Warning: Permanently added '[localhost]:9340' (ECDSA) to the list of known hosts. 2023/02/26 22:41:39 fuzzer started 2023/02/26 22:41:39 dialing manager at localhost:41417 syzkaller login: [ 38.153524] cgroup: Unknown subsys name 'net' [ 38.243418] cgroup: Unknown subsys name 'rlimit' 2023/02/26 22:41:55 syscalls: 201 2023/02/26 22:41:55 code coverage: enabled 2023/02/26 22:41:55 comparison tracing: enabled 2023/02/26 22:41:55 extra coverage: enabled 2023/02/26 22:41:55 setuid sandbox: enabled 2023/02/26 22:41:55 namespace sandbox: enabled 2023/02/26 22:41:55 Android sandbox: enabled 2023/02/26 22:41:55 fault injection: enabled 2023/02/26 22:41:55 leak checking: enabled 2023/02/26 22:41:55 net packet injection: enabled 2023/02/26 22:41:55 net device setup: enabled 2023/02/26 22:41:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/02/26 22:41:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/02/26 22:41:55 USB emulation: enabled 2023/02/26 22:41:55 hci packet injection: enabled 2023/02/26 22:41:55 wifi device emulation: enabled 2023/02/26 22:41:55 802.15.4 emulation: enabled 2023/02/26 22:41:55 fetching corpus: 0, signal 0/0 (executing program) 2023/02/26 22:41:56 starting 8 fuzzer processes 22:41:56 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x180, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20040010}, 0x24000044) socketpair(0x2a, 0xa, 0x8001, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xfc, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x840}, 0x800) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/pid_for_children\x00') mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40010, r4, 0x5c280000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000540)={0x2, &(0x7f0000000500)=[{0x8, 0xfc, 0x7, 0x4}, {0x9a4e, 0x6, 0x9, 0x1000}]}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000580)={0x0, 0x0, r6, 0x80000000}) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x932080c}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd8, r9, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair(0x1d, 0x6, 0x9, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f0000000bc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x2fc, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff96}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff54}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7168}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x360e1a92}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xadbb}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x95, 0x3, "8cb1d95a23b186d8c70205e997c303e8db6c384811eb63ffe57a83077914979edb09c9ef2ac7d7c47d0392b04ef79671fabeba008f27f9e9c7058ec5cd69afde691a90c44d6a3b6426ed9a7eb33a3c5f326eede0d72d9e851eea15236224dd422b105311a0799c531775b373b969875e1ca0e9360855bf78bbb2b5054c96a46e2a80f12e57d802a3476a51fa17b96304a6"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "87a1774ad9429e6500bd6a32146f83c5a3c63ce9663e08d86507"}}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4ee}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa92f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x62}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}]}]}, 0x2fc}}, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xf8, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb023}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4fe1bf1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1fed242b}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$DEVLINK_CMD_PORT_SPLIT(r8, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ec0)={'wlan1\x00'}) pipe2(&(0x7f0000000f00), 0x84000) 22:41:56 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000080)=0x80) getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r1 = accept4$packet(r0, &(0x7f0000000140), &(0x7f0000000180)=0x14, 0x80800) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) r3 = socket$inet6(0xa, 0x2, 0xb9) sendmsg$inet6(r3, &(0x7f0000000880)={&(0x7f0000000240)={0xa, 0x4e22, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x539a}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)="2e97b476eaf86a23fbd27c78caf63e166c3cfc25943d981868f61f2cf2168b4ddd8952338703874def7fffdebba3e9de8761ed2296458c", 0x37}, {&(0x7f0000000300)="22e5f187e8d0ace44315e4a9d4ca4d6776d1c6cc0434d55081ec47cbc1a9c05cc1cfd0a9db3b2b95a04f003701966b5e1cde9c2144887ed50ed83362fb073b211a60a709084b60462e4decab475473786a33e651dfef43f9d19d41e0d7c89aa678a51b14fb355bfe714fef291d0470b5a2dc6d5c6616fd070642db384cc9bcf1159994dd41eaf6dd5c397daacc53393ebeda77fa710f3c1b71830d26966d6b5a60a02de181cb802078e3", 0xaa}, {&(0x7f00000003c0)="8a8f71d123c053d0b1657f4b65ac6cfc7e17371b66f141d5634aeb1c6f5e62fd220fd2254d1de74d73d4daefd59457ad81cc5cc8c32b797dc0459338f75aab1051f4784d956c92f87198134967b28caaae375b6a", 0x54}, {&(0x7f0000000440)="c18e99e35d0ff7a5f3fb1ffc0a", 0xd}, {&(0x7f0000000480)="88fb4fc22d9650", 0x7}, {&(0x7f00000004c0)="e884377391496118c95d3019ea9587bd55691894c87cf82dee08f2e77ac2a22427a911043bdbd2d65d8dd149475a8fb00d8bf0f66093a3bbe7bb8b53c1d966e08e1418da3f1966047c19818ddd4d359f1dbacc08299a8d93e2e04c897d9dea1a03712da36b9f27bae95b8a45849134cc61f4b762abddd416e8c54a20045649d5eee54c9fc27b573fabd865d243801034c94aee2c5e3cfa7e6aadb3976aed56725d64edc8f7192d1562", 0xa9}, {&(0x7f0000000580)="311efc9aa68e0c961db3b1d7ba88b8bd113a9e6d50e8d22a38eded839b87ec059bdb89e817e5a4641a00bbd0a3025512fd5c081ad7a9d6ce5ee3d5dea7e24bfa9414aeca907eb23dbc041154afd177eda9559940bf977894283e3fb792", 0x5d}], 0x8, &(0x7f0000000680)=[@dontfrag={{0x14}}, @hopopts={{0xc0, 0x29, 0x36, {0x2f, 0x14, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x6, 0x6, [0x4, 0x0, 0x4c, 0x1]}}, @generic={0xfc, 0x71, "e27e486350a02ad170fc95a4b44704e6dea6444d3c55fd05c9589ff6f5fbdf899cb104d6b828822f4dc07e3355781f50cac4af28a590f833bea87f986fee7b545f6bb428355c161336cb4cabbc4e591832f0a26a9b387c75a7b21a49abdb41ef09405a71567ddcfca2c088f1c62700415b"}, @jumbo={0xc2, 0x4, 0xffff}]}}}, @hopopts_2292={{0x128, 0x29, 0x36, {0x35, 0x21, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0xf1, 0x3f00, [0x80000001, 0x4b, 0x8, 0x6, 0x3ff, 0xffffffffffffffc0, 0x0]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x44, 0x7b, "75b1149282d8cd6e3c3b92aa4428287be78fa6618dbedc6f68d4a268010b029ca3c563e800a8ee0695b047ed0e3973da68b3533e955aa70d82cf5ee565a576ea0744b212cdc121124e3f8c397f787728085d17998516f05ee05c4b5e13745219aa32c5c11b6aa90f63a35bff8a248ca59786853262417b183730a6"}, @ra={0x5, 0x2, 0xc39a}, @generic={0x88, 0x34, "584b56a6e6b4b90952f4e8b96765a74919a4cded5436c9657a3faba2f53854a4acfb4b181985a7aeac10ca4a49ad441fd37d4975"}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0xeb47}]}}}], 0x200}, 0x4000000) socketpair(0x1d, 0x80000, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_TRIM(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x10, 0x3f6, 0x400, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x20040004) r6 = epoll_create(0x7f) r7 = socket$inet6(0xa, 0x6, 0x101) sendmsg$inet6(r7, &(0x7f0000000ec0)={&(0x7f0000000a00)={0xa, 0x4e20, 0x9f3, @remote, 0x80000000}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000a40)="7fe905fc9555aa1ff448818656cbb15ff1bed0e2cad04f57208bd66dc2f0fd5660103ac158666ab4e7743eb845db9c9892fce3ba8362f1eaddb446ef44fb1e7b8616d6651726f973001b15891f695c23f1a911b966562ca83a39c402a48a88a67ed29e80340313366d01d5d52a9e272f17212478ac9267c5e741532f3ae43d80979712e54673d8bfa6ea463ed49622df7a605f4880e6f8ff1bb9f67baeb662f6d81d3ba62df0309dc6c0d7542f34c77f92995aa67ab4a5f2ed67cafd20f0dff571a84e8d97280d21100d5618d5f2987aaedf608e2d61ce967b62ecab43cc88e148fc2f66", 0xe4}, {&(0x7f0000000b40)="7550d674daf47543663d51598e19538c176b47001a5efbc9d62f37409cf9b9d547ad3911ccf7bac36d4768eaaeeb9ceb5b66e257bbfa313465b32f542a8ad8521eb605f07ce3acf7410872ddfbe36ab5aa4020f4b7306ee3fab02b82faaae1434e363cc8bb415ea550404731410f26899dce00a53915c400e2a8230b53357e8e5d4e361936b7979af7b66fba0855443640703f680a2d76f4ce16ccdb2ecaa17a212c4ce99d48dfb22bd4", 0xaa}, {&(0x7f0000000c00)="60861e7bb4df3feaeacfe23bf900080df590b14349c9fe154f2cffd77d451b736db9a1e31983b985d9f4b0af28959e39f4f5f00c042d976ee12e31f92b5a4c00dd6508d1670d86c7dd8541dc70cee1b00844c4fbcfcf702fae9bfdf1042df5b8b99cc2bf3ee1bb83f777de3cb3d9d0e101c34cb06ae296aa", 0x78}, {&(0x7f0000000c80)="8109d7eee058323158f4f978e136dd2d45da8e9ce5ebee514b9b2c81a4b1731df1c9d8e6d72e877f15adac63ea4a98d5b6", 0x31}, {&(0x7f0000000cc0)="c24bbf4252663256749977f7b9ad8e48cc681dec135ef831e6dae942253a4644c797ba467ee65087fc05c724f2a07806d62484d6aee825a3db26b4eefa08f030126ebff91db4aff7ade5ca0f87cbfa865e91bc8c58d5733b2e99665a3841ab33789e5afa1f96ca685e5347f2d3e40bb96e642239eb7c0dcba2a0d7d37ea91bc5507780f00fe5ef59e4240023c7d14c0d4bcb5cbad74e585cd2531faec8913e409374b625aebcad4b5a5eff65bc3dd01761970144dfb4c54b1fe61191d50e", 0xbe}], 0x5, &(0x7f0000000e00)=[@hopopts={{0x58, 0x29, 0x36, {0x62, 0x7, '\x00', [@ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0x5, 0x1, [0x2]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x0, 0x80, 0x0, [@empty]}}}], 0x98}, 0x8000) epoll_create(0x6) ioctl$BLKRESETZONE(r4, 0x40101283, &(0x7f0000000f00)={0x4, 0x5}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000f40)) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0xb4, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x240480d4}, 0x20000000) sendto$packet(r1, &(0x7f0000001100)="765742eb1137bb4eeb12efd316abc8a906ea260e0bb5549b1fb887606e2a5993e3b0f80f6e983bb1a7a57ecf3ecab1ecd8534e9c638841903010aa3ba2e456ffdfce8373b8965a93c552fa06cde430182b0ae01eb5ceb0dae2e2bdf54b2af6af08ccd2182e8c503917c3eb1f5cd40db52ca837d3bf77d06c941dff9f1383714dfb1a5d4f2ce869bbc6830966cf64f1e1c43a83fce5a6de19a63809444846ca13fdc68373c3a167acc4716b372834d77a1e7692da8ecb750f47fcdf516aa09a351a0a0c95799d535a60668e0b0c3d8b2ec96b55fb14b2c7a4f65aec7d1b131f6a75b4432e2b34c09b75557b7220649329e07a2ac2cc5ab343661dc00f0230", 0xfe, 0x4000810, &(0x7f0000001200)={0x11, 0x8, r2, 0x1, 0x9, 0x6, @local}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001240)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3f) r8 = accept4$packet(r0, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000012c0)=0x14, 0x0) accept4$packet(r8, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001340)=0x14, 0x80000) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000013c0), &(0x7f0000001400)=0xc) 22:41:56 executing program 2: ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000000)=0x80000000) sched_rr_get_interval(0x0, &(0x7f0000000040)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x20, 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x700, 0x700, 0x9, 0x860, {{0x16, 0x4, 0x0, 0x20, 0x58, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4}, @rr={0x7, 0x27, 0xb0, [@local, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1, @local]}, @rr={0x7, 0x17, 0xd, [@local, @remote, @broadcast, @private=0xa010102, @local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r1, 0x2f, 0x3, 0x19, 0x3f, 0x59, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x1, 0x20, 0x7, 0x9}}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r3, 0x10d, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '#\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x13}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x4008004) pselect6(0x40, &(0x7f00000003c0)={0x4, 0x2, 0x6, 0x6, 0x3, 0x8, 0x2, 0x7}, &(0x7f0000000400)={0x4, 0x200, 0xd000000000000000, 0x3, 0xf7, 0x0, 0x1ff, 0x100000000}, &(0x7f0000000440)={0x7fff, 0x2, 0x0, 0x4, 0x1, 0x5, 0x1, 0x80000000}, &(0x7f0000000480)={0x0, 0x989680}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x7ff]}, 0x8}) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000540)) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl0\x00', r2, 0x8, 0x9c6d174a50307fe3, 0x4, 0xf2db, {{0x12, 0x4, 0x0, 0x3, 0x48, 0x68, 0x0, 0x2b, 0x0, 0x0, @rand_addr=0x64010101, @empty, {[@rr={0x7, 0x7, 0xf6, [@loopback]}, @timestamp={0x44, 0xc, 0xab, 0x0, 0xa, [0x3, 0x1]}, @timestamp={0x44, 0x10, 0x61, 0x0, 0x3, [0x81, 0x4dfb, 0xb1]}, @ssrr={0x89, 0xf, 0x55, [@multicast1, @remote, @private=0xa010102]}]}}}}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r8) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r7, 0xd406f000) r9 = socket(0x22, 0x6, 0xaf) sendmsg$DEVLINK_CMD_SB_POOL_GET(r9, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x128, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x21}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0xf3a0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x800}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffe}, {0x6}}]}, 0x128}, 0x1, 0x0, 0x0, 0x100}, 0x80) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 22:41:56 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x11, 0xffffffffffffffff, 0x0) epoll_create1(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000040)=""/188, &(0x7f0000000100)=0xbc) socket$netlink(0x10, 0x3, 0x5) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0xffff, 0x5, 0xc5e, 0x2, 0x8}) move_pages(0x0, 0x3, &(0x7f00000001c0)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000200)=[0x468e, 0x6, 0x6], &(0x7f0000000240)=[0x0], 0x2) socketpair(0xb, 0x4, 0x1, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x414, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x99aa5300}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9993}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf80f}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfbab}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff00}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa5c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x594f2499}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff453f}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbf7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdaa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}]}]}, 0x414}, 0x1, 0x0, 0x0, 0x4000}, 0x4004880) r4 = socket(0x9, 0x4, 0x7fff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb0}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8004) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r5, &(0x7f0000000900)={0x1f, 0x1f, @any, 0x3ff}, 0xe) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0x110, r0, 0xfbd0f000) syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0) sendmsg$AUDIT_SET_FEATURE(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, 0x3fa, 0x1, 0x70bd2a, 0x2, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r3) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x180, r6, 0x2, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x20}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x88d}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xabe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x32}, {0x6, 0x11, 0x6}}]}, 0x180}}, 0x40000090) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x80, r7, 0x629, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x80}}, 0x80) 22:41:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000000c0)={0x5, 0x8}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000010}, 0x40050885) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x21c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x21}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdd4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xec}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "c2b9c468104e7dac3e9a7c7258c0b480d612e309c2af13f9768e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4be}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "fdab4563a53fbe3cc4fd029ae7b380faea9843db6629eb7c7a9fb5"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "051ccc41d542f21385ebb99e0d16754148df9dba16640d4146"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x32, 0x3, "4d68af095e654baf64878e16c73b49cae5a0806d314c93e57aad5064032721d4fc6c974fbaebddd737dbfbc1403f"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fbba7e40f9e30f2d22f685e20ced4f22b47c2eb4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40040000}, 0x804) pipe2(&(0x7f00000005c0)={0xffffffffffffffff}, 0x80000) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000600)=@req3={0x9, 0xfffff5f8, 0x9, 0x0, 0x5, 0x41, 0x4}, 0x1c) socketpair(0x27, 0x80800, 0x8, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x130, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socketpair(0x25, 0xa, 0x401, &(0x7f0000000880)={0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x10, 0x3f5, 0x200, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r8) r9 = socket(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r9, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xa8, r3, 0x300, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x0) 22:41:56 executing program 5: sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x430, 0x3f4, 0x100, 0x70bd2b, 0x25dfdbfd, {0x6, 0x2, 0x5, [0xe3, 0x8, 0xffffffff, 0x43b7, 0x80000001, 0x5, 0x80, 0x1f, 0x7, 0x9, 0x8, 0x1f, 0x2, 0x800, 0x4, 0x3, 0x8, 0x4, 0xac, 0x7, 0x2, 0xffff719e, 0xffff, 0x3, 0x6, 0x8, 0x0, 0x8, 0x1f, 0x2, 0x3, 0x80, 0x8, 0x400, 0x45f, 0x0, 0x401, 0x7fffffff, 0xd375, 0x3ff, 0x2, 0x10000, 0x1, 0x3, 0xa4c8, 0x1, 0x1ff, 0x7fff, 0x0, 0xfff, 0x0, 0xffff2a2b, 0x3, 0x2, 0x1, 0x2, 0x5, 0x4, 0x80000, 0x39, 0x2, 0xa, 0x2, 0x80000000], [0x401, 0xffff, 0x80000001, 0x7fffffff, 0xff, 0x0, 0xffff, 0x80, 0x2, 0x7, 0x3, 0x1000, 0x1f3f640e, 0x3, 0x5, 0x7d, 0x456, 0x50, 0xffffffff, 0x9, 0xfffffffa, 0x0, 0x6, 0x5, 0x1f, 0x10000, 0x8, 0x6, 0x9, 0x1, 0xca, 0x8, 0xfffff000, 0x8d, 0x3, 0x1, 0xfffffff9, 0x2, 0x3, 0x3, 0x1, 0x2, 0xffffffff, 0x9, 0x20, 0x400, 0x20, 0x7, 0x401, 0x0, 0x1, 0x2, 0x4, 0xffffffc1, 0x8001, 0x0, 0x9, 0x80, 0x9, 0x81, 0x5, 0x2, 0xe6, 0x8], [0xfffffffc, 0x4, 0x1, 0x3, 0x1ffc00, 0x10000, 0x7ff, 0x7fffffff, 0x5e7, 0x4, 0x8b3, 0x0, 0x1, 0x3f, 0x5, 0x7, 0x4, 0x2, 0xdc91, 0xee62, 0xcd, 0x678, 0x0, 0x9, 0x400, 0x0, 0xfffff800, 0x4, 0x40000, 0x1, 0x1, 0x9, 0x7, 0x6, 0xfffffffc, 0x9, 0xb9e0, 0x5, 0x1, 0x19a51089, 0x1, 0x3, 0x0, 0x3, 0x4, 0x1, 0x2, 0x40, 0xfffff000, 0x81, 0x7, 0x3, 0x3, 0xba, 0x4, 0x30da6106, 0x9, 0x0, 0x2, 0x8000, 0x28f9, 0x6, 0x5d7b11bc, 0x9], [0xb9, 0x3, 0x5, 0xf51, 0x7, 0xbe27, 0xf3, 0x9, 0x6b537ab8, 0x20, 0x7c8, 0x6, 0x81, 0x4, 0x0, 0x6, 0x80, 0xfffffe01, 0x1d, 0x8000, 0x10000, 0xfffff2cc, 0x4, 0x4, 0x5, 0x2, 0x8, 0xffffffff, 0x7, 0x3ff, 0x3, 0x4, 0x5, 0x0, 0x0, 0x9, 0xffff, 0x8, 0x80000000, 0x5, 0x0, 0x9, 0x67, 0x221d1171, 0xba1, 0x1f, 0x4, 0xc511, 0x8, 0x3ff, 0x8, 0x5, 0x9, 0x6, 0x5, 0x101, 0xff, 0x8, 0x401, 0x960, 0x101, 0x9d2, 0xfffeffff, 0x1], 0xf, ['#)(]\x00', '\x00', ')\x00', ')[\x00', '*^\x00', '\x00']}, [""]}, 0x430}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x4002}, 0x4) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x404}, 0x1) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = getpgid(0xffffffffffffffff) sendmsg$AUDIT_SET(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x808000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x3e9, 0x400, 0x70bd28, 0x25dfdbfe, {0x54, 0x0, 0x2, r1, 0x2, 0x5, 0xfffffbff, 0x80000000, 0x0, 0x8}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000800) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x118, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x20) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_DOMAIN={0x1c, 0x1, 'source_mac_is_multicast\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000001}, 0x440c0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x0, 0x40c, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x81) socketpair(0x5, 0x80000, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xa4, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x75, 0xa9, @random="91ae338779633e4f79cfe44e5baa714e932ee3fa1c896a8ac0c7496e1c2eac1b16a56127b112210f22562c167e63cb235c7b7fb1e9ebb2f3023a1b6335ad79db4532791408db1d2f5cac8eacd412de9741baca03eb8e1cd21c5bbfe105ea73fbbd5c2ee0a1eaba4f9b20a35e4619462f2a"}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x4040004) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xd0, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0xd0}}, 0x8800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000010c0)={0x0}) r6 = syz_open_dev$loop(&(0x7f0000001140), 0x0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001180)={r5, 0x0, r6, 0xfffffff7}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x800) timer_delete(0x0) [ 53.260430] audit: type=1400 audit(1677451316.759:6): avc: denied { execmem } for pid=261 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:41:56 executing program 7: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs\x00', 0x1ff) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2\x00', 0x1ff) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x3ed, 0x400, 0x70bd2a, 0x25dfdbfb, "3e0de6053df24210f7e9a9162c4e0b76b1c21f986edf35a96e0512cd9999", ["", "", "", ""]}, 0x30}}, 0x4040081) r0 = socket(0x3, 0x3, 0x3) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x6e39ab9c412a30e7, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f5, 0x282, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x14) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000008c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xb9807f9fdb7119c4}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)={0x430, 0x3f3, 0x2, 0x70bd2c, 0x25dfdbfc, {0xd, 0x1, 0x1, [0x401, 0x0, 0xcd5, 0x7, 0x1, 0x80000001, 0x3, 0x6, 0x5, 0x7, 0x1, 0x4, 0x8, 0x3, 0x1, 0x200, 0x8, 0x0, 0x6, 0xffffffe1, 0x2, 0x1ff, 0x6, 0x8, 0x44daef52, 0x0, 0x18f, 0xd24, 0x1c8b, 0xff, 0xe5e, 0x7f, 0x8, 0x3f, 0x1, 0xa2f, 0x5, 0xd, 0x7, 0x4, 0x80000000, 0x9, 0x7, 0x64ab, 0xff, 0x9, 0x8, 0x3, 0x3, 0x2, 0x0, 0x3, 0x9, 0x1, 0x1000, 0x6, 0xfff, 0xd87, 0x0, 0x2, 0xff, 0x8, 0xca4, 0xfffff362], [0x2, 0x1, 0x2400000, 0x10000, 0x0, 0x9, 0x2, 0x124, 0x200, 0x93c, 0x80000001, 0x7, 0x8001, 0x6, 0x110, 0x7, 0x6, 0xfffffeff, 0xfffffff8, 0x8000, 0x174, 0x1, 0x92e, 0x200, 0x80b, 0x3, 0x100, 0xfffffca2, 0x4, 0x5, 0x5, 0x4, 0x2, 0x9bdf, 0x5, 0x9, 0xff, 0xfffffffe, 0x100, 0x1, 0x4, 0x7fff, 0x78, 0x80, 0x6, 0x10000, 0x1, 0x5, 0x6, 0x9, 0x6, 0x3f, 0x8088, 0x9d79, 0x1, 0x8, 0x6, 0x2, 0x200, 0xae0, 0x1, 0x1f, 0x6, 0x1], [0xffffffff, 0x100, 0xfffffff7, 0x2, 0x3, 0x4, 0x45, 0xc, 0x2, 0x80000000, 0xf880, 0x7f, 0x10001, 0x4, 0x6, 0x6039, 0x7, 0x3ff, 0x1, 0x833, 0xf955, 0x8941, 0x1ff, 0x10000, 0x6000000, 0xad05, 0x4, 0x8001, 0xb8, 0x10000, 0xed1b, 0x7, 0x2, 0x7fff, 0x0, 0xc1, 0x10000, 0x80, 0x800, 0x6, 0x0, 0xfffffff8, 0x800, 0x6, 0x8000, 0x0, 0xa8e4, 0x401, 0x1, 0x5, 0x0, 0x7f, 0x3f, 0x80000000, 0x6, 0xff, 0x40, 0xfffffffe, 0x80, 0xff, 0x4, 0x3, 0x6, 0xffffffff], [0x8000, 0x5, 0x2, 0x7, 0x6, 0xa16, 0xe5f, 0x400, 0x1, 0x3ff, 0x7, 0xdbee, 0x7556bdb1, 0x1ff, 0x0, 0xfff, 0x2, 0xffff, 0x400, 0x2, 0x0, 0x7, 0x80, 0x4, 0xa627, 0x0, 0x9, 0x6b1, 0x9, 0x2, 0x0, 0x81, 0x0, 0x7fff, 0x8, 0xff, 0x2, 0x8, 0x3, 0x7, 0xb1f, 0x4, 0x2, 0x2, 0x836b, 0x977, 0x5, 0x2, 0x8000, 0x3, 0x4, 0x3ff, 0x0, 0x200, 0x0, 0x8e, 0x20, 0x8, 0xfffffffd, 0x2000000, 0x7, 0x10001, 0x80000000, 0x8], 0x10, ['./binderfs2\x00', '{$^\x00']}, [""]}, 0x430}, 0x1, 0x0, 0x0, 0x4008880}, 0x40010) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000900)={0x1f, 0xf66, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1f, 0x1}, 0xe) r3 = syz_open_dev$loop(&(0x7f0000000940), 0x4, 0x600) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000b80)={&(0x7f0000000980), 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x134, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4080}, 0x4054) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r5, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xbff7497068775406}, 0x800) r6 = shmget(0x2, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil) shmat(r6, &(0x7f0000ff9000/0x4000)=nil, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000ec0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000e40)={0x400000, 0x0, 0x1}, &(0x7f0000000e80)='./file0\x00', 0x18, 0x0, 0x23456}, 0x86) 22:41:56 executing program 6: shmget(0x2, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "15c231eb", {0x3, 0x103, 0x0, 0x9, 0x7fff, 0x4, 0xff}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) move_pages(r1, 0x4, &(0x7f0000000140)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil], &(0x7f0000000180)=[0x0, 0x50f, 0x8000, 0x400], &(0x7f00000001c0)=[0x0], 0x6) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/24, 0x18, 0x0, &(0x7f0000000240)=""/69, 0x45}, &(0x7f0000000300)=0x40) shmget(0x1, 0x2000, 0x200, &(0x7f0000ff7000/0x2000)=nil) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, 0x0, 0x0, 0x70bd26, 0xffff8001, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0xc041) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x3d0, &(0x7f0000000500)={[{0x11, 0x4e00, "0fbd185b295b411c5e79f47efa33e519a3"}, {0x2d, 0x4e00, "db9b16e8f5ff0f639830d39fc7ba94b1a6347766a048946f844edefe4bf0b99f66cd8aa6774cd905c674e21bbe"}, {0xd8, 0x4e00, "cd301f5c898e597d75a535bd3b01ce73cd7d96564e16d537f979e2f88481348004830485dbe493da4063123dac94fe308bac6e9afca0bdbaecbc8769eaa0065d58e5caf96140239e57cb52b850b509d77f235a875dc126825d37c7916839601e9a98e460c3e75726618c7514f6a513b69672a85a032605a0bb5c8092b8cf68a0adf59f5e130e978fc43e1fe57f678af709dec2755c12bf3b0f23eb7d62b1d4d437b7fcd6e21e71eee04248f6ddffb2735ae7e3b44396977090b63920768adb5cc4abbe121abc118123094ca6fbdc42f100d6ad03e9309f0d"}, {0xcb, 0x4e00, "833c6b154d9c3b953e9f6a6857c3b9a9aeb921a57034e93ab8cc239afeb8798158c659595f160469e0c55ea1a2c10e17c30a051e0031da5cfbe543fbcfafe5d512fb7e39bf47990711877ed1057ed1c3932d01827fed99d665a8416e291bb24e613aff6687ad4e08329e1b890292854ca4c7fe3a49bde3789cce4853eb927d2a8c1328ee742abe9f0ccd736da08b62857f3083e89e79b324a8bb1197f49868aba04ee4e4c2a97b94ac6e22da70e11dabc8c8cea7727f7e8127bd42931bb3e2e126d63b0cb462798146dca7"}, {0xb2, 0x4e00, "a33a07fe0d5416e73c7bac969059172613bb11d08e06345f21d907906545c9a2f2b98e9007aaf4393b0e3cd975f61e1c29e2a04969102d0d66009a9eabc995f0dcc4002d74924aa485bbdef72f79e7675a86175049c3016543c5196f39a161407b88e9ec0e071342ba1080a644386697b263fff2191c14db198d04b73d01a174c32de009f81521d3ed22341efa7d7de16916019633f5bc173093ce4dcb498a03999f012c5f85f02027141c93d91667630859"}, {0x2e, 0x4e00, "bf85f71316ee02d5255ca2d16138b2e7c714f76142a755f55be449a49a05457e04b1b869a2fcb8aa839fa47134fb"}, {0xe8, 0x4e00, "4ce3e3154e56ea2ea80ee0945d9ea414b268d404ca65487b88fe6631727e3599768b44e43485d308a39ecd050fda01996746b43482d55f0c5977b13e87a03125c6341aeaf5948161938c4a6a5e4f3a2149d61294e730ae9bec838dade0680286c8d09b251645c210fabd88d0ff00b07d8f26671fdc3cb8b5d94debd6479dce0d2d497675c02ba8ceb3d039d1d132c2096398e36f0665cf93c0014ae7bbbbb0a6eef55f06dcef3a07a06ea1aeae8fb11c750e62bd0f8261d38862d4419b12c5bab8d965f0006a4b9a706647427d1bf8c885b8e5062491f4e1f17ab928711f1c0434dd8629ee73e9e7"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000900)=@ready={0x0, 0x0, 0x8, "b9dc732c", {0x1, 0x5, 0x8001, 0x1f, 0x9b}}) mremap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000940)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000009c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) mremap(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = socket$inet6(0xa, 0xa, 0x4) mmap(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x2000001, 0x110, r2, 0x1907d000) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000ac0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000e80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000b80)={0x284, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x1000}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4c5}, {0x8, 0x13, 0x7ff}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8001}, {0x6}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x96}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9368}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x2af520ce}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x7}, {0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x9}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x81}, {0x8, 0x13, 0x200}, {0x5, 0x14, 0x1}}]}, 0x284}, 0x1, 0x0, 0x0, 0x40008010}, 0x8880) [ 54.534301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.536153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.538473] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.541824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.544431] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.545598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.586599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.608760] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.611264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.613189] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.614630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.617174] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.619050] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.620270] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.621546] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.623619] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.625702] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.626710] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.631835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.634909] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.639545] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.672657] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 54.676934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 54.689557] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 54.700224] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 54.701234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.709423] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 54.710791] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 54.755680] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.768279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.614268] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 56.614778] Bluetooth: hci0: command 0x0409 tx timeout [ 56.616627] [ 56.616857] ====================================================== [ 56.617544] WARNING: possible circular locking dependency detected [ 56.618223] 6.2.0-next-20230224 #1 Not tainted [ 56.618745] ------------------------------------------------------ [ 56.620103] syz-executor.3/273 is trying to acquire lock: [ 56.621160] ffff88800db40880 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xd80 [ 56.623764] [ 56.623764] but task is already holding lock: [ 56.624462] ffff88800db40920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 56.625596] [ 56.625596] which lock already depends on the new lock. [ 56.625596] [ 56.626527] [ 56.626527] the existing dependency chain (in reverse order) is: [ 56.627390] [ 56.627390] -> #1 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}: [ 56.628241] __mutex_lock+0x133/0x14a0 [ 56.628806] hci_cmd_sync_work+0x1e6/0x320 [ 56.629389] process_one_work+0xa0f/0x1790 [ 56.629976] worker_thread+0x63b/0x1260 [ 56.630548] kthread+0x2e9/0x3a0 [ 56.631030] ret_from_fork+0x2c/0x50 [ 56.631552] [ 56.631552] -> #0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}: [ 56.632779] __lock_acquire+0x2d56/0x6380 [ 56.633512] lock_acquire.part.0+0xea/0x320 [ 56.634264] __flush_work+0x109/0xd80 [ 56.634953] __cancel_work_timer+0x39c/0x4e0 [ 56.635713] hci_cmd_sync_clear+0x52/0x250 [ 56.636469] hci_unregister_dev+0xf9/0x410 [ 56.637223] vhci_release+0x80/0x100 [ 56.637894] __fput+0x263/0xa40 [ 56.638510] task_work_run+0x174/0x280 [ 56.639223] do_exit+0xad8/0x2800 [ 56.639857] do_group_exit+0xd4/0x2a0 [ 56.640552] __x64_sys_exit_group+0x3e/0x50 [ 56.641314] do_syscall_64+0x3f/0x90 [ 56.641970] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 56.642853] [ 56.642853] other info that might help us debug this: [ 56.642853] [ 56.643848] Possible unsafe locking scenario: [ 56.643848] [ 56.644590] CPU0 CPU1 [ 56.645154] ---- ---- [ 56.645718] lock(&hdev->cmd_sync_work_lock); [ 56.646288] lock((work_completion)(&hdev->cmd_sync_work)); [ 56.647270] lock(&hdev->cmd_sync_work_lock); [ 56.648129] lock((work_completion)(&hdev->cmd_sync_work)); [ 56.648836] [ 56.648836] *** DEADLOCK *** [ 56.648836] [ 56.649598] 1 lock held by syz-executor.3/273: [ 56.650162] #0: ffff88800db40920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 56.651392] [ 56.651392] stack backtrace: [ 56.651893] CPU: 0 PID: 273 Comm: syz-executor.3 Not tainted 6.2.0-next-20230224 #1 [ 56.652791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 56.653779] Call Trace: [ 56.654101] [ 56.654388] dump_stack_lvl+0x91/0xf0 [ 56.654868] check_noncircular+0x263/0x2e0 [ 56.655405] ? __pfx_check_noncircular+0x10/0x10 [ 56.656022] __lock_acquire+0x2d56/0x6380 [ 56.656571] ? lock_is_held_type+0x9f/0x120 [ 56.657127] ? __pfx___lock_acquire+0x10/0x10 [ 56.657703] ? __pfx_register_lock_class+0x10/0x10 [ 56.658327] ? __wait_for_common+0x394/0x550 [ 56.658896] ? __pfx_lock_release+0x10/0x10 [ 56.659453] lock_acquire.part.0+0xea/0x320 [ 56.660000] ? __flush_work+0xdd/0xd80 [ 56.660530] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 56.661136] ? __flush_work+0xdd/0xd80 [ 56.661627] ? rcu_read_lock_sched_held+0x42/0x80 [ 56.662213] ? trace_lock_acquire+0x170/0x1e0 [ 56.662786] ? __flush_work+0xdd/0xd80 [ 56.663282] ? lock_acquire+0x32/0xc0 [ 56.663763] ? __flush_work+0xdd/0xd80 [ 56.664318] __flush_work+0x109/0xd80 [ 56.664856] ? __flush_work+0xdd/0xd80 [ 56.665404] ? __pfx_mark_lock.part.0+0x10/0x10 [ 56.666048] ? __pfx___flush_work+0x10/0x10 [ 56.666632] ? lock_acquire.part.0+0xea/0x320 [ 56.667244] ? hci_cmd_sync_clear+0x45/0x250 [ 56.667852] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 56.668555] ? hci_cmd_sync_clear+0x45/0x250 [ 56.669153] ? rcu_read_lock_sched_held+0x42/0x80 [ 56.669803] ? trace_lock_acquire+0x170/0x1e0 [ 56.670420] ? lock_is_held_type+0x9f/0x120 [ 56.671018] ? mark_held_locks+0x9e/0xe0 [ 56.671576] __cancel_work_timer+0x39c/0x4e0 [ 56.672187] ? __pfx___cancel_work_timer+0x10/0x10 [ 56.672846] ? __cancel_work_timer+0x2aa/0x4e0 [ 56.673461] ? __pfx___cancel_work_timer+0x10/0x10 [ 56.674115] ? lock_release+0x1e3/0x710 [ 56.674668] ? __pfx_lock_release+0x10/0x10 [ 56.675260] ? do_raw_write_lock+0x11e/0x3b0 [ 56.675867] ? __pfx_vhci_release+0x10/0x10 [ 56.676461] hci_cmd_sync_clear+0x52/0x250 [ 56.677050] ? __pfx_vhci_release+0x10/0x10 [ 56.677639] hci_unregister_dev+0xf9/0x410 [ 56.678215] vhci_release+0x80/0x100 [ 56.678735] __fput+0x263/0xa40 [ 56.679197] task_work_run+0x174/0x280 [ 56.679736] ? __pfx_task_work_run+0x10/0x10 [ 56.680359] ? do_raw_spin_unlock+0x53/0x220 [ 56.680959] do_exit+0xad8/0x2800 [ 56.681430] ? lock_release+0x1e3/0x710 [ 56.681987] ? __pfx_lock_release+0x10/0x10 [ 56.682584] ? do_raw_spin_lock+0x125/0x270 [ 56.683172] ? __pfx_do_exit+0x10/0x10 [ 56.683712] do_group_exit+0xd4/0x2a0 [ 56.684246] __x64_sys_exit_group+0x3e/0x50 [ 56.684830] do_syscall_64+0x3f/0x90 [ 56.685334] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 56.686040] RIP: 0033:0x7fdf11560b19 [ 56.686544] Code: Unable to access opcode bytes at 0x7fdf11560aef. [ 56.687354] RSP: 002b:00007ffe6db28f78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 56.688343] RAX: ffffffffffffffda RBX: 00007ffe6db29758 RCX: 00007fdf11560b19 [ 56.689274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 56.690202] RBP: 0000000000000000 R08: 0000000000000026 R09: 00007ffe6db29758 [ 56.691133] R10: 0000000000000020 R11: 0000000000000246 R12: 00007fdf115ba233 [ 56.692062] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000000000f8 [ 56.693008] [ 56.695924] Bluetooth: hci3: command 0x0409 tx timeout [ 56.695975] Bluetooth: hci4: command 0x0409 tx timeout [ 56.697433] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 56.698257] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 56.742762] Bluetooth: hci6: command 0x0409 tx timeout [ 56.806236] Bluetooth: hci2: command 0x0409 tx timeout [ 58.662036] Bluetooth: hci0: command 0x041b tx timeout [ 58.726012] Bluetooth: hci4: command 0x041b tx timeout [ 58.727290] Bluetooth: hci3: command 0x041b tx timeout [ 58.789976] Bluetooth: hci6: command 0x041b tx timeout [ 58.853980] Bluetooth: hci2: command 0x041b tx timeout [ 60.711670] Bluetooth: hci0: command 0x040f tx timeout [ 60.774007] Bluetooth: hci3: command 0x040f tx timeout [ 60.774459] Bluetooth: hci4: command 0x040f tx timeout [ 60.838031] Bluetooth: hci6: command 0x040f tx timeout [ 60.901987] Bluetooth: hci2: command 0x040f tx timeout [ 61.350020] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 61.350515] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 61.413972] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 62.757987] Bluetooth: hci0: command 0x0419 tx timeout [ 62.821997] Bluetooth: hci4: command 0x0419 tx timeout [ 62.822366] Bluetooth: hci3: command 0x0419 tx timeout [ 62.885985] Bluetooth: hci6: command 0x0419 tx timeout [ 62.950461] Bluetooth: hci2: command 0x0419 tx timeout [ 63.608461] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.609805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.613840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.614684] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.616032] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.616576] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.790778] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 63.790819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.791846] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 63.791897] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 63.793051] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 63.793742] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 63.794548] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 63.795307] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 63.795829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 63.795868] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 63.797834] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 63.799086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.637995] Bluetooth: hci1: command 0x0409 tx timeout [ 65.830055] Bluetooth: hci5: command 0x0409 tx timeout [ 65.830559] Bluetooth: hci7: command 0x0409 tx timeout VM DIAGNOSIS: 22:42:00 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=000000000000000a RCX=ffffffff8444e887 RDX=ffff88802ba4d040 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffffff84e23740 RSP=ffff88802ee8ece0 R8 =0000000000000001 R9 =0000000000000078 R10=0000000000000075 R11=0000000000000001 R12=0000000000000075 R13=0000000000000001 R14=000000000000000a R15=000000000000006c RIP=ffffffff814b6ffc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe70f8da3000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe70f8da1000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd5a163cb8 CR3=000000003458c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff86107656 RDX=0000000000000000 RSI=0000000000000001 RDI=ffff8880345577a8 RBP=ffff888034557798 RSP=ffff8880345576d0 R8 =ffffffff8610765a R9 =ffff888034557780 R10=0000000000038001 R11=0000000000000001 R12=ffff8880345577a0 R13=ffff888034557740 R14=ffff888034557c58 R15=0000000000000001 RIP=ffffffff81133355 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe2aa269d000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe2aa269b000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f316d9c7028 CR3=000000000d5e0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00ff00000000000000000000000000ff XMM02=00ff00000000000000000000000000ff XMM03=636e79735f646d633e2d766564682628 XMM04=636f72703d7373616c63742030733a74 XMM05=3a755f6d65747379733d747865746e6f XMM06=5f6d65747379733a755f6d6574737973 XMM07=00000000000000000000000000000000 XMM08=3c002e74656b636f5320746964754100 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000