Warning: Permanently added '[localhost]:50152' (ECDSA) to the list of known hosts. 2025/07/05 01:04:14 fuzzer started 2025/07/05 01:04:15 dialing manager at localhost:42083 syzkaller login: [ 53.615028] cgroup: Unknown subsys name 'net' [ 53.714580] cgroup: Unknown subsys name 'cpuset' [ 53.728427] cgroup: Unknown subsys name 'rlimit' 2025/07/05 01:04:25 syscalls: 201 2025/07/05 01:04:25 code coverage: enabled 2025/07/05 01:04:25 comparison tracing: enabled 2025/07/05 01:04:25 extra coverage: enabled 2025/07/05 01:04:25 setuid sandbox: enabled 2025/07/05 01:04:25 namespace sandbox: enabled 2025/07/05 01:04:25 Android sandbox: enabled 2025/07/05 01:04:25 fault injection: enabled 2025/07/05 01:04:25 leak checking: enabled 2025/07/05 01:04:25 net packet injection: enabled 2025/07/05 01:04:25 net device setup: enabled 2025/07/05 01:04:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/05 01:04:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/05 01:04:25 USB emulation: enabled 2025/07/05 01:04:25 hci packet injection: enabled 2025/07/05 01:04:25 wifi device emulation: enabled 2025/07/05 01:04:25 802.15.4 emulation: enabled 2025/07/05 01:04:25 fetching corpus: 0, signal 0/0 (executing program) 2025/07/05 01:04:26 starting 8 fuzzer processes 01:04:26 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000300)={0x8000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xd}, &(0x7f00000000c0)=""/162, 0xa2, &(0x7f0000000180)=""/199, &(0x7f0000000280), 0x0, {r0}}, 0x58) r1 = syz_open_dev$vcsn(&(0x7f0000000400), 0x2, 0x200000) perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x80, 0x3f, 0x9, 0x3f, 0x8b, 0x0, 0x20bbc67c, 0x2, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_config_ext={0x4, 0x1}, 0x48800, 0x0, 0x1, 0x6, 0x4, 0x3, 0x1, 0x0, 0x3, 0x0, 0x7}, r0, 0xa, r1, 0xc) ioctl$LOOP_CLR_FD(r1, 0x4c01) clock_gettime(0x2, &(0x7f0000000440)) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x3, 0x9, 0x8, "c4e92806310d54a74ff41a37ae091a546d8b0a396282dc187b6e6442331e7cea09fe4e96950ed690239f1c155b87829579769192c6bf6a36a5c7e16f0fb6d8f9", "d5ba3fecef52a6435438eb4fca587e3e7b197292f899bcddf93b3c234e44283e869be5feeb522acee3500a645b0fa9d713b422366d03221591cd8ca2ed7fb119", "7b638cf7feb2058b7beaf0aad4295febf1a2e9fcca23dadb8c3003c46c4f335d", [0x5, 0x4]}) write$selinux_attr(r1, &(0x7f0000000580)='system_u:object_r:pinentry_exec_t:s0\x00', 0x25) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x240048c0}, 0x4008091) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000700)={'syztnl2\x00', r2, 0x700, 0x8000, 0xba9a, 0x2, {{0x37, 0x4, 0x1, 0x1, 0xdc, 0x66, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @private=0xa010102, {[@cipso={0x86, 0x5d, 0x3, [{0x1, 0xd, "1bf7d732a462e06a116f28"}, {0x0, 0x3, "9a"}, {0x7, 0x5, "fef60e"}, {0x1, 0x7, "b07f4f5418"}, {0x6, 0xd, "126cc736a39885ee25be46"}, {0x6, 0x2}, {0x5, 0x10, "ee4225b9401333659aed138a719c"}, {0x7, 0xc, "d00fc0ca0549da47f3e4"}, {0x6, 0x6, "fe17c6a0"}, {0x0, 0xa, "58b96610d6cf1fb3"}]}, @rr={0x7, 0x17, 0xb, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @private=0xa010102]}, @timestamp={0x44, 0x14, 0x74, 0x0, 0x3, [0x3f, 0x29, 0x2, 0x1ff]}, @lsrr={0x83, 0x7, 0x32, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0xc, 0x2d, 0x3, 0x6, [{@rand_addr=0x64010102, 0x5}]}, @lsrr={0x83, 0xf, 0x5b, [@private=0xa010102, @rand_addr=0x64010100, @remote]}, @lsrr={0x83, 0xf, 0x2b, [@multicast1, @loopback, @broadcast]}, @noop, @timestamp_addr={0x44, 0xc, 0xd0, 0x1, 0x5, [{@remote, 0x9}]}]}}}}}) geteuid() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'syztnl0\x00', r2, 0x700, 0x20, 0x2, 0x458, {{0x11, 0x4, 0x3, 0x1, 0x44, 0x64, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x40}, {[@timestamp={0x44, 0x18, 0x82, 0x0, 0x5, [0x9, 0x3, 0xfffffffc, 0x3, 0x1]}, @rr={0x7, 0x17, 0x60, [@broadcast, @loopback, @private=0xa010101, @rand_addr=0x64010100, @local]}]}}}}}) socketpair(0x28, 0x6, 0x8, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, 0x0, 0x220, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x30}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10040010}, 0x8004) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) geteuid() r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r6, 0x11, 0x67, &(0x7f0000000b40)=0x1, 0x4) 01:04:26 executing program 4: ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/185) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)="75728b039d479c82c4bf7503a66d4b5b9a40164b3ea44cabeaa352ac62062fca5c5c3c147a2347bc5aa17cc5471a6647ceeae33f77114e049be522c712797809795e3a2cf9f1e5e2e242ce5214b9de1a7318df566cc60afee5939e90712008eeedec036a558007a46495f4b1f082e20c971ace5947c85c37ae300553ec1f", 0x7e) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000200)) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000002c0)={0x3, 0x2, 0x7f, 0x2, 0x8}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000300)) r1 = openat$cgroup_ro(r0, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000380)=""/195) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x20000) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x7e1, 0x100) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000500)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000540)={0x1, 0x1, 0x6, 0x3, 0x401}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='dctcp\x00', 0x6) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, 0x1, 0x9, 0x100, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004010}, 0x8001) 01:04:26 executing program 1: r0 = gettid() ptrace$setsig(0x4203, r0, 0x3, &(0x7f0000000000)={0xa, 0x6, 0x6a5d}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x301202, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x3e9, 0x1, 0x70bd2a, 0x25dfdbfb, {0x18, 0x0, 0x2, r0, 0x1, 0x1ff, 0x703, 0x1, 0x0, 0x3}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) ptrace$setsig(0x4203, r0, 0xef38, &(0x7f00000001c0)={0x3e, 0x800, 0x7e6}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f8, 0x2, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4014}, 0x4008011) socketpair(0x15, 0x6, 0xfffffffb, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f6, 0x200, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000004c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000500)={"2340ae2d41999302e12567043e3beb76", r4, 0x0, {0xb9, 0x1f}, {0x1, 0x6}, 0x8, [0x7, 0xe000000000, 0x1f, 0x7f, 0x0, 0x4, 0xbe, 0xffffffffffffff55, 0x3ff, 0x0, 0x5, 0x63, 0x40, 0x9, 0xfffffffffffffff7, 0x100000000]}) r6 = socket(0x8, 0x1, 0x7f) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000880)={&(0x7f0000000600), 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1fc, 0x1, 0x2, 0x301, 0x0, 0x0, {0x4, 0x0, 0x2}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_MASK={0x14, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASTER={0xf4, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0x88, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xe}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xaaf}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x400}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x50}, 0x2004c004) ptrace$setsig(0x4203, r0, 0xfe, &(0x7f00000008c0)={0x12, 0x1, 0x4}) connect$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x2, r3, 0x1, 0xb2, 0x6, @local}, 0x14) r7 = gettid() sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x3e9, 0x300, 0x70bd2b, 0x25dfdbfe, {0x18, 0x0, 0x1, r7, 0xfff, 0x10001, 0x6, 0x2cd1000, 0x0, 0x10001}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c000}, 0x800) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000a80)=r5) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xc4, 0x3ed, 0x800, 0x70bd2c, 0x25dfdbfe, "173c8113b387664faf1be00a38d31e416ed3651eb15997b73ccf123484c473f6d862371294629c3f18422787aaa7bb193f1cb92065cf1728f3734c24c7e1293a45e1ee6ba12e36986624e42058bdc27cdabd802294210dd9570b533ad0ce4f5bd3bdc63b2b2f1a5f6f1043b88f36bfc304d35bab08923687a1ce41882cb2acc5cc6c6dadc40103efff683db40b2f69f5f8b6da618ee03020d8c13ec022f978b9d28ddba230c4085fe08e9bec0d4c2abe425c4ae4", ["", "", "", "", "", ""]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x24008044) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x10, 0x3f6, 0x400, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x400c015}, 0x10) 01:04:26 executing program 2: select(0x40, &(0x7f0000000000)={0x4, 0x8, 0x100000001, 0x6, 0x5, 0xf8b, 0x1, 0x7}, &(0x7f0000000040)={0x3, 0x7, 0x10000, 0xfffffffffffffffa, 0x1, 0xb91c, 0x7, 0xffffffff}, &(0x7f0000000080)={0x7, 0x80, 0x46a, 0x0, 0x100000001, 0x3, 0x6, 0xf9f}, &(0x7f00000000c0)) select(0x40, &(0x7f0000000100)={0x7, 0x7, 0x0, 0xffffffffffffff00, 0x9, 0xfffffffffffffff8, 0x7, 0x9}, &(0x7f0000000140)={0x8001, 0x0, 0xc5dc, 0x1, 0x2, 0x800, 0x8, 0x6}, &(0x7f0000000180)={0x1, 0x200, 0xca, 0x3, 0xff, 0xffffffff, 0x3, 0xd5}, &(0x7f00000001c0)) select(0x40, &(0x7f0000000200)={0x1, 0xfff, 0x0, 0x5, 0x80000001, 0x4, 0xdf74179, 0x1ff}, &(0x7f0000000240)={0x1f, 0x3, 0x3, 0x20, 0x1, 0x1, 0xdb90, 0x4}, &(0x7f0000000280)={0xdf9d, 0x0, 0x6, 0x200, 0x3, 0x7f, 0x8, 0x1ff}, &(0x7f00000002c0)={0x0, 0x2710}) select(0x40, &(0x7f0000000300)={0x4, 0x1, 0x3, 0xffffffffffffff80, 0x7fff, 0x2, 0x100000000, 0xffffffffffffffff}, &(0x7f0000000340)={0x8, 0x0, 0xffffffffffffc5f8, 0xfffffffffffffffc, 0x800, 0x3, 0x7, 0x93be}, &(0x7f0000000380)={0x1, 0x1, 0x800, 0x401, 0xd3c, 0xfb3, 0x9, 0x7}, &(0x7f00000003c0)) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x5) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x99e}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041054}, 0x41) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000804) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000680)) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) select(0x40, &(0x7f00000006c0)={0x3, 0x9f, 0x100000000, 0x7fffffff, 0xffffffffffffc6fb, 0x0, 0x8001, 0x6}, &(0x7f0000000700)={0x20000, 0x4, 0x1ee6, 0x7, 0x2, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x9}, &(0x7f0000000740)={0xffffffff, 0x6, 0x7c, 0x1, 0x5, 0x7f, 0x7ff, 0x7}, &(0x7f00000007c0)={r2, r3/1000+10000}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0xd, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x820) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40014) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r4 = syz_open_dev$vcsn(&(0x7f0000000a00), 0x7f, 0x22a080) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) exit_group(0xf3) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x464, 0x100, 0x70bd2b, 0x25dfdbff, "34d7a96ec21a4aa8bb127a532b400b", ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x50) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000b40)) [ 64.669334] audit: type=1400 audit(1751677466.815:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:04:26 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x7f, 0x0, 0x1f, 0x5, 0x0, 0x2, 0x6004, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x1}, 0x440, 0xf6e, 0x9, 0x0, 0x1, 0x6b, 0x1, 0x0, 0xfffffff8, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7) socketpair(0x1e, 0x72bca5b3a5abc215, 0xf1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x50202a80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x32}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x800) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.swap.events\x00', 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x2b, 'cpu'}, {0x2d, 'freezer'}, {0x2b, 'io'}, {0x2b, 'net'}]}, 0x17) r4 = openat$cgroup(r3, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) r5 = perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x80, 0x3f, 0x4, 0xaf, 0x0, 0x9, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000002c0), 0x2}, 0x1200, 0x1, 0xb9, 0x8, 0x7ff, 0xfffffff7, 0x40, 0x0, 0x7, 0x0, 0x7}, r4, 0x1, r3, 0xfaa3a6c809cfab25) r6 = socket(0x18, 0xa, 0x3) getsockopt$inet_tcp_int(r6, 0x6, 0xbde0980e33a124eb, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000440)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000480)={"90fd00b1a9d1d8e4cc6136ecaaf02af9", 0x0, r8, {0x2, 0x46a}, {0x6, 0xffff0000}, 0xfffffffffffffff8, [0xe3, 0xf5, 0x5, 0x1, 0x1, 0x4, 0x5fe, 0xb3, 0x2930a2b1, 0x0, 0xfff, 0x7cf5, 0xffffffffffffffff, 0x8, 0x2400000000000000, 0xffffffffffffff8a]}) r9 = openat$cgroup(r3, &(0x7f0000000580)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0xfffffffffffffffd, r9, 0xa, r5, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x10, 0x700, 0x4, 0x2, {{0x7, 0x4, 0x2, 0x7, 0x1c, 0x66, 0x0, 0xe7, 0x4, 0x0, @remote, @private=0xa010100, {[@noop, @ra={0x94, 0x4, 0x1}]}}}}}) connect$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0xc, r10, 0x1, 0x1f, 0x6, @multicast}, 0x14) 01:04:26 executing program 5: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) connect$packet(r0, &(0x7f0000000080)={0x11, 0xf8, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"f5595ade390f06fe346e4247d851c195", r1, 0x0, {0x623, 0x377}, {0x7e, 0x7fffffff}, 0x9, [0x401, 0xa8b7, 0x1ff, 0x7, 0xffffffff80000001, 0xffff, 0x8001, 0x4, 0x4, 0x80, 0x8001, 0x8, 0xe48, 0x6, 0x7f, 0x3]}) r2 = accept$packet(r0, &(0x7f0000000200), &(0x7f0000000240)=0x14) rt_sigtimedwait(&(0x7f0000000280)={[0x4faa]}, &(0x7f00000002c0), &(0x7f0000000340), 0x8) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000380)=@req3={0x0, 0x2, 0x1, 0x80, 0x8, 0x3ff, 0x7}, 0x1c) socketpair(0x8, 0x2, 0x6, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000400), &(0x7f0000000440)=0x14) getpeername$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) getpeername$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) r5 = accept4$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000005c0)=0x14, 0x800) accept4$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000680)={r6, 0x1, 0x6, @random="d3451fc94b5f"}, 0x10) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) io_pgetevents(0x0, 0x5, 0x1, &(0x7f00000006c0)=[{}], &(0x7f0000000740)={r7, r8+60000000}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x6]}, 0x8}) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x15, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x21}, 0x24048010) io_setup(0xf6f, &(0x7f0000000900)=0x0) r10 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000940), 0x2, 0x0) io_submit(r9, 0x2, &(0x7f0000000ac0)=[&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x3, 0x3ff, r10, &(0x7f0000000980)="8ccd68b3b9ae60c4329edae8e7c6b3d654114d0b7c463615e082f7861ae1939eaaf0a934dfeba6751fcd2cec40016bbef39623099d775ae5dd7e1f360b0a4ee23cdae9c68d5803ddebeab69e21f96bebe6e8f9321461b9840b3a", 0x5a, 0x3, 0x0, 0x2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000000a40)="b812ab048ebb0d2aca321b4030abb952ba173eef7cc21a56462e67216b4aea3e4953d930a399941da471bc5675b1bb6de02493995b2257e01314d1e5f34c0167", 0x40, 0x56, 0x0, 0x3}]) 01:04:26 executing program 6: r0 = gettid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x5, 0x15, 0x0, 0x5, 0x0, 0x2, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1000, 0x1, @perf_config_ext={0x40, 0x1}, 0x400, 0x8, 0x5, 0x2, 0x10001, 0x4, 0x8, 0x0, 0x59b, 0x0, 0x8}, r0, 0x0, r1, 0x2) clone3(&(0x7f0000000240)={0x1800080, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000180)=""/38, 0x26, &(0x7f00000001c0)=""/19, &(0x7f0000000200)=[r0], 0x1, {r1}}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000300)=0x4) openat$cgroup_freezer_state(r3, &(0x7f0000000340), 0x2, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000440)=0x4) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) r5 = openat$cgroup_ro(r3, &(0x7f00000004c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000500), 0x4) r7 = openat$cgroup(r3, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup(r7, &(0x7f0000000580)='syz0\x00', 0x200002, 0x0) r9 = perf_event_open$cgroup(&(0x7f0000000680)={0x2, 0x80, 0x1d, 0x4, 0x5, 0x74, 0x0, 0x7, 0x2000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000640)}, 0x40, 0x0, 0x0, 0x5, 0xffffffff, 0x80000001, 0x5, 0x0, 0x8, 0x0, 0x10000}, r8, 0xb, 0xffffffffffffffff, 0xd) perf_event_open$cgroup(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x4, 0x6, 0x0, 0x800, 0x81040, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff628, 0x2, @perf_config_ext={0xfffffffffffffe01, 0x81}, 0x2000, 0x401, 0x1f, 0x4, 0x2, 0x8, 0x1f, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x7, r9, 0x4) 01:04:26 executing program 7: r0 = socket(0x1e, 0x6, 0x3) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x140) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c4}, 0x811) r3 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20008014) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x41}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x20008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r5) getsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000540), &(0x7f0000000580)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x902}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x44810}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x4, 0xa2, 0x6, 0x7, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x700, 0x0, 0x2f}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000800)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000840)={'syztnl2\x00', r7, 0x7819, 0x8000, 0x3, 0xd8d7, {{0x4a, 0x4, 0x2, 0x2a, 0x128, 0x67, 0x0, 0x7, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x82, 0x8, "afd56967321e"}, @timestamp_prespec={0x44, 0x3c, 0xc9, 0x3, 0x4, [{@remote, 0x1000}, {@multicast2, 0x3}, {@multicast1, 0xb8}, {@multicast2, 0x100}, {@multicast1, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010102, 0xc513}]}, @rr={0x7, 0x1b, 0x72, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @private=0xa010100, @rand_addr=0x64010100]}, @ssrr={0x89, 0x1b, 0x7b, [@empty, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local]}, @timestamp_addr={0x44, 0x3c, 0xcb, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast2, 0x2}, {@local}, {@broadcast, 0x8466}, {@rand_addr=0x64010100, 0x1}, {@multicast2, 0x430}, {@rand_addr=0x64010100, 0x4}]}, @cipso={0x86, 0x52, 0xffffffffffffffff, [{0x0, 0x2}, {0x2, 0x4, "d6cc"}, {0x0, 0xa, "db69b0351fdd37d4"}, {0x3, 0x12, "7b184cf8ca40276a8536e62de20f0caa"}, {0x6, 0x2}, {0x0, 0x6, "0a2b6ef7"}, {0x6, 0xf, "7547e6ba9df6de26953fbb7ebd"}, {0x5, 0x2}, {0x0, 0x11, "7c289d99806617ae5d0a8c3fd3f7f8"}]}, @generic={0x7, 0x8, "78ecf4a2b489"}, @timestamp_addr={0x44, 0x4, 0xcf, 0x1, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000a40)={'gretap0\x00', &(0x7f0000000a00)={'ip_vti0\x00', r8, 0x10, 0x1, 0x0, 0xffff, {{0x8, 0x4, 0x3, 0x15, 0x20, 0x66, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010102, @broadcast, {[@noop, @lsrr={0x83, 0xb, 0xd, [@loopback, @broadcast]}]}}}}}) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b80)={'ip_vti0\x00', &(0x7f0000000b00)={'tunl0\x00', r9, 0x8, 0x80, 0x2, 0x5, {{0x16, 0x4, 0x1, 0x3, 0x58, 0x4, 0x0, 0x0, 0x2, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0x44, 0xff, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x6}, {@empty, 0x4147}, {@private=0xa010102, 0x5}, {@rand_addr=0x64010102, 0xb5}, {@broadcast, 0x646}, {@rand_addr=0x64010100, 0x77d}]}]}}}}}) [ 65.925442] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.925446] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.929133] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.931121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.935301] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.938281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.942181] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.945675] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.950113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.950192] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.953583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.955617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.962596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.964194] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.970905] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.974742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.974753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.977329] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.989612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.991577] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.992069] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.997341] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.001921] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.004651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.005879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.008783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.011420] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.015338] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 66.021487] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.031303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.038554] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.040135] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 66.042541] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 66.044336] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 66.055228] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 66.062717] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 66.065210] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.066905] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 66.080598] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 66.082857] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.135091] [ 66.135736] ============================= [ 66.136705] WARNING: suspicious RCU usage [ 66.137498] 6.16.0-rc4-next-20250704 #1 Not tainted [ 66.140817] ----------------------------- [ 66.144931] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 66.146146] [ 66.146146] other info that might help us debug this: [ 66.146146] [ 66.147458] [ 66.147458] rcu_scheduler_active = 2, debug_locks = 1 [ 66.148544] 3 locks held by syz-executor.1/281: [ 66.149291] #0: ffff8880094da400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 66.150700] #1: ffff88800902e618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 66.152316] #2: ffff88800b877270 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 66.153778] [ 66.153778] stack backtrace: [ 66.154472] CPU: 1 UID: 0 PID: 281 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250704 #1 PREEMPT(voluntary) [ 66.154500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 66.154514] Call Trace: [ 66.154522] [ 66.154531] dump_stack_lvl+0xfa/0x120 [ 66.154560] lockdep_rcu_suspicious+0x152/0x1c0 [ 66.154588] proc_sys_compare+0x28a/0x340 [ 66.154610] ? __pfx_proc_sys_compare+0x10/0x10 [ 66.154634] d_same_name+0x229/0x2e0 [ 66.154671] d_alloc_parallel+0x7c1/0x1330 [ 66.154710] ? __pfx_d_alloc_parallel+0x10/0x10 [ 66.154738] ? __pfx_default_wake_function+0x10/0x10 [ 66.154778] ? __d_lookup+0x25f/0x490 [ 66.154812] lookup_open.isra.0+0x64f/0x1530 [ 66.154846] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 66.154892] ? mnt_get_write_access+0x81/0x2d0 [ 66.154913] ? mnt_get_write_access+0x1ea/0x2d0 [ 66.154943] path_openat+0xc26/0x2880 [ 66.154984] ? __lock_acquire+0x694/0x1b70 [ 66.155007] ? __pfx_path_openat+0x10/0x10 [ 66.155048] do_filp_open+0x39e/0x450 [ 66.155080] ? __pfx_do_filp_open+0x10/0x10 [ 66.155123] ? find_held_lock+0x2b/0x80 [ 66.155153] ? alloc_fd+0x2c1/0x560 [ 66.155181] ? lock_release+0xc8/0x290 [ 66.155210] ? alloc_fd+0x2c1/0x560 [ 66.155248] do_sys_openat2+0x104/0x1b0 [ 66.155274] ? __pfx_do_sys_openat2+0x10/0x10 [ 66.155301] ? __fput+0x67b/0xb50 [ 66.155331] __x64_sys_openat+0x142/0x200 [ 66.155357] ? __pfx___x64_sys_openat+0x10/0x10 [ 66.155381] ? __pfx_fput_close_sync+0x10/0x10 [ 66.155418] do_syscall_64+0xbf/0x360 [ 66.155445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.155468] RIP: 0033:0x7fd7a0108a04 [ 66.155486] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 66.155507] RSP: 002b:00007ffea8b2ab90 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 66.155528] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fd7a0108a04 [ 66.155543] RDX: 0000000000080001 RSI: 00007fd7a01bf2bb RDI: 00000000ffffff9c [ 66.155557] RBP: 00007fd7a01bf2bb R08: 0000000000000000 R09: 00007ffea8b2ab80 [ 66.155571] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 66.155584] R13: 00007ffea8b2ac30 R14: 0000000000000000 R15: 00000000000000f8 [ 66.155615] [ 68.003085] Bluetooth: hci1: command tx timeout [ 68.066853] Bluetooth: hci4: command tx timeout [ 68.067849] Bluetooth: hci0: command tx timeout [ 68.068437] Bluetooth: hci2: command tx timeout [ 68.132864] Bluetooth: hci7: command tx timeout [ 68.133441] Bluetooth: hci6: command tx timeout [ 68.134346] Bluetooth: hci3: command tx timeout [ 68.134891] Bluetooth: hci5: command tx timeout [ 70.052438] Bluetooth: hci1: command tx timeout [ 70.115851] Bluetooth: hci2: command tx timeout [ 70.116255] Bluetooth: hci0: command tx timeout [ 70.116290] Bluetooth: hci4: command tx timeout [ 70.179012] Bluetooth: hci6: command tx timeout [ 70.179826] Bluetooth: hci7: command tx timeout [ 70.179836] Bluetooth: hci3: command tx timeout [ 70.180236] Bluetooth: hci5: command tx timeout [ 72.099817] Bluetooth: hci1: command tx timeout [ 72.162828] Bluetooth: hci2: command tx timeout [ 72.163258] Bluetooth: hci0: command tx timeout [ 72.163636] Bluetooth: hci4: command tx timeout [ 72.226898] Bluetooth: hci3: command tx timeout [ 72.227412] Bluetooth: hci6: command tx timeout [ 72.228108] Bluetooth: hci7: command tx timeout [ 72.228240] Bluetooth: hci5: command tx timeout [ 74.147096] Bluetooth: hci1: command tx timeout [ 74.211899] Bluetooth: hci4: command tx timeout [ 74.212078] Bluetooth: hci0: command tx timeout [ 74.212619] Bluetooth: hci2: command tx timeout [ 74.274935] Bluetooth: hci5: command tx timeout [ 74.274951] Bluetooth: hci3: command tx timeout [ 74.276315] Bluetooth: hci7: command tx timeout [ 74.276350] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 01:04:28 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff819b78bd RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffff8880161cfba8 R8 =0000000000000000 R9 =ffffed1001b60fec R10=0000000000000001 R11=0000000000000001 R12=ffff88800d8ccc80 R13=ffff8880161cfd88 R14=ffffea0000905340 R15=0000000000000000 RIP=ffffffff81735918 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3f753728c0 00000000 00000000 GS =0000 ffff8880e55f3000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055870ff18d04 CR3=000000000c443000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=6c6175747269762f736563697665642f XMM02=ffffffffffffffff00000000000000ff XMM03=696e656420737365636341002f737973 XMM04=0000000100000003000055870ff0e130 XMM05=000055870fecc980000055870fecc960 XMM06=000055870ff0e1500000000200000004 XMM07=00000000000000000000000000000000 XMM08=7269762f736563697665642f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b5a45 RDI=ffffffff8871dee0 RBP=ffffffff8871dea0 RSP=ffff8880165bf2b8 R8 =0000000000000000 R9 =ffffed1001dbc046 R10=000000000000002d R11=0000000000000001 R12=000000000000002d R13=0000000000000010 R14=ffffffff8871dea0 R15=ffffffff828b5a30 RIP=ffffffff828b5a9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555564270400 00000000 00000000 GS =0000 ffff8880e56f3000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f79114888b0 CR3=000000002db7f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff000000000000ffff000000000000 XMM02=ffffff0000ff00000000000000000000 XMM03=ffff0000ffffffff0000000000000000 XMM04=ffffffffffffff00ffffffffff000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000