 [ 72.685454] ? __pfx_do_sys_openat2+0x10/0x10 [ 72.685481] ? __fput+0x67b/0xb50 [ 72.685511] __x64_sys_openat+0x142/0x200 [ 72.685536] ? __pfx___x64_sys_openat+0x10/0x10 [ 72.685560] ? __pfx_fput_close_sync+0x10/0x10 [ 72.685596] do_syscall_64+0xbf/0x360 [ 72.685620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.685641] RIP: 0033:0x7f0b50b53a04 [ 72.685658] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 72.685677] RSP: 002b:00007ffd48fb0380 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 72.685697] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f0b50b53a04 [ 72.685710] RDX: 0000000000080001 RSI: 00007f0b50c0a2d3 RDI: 00000000ffffff9c [ 72.685723] RBP: 00007f0b50c0a2d3 R08: 0000000000000000 R09: 00007ffd48fb0370 [ 72.685736] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 72.685749] R13: 00007ffd48fb0420 R14: 0000000000000000 R15: 00000000000000f8 [ 72.685778] [ 74.584053] Bluetooth: hci1: command tx timeout [ 74.584850] Bluetooth: hci0: command tx timeout [ 74.647212] Bluetooth: hci5: command tx timeout [ 74.648631] Bluetooth: hci6: command tx timeout [ 74.649193] Bluetooth: hci2: command tx timeout [ 74.710869] Bluetooth: hci3: command tx timeout [ 74.838792] Bluetooth: hci7: command tx timeout [ 74.839467] Bluetooth: hci4: command tx timeout [ 76.630767] Bluetooth: hci1: command tx timeout [ 76.631202] Bluetooth: hci0: command tx timeout [ 76.695548] Bluetooth: hci6: command tx timeout [ 76.696267] Bluetooth: hci5: command tx timeout [ 76.696647] Bluetooth: hci2: command tx timeout [ 76.758734] Bluetooth: hci3: command tx timeout [ 76.886789] Bluetooth: hci4: command tx timeout [ 76.886823] Bluetooth: hci7: command tx timeout [ 78.678792] Bluetooth: hci0: command tx timeout [ 78.679255] Bluetooth: hci1: command tx timeout [ 78.742826] Bluetooth: hci2: command tx timeout [ 78.742874] Bluetooth: hci5: command tx timeout [ 78.743617] Bluetooth: hci6: command tx timeout [ 78.806886] Bluetooth: hci3: command tx timeout [ 78.935353] Bluetooth: hci4: command tx timeout [ 78.936896] Bluetooth: hci7: command tx timeout [ 80.726796] Bluetooth: hci1: command tx timeout [ 80.727268] Bluetooth: hci0: command tx timeout [ 80.790740] Bluetooth: hci6: command tx timeout [ 80.791203] Bluetooth: hci5: command tx timeout [ 80.791587] Bluetooth: hci2: command tx timeout [ 80.854759] Bluetooth: hci3: command tx timeout [ 80.982760] Bluetooth: hci7: command tx timeout [ 80.983216] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 16:58:14 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff828ba350 RDI=ffffffff88722060 RBP=ffffffff88722020 RSP=ffff88801645f260 R8 =0000000000000000 R9 =ffffed100171e046 R10=00000000000fe503 R11=0000000000000001 R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10e445e R15=dffffc0000000000 RIP=ffffffff828ba3a5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555b12400 00000000 00000000 GS =0000 ffff8880e55ef000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f94809e1050 CR3=000000002d872000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007faa8804d7c000007faa8804d7c8 XMM02=00007faa8804d7e000007faa8804d7c0 XMM03=00007faa8804d7c800007faa8804d7c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff84b02c2b RDX=ffff88801676d280 RSI=0000000000000006 RDI=000000000000000e RBP=ffff888016d03838 RSP=ffff888016fcfc78 R8 =0000000000000001 R9 =0000000000000000 R10=00007f1ac6aba088 R11=0000000000000001 R12=00007f1ac6aba088 R13=0000000000000006 R14=000000000000000e R15=00007f1ac6ab4fff RIP=ffffffff817396b8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56ef000 00000000 00000000 LDT=0000 fffffe2500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1ac6aba088 CR3=0000000033fcd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000