Warning: Permanently added '[localhost]:19811' (ECDSA) to the list of known hosts. 2025/07/03 05:37:57 fuzzer started 2025/07/03 05:37:57 dialing manager at localhost:45015 syzkaller login: [ 51.596744] cgroup: Unknown subsys name 'net' [ 51.661632] cgroup: Unknown subsys name 'cpuset' [ 51.688342] cgroup: Unknown subsys name 'rlimit' 2025/07/03 05:38:08 syscalls: 201 2025/07/03 05:38:08 code coverage: enabled 2025/07/03 05:38:08 comparison tracing: enabled 2025/07/03 05:38:08 extra coverage: enabled 2025/07/03 05:38:08 setuid sandbox: enabled 2025/07/03 05:38:08 namespace sandbox: enabled 2025/07/03 05:38:08 Android sandbox: enabled 2025/07/03 05:38:08 fault injection: enabled 2025/07/03 05:38:08 leak checking: enabled 2025/07/03 05:38:08 net packet injection: enabled 2025/07/03 05:38:08 net device setup: enabled 2025/07/03 05:38:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/03 05:38:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/03 05:38:08 USB emulation: enabled 2025/07/03 05:38:08 hci packet injection: enabled 2025/07/03 05:38:08 wifi device emulation: enabled 2025/07/03 05:38:08 802.15.4 emulation: enabled 2025/07/03 05:38:08 fetching corpus: 0, signal 0/0 (executing program) 2025/07/03 05:38:09 starting 8 fuzzer processes 05:38:09 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) r1 = accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x4, 0x75, 0x0, 0x490, 0x60, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x8, 0x40, 0x6, 0x6}}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xff, 0x2}, 0xe) recvfrom$inet6(r1, &(0x7f0000000240)=""/196, 0xc4, 0x40000000, &(0x7f0000000340)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl1\x00', r2, 0x4, 0x81, 0x8, 0x1, 0x29, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0xa}, 0x600, 0x7800, 0xe95, 0xfffffff9}}) r5 = syz_open_dev$vcsa(&(0x7f00000005c0), 0x5, 0x1c1400) syz_genetlink_get_family_id$fou(&(0x7f0000000580), r5) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs2/binder-control\x00', 0x800, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x200400c1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r6) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000780)) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f00000007c0)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'ip6_vti0\x00', 0x0, 0x4, 0xe2, 0x3, 0x3, 0x11, @private1, @mcast1, 0x40, 0x1, 0xa0b4, 0xffffff59}}) 05:38:09 executing program 1: sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x48004) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x80, 0x7, 0x1b, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x20, 0x8748, 0x1, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r0, 0x4, 0x3, 0x9, 0x0, 0xc, @empty, @mcast1, 0x1, 0x20, 0xfffffffb, 0x5}}) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x4, 0x400042) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', r1, 0x7800, 0x7800, 0x7895, 0x10001, {{0x25, 0x4, 0x3, 0x8, 0x94, 0x65, 0x0, 0x7, 0x29, 0x0, @multicast2, @local, {[@noop, @ssrr={0x89, 0x7, 0x11, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0x2f, 0x1, 0xb, [{@multicast1, 0x9e76}, {@rand_addr=0x64010101, 0x6fa3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0x8001}, {@multicast2, 0x94000000}, {@rand_addr=0x64010101, 0x81}, {@multicast1, 0xffff}, {@private=0xa010100, 0x80000000}, {@rand_addr=0x64010102, 0x2}, {@broadcast, 0xffff}]}, @ssrr={0x89, 0xb, 0x66, [@multicast2, @rand_addr=0x64010102]}, @noop, @timestamp_addr={0x44, 0x14, 0xfe, 0x1, 0x1, [{@private=0xa010101, 0x5}, {@private=0xa010100, 0x1f}]}]}}}}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x20}}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x6}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x1) r5 = syz_open_dev$vcsa(&(0x7f0000000640), 0x8e3, 0x323e40) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000780)) socket$inet6(0xa, 0xa, 0x8) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r5) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f00000008c0)={'ip6gre0\x00', &(0x7f0000000840)={'ip6tnl0\x00', r0, 0x29, 0x2, 0x0, 0x7, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0xb0, 0x7800, 0x3, 0xf110}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@broadcast, @in6=@private0, 0x4e24, 0x0, 0x4e20, 0x728, 0xa, 0x80, 0xa0, 0xff, r0, 0xffffffffffffffff}, {0x2, 0x2, 0x8bb, 0x20, 0x1, 0x40, 0x0, 0xd98}, {0x5, 0x9, 0x7, 0xffffffffffff4ed1}, 0x6, 0x0, 0x1, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d2, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3500, 0x4, 0x0, 0x5, 0x1000, 0x2, 0x3}}, 0xe8) sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7a}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) bind$bt_l2cap(r5, &(0x7f0000000c40)={0x1f, 0x9db, @none, 0x5, 0x1}, 0xe) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x8010) 05:38:09 executing program 2: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x802, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000180)=0x5, 0x4) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000001c0)='THAWED\x00', 0x7) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000200)=0x3, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3069}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000004}, 0x40) r1 = perf_event_open$cgroup(&(0x7f0000000480)={0x2, 0x80, 0x3f, 0x20, 0xff, 0x4, 0x0, 0x6, 0x80, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000440), 0x5}, 0x5e310, 0x5, 0x9, 0x9, 0x6, 0x101, 0x401, 0x0, 0x7ff, 0x0, 0x2}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x7) perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x4, 0x81, 0x6, 0xf8, 0x0, 0x1, 0x2ca30, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x4, @perf_bp={&(0x7f0000000380), 0x8}, 0x5000, 0x3f, 0xfe0, 0x5, 0x80, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x9, r1, 0xb9164a8f59d9179b) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x4085001) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x65, 0x6, 0x20, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x50, 0x700, 0x3, 0x5}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, r0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffc}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0xcc2a7a3916f904cd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000801}, 0xc000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r3, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x41d884de}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a80)='net/kcm\x00') r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r5, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc048880}, 0x20000000) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000030) 05:38:09 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x101, 0x440000) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x40000) r1 = socket(0xb, 0x6, 0x80000001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x20}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x40) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44080}, 0x20004081) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000400)={'binder0\x00'}) perf_event_open$cgroup(&(0x7f0000000580)={0x2, 0x80, 0x4, 0x3, 0x0, 0x7f, 0x0, 0x1, 0x20, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8cd, 0x4, @perf_bp={&(0x7f0000000540), 0x4}, 0x40000, 0x5, 0x8000, 0x5, 0x29b, 0x1000, 0x5, 0x0, 0x0, 0x0, 0x7f}, r0, 0xa, r0, 0xc) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), r1) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r3, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000740)=r0, 0x1) r4 = socket(0x3, 0x1, 0xd2a) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='net/icmp\x00') ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f00000007c0)={'binder0\x00'}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000900)={{{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4e23, 0x7, 0x4e22, 0x1, 0x2, 0x0, 0x80, 0x3a, r2, 0xee01}, {0x9, 0x5, 0x6, 0x7ff, 0x1, 0x1ff, 0x3bf, 0x2}, {0x6, 0x8, 0x3, 0xfffffffffffffff8}, 0x4, 0x6e6bb4, 0x2, 0x1, 0x2, 0x1}, {{@in6=@mcast1, 0x4d6, 0x2b}, 0x8, @in=@broadcast, 0x3504, 0x2, 0x0, 0xb5, 0x5c, 0x65}}, 0xe8) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000a00)=0x99, &(0x7f0000000a40)=0x2) r7 = socket(0x11, 0x3, 0x6) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r5}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x11) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000d00)={'ip6tnl0\x00', &(0x7f0000000c80)={'ip6_vti0\x00', 0x0, 0x29, 0x47, 0x7f, 0x67f4, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf831, 0x10, 0xd63c, 0xffffffff}}) [ 62.664916] audit: type=1400 audit(1751521089.502:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:38:09 executing program 4: sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x10) getgid() r0 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000100)=""/4096) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x1000)=nil, 0x0) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000001100)=""/150) shmctl$IPC_STAT(r0, 0x2, &(0x7f00000011c0)=""/4096) getresgid(&(0x7f00000021c0), &(0x7f0000002200), &(0x7f0000002240)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002280), 0x1) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x38, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}}, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f00000023c0)=""/157) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x3800) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008855}, 0x4040) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000002580)={0x1, 0x80, 0x6, 0x80, 0x0, 0x6, 0x0, 0x2, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1f, 0x462eb209}, 0x15201, 0x0, 0xffffffff, 0x4, 0x1, 0x1ff, 0x8, 0x0, 0x5, 0x0, 0x4}, r2, 0x7, 0xffffffffffffffff, 0x8) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000002bc0)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002b80)={&(0x7f00000026c0)={0x494, r3, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e5949c4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f6e805c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1b0, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x905a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd007}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b8ce714}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7afd9626}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69032afc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb510}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1684b1ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7de4e5de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb378725}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x26b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xddc1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f6f}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2236}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x76bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c10bd61}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd26}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c3ec500}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9434}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x814e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fbef0e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a1e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e74}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7530c2f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49647a72}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5eabfca6}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfefd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a73}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa873}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ebb58c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cdcfafe}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32aad315}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x300a33cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f21cd5e}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49fa5c30}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b79cb80}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d2800d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e9dc056}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4101e455}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7eda34d9}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c63e44b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c07c796}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52806d56}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa07b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbe0a4eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf44}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bc6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1248d777}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xccea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd4a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b9bc4ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fea9ec8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x960e}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5607efa4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x63c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf83}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x90d0707}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e63b96c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f92075b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd0, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c292994}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7267fd16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70633bb6}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72213f44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35e6892e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a1683f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e802ba6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71997589}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1189ba38}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22d38521}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79d51b1b}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12f81585}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ad7d01f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x556e6e45}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xc0, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37fd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4338c5e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65546a4a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3fa3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee52}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8abd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79e5}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa1f0e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f6057f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8088}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x640fed81}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67f79328}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xcba6f3b}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65456dba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2847}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45a8ff1e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cf6cfe8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31d06d36}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf87e}]}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x8041}, 0x4001005) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002d00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080c0}, 0x765f70a75c1fc1c5) 05:38:09 executing program 5: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x4, 0x1, 0x7, 0x6, 0x40, @local, @mcast1, 0x40, 0x7, 0x8, 0x4}}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='personality\x00') io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x7, 0x7807, 0xfffffff9, 0x1, {{0xb, 0x4, 0x0, 0xe, 0x2c, 0x65, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010100, {[@timestamp={0x44, 0x8, 0x5a, 0x0, 0xa, [0xea36]}, @rr={0x7, 0xf, 0xd1, [@empty, @rand_addr=0x64010101, @private=0xa010101]}, @end]}}}}}) r2 = accept4$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c, 0x80000) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000002c0)=@dstopts={0x2e, 0x3, '\x00', [@ra={0x5, 0x2, 0x6b}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1f9}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0x7}]}, 0x28) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0xcc5d5d86decb6e2a, 0x0, 0x1, 0xed, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, 0x1, 0x40, 0x4, 0x3}}) r4 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x3, 0x10000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', r3, 0x2f, 0x0, 0xff, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x20, 0x8000, 0x10001, 0x80000001}}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40003000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7ff}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x38}}, 0x40814) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'ip6_vti0\x00', r3, 0x4, 0x20, 0xad, 0x7, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x717, 0x7800, 0x1f, 0x4}}) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000680), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl2\x00', r3, 0x2b6c556678f94d0e, 0x80, 0x0, 0x7fffffff, 0x2b, @mcast2, @mcast2, 0x7800, 0x1, 0x1ace, 0x8}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000780)=0x5, 0x4) r6 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x9, 0x301540) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r0) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r7, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mlockall(0x4) 05:38:09 executing program 7: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000080)) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x15, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}}}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000081) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x1c, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044041}, 0xc4) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x48885) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000640)=r3) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x80}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xff}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xa5}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20008}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff8}]}, 0x30}, 0x1, 0x0, 0x0, 0xd1}, 0x4010) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x30040010}, 0x400c054) 05:38:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4bb743af2e5d6752}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x40) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xf23e28a10f1c41b5}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x80) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000400)='FROZEN\x00', 0x7) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x52841}, 0x80) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9d}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x80) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000e40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000940)={0x498, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x3f8, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0xb21e6771d68afb48}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x3dc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x3c4, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}]}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x498}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ec0), r5) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x54, r6, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4068000}, 0x80) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r5) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001040), r5) [ 63.877210] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.880147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.882459] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.884323] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.887743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.891164] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.893095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.896780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.908106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.917051] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.939733] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.943369] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.947991] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.949147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.956180] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.958329] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.964130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.967031] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.969903] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.971893] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.975387] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.981143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.986762] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.992424] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.995816] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 63.997803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.000025] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.001846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.003994] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.007153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.009152] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.019094] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.020220] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 64.021320] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.032445] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.033764] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.046076] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.060344] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.062959] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.064585] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.349926] [ 64.350706] ============================= [ 64.351303] WARNING: suspicious RCU usage [ 64.351947] 6.16.0-rc4-next-20250702 #1 Not tainted [ 64.352692] ----------------------------- [ 64.357891] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 64.358967] [ 64.358967] other info that might help us debug this: [ 64.358967] [ 64.360127] [ 64.360127] rcu_scheduler_active = 2, debug_locks = 1 [ 64.361082] 3 locks held by syz-executor.3/287: [ 64.361793] #0: ffff88800e828400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 64.363097] #1: ffff88800f056618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 64.364538] #2: ffff88801e8c30f8 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 64.365907] [ 64.365907] stack backtrace: [ 64.366590] CPU: 1 UID: 0 PID: 287 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 64.366617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 64.366629] Call Trace: [ 64.366637] [ 64.366646] dump_stack_lvl+0xfa/0x120 [ 64.366671] lockdep_rcu_suspicious+0x152/0x1c0 [ 64.366697] proc_sys_compare+0x28a/0x340 [ 64.366719] ? __pfx_proc_sys_compare+0x10/0x10 [ 64.366743] d_same_name+0x229/0x2e0 [ 64.366766] d_alloc_parallel+0x7c1/0x1330 [ 64.366803] ? __pfx_d_alloc_parallel+0x10/0x10 [ 64.366831] ? __pfx_default_wake_function+0x10/0x10 [ 64.366863] ? __d_lookup+0x25f/0x490 [ 64.366895] lookup_open.isra.0+0x64f/0x1530 [ 64.366930] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 64.366974] ? mnt_get_write_access+0x81/0x2d0 [ 64.366995] ? mnt_get_write_access+0x1ea/0x2d0 [ 64.367024] path_openat+0xc26/0x2880 [ 64.367064] ? __lock_acquire+0x694/0x1b70 [ 64.367086] ? __pfx_path_openat+0x10/0x10 [ 64.367126] do_filp_open+0x1e8/0x450 [ 64.367156] ? __pfx_do_filp_open+0x10/0x10 [ 64.367199] ? find_held_lock+0x2b/0x80 [ 64.367228] ? alloc_fd+0x2c1/0x560 [ 64.367255] ? lock_release+0xc8/0x290 [ 64.367282] ? alloc_fd+0x2c1/0x560 [ 64.367320] do_sys_openat2+0x104/0x1b0 [ 64.367345] ? __pfx_do_sys_openat2+0x10/0x10 [ 64.367372] ? __fput+0x67b/0xb50 [ 64.367401] __x64_sys_openat+0x142/0x200 [ 64.367427] ? __pfx___x64_sys_openat+0x10/0x10 [ 64.367451] ? __pfx_fput_close_sync+0x10/0x10 [ 64.367494] do_syscall_64+0xbf/0x360 [ 64.367518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.367539] RIP: 0033:0x7fe39d6c3a04 [ 64.367556] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 64.367576] RSP: 002b:00007fff4dbfe620 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 64.367595] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe39d6c3a04 [ 64.367609] RDX: 0000000000080001 RSI: 00007fe39d77a286 RDI: 00000000ffffff9c [ 64.367622] RBP: 00007fe39d77a286 R08: 0000000000000000 R09: 00007fff4dbfe610 [ 64.367635] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 64.367647] R13: 00007fff4dbfe6c0 R14: 0000000000000000 R15: 00000000000000f8 [ 64.367676] [ 65.965861] Bluetooth: hci0: command tx timeout [ 65.966721] Bluetooth: hci1: command tx timeout [ 66.093811] Bluetooth: hci7: command tx timeout [ 66.094382] Bluetooth: hci4: command tx timeout [ 66.094917] Bluetooth: hci3: command tx timeout [ 66.095445] Bluetooth: hci2: command tx timeout [ 66.157670] Bluetooth: hci6: command tx timeout [ 66.158242] Bluetooth: hci5: command tx timeout [ 68.013588] Bluetooth: hci1: command tx timeout [ 68.013607] Bluetooth: hci0: command tx timeout [ 68.143506] Bluetooth: hci2: command tx timeout [ 68.143571] Bluetooth: hci4: command tx timeout [ 68.143962] Bluetooth: hci7: command tx timeout [ 68.144361] Bluetooth: hci3: command tx timeout [ 68.205554] Bluetooth: hci5: command tx timeout [ 68.206880] Bluetooth: hci6: command tx timeout [ 70.061658] Bluetooth: hci1: command tx timeout [ 70.062554] Bluetooth: hci0: command tx timeout [ 70.190587] Bluetooth: hci7: command tx timeout [ 70.191045] Bluetooth: hci4: command tx timeout [ 70.191423] Bluetooth: hci3: command tx timeout [ 70.191847] Bluetooth: hci2: command tx timeout [ 70.253751] Bluetooth: hci6: command tx timeout [ 70.254220] Bluetooth: hci5: command tx timeout [ 72.110569] Bluetooth: hci0: command tx timeout [ 72.111030] Bluetooth: hci1: command tx timeout [ 72.237576] Bluetooth: hci2: command tx timeout [ 72.238062] Bluetooth: hci3: command tx timeout [ 72.238452] Bluetooth: hci4: command tx timeout [ 72.238897] Bluetooth: hci7: command tx timeout [ 72.302539] Bluetooth: hci5: command tx timeout [ 72.302959] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 05:38:11 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84ba9d8e RDX=ffffed1003d1861d RSI=0000000000000004 RDI=ffff88801e8c30e0 RBP=ffff88801e8c30e0 RSP=ffff888032697c78 R8 =0000000000000000 R9 =ffffed1003d1861c R10=ffff88801e8c30e3 R11=0000000000000001 R12=1ffff110064d2f90 R13=0000000000000003 R14=ffffed1003d1861c R15=ffff888032697cb0 RIP=ffffffff84ba9f20 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555561021400 00000000 00000000 GS =0000 ffff8880e55ef000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0f739318e0 CR3=000000003427e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff828ba350 RDI=ffffffff88722060 RBP=ffffffff88722020 RSP=ffff88802e51f220 R8 =0000000000000000 R9 =ffffed10016d7046 R10=00000000000fe503 R11=0000000000000001 R12=0000000000000823 R13=0000000000000060 R14=fffffbfff10e445e R15=dffffc0000000000 RIP=ffffffff828ba3a5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556b3c6400 00000000 00000000 GS =0000 ffff8880e56ef000 00000000 00000000 LDT=0000 fffffe0b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2ea531f6f4 CR3=0000000030b66000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f2ea532e47000007f2ea532df20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000