Warning: Permanently added '[localhost]:61140' (ECDSA) to the list of known hosts. 2022/11/04 14:57:15 fuzzer started 2022/11/04 14:57:15 dialing manager at localhost:37641 syzkaller login: [ 45.802931] cgroup: Unknown subsys name 'net' [ 45.907587] cgroup: Unknown subsys name 'rlimit' 2022/11/04 14:57:31 syscalls: 201 2022/11/04 14:57:31 code coverage: enabled 2022/11/04 14:57:31 comparison tracing: enabled 2022/11/04 14:57:31 extra coverage: enabled 2022/11/04 14:57:31 setuid sandbox: enabled 2022/11/04 14:57:31 namespace sandbox: enabled 2022/11/04 14:57:31 Android sandbox: enabled 2022/11/04 14:57:31 fault injection: enabled 2022/11/04 14:57:31 leak checking: enabled 2022/11/04 14:57:31 net packet injection: enabled 2022/11/04 14:57:31 net device setup: enabled 2022/11/04 14:57:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/11/04 14:57:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/11/04 14:57:31 USB emulation: enabled 2022/11/04 14:57:31 hci packet injection: enabled 2022/11/04 14:57:31 wifi device emulation: enabled 2022/11/04 14:57:31 802.15.4 emulation: enabled 2022/11/04 14:57:31 fetching corpus: 0, signal 0/0 (executing program) 2022/11/04 14:57:33 starting 8 fuzzer processes 14:57:33 executing program 0: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x79}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20000048) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x10080, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x310, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff801}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x59}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcb74}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "15b9a7bcab2f6aaaf82dcf4407817cb650686bdd2f0f51a553954735f872df49a3b6d093"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x971}, @TIPC_NLA_NODE_ID={0x17, 0x3, "78502df9f75ea0d5f49570cb534d2c9101c0db"}, @TIPC_NLA_NODE_ID={0x19, 0x3, "ed87d2b22049d596979a6b4446488986d2ff0f4abd"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "0568add47e89d93ec33f7202c0a1dc82c7386f6341f0f4a70acea78ef244eb"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa7, 0x3, "0c2f5d294da9b8d5839dbc0c7fce6b11cb39de903859345f2e98a4145ca108a4e5b25b7b25cd490803d1b4f2d204695ad451c995dae0e11f9ada872b0d763a78ea5fe6cee7636d70cede66c2ec5a733d8ad3e8155fd6ac464f2c820cebae6ea187eb978878760d5cbde411483d71ba6c553947d9f2dc09db9c0f6bb27e29f575d66d0e9ccc121f80f98d1e3c73f6b3f9e36ed422a2bdaf30c2ffa461ab1eb5b9af88da"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "02e393bf7793973eaa79a8813a255560765cec8b31430c"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffe0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x456}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NET={0x4}]}, 0x310}, 0x1, 0x0, 0x0, 0x20000001}, 0x4041) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000540)={0x7fffffff, 0x0, 'client1\x00', 0x5, "432df0b4851aac11", "cb732d9ff79ca2aa54c8f9de4f27b1c3dae94f226a9424653ac3d8929988e35c", 0xff, 0x400}) write$bt_hci(r0, &(0x7f0000000600)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x9}}}, 0x6) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000640)={0x9, 0x1, 'client1\x00', 0x2, "c8c9ba4195b103b8", "7e2b49751704567a53469ff96b5ee03167a2198ee0c6d38367e36ce6b8bab542", 0x8000, 0xf25}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700), 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000740)={0x1, 0x6, 0x7, 0x8, 0x5, 0x3}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000007c0)=0x4, 0x4) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x81) add_key$fscrypt_provisioning(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, &(0x7f00000009c0)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffffe) socketpair(0x5, 0x5, 0xfff, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000a80)=0x9, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc048}, 0x4000000) openat$cgroup_devices(r1, &(0x7f0000000bc0)='devices.deny\x00', 0x2, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x9) openat$bsg(0xffffffffffffff9c, &(0x7f0000000c00), 0x8081, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x26, 0x78}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x240088c4}, 0x4008005) 14:57:33 executing program 1: prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) r1 = socket(0x1f, 0x3, 0x3e4c39e1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x88, r2, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040081}, 0x6004004) getitimer(0x0, &(0x7f0000001240)) r4 = socket(0x22, 0x80000, 0x86) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3f}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x8054) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000001540)={&(0x7f0000001380), 0xc, &(0x7f0000001500)={&(0x7f00000013c0)={0x104, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, 0xd8}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x77}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffffffff, @loopback, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001580)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001800)={'erspan0\x00', &(0x7f0000001780)={'erspan0\x00', 0x0, 0x7, 0x7800, 0x0, 0x5, {{0x9, 0x4, 0x3, 0x3, 0x24, 0x64, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@noop, @cipso={0x86, 0x8, 0x3, [{0x7, 0x2}]}, @ra={0x94, 0x4}, @noop]}}}}}) connect(0xffffffffffffffff, &(0x7f0000001840)=@ll={0x11, 0x9, r5, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100092}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000019c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000001cc0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c80)={&(0x7f0000001a80)={0x1f4, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3e10, @dev={0xfe, 0x80, '\x00', 0xd}, 0x100000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @empty, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a45}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x854}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @private1, 0x43}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0xd0040}, 0x0) openat$cgroup_procs(r6, &(0x7f0000001d00)='tasks\x00', 0x2, 0x0) 14:57:33 executing program 2: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'b', ' *:* ', 'rm\x00'}, 0x9) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe8, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ea}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc50}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xdc3430b1a05c1278}, 0x800) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb8, r0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff01}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x70000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8091}, 0x400c080) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa29}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x48411}, 0x40000080) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x100, 0x0, 0x204, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xbc}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf0a}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xba}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x40058}, 0x4000001) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xc8, r1, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x1d, 0x24, [{0x2}, {0x24, 0x1}, {0x9}, {0x1}, {0x1e}, {0x24, 0x1}, {0xb}, {0x18, 0x1}, {0x30}, {0x36, 0x1}, {0x6}, {0x64, 0x1}, {0x30, 0x1}, {0x624e18009fc38986}, {0x12}, {0x3, 0x1}, {0x16}, {0x60, 0x1}, {0x18, 0x1}, {0x3}, {0x60, 0x1}, {0x30}, {0x18}, {0xb, 0x1}, {0x6}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x80, 0x3, 0x3, 0x0, {0x7fff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x7, 0x9}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffdd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1dc}], @NL80211_ATTR_HIDDEN_SSID={0x1b, 0x7e, @random="82f8b31135b27563dd1ae638c7670b446963085d5ab151"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000980)={0x2fc, r0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc241}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "84959c944cd9053d0758ef4c42f4fab3fe9f248d07326ef01c790649db5e4f42112d3b24"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "3f047d909cf8f6be9eeb8823d68e2c0c848308681816"}}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff00}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1193}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x75}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "153237ca1d36cfd97344fbe1b15e49e6617680ef15"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "5f09b81bfd36ea6b364d59c416bd9328657ae5bb57b1234f094461e3"}}, @TIPC_NLA_NODE_ID={0x66, 0x3, "af7593e1810885b0b1783d8b5e87ab91a5c2c153bf1fcdcc7cfdb798d93b574f238a9801d2dc35230448dd653d198feeda069a3b7d236c5945844ca98ba3438616460b8b0c03b9c077d036489f0c911612fb0530d41d788373ee6db33d93827c6192"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a5987f6582e5b7a5f98cebf4379aecfe5d3031dc9100"}}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd1}]}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r2 = socket(0x5, 0x4, 0x7) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80108004}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x130, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x33}}}}, [@NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x3ff, 0x100, 0x1db3, 0x4, 0x6, 0xe728, 0x2, 0xff, 0x0]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x54}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x496}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x4, 0x8000, 0x76]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4c}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x355}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x143}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7ff]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x281}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x40}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe24}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x21}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x156}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x16}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1a}]}]}, 0x130}}, 0x840) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0xa09}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x68, r3, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x14004011}, 0x84) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x64, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x25}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}}, 0x8000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001200), r2) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x78, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x47dc2dff}]}, 0x78}, 0x1, 0x0, 0x0, 0xc1}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r2) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000001540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={&(0x7f00000013c0)={0x128, r5, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb5}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa01}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffb}]}, 0x128}}, 0x10) 14:57:33 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/254) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000100)=""/68) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/168) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000240)=""/196) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000340)=""/185) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000400)=""/28) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440), 0x4) r2 = shmget$private(0x0, 0x400000, 0x200, &(0x7f0000bff000/0x400000)=nil) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x1ff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x2) shmctl$SHM_UNLOCK(r2, 0xc) [ 62.153633] audit: type=1400 audit(1667573853.227:6): avc: denied { execmem } for pid=286 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:57:33 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x68}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x20}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1947}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x801}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x64}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3e}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x68}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x42}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}]}, 0x78}, 0x1, 0x0, 0x0, 0x14004841}, 0x40045) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10008080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000081) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x8c, r3, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2400c095}, 0x20000800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x80, r4, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xb8c, 0x72}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x1, 0x5]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x8]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3f, 0xbe, "32ab1f4297274b4e8e2f9f0a28c4060d8acab2884e5aa5d8305ef73a6e922a3cc6ebec7e3769b8ff36bcdc1b8cf94c6780d75c5424d34e0ddf10ff"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x48014}, 0x400d) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f00000007c0)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r5, 0x602, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x100, 0x2f}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5}]}, 0x28}}, 0x40) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, 0x0, 0x300, 0x70bd2a, 0x9, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x60}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f76}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x60}}, 0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r6, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x28}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x40000) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000c80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x40, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0xd}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4001) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r4, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000840}, 0x84) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0xa4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x88, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1020}, 0x4051) 14:57:33 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x401}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, [{0xb}, {0x3}, {0x18, 0x1}, {0x24, 0x1}, {0xb}, {0x3}, {0xb, 0x1}, {0x36, 0x1}, {0x16, 0x1}, {0x2, 0x1}, {0x4}, {0xc, 0x1}, {0x48}, {0x12}, {0x30, 0x1}, {0x1b}, {0x6}, {0x9, 0x1}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x4, 0x0, {0x0, 0x1f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x400, 0x81}}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xffffffff}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x9}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x4}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x200}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x1d}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xe1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xec, r2, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf185}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x24048010}, 0x4008003) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000600)=0x8, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000b00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f00000006c0)={0x3f0, r4, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x54}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x1, 0x4, 0x0, {0x7, 0x6, 0x0, 0x7f, 0x0, 0x0, 0x1}, 0x1, 0x1}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x3, 0x7, 0x0, {0x10000, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x1000, 0xb2}}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_KEYS={0x1f8, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "0ba1085672c737e19d6ad62eec"}, @NL80211_KEY_SEQ={0x10, 0x4, "c7ee1ade279654e357370ac2"}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d2ef56a687"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0ee472d3ca"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "055d42deb9266a3b7cfbaa40bf"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f1cf3fab91"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "2aa677f1ad"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "1cc6df0351"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4f1c6191c6ad0f2020b52d9917"}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "237dcb6f7c"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xb, 0x4, "8cfc5f6909c649"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e953dfc8abd275690892228ace"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "73499fbfe5"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7dd82b28de38521b0d3cee48b1"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0xff}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "80424ceed0"}, @NL80211_KEY_TYPE={0x8}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_KEYS={0x190, 0x51, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e03526885db10f0893f7b222ed"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6d5ae4cd75"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "066f3d089f"}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x11, 0x4, "e72669e6ba6a3864c5067c00f3"}, @NL80211_KEY_TYPE={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "38efe75ecc"}, @NL80211_KEY_SEQ={0xb, 0x4, "6a84e01d351506"}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "7e72572882"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6ae0420738ac380c059c7815b1"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "1dc813939b"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "78ee18459a37a6dfd3f7aef9fd"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "72e14e4030"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x2400c051}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r3) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x15c, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc0000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff88d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x400c0}, 0xc0) socketpair(0x2b, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000f40)={&(0x7f0000000e00), 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x4a}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x40840) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r7) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xc4, r10, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfffff001, 0x57}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7f8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x63}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x93d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x526]}]}, @NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x1, 0x3, 0x800, 0xe, 0x5, 0x6]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x88f0}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x416}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x40}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x44003) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001180)='blkio.bfq.sectors\x00', 0x0, 0x0) 14:57:33 executing program 7: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf8, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x6}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x895}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1c0000}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xf8}, 0x1, 0x0, 0x0, 0x81}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x40004) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000002c0), 0xc, &(0x7f0000001600)={&(0x7f0000000340)={0x129c, r0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe55}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf6bc5ce}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5fed}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NODE_ID={0x67, 0x3, "d8d0a5ade13b7b8ef7608123b191a0474fe7cc74461d2f40b1457e810e63b7a5bb1c0b78433aefbe696de55cab209528bb25d5ab2b3866ae73580d1a4520e583db5f99e13f5fc034e5b72b678c875aa0bb25e18fd664e890ec46eb696abad9a1725cfc"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "b87c265821319a6edb0cf6804395d14f6213a9e962d8df0c15a1"}}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1b2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x74e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x42ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x1094, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "dc791e707112e1a4ab011c27a4aad5e2fbd0d06c2df1ead3f7892c9084eac0d3"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "2ed7c93fc682cfde864790194d4d73fcd16b1e79"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}]}, 0x129c}, 0x1, 0x0, 0x0, 0x48080}, 0x4000000) r1 = socket(0x9, 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x47}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000001b00)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001ac0)={&(0x7f00000017c0)={0x2e4, r0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b1a81913c81d3d76be1811dc6ca2c4ffbae1d4ef4aea"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "55721cfc96695b8779c68eacdba91b3ae81b3b17457a5cbd1560"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "dc62f11a3872fe368c9692b56a6bea8f9c29c5ef3d27bb339e3069cd2e491f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "0ddead16ff624c09af8cfda5d431a9728fbee157675169b6c23687"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "c69c6d0c030922553cc12e121421e5e0efbd9c070740e893becba587"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x124, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc21}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4b2}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001d40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b80)={0x148, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0xc}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x200}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffb}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x997a}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), r1) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x28, r2, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x48800}, 0x20000006) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x24, r2, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x1d}, @val={0x8}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002100), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000021c0)={&(0x7f00000020c0), 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, r3, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x28, r2, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x29}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000002600)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000025c0)={&(0x7f0000002340)={0x248, r0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x118, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x76}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b6a}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xee}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x250}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x39b}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf7a7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff01}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002680), r1) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x14, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c010}, 0x8820) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000028c0)={&(0x7f0000002800)={0xb0, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1e729481}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40408d5}, 0x0) 14:57:33 executing program 6: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x1000, 0x8000, 0x1f, {0xffffffc0, 0x4}, 0x8, 0x6}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000140)={0x0, 0x2, 0x1, 'queue0\x00', 0xa766}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000280)={0xffff8001, 0x3, 0x7, 0x7, 0x20, 0x80000001}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000340)) ioctl$TIOCCBRK(r1, 0x5428) r2 = syz_open_dev$vcsu(&(0x7f0000000380), 0x7, 0x8000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000400)={0x401, 0xfff, 0x0, 'queue1\x00', 0x4}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000500)={0x3a, 0x0, 0x8, 0x400, 0x800}) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000580)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x600000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000600)={0x1, @tick=0x13, 0x80, {0x5}, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000640)={0xff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x60, "a251946eb1cb52"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000087e40)={0x8fe2, [{r5}], 0x4, "06ce2d853d217c"}) [ 63.492166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.493835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.495731] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.497143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.499292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.502394] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.503517] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.504093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.505845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.507141] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.509266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.509288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.510729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.525062] Bluetooth: hci0: HCI_REQ-0x0c1a [ 63.536760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.537706] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.541620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.543680] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.545393] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 63.547265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.548301] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 63.555592] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 63.558578] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 63.560324] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 63.561776] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 63.564949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.566148] Bluetooth: hci6: HCI_REQ-0x0c1a [ 63.569499] Bluetooth: hci2: HCI_REQ-0x0c1a [ 63.569925] Bluetooth: hci1: HCI_REQ-0x0c1a [ 63.593378] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.595893] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.599747] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.602380] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.608452] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.617984] Bluetooth: hci4: HCI_REQ-0x0c1a [ 63.646862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.648746] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.650467] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.663404] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.664514] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 63.667068] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 63.672603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.684267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.685559] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 63.691989] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.693574] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 63.698097] Bluetooth: hci3: HCI_REQ-0x0c1a [ 63.737916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 63.767922] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 63.771330] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 63.776087] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 63.780554] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 63.781588] Bluetooth: hci5: HCI_REQ-0x0c1a [ 63.786403] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 63.787737] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 63.884408] Bluetooth: hci7: HCI_REQ-0x0c1a [ 65.563642] Bluetooth: hci0: command 0x0409 tx timeout [ 65.627506] Bluetooth: hci1: command 0x0409 tx timeout [ 65.627937] Bluetooth: hci2: command 0x0409 tx timeout [ 65.628141] Bluetooth: hci6: command 0x0409 tx timeout [ 65.691344] Bluetooth: hci4: command 0x0409 tx timeout [ 65.756281] Bluetooth: hci3: command 0x0409 tx timeout [ 65.819122] Bluetooth: hci5: command 0x0409 tx timeout [ 65.948434] Bluetooth: hci7: command 0x0409 tx timeout [ 67.612066] Bluetooth: hci0: command 0x041b tx timeout [ 67.675108] Bluetooth: hci6: command 0x041b tx timeout [ 67.676219] Bluetooth: hci2: command 0x041b tx timeout [ 67.676281] Bluetooth: hci1: command 0x041b tx timeout [ 67.740066] Bluetooth: hci4: command 0x041b tx timeout [ 67.804090] Bluetooth: hci3: command 0x041b tx timeout [ 67.867051] Bluetooth: hci5: command 0x041b tx timeout [ 67.996129] Bluetooth: hci7: command 0x041b tx timeout [ 69.660085] Bluetooth: hci0: command 0x040f tx timeout [ 69.723097] Bluetooth: hci1: command 0x040f tx timeout [ 69.724622] Bluetooth: hci2: command 0x040f tx timeout [ 69.725147] Bluetooth: hci6: command 0x040f tx timeout [ 69.788102] Bluetooth: hci4: command 0x040f tx timeout [ 69.851099] Bluetooth: hci3: command 0x040f tx timeout [ 69.916170] Bluetooth: hci5: command 0x040f tx timeout [ 70.043103] Bluetooth: hci7: command 0x040f tx timeout [ 71.707060] Bluetooth: hci0: command 0x0419 tx timeout [ 71.771153] Bluetooth: hci6: command 0x0419 tx timeout [ 71.771567] Bluetooth: hci2: command 0x0419 tx timeout [ 71.771939] Bluetooth: hci1: command 0x0419 tx timeout [ 71.836076] Bluetooth: hci4: command 0x0419 tx timeout [ 71.900118] Bluetooth: hci3: command 0x0419 tx timeout [ 71.963050] Bluetooth: hci5: command 0x0419 tx timeout [ 72.091068] Bluetooth: hci7: command 0x0419 tx timeout [ 116.866427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.867346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.869264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.924512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.925330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.926773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.083370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.083999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.089274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.124311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.124939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.126508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.697585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.698223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.699595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.882448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.883134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.885297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.916397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.916963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.918418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.124881] audit: type=1326 audit(1667573909.198:7): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3873 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35bc196b19 code=0x0 [ 118.151953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.152624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.156062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.167953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.168535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:58:29 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/254) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000100)=""/68) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/168) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000240)=""/196) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000340)=""/185) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000400)=""/28) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440), 0x4) r2 = shmget$private(0x0, 0x400000, 0x200, &(0x7f0000bff000/0x400000)=nil) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x1ff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x2) shmctl$SHM_UNLOCK(r2, 0xc) [ 118.196375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 14:58:29 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/254) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000100)=""/68) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/168) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000240)=""/196) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000340)=""/185) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000400)=""/28) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440), 0x4) r2 = shmget$private(0x0, 0x400000, 0x200, &(0x7f0000bff000/0x400000)=nil) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x1ff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x2) shmctl$SHM_UNLOCK(r2, 0xc) [ 118.302222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.302851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:58:29 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/254) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000100)=""/68) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/168) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000240)=""/196) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000340)=""/185) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000400)=""/28) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440), 0x4) r2 = shmget$private(0x0, 0x400000, 0x200, &(0x7f0000bff000/0x400000)=nil) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x1ff) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x2) shmctl$SHM_UNLOCK(r2, 0xc) [ 118.353712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 14:58:29 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/254) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000100)=""/68) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/168) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000240)=""/196) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000340)=""/185) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000400)=""/28) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440), 0x4) r2 = shmget$private(0x0, 0x400000, 0x200, &(0x7f0000bff000/0x400000)=nil) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x1ff) syz_open_dev$tty20(0xc, 0x4, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) [ 118.486947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.487604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.489536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.502757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.503363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.504813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:58:29 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/254) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000100)=""/68) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/168) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000240)=""/196) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000340)=""/185) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000400)=""/28) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440), 0x4) r2 = shmget$private(0x0, 0x400000, 0x200, &(0x7f0000bff000/0x400000)=nil) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x1ff) shmctl$SHM_UNLOCK(r2, 0xc) 14:58:29 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/254) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000100)=""/68) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/168) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000240)=""/196) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000340)=""/185) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000400)=""/28) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440), 0x4) r2 = shmget$private(0x0, 0x400000, 0x200, &(0x7f0000bff000/0x400000)=nil) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x1ff) shmctl$SHM_UNLOCK(r2, 0xc) 14:58:29 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/254) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000100)=""/68) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/168) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000240)=""/196) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000340)=""/185) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000400)=""/28) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440), 0x4) r2 = shmget$private(0x0, 0x400000, 0x200, &(0x7f0000bff000/0x400000)=nil) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x1ff) shmctl$SHM_UNLOCK(r2, 0xc) 14:58:29 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/254) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000100)=""/68) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/168) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000240)=""/196) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000340)=""/185) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000400)=""/28) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440), 0x4) r2 = shmget$private(0x0, 0x400000, 0x200, &(0x7f0000bff000/0x400000)=nil) syz_open_dev$tty20(0xc, 0x4, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) [ 118.957941] BUG: unable to handle page fault for address: fffffbc7c8e47e06 [ 118.958459] #PF: supervisor read access in kernel mode [ 118.958813] #PF: error_code(0x0000) - not-present page [ 118.959166] PGD 6dfd0067 P4D 6dfd0067 PUD 6de3c067 PMD 6de3b067 PTE 0 [ 118.959624] Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 118.959963] CPU: 1 PID: 3877 Comm: syz-executor.1 Not tainted 6.1.0-rc3-next-20221104 #1 [ 118.964096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 118.964644] RIP: 0010:get_desc+0x128/0x460 [ 118.964943] Code: e2 02 00 00 83 e0 07 38 c2 0f 9e c1 84 d2 0f 95 c0 84 c1 0f 85 cd 02 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d8 48 c1 e8 03 <0f> b6 0c 10 48 8d 43 07 48 89 c6 48 c1 ee 03 0f b6 14 16 48 89 de [ 118.966150] RSP: 0000:ffff888036fdfbf8 EFLAGS: 00010216 [ 118.966515] RAX: 1fffffc7c8e47e06 RBX: fffffe3e4723f030 RCX: 0000000000000001 [ 118.966987] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 118.967470] RBP: ffff888036fdfcb8 R08: 0000000000000006 R09: 000000000000007f [ 118.967945] R10: 0000000000000030 R11: 0000000000000001 R12: 1ffff11006dfbf7f [ 118.968419] R13: dffffc0000000000 R14: 0000000000000000 R15: 000000000000007f [ 118.968896] FS: 00007f35b96eb700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 118.969425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.969837] CR2: fffffbc7c8e47e06 CR3: 000000003557e000 CR4: 0000000000350ee4 [ 118.970310] Call Trace: [ 118.970537] [ 118.970757] ? __pfx_get_desc+0x10/0x10 [ 118.971146] ? __pfx_lock_release+0x10/0x10 [ 118.971577] insn_get_code_seg_params+0xa7/0x1a0 [ 118.972038] ? __pfx_insn_get_code_seg_params+0x10/0x10 [ 118.972538] ? memset+0x20/0x50 [ 118.972874] ? insn_init+0x116/0x190 [ 118.973245] insn_decode_from_regs+0x6e/0x190 [ 118.973685] fixup_umip_exception+0xc7/0x6d0 [ 118.974121] ? __pfx_fixup_umip_exception+0x10/0x10 [ 118.974600] ? do_raw_spin_lock+0x121/0x260 [ 118.975011] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 118.975465] ? xfd_validate_state+0x59/0x180 [ 118.975897] ? cond_local_irq_enable.isra.0+0x12/0x20 [ 118.976383] ? cond_local_irq_enable.isra.0+0x12/0x20 [ 118.976868] exc_general_protection+0x15d/0x210 [ 118.977323] asm_exc_general_protection+0x22/0x30 [ 118.977807] RIP: 0033:0x7ffe875f8942 [ 118.978158] Code: 83 08 00 00 0f 84 b5 00 00 00 4c 63 d7 49 c1 e2 04 4d 01 ca 45 8b 19 41 f6 c3 01 0f 85 8d 00 00 00 41 8b 41 04 83 f8 01 75 6f <0f> 01 f9 66 90 48 c1 e2 20 48 09 c2 48 85 d2 78 63 49 8b 49 08 49 [ 118.979403] RSP: 002b:00007f35b96eb150 EFLAGS: 00010246 [ 118.979751] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000001 [ 118.980219] RDX: 0000000000000002 RSI: 00007f35b96eb1f0 RDI: 0000000000000001 [ 118.980701] RBP: 00007f35b96eb170 R08: 0000000000000000 R09: 00007ffe875f4080 [ 118.981172] R10: 00007ffe875f4090 R11: 0000000000034638 R12: 00007f35b96eb1f0 [ 118.981642] R13: 00007ffe8759e28f R14: 00007f35b96eb300 R15: 0000000000022000 [ 118.982119] [ 118.982279] Modules linked in: [ 118.982502] CR2: fffffbc7c8e47e06 [ 118.982746] ---[ end trace 0000000000000000 ]--- [ 118.983076] RIP: 0010:get_desc+0x128/0x460 [ 118.983371] Code: e2 02 00 00 83 e0 07 38 c2 0f 9e c1 84 d2 0f 95 c0 84 c1 0f 85 cd 02 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d8 48 c1 e8 03 <0f> b6 0c 10 48 8d 43 07 48 89 c6 48 c1 ee 03 0f b6 14 16 48 89 de [ 118.984623] RSP: 0000:ffff888036fdfbf8 EFLAGS: 00010216 [ 118.984998] RAX: 1fffffc7c8e47e06 RBX: fffffe3e4723f030 RCX: 0000000000000001 [ 118.985509] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 118.985998] RBP: ffff888036fdfcb8 R08: 0000000000000006 R09: 000000000000007f [ 118.986491] R10: 0000000000000030 R11: 0000000000000001 R12: 1ffff11006dfbf7f [ 118.986986] R13: dffffc0000000000 R14: 0000000000000000 R15: 000000000000007f [ 118.987488] FS: 00007f35b96eb700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 118.988042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.988450] CR2: fffffbc7c8e47e06 CR3: 000000003557e000 CR4: 0000000000350ee4 [ 119.016088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.016560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.017470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.019459] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 119.089881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.090690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.091617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.497327] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 119.525958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.526643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.527268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.548155] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 119.623908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.624460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.625910] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready VM DIAGNOSIS: 14:58:30 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff8880164a5040 RCX=0000000000000000 RDX=1ffff11002c94afa RSI=ffffffff81175cba RDI=ffff8880164a57d0 RBP=ffff88800fe6fd18 RSP=ffff88800fe6fc90 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffff8880164a5040 R14=0000000000000000 R15=ffff8880164a55a8 RIP=ffffffff81175d53 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555567db400 00000000 00000000 GS =0000 ffff88806d000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe5d7454d000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe5d7454b000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd826c528b0 CR3=00000000157d8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00524f52524500400000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff824509c1 RDI=ffffffff87ba19a0 RBP=ffffffff87ba1960 RSP=ffff888036fdf438 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000036 R11=0000000000000001 R12=0000000000000036 R13=ffffffff87ba1960 R14=0000000000000010 R15=ffffffff824509b0 RIP=ffffffff82450a19 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f35b96eb700 00000000 00000000 GS =0000 ffff88806d100000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe3e47241000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe3e4723f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=fffffbc7c8e47e06 CR3=000000003557e000 CR4=00350ee4 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffff00000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000