Warning: Permanently added '[localhost]:37625' (ECDSA) to the list of known hosts. 2025/07/03 12:01:47 fuzzer started 2025/07/03 12:01:47 dialing manager at localhost:33709 syzkaller login: [ 59.565016] cgroup: Unknown subsys name 'net' [ 59.636929] cgroup: Unknown subsys name 'cpuset' [ 59.654915] cgroup: Unknown subsys name 'rlimit' 2025/07/03 12:01:58 syscalls: 211 2025/07/03 12:01:58 code coverage: enabled 2025/07/03 12:01:58 comparison tracing: enabled 2025/07/03 12:01:58 extra coverage: enabled 2025/07/03 12:01:58 setuid sandbox: enabled 2025/07/03 12:01:58 namespace sandbox: enabled 2025/07/03 12:01:58 Android sandbox: enabled 2025/07/03 12:01:58 fault injection: enabled 2025/07/03 12:01:58 leak checking: enabled 2025/07/03 12:01:58 net packet injection: enabled 2025/07/03 12:01:58 net device setup: enabled 2025/07/03 12:01:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/03 12:01:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/03 12:01:58 USB emulation: enabled 2025/07/03 12:01:58 hci packet injection: enabled 2025/07/03 12:01:58 wifi device emulation: enabled 2025/07/03 12:01:58 802.15.4 emulation: enabled 2025/07/03 12:01:58 fetching corpus: 0, signal 0/0 (executing program) 2025/07/03 12:01:59 starting 8 fuzzer processes 12:01:59 executing program 0: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xb}, {0x2}, @broadcast, @device_b, @from_mac=@broadcast, {0x0, 0x180}}, {0x8, 0x1, 0x2, 0x0, 0xdc}}, {@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @device_b, @initial, @from_mac=@device_b, {0x1, 0x6}}, {0x3, 0x1, 0x0, 0x1, 0x1f}}}, @ver_80211n={0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, @random="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"}, 0x76a) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x100}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000854}, 0x6001) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), r0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r2, 0x985a15ba1360959, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan4\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x6, 0x3, 0x42, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x700, 0x7800, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0xff, 0x1, 0x16, @private2, @loopback, 0x1, 0x8, 0x7, 0x400}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x84, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x400c000}, 0x4005) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xfbc) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r6, 0x402, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200, 0xfffffffb}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r7, 0x80044801, &(0x7f0000000f00)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r7, {0xfffff801, 0x4}}, './file1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000fc0)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xd8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x15}, 0x80) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) 12:01:59 executing program 1: r0 = msgget(0x3, 0x80) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/33) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000040)=""/120) msgget$private(0x0, 0x82) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000000c0)=""/73) r1 = msgget$private(0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001900)={0x0, 0x0}) r5 = getpgrp(0xffffffffffffffff) msgctl$IPC_SET(r1, 0x1, &(0x7f0000001c00)={{0x1, 0xee01, r3, 0xee00, 0xffffffffffffffff, 0x80, 0x1000}, 0x0, 0x0, 0x10000, 0x8, 0x1f, 0x3, 0x80000001, 0x0, 0xa6, 0x64, r4, r5}) msgctl$IPC_RMID(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r2, {0x1000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, r2, {0x2a7}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001d40)={0x4, &(0x7f0000001d00)=[{0x7, 0x40, 0x52, 0xffffffe1}, {0x7f, 0xff, 0x0, 0x7}, {0x1, 0xfa, 0xc, 0x7}, {0x6, 0xff, 0x4, 0x8}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001d80), 0x200000, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001dc0), 0x185000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000001e40)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r8, 0x80045400, &(0x7f0000001e80)) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000001ec0)=""/77) 12:01:59 executing program 2: capget(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x9, 0xffffffff, 0xe345, 0x80000000, 0x2, 0x4}) capget(&(0x7f0000000080)={0x19980330, 0xffffffffffffffff}, &(0x7f00000000c0)={0x7fffffff, 0x9, 0x7a4, 0x7f, 0xf7, 0x5}) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000100)={0x0, "08f2c429527dc0f127fd9f0739e1f112731483ea5f0f1e8064742aaa8d8f6c8b4ef0ad766b119ffeae83cb43c51aa3e0c8fccc9c8ff5367ea16399a843ca3918"}) prctl$PR_SET_SECUREBITS(0x1c, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x1, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x48040) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80000) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, 0x453, 0x100, 0x70bd2a, 0x25dfdbff, "ac7e492dd6", ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) prctl$PR_SET_SECUREBITS(0x1c, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[{0x6, 0x9, 0x2, 0x81}, {0x1, 0x37, 0x20, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000540)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000100}, 0x84) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'ip6_vti0\x00', r3, 0x29, 0x2, 0x15, 0x80000001, 0x20, @mcast2, @rand_addr=' \x01\x00', 0x8000, 0x7800, 0x7f, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000900)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x10, 0x3f5, 0x2, 0x70bd29, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24004040}, 0x10) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000d00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x21c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x90, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xf}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}}}}]}, @CTA_EXPECT_MASTER={0xf4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7d}, @CTA_EXPECT_NAT={0x4}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 12:01:59 executing program 3: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x20040084) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000000) r0 = fork() sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x3e9, 0x20, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x1, r0, 0x7, 0x5, 0x4, 0x3ff, 0x0, 0xfff}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x815}, 0x8000) getpriority(0x1, r0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x1, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x20000}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_QUEUE_NUM={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x45}, 0x40000) r1 = fork() capget(&(0x7f00000005c0)={0x20080522, r1}, &(0x7f0000000600)={0x4, 0x800, 0x1, 0x3, 0x5, 0x7fffffff}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xd4, r2, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x804}, 0x44004) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x24}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x810) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0x22, 0xb2, {0xb2, 0x22, "e88d3808217534afc9c39f2ddbada2ba3cb5f440ad9e51cb582ab2123eb571488e6aaded4f51fbdebcb0141abbb84371c9b220bcbeced53ac6bf7a0fd1c6bf84d9b55c62e3ef027f6862c8a9c2c316e719b877e2d5b6dca08fadaa7ef2b17804deb1f011663808ecf1ad4b2359e71c9e740d1896794453a603810cb464d389c0e025302b6ca54328e37aa3758aa6135cb1dfacc716ef6936ffbaf7bfd37a15495fbc6092a487ee53a8c7f536dce41734"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}, &(0x7f0000000a80)={0x0, 0x22, 0x1, {[@local]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x84, 0x1, {0x22, 0xad}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000b40)={0x0, 0x3, 0x1c, "4769e57288920e7386ea2e1746d7208ae4e72d6317f68f26501ff960"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0xb3}, &(0x7f0000000c00)={0x20, 0x1, 0x16, "12a29aa5bec0c52bb22da891af937803fb7230b54ebd"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x2}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000cc0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000e00)={'ip6tnl0\x00', &(0x7f0000000d80)={'syztnl1\x00', r3, 0x4, 0x3, 0x7f, 0x4, 0x1e, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x7800, 0x1, 0x10001, 0x5}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x50, r4, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xd60e87207da669ab) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000000f80)={0x434, 0x3f3, 0xa02, 0x70bd2d, 0x25dfdbfb, {0x6, 0x0, 0x2a, [0xe5, 0x5, 0x7, 0x7, 0x8, 0x80000000, 0x5, 0x9, 0x1000, 0x9, 0x9, 0xcf, 0x2c9, 0x7f, 0x100, 0x100, 0x4, 0x7fff, 0x7, 0x2, 0x0, 0x7, 0x1, 0x8, 0x3, 0x9, 0x2, 0x3, 0x80, 0x3f, 0x902, 0x4, 0xff, 0x1, 0x16ed, 0x1, 0x3, 0x2, 0xff, 0x1, 0xfffffc53, 0x0, 0x40, 0xfffffffa, 0x1, 0x6, 0x7, 0x87a, 0xe619, 0x1ff, 0xeb, 0x2683, 0x6, 0x1ff, 0x7, 0x5, 0x5, 0x9, 0x10001, 0x200, 0x8, 0xffffffff, 0x8, 0x8b35], [0x7, 0xadd, 0x9, 0x6, 0x200, 0x800, 0x28000, 0x9, 0x80000000, 0x3, 0x2, 0x1, 0x800, 0x7fffffff, 0x8, 0x7, 0x8000, 0x100, 0xbb2b, 0x1, 0x80, 0x401, 0x7, 0x1, 0x3, 0x9, 0xf078, 0xffff84f9, 0xfffffe00, 0x9d6f, 0x2, 0x0, 0x7fffffff, 0x9, 0x4c, 0x0, 0x9, 0x7, 0xfff, 0x6091, 0xc2e, 0x20, 0x3, 0x98, 0x7, 0x65, 0x6fd, 0x7, 0xa0, 0xfffffc00, 0x0, 0x80000001, 0x0, 0x9, 0x20, 0x9, 0x800, 0x47b9, 0x0, 0xffffb5fe, 0xea00, 0x417ca538, 0x3d, 0x4], [0x96, 0x9, 0x7, 0x4985, 0x5, 0x3, 0x3, 0xffff, 0x7, 0x800, 0x5, 0x1, 0x4, 0x7, 0x2, 0x8, 0x77, 0xae2, 0x40, 0x2b2c, 0x3, 0x2b, 0x478, 0x3556, 0x29, 0x4, 0x10001, 0x7f, 0x893, 0x3, 0xffffff81, 0xed, 0xfffffff9, 0x7fff, 0xa8, 0xe1, 0x100, 0x0, 0xfff, 0x2, 0x1000, 0x8, 0xe870, 0x400, 0x6, 0x101, 0xd1, 0xb6ad, 0x8, 0x8, 0x3, 0x1, 0x7, 0xfffffff8, 0x8, 0x80000000, 0x6, 0x101, 0x7, 0x3, 0x9386, 0xb5e4, 0x7, 0x1ff], [0xfb2, 0x2, 0x2514, 0x6, 0xfffffff7, 0x1, 0x9, 0x7, 0x7ff, 0x2, 0x9, 0xffff, 0x20, 0x8001, 0xf6, 0xff000, 0x80000001, 0xfffffffd, 0x34, 0x7, 0x1, 0x1f, 0xff, 0x42, 0x800, 0x3, 0xcbd, 0xf8, 0x6a, 0x9, 0xe545, 0x8, 0x7, 0x4, 0x40, 0x0, 0x0, 0x101, 0x80000001, 0x3ff, 0x2da7, 0x36, 0x1f, 0x101, 0x1, 0xd6, 0x20, 0x1, 0xff, 0x5, 0x0, 0x9, 0x3, 0x4, 0x632, 0x401, 0x12523c8e, 0x6, 0x4, 0x4, 0x400, 0x5, 0x3ff, 0x8], 0x12, ['mptcp_pm\x00', 'syz0\x00', '\x00', '!]\x00']}, ["", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c050}, 0x40010) 12:01:59 executing program 4: getrusage(0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r1 = getpgrp(0x0) getpriority(0x1, r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x9, 0x0, 0x7, 0x252f}, {0x800, 0x3f, 0x6, 0x101}, {0x6d, 0xed, 0x1f, 0x7ff}]}) fstat(r2, &(0x7f0000000240)) ptrace$peekuser(0x3, r1, 0x38d) r3 = syz_open_procfs$namespace(r1, &(0x7f00000002c0)='ns/net\x00') r4 = fork() r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r6, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x800) ioprio_set$pid(0x1, r4, 0x4004) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) [ 71.105782] audit: type=1400 audit(1751544119.833:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:01:59 executing program 5: sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004010}, 0x30000884) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, 0x3ed, 0xb8d15dbc687f6b80, 0x70bd26, 0x25dfdbfc, "f1b9e2377fd090bec9a14117baf6c23cf27de7f8764049868634abb8fe720a99f5f10c515518876fe7a2e18db96e9257f8f34bb6540abb0d51753d593361f3683d8d0468cc54672a178f2e3d9e466f18d37bae36af6e446e49255fdc1b2807414b98e37045f9a770ff799ebd8dd0bc83840a9bef86e2af424289873b8e39a62da569b1004a465b1b59cc9f66bf438b03745ec006936c8cf12eee22d017140125176c463acc5463bcd32cf5358f879c47489976fcef1d68190d5e2cfad503c0fad97cce86175848a21cf8ac5259c50e69d077184d01d49b", [""]}, 0xe8}}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x44) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x555d}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r2) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ',\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, r3, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x23e271e88868abc4}, 0x80) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), r2) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r6, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x6000c080}, 0x4008080) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r8, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 12:01:59 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0xffffffffffff7fff) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = syz_open_dev$rtc(&(0x7f0000000040), 0x81, 0x4280) ioctl$RTC_PIE_OFF(r1, 0x7006) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f00000000c0)) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x10, 0x25, 0x0, 0xb, 0x6, 0x7f, 0x1, 0x29}) ioctl$RTC_UIE_ON(r1, 0x7003) recvmmsg$unix(r2, &(0x7f0000001440)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/221, 0xdd}, {&(0x7f00000002c0)=""/49, 0x31}], 0x2, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/176, 0xb0}, {&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000000500)=""/98, 0x62}, {&(0x7f0000000580)=""/49, 0x31}, {&(0x7f00000005c0)=""/17, 0x11}, {&(0x7f0000000600)=""/67, 0x43}, {&(0x7f0000000680)=""/178, 0xb2}], 0x7, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000900)=""/188, 0xbc}, {&(0x7f00000009c0)=""/55, 0x37}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a40)=""/160, 0xa0}, {&(0x7f0000000b00)=""/111, 0x6f}, {&(0x7f0000000b80)=""/24, 0x18}, {&(0x7f0000000bc0)=""/102, 0x66}, {&(0x7f0000000c40)=""/219, 0xdb}], 0x5, &(0x7f0000000dc0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000000f00)=@abs, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000f80)=""/234, 0xea}, {&(0x7f0000001080)=""/175, 0xaf}, {&(0x7f0000001140)=""/87, 0x57}, {&(0x7f00000011c0)=""/99, 0x63}, {&(0x7f0000001240)=""/192, 0xc0}], 0x5, &(0x7f0000001380)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}], 0x5, 0x20, 0x0) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000001580)={0x7f, 0x10001, 0x2, 0x0, 0x8, 0x8000, 0x6}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000015c0), r7) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x38, 0x1, 0x9, 0x401, 0x0, 0x0, {0xb, 0x0, 0x5}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000084) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f0000001700), 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001780)=""/162, 0xa2}, {&(0x7f0000001840)=""/218, 0xda}, {&(0x7f0000001940)=""/45, 0x2d}, {&(0x7f0000001980)=""/228, 0xe4}, {&(0x7f0000001a80)=""/92, 0x5c}, {&(0x7f0000001b00)=""/140, 0x8c}], 0x6, &(0x7f0000001c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)=""/227, 0xe3}, {&(0x7f0000001e80)=""/16, 0x10}, {&(0x7f0000001ec0)=""/5, 0x5}], 0x3}}, {{&(0x7f0000001f40), 0x6e, &(0x7f0000002140)=[{&(0x7f0000001fc0)=""/177, 0xb1}, {&(0x7f0000002080)=""/130, 0x82}], 0x2}}], 0x3, 0x40000000, &(0x7f0000002240)) ioctl$RTC_SET_TIME(r8, 0x4024700a, &(0x7f0000002280)={0x22, 0x3a, 0x11, 0xb, 0x5, 0x7f, 0x5, 0x22}) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x10, 0x3fb, 0x200, 0x70bd27, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008040}, 0x890) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000023c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8, 0x401}}, './file0\x00'}) 12:01:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x101080, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0xd73bedd44828be28, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5091}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0xcdb011029c4dc90) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0xe3f) ioctl$RTC_WIE_ON(r3, 0x700f) r4 = socket(0xa, 0x2, 0x1f) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x54909c9c6951afe9}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0xb25589814c39c1e, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}]}, 0x3c}}, 0x4000000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x14}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x801) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4, 0x67}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3, @in_args={0x1}}, './file0\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x88000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8051) r9 = openat$cgroup_type(r2, &(0x7f0000000740), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000000780)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4895}, 0x4c000) [ 72.269420] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.275895] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.279831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.296422] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.300678] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.328717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.334470] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.336242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.340691] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.344257] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.393718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.394379] [ 72.395483] ============================= [ 72.396126] WARNING: suspicious RCU usage [ 72.396798] 6.16.0-rc4-next-20250703 #1 Not tainted [ 72.398365] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.400923] ----------------------------- [ 72.400934] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 72.400950] [ 72.400950] other info that might help us debug this: [ 72.400950] [ 72.400958] [ 72.400958] rcu_scheduler_active = 2, debug_locks = 1 [ 72.400972] 3 locks held by syz-executor.0/281: [ 72.405573] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.406007] #0: ffff88800fa9c400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 72.409938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.411034] #1: ffff88800c5ea618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 72.413415] #2: ffff88801a9140d0 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 72.413824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.414779] [ 72.414779] stack backtrace: [ 72.414795] CPU: 0 UID: 0 PID: 281 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250703 #1 PREEMPT(voluntary) [ 72.414824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 72.414836] Call Trace: [ 72.414845] [ 72.414854] dump_stack_lvl+0xfa/0x120 [ 72.414892] lockdep_rcu_suspicious+0x152/0x1c0 [ 72.414920] proc_sys_compare+0x28a/0x340 [ 72.414941] ? __pfx_proc_sys_compare+0x10/0x10 [ 72.414964] d_same_name+0x229/0x2e0 [ 72.415000] d_alloc_parallel+0x7c1/0x1330 [ 72.415037] ? __pfx_d_alloc_parallel+0x10/0x10 [ 72.415060] ? lock_is_held_type+0x9e/0x120 [ 72.415094] ? __pfx_default_wake_function+0x10/0x10 [ 72.415126] ? __d_lookup+0x25f/0x490 [ 72.415159] lookup_open.isra.0+0x64f/0x1530 [ 72.415192] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 72.415235] ? mnt_get_write_access+0x81/0x2d0 [ 72.415255] ? mnt_get_write_access+0x1ea/0x2d0 [ 72.415283] path_openat+0xc26/0x2880 [ 72.415330] ? __lock_acquire+0x694/0x1b70 [ 72.415352] ? __pfx_path_openat+0x10/0x10 [ 72.415392] do_filp_open+0x1e8/0x450 [ 72.415422] ? __pfx_do_filp_open+0x10/0x10 [ 72.415464] ? find_held_lock+0x2b/0x80 [ 72.415494] ? alloc_fd+0x2c1/0x560 [ 72.415520] ? lock_release+0xc8/0x290 [ 72.415548] ? alloc_fd+0x2c1/0x560 [ 72.415585] do_sys_openat2+0x104/0x1b0 [ 72.415609] ? __pfx_do_sys_openat2+0x10/0x10 [ 72.415635] ? rcu_read_unlock+0x2d/0xb0 [ 72.415656] ? lock_release+0xc8/0x290 [ 72.415685] __x64_sys_openat+0x142/0x200 [ 72.415709] ? __pfx___x64_sys_openat+0x10/0x10 [ 72.415741] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 72.415790] do_syscall_64+0xbf/0x360 [ 72.415813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.415836] RIP: 0033:0x7f5ed6736a04 [ 72.415854] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 72.415874] RSP: 002b:00007fff887a3c00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 72.415894] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f5ed6736a04 [ 72.415908] RDX: 0000000000080001 RSI: 00007f5ed67ed264 RDI: 00000000ffffff9c [ 72.415921] RBP: 00007f5ed67ed264 R08: 0000000000000000 R09: 00007fff887a3bf0 [ 72.415934] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 72.415947] R13: 00007fff887a3ca0 R14: 0000000000000000 R15: 00000000000000f8 [ 72.415976] [ 72.433445] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.459477] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.467266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.473946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.477415] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.479353] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.490453] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 72.502763] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 72.510377] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 72.512684] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.515344] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.535044] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 72.537071] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 72.546654] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.548133] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.550778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.550934] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.555561] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.560207] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.561641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.562829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.570722] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.570854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.591757] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.607563] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.363846] Bluetooth: hci1: command tx timeout [ 74.365065] Bluetooth: hci0: command tx timeout [ 74.491761] Bluetooth: hci2: command tx timeout [ 74.555590] Bluetooth: hci3: command tx timeout [ 74.619641] Bluetooth: hci6: command tx timeout [ 74.621213] Bluetooth: hci7: command tx timeout [ 74.683545] Bluetooth: hci4: command tx timeout [ 74.683617] Bluetooth: hci5: command tx timeout [ 76.411377] Bluetooth: hci1: command tx timeout [ 76.411419] Bluetooth: hci0: command tx timeout [ 76.539544] Bluetooth: hci2: command tx timeout [ 76.603408] Bluetooth: hci3: command tx timeout [ 76.667621] Bluetooth: hci6: command tx timeout [ 76.667644] Bluetooth: hci7: command tx timeout [ 76.731375] Bluetooth: hci5: command tx timeout [ 76.731463] Bluetooth: hci4: command tx timeout [ 78.461337] Bluetooth: hci1: command tx timeout [ 78.461476] Bluetooth: hci0: command tx timeout [ 78.587367] Bluetooth: hci2: command tx timeout [ 78.653359] Bluetooth: hci3: command tx timeout [ 78.715383] Bluetooth: hci7: command tx timeout [ 78.716520] Bluetooth: hci6: command tx timeout [ 78.781329] Bluetooth: hci4: command tx timeout [ 78.781696] Bluetooth: hci5: command tx timeout [ 80.507551] Bluetooth: hci0: command tx timeout [ 80.508231] Bluetooth: hci1: command tx timeout [ 80.635502] Bluetooth: hci2: command tx timeout [ 80.699409] Bluetooth: hci3: command tx timeout [ 80.763578] Bluetooth: hci6: command tx timeout [ 80.764161] Bluetooth: hci7: command tx timeout [ 80.828409] Bluetooth: hci5: command tx timeout [ 80.828929] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 12:02:01 Registers: info registers vcpu 0 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b5535 RDI=ffffffff8871ef20 RBP=ffffffff8871eee0 RSP=ffff888016e572b8 R8 =0000000000000000 R9 =ffffed1001795046 R10=0000000000000000 R11=0000000000000001 R12=000000000000000d R13=0000000000000010 R14=ffffffff8871eee0 R15=ffffffff828b5520 RIP=ffffffff828b558d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558f0a4400 00000000 00000000 GS =0000 ffff8880e55f2000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b3f2831e50 CR3=0000000026b5f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000ff000000000000000000000000 XMM04=2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=737574617453006563697665642e3069 XMM07=00000000000000000000000000000000 XMM08=7665642e2d736563697665642d737973 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff88192008 RBX=0000000000000030 RCX=ffffffff88181288 RDX=000000000000002c RSI=ffffffff87aaa8c8 RDI=0000000000000002 RBP=ffffffff815146f0 RSP=ffff888033a2f320 R8 =0000000000000000 R9 =0000000000000030 R10=ffff888016068ad0 R11=0000000000000000 R12=ffff888033a2f390 R13=ffffffff81514830 R14=0000000000000000 R15=ffffffff88194a08 RIP=ffffffff815156ae RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56f2000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb186999d00 CR3=000000002f4d9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f20c81f37c000007f20c81f37c8 XMM02=00007f20c81f37e000007f20c81f37c0 XMM03=00007f20c81f37c800007f20c81f37c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000