Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:24283' (ECDSA) to the list of known hosts. 2025/07/02 20:14:16 fuzzer started 2025/07/02 20:14:17 dialing manager at localhost:45015 syzkaller login: [ 52.139957] cgroup: Unknown subsys name 'net' [ 52.242785] cgroup: Unknown subsys name 'cpuset' [ 52.258166] cgroup: Unknown subsys name 'rlimit' 2025/07/02 20:14:27 syscalls: 210 2025/07/02 20:14:27 code coverage: enabled 2025/07/02 20:14:27 comparison tracing: enabled 2025/07/02 20:14:27 extra coverage: enabled 2025/07/02 20:14:27 setuid sandbox: enabled 2025/07/02 20:14:27 namespace sandbox: enabled 2025/07/02 20:14:27 Android sandbox: enabled 2025/07/02 20:14:27 fault injection: enabled 2025/07/02 20:14:27 leak checking: enabled 2025/07/02 20:14:27 net packet injection: enabled 2025/07/02 20:14:27 net device setup: enabled 2025/07/02 20:14:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/02 20:14:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/02 20:14:27 USB emulation: enabled 2025/07/02 20:14:27 hci packet injection: enabled 2025/07/02 20:14:27 wifi device emulation: enabled 2025/07/02 20:14:27 802.15.4 emulation: enabled 2025/07/02 20:14:27 fetching corpus: 0, signal 0/0 (executing program) 2025/07/02 20:14:28 starting 8 fuzzer processes 20:14:28 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, @NFT_MSG_NEWCHAIN={0xc4, 0x3, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x900000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffff50}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xae6d9b5}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_CT_EXPECT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x88ec}, @NFTA_CT_EXPECT_DPORT={0x6, 0x3, 0x1, 0x0, 0x4e24}, @NFTA_CT_EXPECT_L4PROTO={0x5, 0x2, 0x6}]}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x900, 0x0, 0x0, {0x7, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x224}, 0x1, 0x0, 0x0, 0x8010}, 0x4000001) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1f8f8900}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2adb3add0d5cc3ca}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x404c804) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, 0xb, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'geneve0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x20000000}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x24044004}, 0x44010) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x2, 0x6, 0x804, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x4, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_POLICY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x4000) r0 = socket(0x9, 0x6, 0x58) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x1, 0x6, 0x8dbd5eeebf5fa779, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x4044000) r1 = accept(r0, &(0x7f0000000b00)=@un=@abs, &(0x7f0000000b80)=0x80) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x361}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) syz_open_dev$char_usb(0xc, 0xb4, 0xfff) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000cc0)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000d00)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000d40)=0x2c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x68, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x40}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000819}, 0x4) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000f40)={0x0, @nl=@unspec, @xdp={0x2c, 0x0, 0x0, 0x1f}, @ethernet={0x306, @multicast}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000f00)='batadv_slave_0\x00', 0x200, 0x401, 0x5}) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000fc0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000001000)=0x2c) 20:14:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10004080}, 0x4000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x2b7375bf7198e125) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x70, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x800}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x20}]}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9c}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0xec}, 0x1, 0x0, 0x0, 0x20004800}, 0x4028000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20048011}, 0x8000) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x60000004}, 0x10) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x101}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x63ec}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4004010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x24000000) socket(0xa, 0x4, 0x4) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r9, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r8, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7b}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0xc0) socket(0x29, 0x2, 0x7) 20:14:28 executing program 1: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4088004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040004}, 0x8080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000300)={0x504, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "e2072b0459f523f54edd64a292875a0585415352e37380ae600a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @mcast1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x400, @private0, 0xefc0}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x42c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x150, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd826}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b972482}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x797}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x191}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x820}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_BEARER={0x14c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1630}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @mcast1, 0xfffffff7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7fff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @mcast2, 0xffffffe4}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}]}, 0x504}}, 0x4008004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r3, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x71}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x49157123}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x58}}, 0x4008080) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x8080) syz_genetlink_get_family_id$wireguard(&(0x7f0000000c40), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), r2) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8800) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000e40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x60, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x60}, 0x1, 0x0, 0x0, 0x2840}, 0x880) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000f80)={'wpan1\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x5c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7cf1f46ac37dc2d3d69a00f2df42bf35"}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10048808}, 0x4048000) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xd0, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x54, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7f}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x48, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x14}, 0x884) 20:14:28 executing program 3: get_thread_area(&(0x7f0000000000)={0xfffffff7, 0x0, 0x2000, 0x1, 0x1, 0x0, 0x1}) prctl$PR_PAC_RESET_KEYS(0x36, 0xf) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x8100000) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f00000000c0)={0x4bc, 0x1, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0x6}, 0x5, 0x2, 0x33c, 0x0, 0x1a, 'syz1\x00', "424ed0de4c5246f81e0ea68da146b2e5ffaa764231a6114dffddd17469364563", "28fc6b327c67270d1ec8d663cad9fe80dca5cfa0c7d8113b83e5ffaef29d63bc", [{0x8960, 0x8, {0x1, 0xd1}}, {0x3f, 0x0, {0x2, 0x184c6000}}, {0xffff, 0x0, {0x2}}, {0x1, 0xfffe, {0x9604c50d98223684, 0xa4fa}}, {0x1000, 0x3, {0x2, 0x5d4}}, {0x6, 0x2, {0x2, 0x9}}, {0xfff8, 0x2, {0x1, 0x1}}, {0x15a, 0x1, {0x3, 0x7}}, {0x0, 0x5b, {0x2, 0x7}}, {0x9, 0xdd, {0x2, 0x401}}, {0x3, 0x5, {0x3, 0x3}}, {0x81, 0xc7, {0x3, 0x2}}, {0x200, 0x1, {0x3, 0x1000}}, {0x1, 0x0, {0x2, 0x5}}, {0x80, 0x0, {0x1, 0x80000000}}, {0x40, 0x1000, {0x0, 0x4}}, {0x8, 0x8, {0x3, 0x101}}, {0x100, 0x2, {0x0, 0x8}}, {0x2480, 0x1, {0x4, 0x9}}, {0xee59, 0x62, {0x0, 0x2}}, {0x5, 0x3, {0x3, 0x8001}}, {0x5, 0x1, {0x1, 0x10001}}, {0x400, 0x0, {0x1, 0x1}}, {0x263, 0xe0a2, {0x2, 0xffff6448}}, {0x7f, 0xbcd, {0x0, 0x185d}}, {0x3f, 0xf800, {0x1, 0x1000}}, {0x9, 0x8, {0x0, 0x7fff}}, {0x8, 0xff}, {0x80, 0x7, {0x0, 0x8}}, {0x40, 0x21cf, {0x2, 0x7fff}}, {0x8000, 0x9, {0x1}}, {0x2, 0x0, {0x2, 0x5}}, {0xa32a, 0x7, {0x3, 0x6}}, {0x2cf4, 0x1, {0x0, 0x10001}}, {0x3, 0xfff, {0x1, 0xeee}}, {0x3e, 0x100, {0x3, 0x6cc}}, {0x9, 0xffff, {0x0, 0xffff9eff}}, {0x2, 0x2, {0x0, 0x6}}, {0x9, 0x4da3, {0x0, 0x54}}, {0x1, 0x2, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x4ef5}, 0x20, 0x98, 0x1000, 0x64, 0x23, 'syz1\x00', "33ae3a2db491aafda9d535face1f57dadbe9501bf72a4c013384b0a0caf28827", "469581e75a1b4bd8f71bf8a8cf54d9b5df7ba387fabbeb35d8185dc6c38c8038", [{0x8, 0x800, {0x0, 0x1}}, {0x8001, 0x0, {0x0, 0x8000}}, {0x9, 0x1, {0x1, 0x1}}, {0x401, 0x7, {0x3, 0xffffffff}}, {0x1000, 0xffe1, {0x3, 0x6d5e}}, {0x1f, 0x1, {0x2, 0x1ff}}, {0xffff, 0x1000, {0x0, 0x4}}, {0x7fff, 0x12ff, {0x2, 0x2}}, {0x6, 0x4, {0x0, 0x1}}, {0x166, 0x4, {0x3, 0x400}}, {0x24, 0x9, {0x3, 0x1ff}}, {0xfff, 0x5, {0x2, 0xfffffffb}}, {0x9, 0x9, {0x3, 0x6}}, {0xffc0, 0x1, {0x3, 0x20}}, {0xfffa, 0x8001, {0x2, 0x872}}, {0x4, 0x800, {0x1}}, {0x7f, 0x7, {0x2, 0x1f}}, {0x9a97, 0xda7, {0x2, 0xfffff6d8}}, {0x2, 0x8000, {0x1, 0x1}}, {0xf8, 0x81, {0x0, 0xc7f}}, {0x4c17, 0x4, {0x2, 0x3}}, {0xffc0, 0x7ff, {0x0, 0x2}}, {0x426a, 0x4, {0x0, 0xa71}}, {0x3, 0xe6, {0x2, 0x1}}, {0x5, 0x401, {0x1, 0x92}}, {0x7, 0x9, {0x3, 0x2}}, {0x7, 0x401, {0x3, 0x1ff}}, {0x3, 0x3, {0x2, 0x5}}, {0x8, 0x8000, {0x0, 0x7}}, {0x4da0, 0xc5b, {0x3, 0x40}}, {0x3ff, 0x0, {0x2, 0x6}}, {0x100, 0x101, {0x2, 0x3a4}}, {0x200, 0x4, {0x0, 0x2}}, {0xc13, 0x68e5, {0x1, 0x7ff}}, {0x1, 0xfa, {0x3, 0x3}}, {0x5, 0x4, {0x1, 0x7ff}}, {0x8, 0x2, {0x2, 0x80000001}}, {0x7da, 0x4, {0x2, 0x7}}, {0x5, 0x7, {0x3, 0x5}}, {0x2, 0xfff, {0x3, 0x8001}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x8000}, 0x2845) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000600)=0x1) r1 = accept(r0, &(0x7f0000000640)=@ieee802154={0x24, @long}, &(0x7f00000006c0)=0x80) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000808) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c4}, 0x40000) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000900)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000940)=0x2c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000090}, 0x4040050) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000b00)='cpu.pressure\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b80)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000bc0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x58, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x14, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x20}}, 0x4004804) r6 = socket(0xa, 0x3, 0x2) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, 0x1, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 20:14:28 executing program 4: ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000000)) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x7, 0x10000) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000100)=0x80) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000140)={0x6, 0x8, 0x1f, 0x101, 0x416, 0x1, 0x8}) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x10) gettid() eventfd2(0x20, 0x80003) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000300)={0xfffff83f, 0x8001, 0x19, 0xec8d, 0x80, 0x9c, 0x4}) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x4) r3 = io_uring_setup(0x6bcc, &(0x7f00000003c0)={0x0, 0x986c, 0x20, 0x0, 0x341}) r4 = eventfd2(0x9, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000440)=r4, 0x1) r5 = socket(0x1a, 0x2, 0x1) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, 0x17, 0xa, 0x602, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x44000) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40400c4}, 0x40800) [ 62.978168] audit: type=1400 audit(1751487268.499:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:14:28 executing program 6: sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xc004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5d}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "2ccf79b82d4bc65f0343674e93cd23de600ed1d07dcd77391d44b4b89e2fd4b2"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x7}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x4048000) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x1, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0x1, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x3b95}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x4c}}, 0xdee6e5c9a1ae4d6b) r5 = accept(r4, 0x0, &(0x7f0000000880)) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6e46}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x318}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x36c}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x4080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2a41100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, 0x15, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008084}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4008041) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, 0x1, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r7, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, r3, 0x238, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) 20:14:28 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0), 0x4) syz_open_dev$hiddev(&(0x7f0000000100), 0x8000, 0x12002) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000015c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001400)={0x170, 0x1, 0x7, 0x801, 0x0, 0x0, {0x5}, [@NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe0000000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4975}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb5}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x200}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x40}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000001640), 0x15, 0x101000) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000001680)) read$eventfd(0xffffffffffffffff, &(0x7f00000016c0), 0x8) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x145f) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x28, 0x8, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24014804) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xdef4d4f6e10de9d2}, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x30, 0x9, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x840) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) r3 = syz_open_dev$rtc(&(0x7f0000001b00), 0x1d0d, 0x2) ioctl$RTC_AIE_OFF(r3, 0x7002) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001b40), 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x2004c011) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000001c40)=0x1, 0x4) 20:14:28 executing program 7: ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x3) r0 = io_uring_setup(0x5fae, &(0x7f0000000000)={0x0, 0xdc30, 0x8, 0x3, 0x253}) r1 = eventfd2(0xff, 0x800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r1, 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x40}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xbc}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x1}}]}, 0x50}}, 0x0) r2 = socket(0x27, 0x4, 0x3c3) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa8, 0xb, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x80, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="2d604413d4c7"}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x800}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000380)={0x1, 0x100, 0x135e8c9c}) r3 = syz_open_dev$rtc(&(0x7f00000003c0), 0x200, 0x80000) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000400)) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000440)={{0x3, 0x63c6c51f6ba84c9b, 0x6, 0x7fffffff, 0x9, 0x7f}, 0x32f, [0x81, 0x9, 0x3f, 0xe55, 0x6901, 0x5, 0xd6, 0x7, 0xc, 0x1, 0x41, 0x8001, 0xfffffbff, 0x4, 0x8, 0x2c, 0x7, 0x5, 0x1, 0xb7, 0x1000, 0x80, 0x5, 0x3, 0x7fff, 0x2, 0xa, 0xbdb0, 0x4, 0xed3f, 0x2, 0x9, 0x2e, 0x200, 0x5, 0xe6dc, 0x3, 0x400, 0x8, 0x1f, 0xff, 0x6, 0x3, 0x1, 0xff, 0x0, 0x1000, 0x4c, 0x3, 0x1, 0x7, 0x20, 0x8000, 0x1ff, 0x1000, 0xfff, 0x0, 0x1, 0x8, 0x19, 0x5, 0x800, 0x5, 0x7, 0x6, 0x18f2, 0x8, 0x3, 0x143, 0x5, 0x4, 0x7fffffff, 0x1, 0x3, 0x6, 0x0, 0x2, 0x8, 0x10000, 0x1f, 0x73c5e308, 0xa, 0x6, 0x8, 0x4, 0x4, 0x1dd3a000, 0xfffffff8, 0x3, 0xffff4587, 0x3, 0x8, 0xfffffffc, 0x4, 0x0, 0xfffff801, 0x2, 0x5, 0x880, 0x48f3, 0x8001, 0x3, 0x7, 0x94, 0x0, 0x59, 0x7, 0x3, 0x4, 0x8, 0x3, 0x0, 0x81, 0x6, 0x9, 0xffff7fff, 0x6, 0x9, 0x7, 0x7, 0x4b690d8c, 0x1f, 0xffff, 0x1f, 0x5, 0x5, 0x80, 0x1, 0x4, 0x3, 0x5, 0x7, 0x3, 0x8, 0x3, 0x80000000, 0x0, 0x3f, 0x9, 0x2, 0x9c2f, 0x0, 0x605, 0x7, 0xcc6, 0x4d9, 0x8, 0x3c, 0x8, 0x1d, 0x12, 0x7ff, 0x9, 0x9a9, 0x7, 0xffffff57, 0x80000000, 0x3, 0x1, 0x1, 0x3, 0x869b, 0x8, 0x7fffffff, 0x7fffffff, 0x32, 0xfff, 0xc5a, 0x5af, 0xffffffff, 0x6ece001a, 0x4, 0x3, 0x8, 0x8828, 0x3, 0x4, 0x1000000, 0x2, 0x6, 0x7e33, 0x80, 0x0, 0x5, 0x10000, 0x802, 0x9, 0x8, 0x5, 0x80000000, 0x3, 0x0, 0x8000, 0x2, 0x9, 0x80000001, 0x9, 0x9, 0x1ff, 0x7fff, 0x0, 0x800, 0x5, 0xffffa94d, 0x8a4, 0x5c, 0x0, 0x7fff, 0x7, 0xfffffffc, 0xf82e, 0x1ff, 0x6, 0x20c9, 0x27, 0x3, 0x8000, 0x1ff, 0x3, 0x6, 0x4, 0xa4, 0x9, 0x7, 0x4b8, 0x8, 0x7, 0xc0, 0xf6, 0x8001, 0xa68a, 0x1f, 0x9, 0x5, 0x9, 0x2, 0xfffff34b, 0x5, 0x9, 0x5, 0xffffffff, 0x7, 0x5, 0x2, 0x401, 0x1, 0x5, 0xbd3891, 0x4, 0x0, 0x3, 0x15, 0x180000, 0x400, 0x4, 0x3ff, 0x20, 0x7f, 0x1a7, 0x7fff, 0x6, 0x0, 0xc8000, 0x101, 0x80000001, 0x833c, 0x6, 0x1000, 0x1, 0x100, 0x7ff, 0x100, 0x7f, 0x3, 0x400, 0x7f, 0x1ff, 0x40, 0x1f, 0x3f, 0x6, 0x15cb, 0x0, 0x6, 0x81, 0x8a15, 0x8, 0x14000, 0x8, 0x4f97, 0x3f, 0x0, 0x5, 0xbcc, 0x20, 0x9, 0x6, 0x10000, 0x3, 0x9, 0x1ff, 0x7, 0x4f93, 0x8, 0x0, 0x9, 0x37a, 0x1ff, 0x5, 0x14, 0x7f, 0x9, 0xe417, 0x400, 0x6, 0x10001, 0x9, 0x9, 0x8, 0x0, 0x8abb, 0xc219, 0x29, 0x4, 0x6843, 0x5, 0x100, 0xfffffff8, 0x2, 0x4000000, 0x9, 0xaf7d, 0x3e54, 0x10000, 0xcc, 0x5, 0x2949, 0x2, 0x1, 0x2, 0x5, 0x58, 0x2, 0xdab, 0x401, 0x200, 0x0, 0x1000, 0x2, 0x7, 0x639a, 0x4, 0x100, 0x100, 0x3f, 0x7f, 0x6, 0x8, 0x2, 0x0, 0x1, 0xfff, 0x7, 0x1, 0x8, 0x7fffffff, 0x101, 0x81, 0x0, 0xffff, 0xffff, 0x0, 0x1ff, 0x7, 0x7, 0x8001, 0xf2ef, 0x9, 0x8000, 0x7, 0x20, 0x3ff, 0x5e, 0xf4, 0x0, 0x86, 0x0, 0x2, 0x2, 0xdee, 0x8001, 0x10000, 0x916, 0x8, 0x1000, 0x5, 0x3, 0x9, 0xfffff001, 0x33e69ced, 0x6, 0x982f, 0x2, 0x3, 0x3, 0x2, 0xfff, 0x5, 0x7, 0xda, 0x1, 0x7, 0x6, 0x7, 0x7, 0xfffffff7, 0x2, 0x0, 0x861f, 0x5, 0x200, 0xffffffff, 0x3, 0x1, 0x7fff, 0x5, 0x401, 0x5, 0x3, 0x4, 0x7, 0x9, 0x1, 0x0, 0x9, 0x81, 0xe5, 0xa000000, 0x93, 0x7, 0x10001, 0x401, 0x200, 0xfffffff8, 0x8, 0x0, 0x1, 0xfffffc00, 0x40, 0x8, 0x1ff, 0x6, 0x3, 0x7c, 0x1, 0x0, 0x8, 0xfffffeff, 0xfff, 0x1, 0x6, 0xf56, 0xbd, 0xbc3f, 0x40, 0x9, 0x2, 0xe5, 0x8, 0xfc00000, 0xda3, 0x6, 0x8000, 0x2, 0x9, 0x3, 0x6, 0x80, 0x1, 0x80, 0x7, 0x0, 0x80, 0x0, 0x1, 0x6, 0x3, 0x0, 0x4320794d, 0xffff, 0x10000, 0x8000, 0x0, 0x143, 0x4, 0x4, 0x3, 0x3f, 0x0, 0xfffffffb, 0xbcd, 0x2, 0x8, 0x3a85, 0xfff, 0x3, 0x3ff, 0x7, 0x8, 0x100, 0x80000000, 0x743, 0x1, 0x4, 0x1, 0x4, 0x4, 0x2, 0x100, 0xc3, 0x9, 0x7fff, 0x80, 0x3, 0xffffffff, 0x1000, 0x2, 0x8, 0x1f, 0x1c0000, 0x0, 0x9, 0x1000, 0x7, 0x200, 0x6da7, 0x1, 0x6, 0x3000, 0x2, 0x7, 0x81, 0x0, 0x9, 0x1, 0x0, 0x2, 0x1, 0xfffffffd, 0x1, 0xffff8001, 0xfffffffc, 0x401, 0x8001, 0x20, 0x2, 0x4, 0x7ff, 0x6, 0xfffffffe, 0x0, 0x0, 0x5, 0x7, 0xff, 0x1, 0x5, 0xbe, 0x8, 0x8001, 0x8dd, 0x7, 0xfe0, 0x200, 0xcee, 0x1, 0x1c, 0x80000001, 0x1ce, 0x3f, 0x81, 0x9b, 0x80000001, 0x3, 0x6, 0x8, 0x7, 0xd0, 0xf6a, 0x36a9, 0x7fff, 0x20, 0x5, 0x6, 0x35ec, 0x401, 0x4, 0x10000, 0x10001, 0x2, 0x7fff, 0x6, 0x7, 0x0, 0x7fff, 0xffff, 0x1f, 0xfffffca4, 0x7ff, 0x20, 0x80000001, 0xffff, 0x5, 0xdff, 0x2, 0x3, 0x0, 0x37c, 0x7, 0x7, 0x92, 0x8, 0x7, 0xe83, 0x0, 0x4, 0xb1, 0x3f, 0x3, 0xfffff6e5, 0xf7f7, 0x6, 0x0, 0x3f, 0x3, 0xfffffffe, 0x9, 0x9, 0x6, 0x7ff, 0x0, 0x0, 0x7, 0x184b, 0x9, 0x7, 0x3ff, 0x7fff, 0x8, 0x7, 0xd67, 0x1, 0x6c58, 0x0, 0x2, 0x76, 0x0, 0x7, 0x0, 0x8, 0x9, 0x7, 0x0, 0x0, 0x401, 0x4, 0x7, 0x401, 0x2d, 0x7, 0x9, 0x7fffffff, 0x6, 0x6, 0x82, 0x100, 0x9, 0x3, 0x8, 0x4, 0x7ff, 0x1, 0x73, 0x47, 0x3, 0xff, 0xf95c, 0xdf, 0x7ff, 0x3ff, 0x5, 0x3ff, 0x0, 0x8, 0x571, 0xce, 0x8, 0x8001, 0x1, 0x0, 0x1, 0x0, 0xfa, 0x5, 0x9, 0xffffffff, 0x95ca, 0x9, 0x0, 0x5b03, 0x83f, 0x7ff, 0x2c4, 0x1, 0xd6e, 0x5, 0x7ff, 0x7fffffff, 0x5, 0x7f, 0x8, 0x4, 0xffff8001, 0x8000, 0x20, 0x6, 0x3, 0x3, 0x5, 0x7fff, 0x6, 0x7, 0x6, 0x6, 0x7, 0x800, 0x1f, 0x6, 0x2, 0x7, 0x4, 0xaa, 0x1, 0x0, 0x7ff, 0x0, 0xffffffc0, 0x9, 0x7, 0x8, 0x59, 0x2, 0x15a6, 0x45ce, 0x4, 0x1, 0x8, 0x3a617427, 0x4, 0x2, 0x6, 0x2, 0x7, 0x7, 0x5, 0x70, 0xc600, 0x1, 0x1, 0x0, 0x80000000, 0x4, 0x0, 0xffff8001, 0x7, 0x8, 0x1f, 0x8, 0x6, 0x7, 0x3, 0x3ff, 0x4, 0x27, 0x3f, 0x2, 0x8001, 0x7fffffff, 0x2c, 0x2, 0xede2, 0x10000, 0x2998, 0x8, 0x0, 0x8000, 0xfffffffa, 0xffffffff, 0x1f, 0x1581, 0xb153, 0x3ff, 0x8, 0x3, 0x3, 0x1, 0x3, 0x1, 0x9, 0x1, 0x7, 0x0, 0x80000001, 0xfffffffa, 0x800000, 0x8000, 0x0, 0x3, 0x8, 0x0, 0x7fffffff, 0xffffffff, 0x7, 0x1000, 0x200, 0x80000001, 0x81, 0x3, 0x7, 0x800, 0x8, 0xffffffff, 0xc8, 0x2, 0x8001, 0x5, 0x6, 0x5dd, 0x5, 0x9, 0x772, 0x0, 0xfd83, 0x0, 0xff, 0x1, 0x10001, 0x2, 0x3, 0x6, 0x9, 0x9, 0x7, 0x2ee, 0xfff, 0xfffffffb, 0x2, 0x40, 0x2, 0x10000, 0x77, 0x8c, 0x0, 0x8001, 0x1, 0xfff, 0x7, 0x9, 0xfffffff9, 0x9, 0x7fff, 0x9, 0x5, 0x80, 0x4, 0x3, 0x7, 0x94, 0xffff, 0x4, 0x7f, 0x5, 0x10000, 0xffff, 0x8001, 0x10001, 0x6, 0x6, 0x4, 0x5, 0x3, 0x1, 0xef, 0x0, 0x4, 0xff, 0xc5, 0x7ff, 0x3, 0x6, 0xffff, 0x2d2e, 0x7fff, 0x7ff, 0x8, 0x7, 0x3, 0x9, 0x96a1, 0x5, 0x6, 0x85a, 0xfff, 0x0, 0x6, 0x4, 0x7, 0x1000, 0x80000000, 0x80000001, 0xfffff801, 0x1, 0xfffffffb, 0x9, 0x0, 0x8000, 0x0, 0x5, 0x81, 0x5, 0xf079, 0x8, 0x2c2, 0x7f, 0x0, 0xb523, 0x3, 0x8, 0x0, 0x2, 0x200, 0x46e3, 0x3f, 0x3ff, 0x9, 0x7877, 0x2, 0x7, 0x4, 0x3070, 0x3, 0x800, 0x3, 0x0, 0x6, 0x3, 0x7, 0xffffffff, 0x6, 0x0, 0x6, 0x5, 0x0, 0xfffffffc, 0x10001, 0x2, 0xf0, 0x3bc, 0x1ff, 0x1000, 0x1, 0x96a, 0x9, 0x200, 0x400, 0x80000001, 0x20, 0x3ff, 0x80, 0x9, 0x6f29, 0x8, 0x2, 0xa92, 0x1ff, 0x5, 0x4, 0x1, 0x8, 0xffff0000, 0x0, 0x1, 0x3e1a06e2, 0x5, 0x5, 0x1, 0x4, 0x7, 0x0, 0x0, 0x7b1, 0x20, 0x20, 0x4, 0x6, 0x1, 0x4, 0x100, 0x6, 0x0, 0x1, 0x1f, 0x101, 0x1, 0xb7e, 0x80000001, 0x4, 0xfff, 0x9, 0x1000, 0x10001, 0x6, 0x8]}) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000001480), &(0x7f00000014c0)=0x4) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) write$char_usb(r4, &(0x7f0000001500)="d963000cfdee5bfa8582384b97a694e278caf354eddc576fbfcbdb13226d700b54a402238882343142cfbe6fed48773ff8ac5f72d1e9639131dfd41403812e6372c1d5ab27ec1f479fa669c7616c527d25a24be24fca645a277504f762ae23316bf248105a23616f0390a5c6092d5eb6d3bf2203772eebd06c4fa93c9d753ce73e9c214a725417b8d7a1452da46b0d2fbb111f7316d2f2823e608b66712fee947319606601c3bd8a20d5e2b6523193c3adb4a9d317d6f47e6a1b0e3b2c66af5e33f4d1b2460e77c9374301afa20f5e3606fb543ef476b06caa", 0xd9) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r5, 0x891e, &(0x7f0000001600)={'dummy0\x00', @ifru_map}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000001640)=0x1) ioctl$sock_ifreq(r5, 0x8914, &(0x7f0000001680)={'gretap0\x00', @ifru_hwaddr=@local}) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000016c0)=0x1, 0x4) getdents64(0xffffffffffffffff, &(0x7f0000001700)=""/220, 0xdc) [ 64.311886] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.313953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.315595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.318132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.319409] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.321032] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.322558] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.324400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.325809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.327584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.329907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.331122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.332346] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.337398] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.338601] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.339297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.341326] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.342042] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.342884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.344731] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.351072] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.355057] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.360009] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.368606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.372997] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.373418] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.378152] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.389571] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.391141] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.391484] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.398485] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.405298] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.407965] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.412487] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.419973] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.422476] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.425070] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.432676] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.433780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.435594] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 64.529729] [ 64.530364] ============================= [ 64.531335] WARNING: suspicious RCU usage [ 64.532264] 6.16.0-rc4-next-20250702 #1 Not tainted [ 64.534379] ----------------------------- [ 64.536237] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 64.539294] [ 64.539294] other info that might help us debug this: [ 64.539294] [ 64.541543] [ 64.541543] rcu_scheduler_active = 2, debug_locks = 1 [ 64.542519] 3 locks held by syz-executor.2/285: [ 64.543224] #0: ffff888007048400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 64.544556] #1: ffff888009026618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 64.546036] #2: ffff888023990248 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 64.547392] [ 64.547392] stack backtrace: [ 64.548083] CPU: 1 UID: 0 PID: 285 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 64.548110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 64.548121] Call Trace: [ 64.548129] [ 64.548137] dump_stack_lvl+0xfa/0x120 [ 64.548162] lockdep_rcu_suspicious+0x152/0x1c0 [ 64.548188] proc_sys_compare+0x28a/0x340 [ 64.548210] ? __pfx_proc_sys_compare+0x10/0x10 [ 64.548234] d_same_name+0x229/0x2e0 [ 64.548256] d_alloc_parallel+0x7c1/0x1330 [ 64.548294] ? __pfx_d_alloc_parallel+0x10/0x10 [ 64.548321] ? __pfx_default_wake_function+0x10/0x10 [ 64.548353] ? __d_lookup+0x25f/0x490 [ 64.548386] lookup_open.isra.0+0x64f/0x1530 [ 64.548419] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 64.548464] ? mnt_get_write_access+0x81/0x2d0 [ 64.548485] ? mnt_get_write_access+0x1ea/0x2d0 [ 64.548514] path_openat+0xc26/0x2880 [ 64.548554] ? __lock_acquire+0x694/0x1b70 [ 64.548575] ? __pfx_path_openat+0x10/0x10 [ 64.548616] do_filp_open+0x1e8/0x450 [ 64.548653] ? __pfx_do_filp_open+0x10/0x10 [ 64.548695] ? find_held_lock+0x2b/0x80 [ 64.548724] ? alloc_fd+0x2c1/0x560 [ 64.548751] ? lock_release+0xc8/0x290 [ 64.548778] ? alloc_fd+0x2c1/0x560 [ 64.548816] do_sys_openat2+0x104/0x1b0 [ 64.548841] ? __pfx_do_sys_openat2+0x10/0x10 [ 64.548867] ? __pfx___schedule+0x10/0x10 [ 64.548906] __x64_sys_openat+0x142/0x200 [ 64.548931] ? __pfx___x64_sys_openat+0x10/0x10 [ 64.548955] ? __pfx_fput_close_sync+0x10/0x10 [ 64.548992] do_syscall_64+0xbf/0x360 [ 64.549017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.549038] RIP: 0033:0x7f89e2ea9a04 [ 64.549054] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 64.549074] RSP: 002b:00007ffed32379d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 64.549093] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f89e2ea9a04 [ 64.549107] RDX: 0000000000080001 RSI: 00007f89e2f6029e RDI: 00000000ffffff9c [ 64.549120] RBP: 00007f89e2f6029e R08: 0000000000000000 R09: 00007ffed32379c0 [ 64.549133] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 64.549145] R13: 00007ffed3237a70 R14: 0000000000000000 R15: 00000000000000f8 [ 64.549174] [ 66.393169] Bluetooth: hci1: command tx timeout [ 66.394674] Bluetooth: hci0: command tx timeout [ 66.457713] Bluetooth: hci4: command tx timeout [ 66.457733] Bluetooth: hci6: command tx timeout [ 66.458500] Bluetooth: hci3: command tx timeout [ 66.459822] Bluetooth: hci2: command tx timeout [ 66.521710] Bluetooth: hci5: command tx timeout [ 66.522811] Bluetooth: hci7: command tx timeout [ 68.442506] Bluetooth: hci0: command tx timeout [ 68.443181] Bluetooth: hci1: command tx timeout [ 68.505728] Bluetooth: hci3: command tx timeout [ 68.507386] Bluetooth: hci6: command tx timeout [ 68.508412] Bluetooth: hci4: command tx timeout [ 68.509289] Bluetooth: hci2: command tx timeout [ 68.568803] Bluetooth: hci5: command tx timeout [ 68.569613] Bluetooth: hci7: command tx timeout [ 70.489844] Bluetooth: hci0: command tx timeout [ 70.490458] Bluetooth: hci1: command tx timeout [ 70.552745] Bluetooth: hci6: command tx timeout [ 70.553318] Bluetooth: hci2: command tx timeout [ 70.553939] Bluetooth: hci4: command tx timeout [ 70.553989] Bluetooth: hci3: command tx timeout [ 70.617666] Bluetooth: hci5: command tx timeout [ 70.617697] Bluetooth: hci7: command tx timeout [ 72.536756] Bluetooth: hci1: command tx timeout [ 72.537517] Bluetooth: hci0: command tx timeout [ 72.602679] Bluetooth: hci3: command tx timeout [ 72.602708] Bluetooth: hci2: command tx timeout [ 72.603416] Bluetooth: hci6: command tx timeout [ 72.603854] Bluetooth: hci4: command tx timeout [ 72.665064] Bluetooth: hci5: command tx timeout [ 72.665112] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 20:14:30 Registers: info registers vcpu 0 RAX=ffffffff819f1d36 RBX=ffffffff81604fe0 RCX=ffff888015fd707c RDX=1ffff11002bfae30 RSI=ffffffff819f1d36 RDI=ffff888015fd71f0 RBP=ffff888015fd71c0 RSP=ffff888015fd7120 R8 =0000000000000001 R9 =ffff888015fd7168 R10=000000000003bb04 R11=0000000000022666 R12=ffff888015fd71f0 R13=0000000000000000 R14=ffff88800dcb9b80 R15=0000000000000cc0 RIP=ffffffff81604fe4 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55ef000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc336603028 CR3=0000000013626000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828ba3e5 RDI=ffffffff88722060 RBP=ffffffff88722020 RSP=ffff888016c8f2b8 R8 =0000000000000000 R9 =ffffed1001399046 R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88722020 R15=ffffffff828ba3d0 RIP=ffffffff828ba43d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556dc65400 00000000 00000000 GS =0000 ffff8880e56ef000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005646dca4a080 CR3=0000000030042000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=0000000000ff000000000000000000ff XMM02=0000000000ff000000000000000000ff XMM03=ac8bc31478ec851100000000000aefa0 XMM04=df4b7ca03f924a4d0000000000133c70 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=aeea5622f8cd04d200000000000ae988 XMM07=a1fcdcf819d7e1e500000000000ae728 XMM08=636f72702f0064696e6f697373657300 XMM09=00000000000000000000000000000000 XMM10=20200000000020202020202020200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000