syzkaller login: [ 43.725365] sshd (244) used greatest stack depth: 24640 bytes left Warning: Permanently added '[localhost]:49490' (ECDSA) to the list of known hosts. 2022/09/28 23:09:00 fuzzer started 2022/09/28 23:09:01 dialing manager at localhost:35827 [ 46.509353] cgroup: Unknown subsys name 'net' [ 46.614582] cgroup: Unknown subsys name 'rlimit' 2022/09/28 23:09:15 syscalls: 2215 2022/09/28 23:09:15 code coverage: enabled 2022/09/28 23:09:15 comparison tracing: enabled 2022/09/28 23:09:15 extra coverage: enabled 2022/09/28 23:09:15 setuid sandbox: enabled 2022/09/28 23:09:15 namespace sandbox: enabled 2022/09/28 23:09:15 Android sandbox: enabled 2022/09/28 23:09:15 fault injection: enabled 2022/09/28 23:09:15 leak checking: enabled 2022/09/28 23:09:15 net packet injection: enabled 2022/09/28 23:09:15 net device setup: enabled 2022/09/28 23:09:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/28 23:09:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/28 23:09:15 USB emulation: enabled 2022/09/28 23:09:15 hci packet injection: enabled 2022/09/28 23:09:15 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220927) 2022/09/28 23:09:15 802.15.4 emulation: enabled 2022/09/28 23:09:16 fetching corpus: 50, signal 27284/29067 (executing program) 2022/09/28 23:09:16 fetching corpus: 100, signal 40610/43928 (executing program) 2022/09/28 23:09:16 fetching corpus: 150, signal 48913/53680 (executing program) 2022/09/28 23:09:16 fetching corpus: 200, signal 53150/59357 (executing program) 2022/09/28 23:09:16 fetching corpus: 250, signal 55420/63051 (executing program) 2022/09/28 23:09:16 fetching corpus: 300, signal 60484/69407 (executing program) 2022/09/28 23:09:17 fetching corpus: 350, signal 64840/74953 (executing program) 2022/09/28 23:09:17 fetching corpus: 400, signal 67289/78706 (executing program) 2022/09/28 23:09:17 fetching corpus: 450, signal 71428/83879 (executing program) 2022/09/28 23:09:17 fetching corpus: 500, signal 77918/91220 (executing program) 2022/09/28 23:09:17 fetching corpus: 550, signal 82019/96260 (executing program) 2022/09/28 23:09:17 fetching corpus: 600, signal 84794/100069 (executing program) 2022/09/28 23:09:17 fetching corpus: 650, signal 88023/104185 (executing program) 2022/09/28 23:09:18 fetching corpus: 700, signal 89778/106943 (executing program) 2022/09/28 23:09:18 fetching corpus: 750, signal 92989/111007 (executing program) 2022/09/28 23:09:18 fetching corpus: 800, signal 97743/116245 (executing program) 2022/09/28 23:09:18 fetching corpus: 850, signal 100300/119616 (executing program) 2022/09/28 23:09:18 fetching corpus: 900, signal 102584/122700 (executing program) 2022/09/28 23:09:18 fetching corpus: 950, signal 104262/125220 (executing program) 2022/09/28 23:09:19 fetching corpus: 1000, signal 105609/127414 (executing program) 2022/09/28 23:09:19 fetching corpus: 1050, signal 107894/130401 (executing program) 2022/09/28 23:09:19 fetching corpus: 1100, signal 109687/132946 (executing program) 2022/09/28 23:09:19 fetching corpus: 1150, signal 111470/135419 (executing program) 2022/09/28 23:09:19 fetching corpus: 1200, signal 113602/138121 (executing program) 2022/09/28 23:09:19 fetching corpus: 1250, signal 115075/140268 (executing program) 2022/09/28 23:09:19 fetching corpus: 1300, signal 116274/142193 (executing program) 2022/09/28 23:09:20 fetching corpus: 1350, signal 118393/144827 (executing program) 2022/09/28 23:09:20 fetching corpus: 1400, signal 119392/146583 (executing program) 2022/09/28 23:09:20 fetching corpus: 1450, signal 121319/149005 (executing program) 2022/09/28 23:09:20 fetching corpus: 1500, signal 122683/150941 (executing program) 2022/09/28 23:09:20 fetching corpus: 1550, signal 124146/152952 (executing program) 2022/09/28 23:09:20 fetching corpus: 1600, signal 125603/154944 (executing program) 2022/09/28 23:09:20 fetching corpus: 1650, signal 126910/156822 (executing program) 2022/09/28 23:09:21 fetching corpus: 1700, signal 128531/158896 (executing program) 2022/09/28 23:09:21 fetching corpus: 1750, signal 129950/160810 (executing program) 2022/09/28 23:09:21 fetching corpus: 1800, signal 131498/162744 (executing program) 2022/09/28 23:09:21 fetching corpus: 1850, signal 132739/164442 (executing program) 2022/09/28 23:09:21 fetching corpus: 1900, signal 136279/167663 (executing program) 2022/09/28 23:09:21 fetching corpus: 1950, signal 139013/170316 (executing program) 2022/09/28 23:09:22 fetching corpus: 2000, signal 140321/172002 (executing program) 2022/09/28 23:09:22 fetching corpus: 2050, signal 141352/173439 (executing program) 2022/09/28 23:09:22 fetching corpus: 2100, signal 142516/174949 (executing program) 2022/09/28 23:09:22 fetching corpus: 2150, signal 143279/176142 (executing program) 2022/09/28 23:09:22 fetching corpus: 2200, signal 144549/177711 (executing program) 2022/09/28 23:09:22 fetching corpus: 2250, signal 146095/179467 (executing program) 2022/09/28 23:09:22 fetching corpus: 2300, signal 147644/181131 (executing program) 2022/09/28 23:09:22 fetching corpus: 2350, signal 148673/182473 (executing program) 2022/09/28 23:09:23 fetching corpus: 2400, signal 149996/183995 (executing program) 2022/09/28 23:09:23 fetching corpus: 2450, signal 150992/185267 (executing program) 2022/09/28 23:09:23 fetching corpus: 2500, signal 152550/186897 (executing program) 2022/09/28 23:09:23 fetching corpus: 2550, signal 153684/188227 (executing program) 2022/09/28 23:09:23 fetching corpus: 2600, signal 154876/189612 (executing program) 2022/09/28 23:09:23 fetching corpus: 2650, signal 155604/190726 (executing program) 2022/09/28 23:09:23 fetching corpus: 2700, signal 156551/191919 (executing program) 2022/09/28 23:09:24 fetching corpus: 2750, signal 157887/193268 (executing program) 2022/09/28 23:09:24 fetching corpus: 2800, signal 158726/194383 (executing program) 2022/09/28 23:09:24 fetching corpus: 2850, signal 159778/195554 (executing program) 2022/09/28 23:09:24 fetching corpus: 2900, signal 160464/196519 (executing program) 2022/09/28 23:09:24 fetching corpus: 2950, signal 160847/197333 (executing program) 2022/09/28 23:09:24 fetching corpus: 3000, signal 161718/198359 (executing program) 2022/09/28 23:09:24 fetching corpus: 3050, signal 162304/199265 (executing program) 2022/09/28 23:09:25 fetching corpus: 3100, signal 162988/200187 (executing program) 2022/09/28 23:09:25 fetching corpus: 3150, signal 163748/201121 (executing program) 2022/09/28 23:09:25 fetching corpus: 3200, signal 164454/201980 (executing program) 2022/09/28 23:09:25 fetching corpus: 3250, signal 165262/202940 (executing program) 2022/09/28 23:09:25 fetching corpus: 3300, signal 166121/203873 (executing program) 2022/09/28 23:09:25 fetching corpus: 3350, signal 166756/204690 (executing program) 2022/09/28 23:09:25 fetching corpus: 3400, signal 167312/205558 (executing program) 2022/09/28 23:09:26 fetching corpus: 3450, signal 168591/206606 (executing program) 2022/09/28 23:09:26 fetching corpus: 3500, signal 170047/207749 (executing program) 2022/09/28 23:09:26 fetching corpus: 3550, signal 170738/208521 (executing program) 2022/09/28 23:09:26 fetching corpus: 3600, signal 172027/209567 (executing program) 2022/09/28 23:09:26 fetching corpus: 3650, signal 172737/210331 (executing program) 2022/09/28 23:09:26 fetching corpus: 3700, signal 173327/211086 (executing program) 2022/09/28 23:09:27 fetching corpus: 3750, signal 174289/211943 (executing program) 2022/09/28 23:09:27 fetching corpus: 3800, signal 174891/212727 (executing program) 2022/09/28 23:09:27 fetching corpus: 3850, signal 175672/213441 (executing program) 2022/09/28 23:09:27 fetching corpus: 3900, signal 176694/214268 (executing program) 2022/09/28 23:09:27 fetching corpus: 3950, signal 177398/214995 (executing program) 2022/09/28 23:09:27 fetching corpus: 4000, signal 177975/215636 (executing program) 2022/09/28 23:09:27 fetching corpus: 4050, signal 178815/216405 (executing program) 2022/09/28 23:09:28 fetching corpus: 4100, signal 179703/217121 (executing program) 2022/09/28 23:09:28 fetching corpus: 4150, signal 180933/217912 (executing program) 2022/09/28 23:09:28 fetching corpus: 4200, signal 181810/218592 (executing program) 2022/09/28 23:09:28 fetching corpus: 4250, signal 182712/219267 (executing program) 2022/09/28 23:09:28 fetching corpus: 4300, signal 183023/219770 (executing program) 2022/09/28 23:09:28 fetching corpus: 4350, signal 183934/220497 (executing program) 2022/09/28 23:09:28 fetching corpus: 4400, signal 184932/221149 (executing program) 2022/09/28 23:09:29 fetching corpus: 4450, signal 185717/221784 (executing program) 2022/09/28 23:09:29 fetching corpus: 4500, signal 186287/222356 (executing program) 2022/09/28 23:09:29 fetching corpus: 4550, signal 186883/222895 (executing program) 2022/09/28 23:09:29 fetching corpus: 4600, signal 187560/223413 (executing program) 2022/09/28 23:09:29 fetching corpus: 4650, signal 188816/224017 (executing program) 2022/09/28 23:09:29 fetching corpus: 4700, signal 189731/224555 (executing program) 2022/09/28 23:09:30 fetching corpus: 4750, signal 190432/225143 (executing program) 2022/09/28 23:09:30 fetching corpus: 4800, signal 191248/225629 (executing program) 2022/09/28 23:09:30 fetching corpus: 4850, signal 191660/226069 (executing program) 2022/09/28 23:09:30 fetching corpus: 4900, signal 192966/226663 (executing program) 2022/09/28 23:09:30 fetching corpus: 4950, signal 193638/227136 (executing program) 2022/09/28 23:09:30 fetching corpus: 5000, signal 194456/227617 (executing program) 2022/09/28 23:09:31 fetching corpus: 5050, signal 195247/228054 (executing program) 2022/09/28 23:09:31 fetching corpus: 5100, signal 196300/228502 (executing program) 2022/09/28 23:09:31 fetching corpus: 5150, signal 196952/228954 (executing program) 2022/09/28 23:09:31 fetching corpus: 5200, signal 197273/229289 (executing program) 2022/09/28 23:09:31 fetching corpus: 5250, signal 197580/229677 (executing program) 2022/09/28 23:09:31 fetching corpus: 5300, signal 198382/230043 (executing program) 2022/09/28 23:09:32 fetching corpus: 5350, signal 199655/230395 (executing program) 2022/09/28 23:09:32 fetching corpus: 5400, signal 199990/230711 (executing program) 2022/09/28 23:09:32 fetching corpus: 5450, signal 200813/231012 (executing program) 2022/09/28 23:09:32 fetching corpus: 5500, signal 201328/231303 (executing program) 2022/09/28 23:09:32 fetching corpus: 5550, signal 201795/231623 (executing program) 2022/09/28 23:09:32 fetching corpus: 5600, signal 202155/231890 (executing program) 2022/09/28 23:09:33 fetching corpus: 5650, signal 202830/232156 (executing program) 2022/09/28 23:09:33 fetching corpus: 5700, signal 203269/232399 (executing program) 2022/09/28 23:09:33 fetching corpus: 5750, signal 203492/232621 (executing program) 2022/09/28 23:09:33 fetching corpus: 5800, signal 204262/232621 (executing program) 2022/09/28 23:09:33 fetching corpus: 5850, signal 205224/232621 (executing program) 2022/09/28 23:09:33 fetching corpus: 5900, signal 205860/232623 (executing program) 2022/09/28 23:09:33 fetching corpus: 5950, signal 206288/232624 (executing program) 2022/09/28 23:09:34 fetching corpus: 6000, signal 207005/232624 (executing program) 2022/09/28 23:09:34 fetching corpus: 6050, signal 207563/232626 (executing program) 2022/09/28 23:09:34 fetching corpus: 6100, signal 208627/232627 (executing program) 2022/09/28 23:09:34 fetching corpus: 6150, signal 209011/232639 (executing program) 2022/09/28 23:09:34 fetching corpus: 6200, signal 209374/232643 (executing program) 2022/09/28 23:09:35 fetching corpus: 6250, signal 209881/232650 (executing program) 2022/09/28 23:09:35 fetching corpus: 6300, signal 210255/232650 (executing program) 2022/09/28 23:09:35 fetching corpus: 6350, signal 210757/232650 (executing program) 2022/09/28 23:09:35 fetching corpus: 6359, signal 210790/232650 (executing program) 2022/09/28 23:09:35 fetching corpus: 6359, signal 210790/232650 (executing program) 2022/09/28 23:09:37 starting 8 fuzzer processes 23:09:37 executing program 0: sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4063a9e}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40802}, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3000}]}, 0x100}, 0x1, 0x0, 0x0, 0x24008010}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x2f, 0x4, 0x48, 0x1000, 0x3f, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x80, 0x7800, 0xffff0001, 0x480b1ba1}}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x200420c4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x8042, 0x0) connect(r1, &(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x5, @local}, 0x3, 0x2, 0x3, 0x1}}, 0x80) sendmsg$sock(r1, &(0x7f0000000980)={&(0x7f0000000680)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000700)}, {&(0x7f0000000740)="6123c953eba72dd22ad3d2f0a5a7c3d33807f19af40e1e8ec574e1223a77665c491c8e5d1ffa0eca146d43972d8f0fde028764433591aff08091434fd6b48b66fd98ca6f5203b4fbbc91eb48f84a9419e59618a781459b8fb77d4f1ff1ca0341a4f297f2a746dd8bd3562d90d43e056734eaf5556f4a9519a2777601480c", 0x7e}, {&(0x7f00000007c0)="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", 0xfb}], 0x3, &(0x7f0000000900)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x60}, 0xd1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) sendmsg$nl_xfrm(r2, &(0x7f0000000f40)={&(0x7f0000000a00), 0xc, &(0x7f0000000f00)={&(0x7f0000000a40)=@delsa={0x4b4, 0x11, 0x400, 0x70bd25, 0x25dfdbff, {@in=@remote, 0x4d6, 0x2, 0xff}, [@etimer_thresh={0x8, 0xc, 0x146}, @tmpl={0x104, 0x5, [{{@in6=@private1, 0x4d4, 0x33}, 0x2, @in=@broadcast, 0x3502, 0x0, 0x0, 0x50, 0x5, 0x5, 0x2}, {{@in6=@loopback, 0x4d6, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x2, 0x4, 0x8000, 0x4, 0x800}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x4d2, 0x33}, 0xa, @in=@multicast2, 0x3501, 0x1, 0x3, 0x6, 0x2, 0xb530, 0x8}, {{@in6=@mcast2, 0x4d6, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1, 0x3, 0xfd, 0x8001, 0x9, 0x7fff}]}, @address_filter={0x28, 0x1a, {@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0xa, 0x7, 0x81}}, @tmpl={0x184, 0x5, [{{@in=@multicast2, 0x4d6, 0x32}, 0x86ca950f562ebe2c, @in6=@loopback, 0x34ff, 0x3, 0x3, 0x7, 0x8ba, 0x2, 0x2}, {{@in=@remote, 0x4d4, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x9c, 0x800, 0x3, 0x8}, {{@in6=@remote, 0x4d4}, 0x2, @in=@local, 0x3503, 0x1, 0x0, 0x6, 0x9, 0x4, 0xd8c}, {{@in=@multicast2, 0x4d6}, 0x2, @in6=@empty, 0x3507, 0x4, 0x1, 0x1, 0x401, 0xa1, 0x7}, {{@in=@empty, 0x4d2, 0x2b}, 0xa, @in6=@local, 0x0, 0x1, 0x92d05d951999261e, 0x7, 0xff, 0xc5f, 0x5}, {{@in6=@mcast1, 0x4d2, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x3501, 0x1, 0x0, 0x9, 0x3}]}, @proto={0x5, 0x19, 0x33}, @migrate={0x1cc, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, @in=@rand_addr=0x64010102, @in=@loopback, 0x33, 0x4, 0x0, 0x3507, 0x2, 0xa}, {@in6=@local, @in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010100, 0x3c, 0x3, 0x0, 0x3505, 0xa, 0x2}, {@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x2a}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0x33, 0x0, 0x0, 0x3506, 0x2, 0x6}, {@in6=@remote, @in=@private=0xa010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x6c, 0x2, 0x0, 0x3500, 0x2, 0x2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010100, @in=@multicast1, @in6=@empty, 0x32, 0x4, 0x0, 0x3503, 0xa, 0xa}, {@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x44}, @in6=@local, @in=@loopback, 0x32, 0x2, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000fc0), r1) sendmsg$FOU_CMD_GET(r3, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x58, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x58}}, 0x4800) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r6 = syz_open_dev$vcsa(&(0x7f0000001140), 0x1ff, 0x20000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000001180)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000011c0)) r8 = socket(0x23, 0x800, 0x80000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000001440)={'syztnl1\x00', &(0x7f00000013c0)={'ip6tnl0\x00', r0, 0x4, 0x5, 0x8, 0x0, 0x0, @local, @private1, 0x40, 0x20, 0x1, 0x4}}) openat$null(0xffffffffffffff9c, &(0x7f0000001480), 0x80801, 0x0) 23:09:37 executing program 1: ioprio_get$pid(0xd37e3861c1c5ecc8, 0xffffffffffffffff) fork() r0 = fork() r1 = signalfd4(0xffffffffffffffff, &(0x7f00000013c0)={[0xff]}, 0x8, 0x0) connect$netlink(r1, &(0x7f0000001400)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001440)={0x0}, &(0x7f0000001480)=0xc) ptrace$getsig(0x4202, r2, 0x7fffffff, &(0x7f00000014c0)) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000001540)=0x200) ptrace$getsig(0x4202, r0, 0x7fff, &(0x7f0000001580)) ptrace$getsig(0x4202, r2, 0x5, &(0x7f0000001600)) ptrace$getsig(0x4202, r2, 0x4, &(0x7f0000001680)) syz_io_uring_setup(0x7b3c, &(0x7f0000001700)={0x0, 0xd2e1, 0x10, 0x2, 0x217, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001780), &(0x7f00000017c0)) socket$inet6_udp(0xa, 0x2, 0x0) r3 = io_uring_setup(0x2bb2, &(0x7f0000001800)={0x0, 0x1115, 0x0, 0x2, 0x182, 0x0, r1}) ioctl$FICLONE(r1, 0x40049409, r3) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001880), 0x4) syz_io_uring_setup(0x5ff5, &(0x7f00000018c0)={0x0, 0x762a, 0x20, 0x3, 0x38d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001940), &(0x7f0000001980)) r4 = openat(0xffffffffffffff9c, &(0x7f00000019c0)='./file0\x00', 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000001a00)={0x90002018}) socket$inet6(0xa, 0x1, 0x5) 23:09:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$KDENABIO(r0, 0x4b36) fallocate(r0, 0x13, 0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000000200)=""/187, 0xbb}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000300)=""/23, 0x17}], 0x5, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x100) r9 = geteuid() mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x300004, &(0x7f00000004c0)={[{@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x38, 0x37, 0x74, 0x6d, 0x70, 0x30]}}, {@huge_within_size}, {@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x34, 0x35, 0x2d, 0x6b, 0xf, 0x31, 0x31]}}, {@size={'size', 0x3d, [0x38, 0x67, 0x36, 0x34]}}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@dont_measure}, {@uid_gt={'uid>', r7}}, {@dont_appraise}, {@fowner_gt={'fowner>', r9}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsroot}, {@smackfsdef={'smackfsdef', 0x3d, '-]'}}]}) r10 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x4800, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000600)={{r10}, "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"}) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000001600)=0x5) getresuid(&(0x7f0000001640), &(0x7f0000001680), &(0x7f00000016c0)=0x0) stat(&(0x7f0000001700)='./file1\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000017c0)=0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000001800)={{0x2, r11, r1, r12, r8, 0x119, 0xffe1}, 0x6, 0xfff, 0xf48b, 0xfffffffffffffc00, r13, r6, 0xdd83}) r14 = shmget(0x1, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000001880)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) mknodat$null(r15, &(0x7f00000018c0)='./file0\x00', 0x0, 0x103) lchown(&(0x7f0000001900)='./file0\x00', r12, r8) shmctl$IPC_RMID(r14, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000001940)='./file1\x00', &(0x7f0000001980)={0x400000, 0x10, 0x1}, 0x18) rmdir(&(0x7f00000019c0)='./file1/file0\x00') [ 82.882991] audit: type=1400 audit(1664406577.840:6): avc: denied { execmem } for pid=287 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:09:37 executing program 3: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001980)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000001180)=[{&(0x7f0000000080)=""/160, 0xa0}, {&(0x7f0000000140)=""/61, 0x3d}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x3, &(0x7f00000011c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000001280), 0x6e, &(0x7f0000001300), 0x0, &(0x7f0000001340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001440)=""/52, 0x34}, {&(0x7f0000001480)=""/85, 0x55}], 0x2, &(0x7f0000001540)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001580)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f0000001600)=""/169, 0xa9}, {&(0x7f00000016c0)=""/154, 0x9a}, {&(0x7f0000001780)=""/253, 0xfd}, {&(0x7f0000001880)=""/29, 0x1d}, {&(0x7f00000018c0)=""/61, 0x3d}], 0x5}}], 0x4, 0x40002060, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000001a80), 0x2000, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r8, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r0) r10 = openat$sr(0xffffffffffffff9c, &(0x7f0000001b00), 0x103000, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000001b40)="f8e9be4e486d564542669b70124c3a42", 0x10) close(r3) openat$sr(0xffffffffffffff9c, &(0x7f0000001b80), 0x20000, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r7, 0xca289435, &(0x7f0000001bc0)={0x1, 0x400, @start={0x0, 0x1, "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", "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"}, [0x7fb, 0x1, 0x6, 0x800, 0x1f, 0x2, 0xcea, 0x100000001, 0xf602bcc, 0x4, 0x7, 0x7, 0x800000000000000, 0x2, 0xffff, 0x7fffffff, 0xfd, 0x8, 0x80000000, 0x3c5d, 0xe8, 0x100, 0x8, 0x2, 0x8, 0x81, 0x8, 0x8, 0x80000001, 0x7, 0x1f, 0x3c, 0x9, 0x3, 0x1, 0x5, 0x1, 0x3, 0x0, 0x6, 0x73e, 0x80, 0x6, 0x6, 0x5, 0x3, 0x9, 0x8000, 0x0, 0x0, 0x6, 0x8, 0x3, 0xcf, 0x36f, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x8000, 0x7, 0x800, 0x6, 0x5, 0x7, 0x1ff]}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f0000002600)) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) r11 = getuid() syz_mount_image$vfat(&(0x7f0000002640), &(0x7f0000002680)='./file0\x00', 0x10001, 0x9, &(0x7f0000003b40)=[{&(0x7f00000026c0)="59de54bdbe230f1451fb7efc728d57c655b05587c9e912c17646d5bfb9f4a83d276b38d493f1cf4ec8", 0x29, 0x5}, {&(0x7f0000002700)="bd7c0994d58551591f5ed5b518811d065797677b83e44331d9c4bf4783aac6cdb2633a05e723cbbf7a981448aef7f3c0765d834972d4bcf8524530f45d1ad42ebf554096f72f7b63a6e2c20348f9e730", 0x50, 0x9}, {&(0x7f0000002780)="08be23b2277828538d25ed9b3e5cfdb2c0de914b43c8bec9d0e1cf0b562a67c1ecc421490bce35fa3eab830b89ab47a0aee97dc0dc2d194513a82eca16f2f97bdf034da5d870361ba0ce566e3ca712f9a73f2b5d316d73388876ecbefe07effdb9bd464f50657c8d8a9261bb415b5323620e62bdd3ec80d12b5324caa91aba683530e9e4066aa997586c1fa06704d0e2aaefa2d2e1c723fac82a6391a8912c582407118d97f0e829d3e11c3faa5087519cda110ddc1f293d672bc7edc498d6103904290775270582356c5ecf042250065c92b1", 0xd3, 0x9}, {&(0x7f0000002880), 0x0, 0x8}, {&(0x7f00000028c0)="875a9b8e2693ffa68174d17c952d1e1060e94b8c66a8c682af50db6312cc1ce705bebecd35abeb013724049ec4a4db282058f157fa42def90b998554ed87b9ceea1c760b58e847a63905a5e072fab66f95d3d8e96111a205c98aa4b9ad697a7c5aea5e62ef51d7d9fb48ff38f309e928e43242ea2e566178cd58c9ba9e665fd161f7c059e6708ff00b6bee0711c9fb06ab21fac089f868ffab270a037dad8849692797739abb21738dcda147b87edbf50bc24e78bcfe9c933e564ab196918408e795b4e1b3a3ae56e409f2da707a9bc62c3016c2bf555749fa6bc1a64bf3b08fa922a2ebd9beaf24f93e742de7e182a94f671f2259f72edb", 0xf8, 0x12}, {&(0x7f00000029c0)="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", 0x1000, 0xfffffffffffffffb}, {&(0x7f00000039c0)="c34538fa4cd794469cf803219f222174b1ee2c1a7eeb648efc8273375a7831c170bc00d94f55813ee6e76acbcec81aa74da24551610e49e5c3aabe50281a0833c514ad20194bd7ca036ca1b412a6c3f944a0e1b5ecc546fb969cd904c8c9bf65e46b3daaac42405120c589bbb5e9a406daabdca8956a3627aca05441d9024d29d475a6ddb436c278", 0x88, 0xffffffffffff8000}, {&(0x7f0000003a80)="57c0c903e91ccfa6f7780d6c183c660c2316978bf0c6a5984f1b872c8d426578b6bafb5693c76249f38c3f88018e07", 0x2f, 0x8}, {&(0x7f0000003ac0)="3dccebaf4cb166251b12a448fa8aa02dbd15dd3599dccecad646386b6eabd6bd0f0974f12f8c9e17a57aeb7a9d3ebe71396ac467a303d7ce916c49164c8b0b40f77408d4fbc5689479f4c8", 0x4b, 0x4}], 0x40000, &(0x7f0000003c40)={[{@rodir}], [{@euid_eq={'euid', 0x3d, r11}}, {@uid_lt={'uid<', r6}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@hash}, {@subj_user={'subj_user', 0x3d, '/dev/sr0\x00'}}, {@fowner_gt={'fowner>', r6}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r6}}]}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000003d00)={'syz_tun\x00'}) r12 = signalfd(r2, &(0x7f0000003d40)={[0x8]}, 0x8) setsockopt$inet_tcp_int(r12, 0x6, 0x17, &(0x7f0000003d80)=0x9, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000003dc0), 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000003e00)) 23:09:37 executing program 4: sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x808) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x801, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:chkpwd_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x9, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x80}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x11) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3e8, 0x300, 0x70bd2c, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x50000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) r8 = fcntl$dupfd(r3, 0x406, r3) r9 = creat(&(0x7f0000000740)='./file0\x00', 0x182) r10 = openat$incfs(r4, &(0x7f0000000780)='.log\x00', 0x600400, 0x4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f00000007c0)=[r6, r7, r8, r9, r3, r3, r10], 0x7) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), 0xffffffffffffffff) 23:09:37 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x200) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x81}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x6001}, 0x810) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x17, 0x414, 0x20, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x55a}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r1, 0x702, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000800}, 0x84000) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000003c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r2}, 0x14) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000400)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, r2}, 0xc) r3 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl0\x00', r2, 0x29, 0xc0, 0x1, 0x6, 0x0, @private2, @private2, 0x20, 0x7800, 0x3, 0xe6b}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private2, @in6=@ipv4={""/10, ""/2, @multicast2}}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000600)=0xe8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000ac0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000680)={0x3c4, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x3b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc000}]}]}, @ETHTOOL_A_BITSET_BITS={0x178, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000000}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',}:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!&($){\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{:+/.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e8a5098}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&!#![0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'netpci0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa8, 0x4, "ea579631224717fec41ed9761f00c8f49d366a350ef28745a12e2ef51cffd93238cf54d92476463622ebb523ee4fd55d46122686d68b8f4e4db4abd0b48f6289d2ffbaca6afa2233f3a34d05862aa888f18e454875f399e081a6557d07e4948775db4624a51f5099677c73b5f591b77a98a357b935e1eada33d896d2e54572b91f60e2c667e9b80a23d85f8e83d84f2db7d0f5f48610ac9f15b8e32f1deffaaeb3a9a733"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}, @ETHTOOL_A_BITSET_VALUE={0x79, 0x4, "f0103d75a7d183ee758232e762d335ebdb8f3098fe35ec619ffb737528aa188a53a050e0a65cf28d35033901eacc44c5e4f9ca7f1e87cde2fc5646d9b0753a3ae82c6ebb2606ab2b329175b37d35669a807da44e667563b3ba23a9efd25385a9865cdbe7614c63f5cb4a835e94e96a6d46ba3adab3"}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000000) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1040a70b7bc91c1f}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/schedstat\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'syztnl2\x00', r2, 0x2f, 0x67, 0xb4, 0x80000000, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, @rand_addr=' \x01\x00', 0x7800, 0x80, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000d80)={'ip6gre0\x00', &(0x7f0000000d00)={'sit0\x00', r5, 0x29, 0x6, 0x1, 0x4, 0x7a, @local, @local, 0x10, 0x8, 0xfffffc01, 0xffffffff}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000dc0)=""/51, 0x33}, {&(0x7f0000000e00)=""/59, 0x3b}, {&(0x7f0000000e40)=""/23, 0x17}, {&(0x7f0000000e80)=""/223, 0xdf}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/200, 0xc8}, {&(0x7f0000002080)=""/136, 0x88}], 0x7, &(0x7f00000021c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x10020) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x4c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000}, 0x80) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002540)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x24}, @hci={0x1f, 0x4}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)='netpci0\x00', 0x1, 0x7ff, 0x81}) 23:09:37 executing program 7: sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x80, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4861f8a212d804b97abf7799aa751b5f"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xd2}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x6, 0x0, 0x21, @local, @empty, 0x700, 0x1, 0x80000000, 0xb2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x29, 0x1, 0xc0, 0x6, 0x20, @rand_addr=' \x01\x00', @local, 0x7, 0x20, 0x800, 0x7}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @multicast1, @multicast2}, &(0x7f0000000600)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x2f, 0x3f, 0x7f, 0x200, 0x10, @loopback, @private0, 0x10, 0x8000, 0x64d, 0x6}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000740)={0x404, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xaa}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x404}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000c00), 0x80002, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'syztnl2\x00', r4, 0x2f, 0x3f, 0x1, 0x7fff, 0x48, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x80, 0x8, 0x200}}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x40, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000081) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x50, 0x3}, {0x4, 0x6}, {0x9, 0x7}, {0x6}, {0x8, 0x1}, {0x5a, 0x2}, {0x10, 0x1}, {0x5}, {0x80, 0x3}, {0x0, 0x6}, {0x0, 0x1}, {0x4, 0x5}, {0x5c, 0x3}, {0x1}], "e9838f0ab8e0b4b1"}}]}, 0x3c}}, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r0) syz_io_uring_setup(0x4efc, &(0x7f0000000f40)={0x0, 0x6f8b, 0x2, 0x3, 0x110}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000fc0)=0x0, &(0x7f0000001000)) r7 = socket(0xa, 0x800, 0x97d) r8 = socket$inet6(0xa, 0x800, 0x8) syz_io_uring_submit(r6, 0x0, &(0x7f0000001040)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x7fffffff, 0x3, 0x1, {0x0, 0x0, r8}}, 0x5) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0xcbccbefdc836d45b) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)={'filter\x00', 0x0, [0x40, 0x7fff, 0x0, 0x40, 0x3]}, &(0x7f0000001240)=0x54) 23:09:37 executing program 6: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/162, &(0x7f00000000c0)=0xa2) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) close(r1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000180)}, 0x0) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/251, 0xfb}, {&(0x7f0000000300)=""/181, 0xb5}, {&(0x7f00000003c0)=""/185, 0xb9}], 0x3, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x40000000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) mknodat$null(r7, &(0x7f0000000640)='./file0\x00', 0x40, 0x103) lgetxattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@random={'user.', 'ethtool\x00'}, &(0x7f0000000700)=""/201, 0xc9) socket$nl_audit(0x10, 0x3, 0x9) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000c00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)={0x210, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x10}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xbc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb8, 0x2, "bb6b12d939c5d2d121bd19571bb40175506a046285a61f364aba74829857a533004cab7b66e4f51a242b5cd7e1250b81498b2f2fff445857a353e03347e5c217ebf4257f2f10ec120adb8249ae2426b43b4375aa2bcf92ffd88f45159830bb043c5f06719c03384e99138e8df841cbd237d8f79ef163aa728583207c3ba63d41d16ccd90cb5117091839e3aaaaf465f82cc6211c97d9c6370be742f5fa5e7c80d23de414c3a94af83d005e1afe42070d66114182"}]}, @NL80211_ATTR_IE={0x5d, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @gcr_ga={0xbd, 0x6}, @dsss={0x3, 0x1, 0x74}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x40, 0x6}}, @link_id={0x65, 0x12, {@from_mac, @broadcast}}, @perr={0x84, 0x2f, {0x8, 0x3, [@not_ext={{}, @device_a, 0x1ff, "", 0x38}, @not_ext={{}, @device_a, 0x66, "", 0xe}, @ext={{}, @device_b, 0xad5, @broadcast, 0x3e}]}}]}, @NL80211_ATTR_IE={0xd3, 0x2a, [@chsw_timing={0x68, 0x4, {0x775, 0x9579}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x17, 0xae, 0x80}}, @fast_bss_trans={0x37, 0x6f, {0x7, 0x2, "0c41954afdda07d868ba73b1c457f041", "dc2191a0168fb9460e37de9d42fa1e90645b3f0f285d2458f412b27a2eea33a6", "1cf9224851a2fffb5c27a995f52e8fc6afdf4f41d73eb9e57ae7de1a0b9ab5a9", [{0x1, 0x4, "64390fb5"}, {0x3, 0x15, "c4425d6fd66eb6955df7592be8b6f66911319cfa62"}]}}, @rann={0x7e, 0x15, {{0x0, 0x33}, 0x40, 0x9, @device_a, 0x6, 0x4, 0x1ff}}, @ssid={0x0, 0x4, @random="888f1bdc"}, @chsw_timing={0x68, 0x4, {0x4, 0x7}}, @ht={0x2d, 0x1a, {0x1000, 0x1, 0x2, 0x0, {0x40, 0x0, 0x0, 0x301, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x8, 0x4}}, @mesh_chsw={0x76, 0x6, {0xff, 0x40, 0x19, 0xfff}}, @gcr_ga={0xbd, 0x6}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x20008800}, 0x800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x2000c800) dup3(r0, r5, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000001340)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f0000001300)={&(0x7f0000000f80)={0x354, r3, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x4c, 0x3, "8d340c08b0eda352e4c6ee751c2189c98daf118302cbc8d77cfdb861b291c37aeafb48d318ea2a64e2f64501f8f4ad8c360563d078d3222621b4b8302427a0e4fa1eb72332707e63"}, @ETHTOOL_A_WOL_MODES={0x1ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':O\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'user.'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'user.'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xba38}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '))\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xe2$@,-^\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x73, 0x4, "982524e9c690612cee6f9471bd3c8fc9cf0bb266da4da1d74e925e294116823ed28a853af8061eef5a5eaf553fe2cb306993fcc8bea8811a2f4f9440d380f2dee7d5ced7a5f75061c66f4973311f4693d96f50666944f15838535e1b70e4230769cdd9759b41b1ad5a4ca23680549a"}]}, @ETHTOOL_A_WOL_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x4c, 0x3, "27519b2104fa7bc5fd1df982d798c2fde3131417c46c3ef8650489d068294e631f934f8325a2291749be22d2f23ee35b98f41ef540f581ec7abb5dda322baf65d64d542f017f5421"}]}, 0x354}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) [ 84.177399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.179385] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.180498] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.183474] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.185539] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.186708] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.187979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.189624] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.191693] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.193027] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.194978] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.198798] Bluetooth: hci0: HCI_REQ-0x0c1a [ 84.201319] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.206968] Bluetooth: hci1: HCI_REQ-0x0c1a [ 84.236694] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.239783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.241806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.250650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.252738] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.254633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.259518] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.260852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.265346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.270386] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.275633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.276850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.278893] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.281889] Bluetooth: hci3: HCI_REQ-0x0c1a [ 84.283219] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.292528] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.294674] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.295672] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.304962] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.309412] Bluetooth: hci4: HCI_REQ-0x0c1a [ 84.313754] Bluetooth: hci2: HCI_REQ-0x0c1a [ 84.366390] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.367679] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.378509] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.379560] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.390932] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.394671] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.424291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.424996] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.431311] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.431992] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.437711] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.438683] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.454697] Bluetooth: hci5: HCI_REQ-0x0c1a [ 84.459163] Bluetooth: hci6: HCI_REQ-0x0c1a [ 86.269686] Bluetooth: hci1: command 0x0409 tx timeout [ 86.269707] Bluetooth: hci0: command 0x0409 tx timeout [ 86.333261] Bluetooth: hci2: command 0x0409 tx timeout [ 86.334035] Bluetooth: hci4: command 0x0409 tx timeout [ 86.335093] Bluetooth: hci3: command 0x0409 tx timeout [ 86.335275] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 86.526352] Bluetooth: hci6: command 0x0409 tx timeout [ 86.526552] Bluetooth: hci5: command 0x0409 tx timeout [ 88.317194] Bluetooth: hci1: command 0x041b tx timeout [ 88.317738] Bluetooth: hci0: command 0x041b tx timeout [ 88.381202] Bluetooth: hci3: command 0x041b tx timeout [ 88.381755] Bluetooth: hci4: command 0x041b tx timeout [ 88.382274] Bluetooth: hci2: command 0x041b tx timeout [ 88.573158] Bluetooth: hci5: command 0x041b tx timeout [ 88.574229] Bluetooth: hci6: command 0x041b tx timeout [ 89.795220] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.797815] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.798899] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.873470] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.901951] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.903358] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.939243] Bluetooth: hci7: HCI_REQ-0x0c1a [ 90.365240] Bluetooth: hci0: command 0x040f tx timeout [ 90.365807] Bluetooth: hci1: command 0x040f tx timeout [ 90.429191] Bluetooth: hci2: command 0x040f tx timeout [ 90.429744] Bluetooth: hci4: command 0x040f tx timeout [ 90.430260] Bluetooth: hci3: command 0x040f tx timeout [ 90.621149] Bluetooth: hci6: command 0x040f tx timeout [ 90.621716] Bluetooth: hci5: command 0x040f tx timeout [ 91.965871] Bluetooth: hci7: command 0x0409 tx timeout [ 92.413200] Bluetooth: hci1: command 0x0419 tx timeout [ 92.413767] Bluetooth: hci0: command 0x0419 tx timeout [ 92.477278] Bluetooth: hci3: command 0x0419 tx timeout [ 92.477832] Bluetooth: hci4: command 0x0419 tx timeout [ 92.478387] Bluetooth: hci2: command 0x0419 tx timeout [ 92.669212] Bluetooth: hci5: command 0x0419 tx timeout [ 92.669779] Bluetooth: hci6: command 0x0419 tx timeout [ 94.013235] Bluetooth: hci7: command 0x041b tx timeout [ 96.061275] Bluetooth: hci7: command 0x040f tx timeout [ 98.109183] Bluetooth: hci7: command 0x0419 tx timeout [ 144.142096] syz-executor.6 (301) used greatest stack depth: 24536 bytes left [ 146.841589] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.845150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.848656] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.849177] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.854701] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.861305] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.867360] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.869294] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.889395] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.889895] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.905837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.908418] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.908993] Bluetooth: hci4: HCI_REQ-0x0c1a [ 146.910767] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.922996] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.924162] Bluetooth: hci6: HCI_REQ-0x0c1a [ 146.927695] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.929569] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.936165] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.939641] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.941532] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.949191] Bluetooth: hci5: HCI_REQ-0x0c1a [ 146.976857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.983927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.998479] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.005445] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.023515] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.029162] Bluetooth: hci3: HCI_REQ-0x0c1a [ 148.413183] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 148.797384] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 148.797541] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 148.925151] Bluetooth: hci4: command 0x0409 tx timeout [ 148.989223] Bluetooth: hci5: command 0x0409 tx timeout [ 148.989344] Bluetooth: hci6: command 0x0409 tx timeout [ 149.053189] Bluetooth: hci3: command 0x0409 tx timeout [ 150.974119] Bluetooth: hci4: command 0x041b tx timeout [ 151.037159] Bluetooth: hci6: command 0x041b tx timeout [ 151.037179] Bluetooth: hci5: command 0x041b tx timeout [ 151.101803] Bluetooth: hci3: command 0x041b tx timeout [ 151.407706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.409032] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.411918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.422902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.437322] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.441575] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.461157] Bluetooth: hci0: HCI_REQ-0x0c1a [ 151.748141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.762847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.766653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.770785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.773603] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.789747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.797427] Bluetooth: hci1: HCI_REQ-0x0c1a [ 152.019991] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.022777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.024552] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.028485] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.030752] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.036485] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.060183] Bluetooth: hci2: HCI_REQ-0x0c1a [ 152.206329] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.207707] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.209443] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.212357] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.214866] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.216685] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.229152] Bluetooth: hci7: HCI_REQ-0x0c1a [ 153.021158] Bluetooth: hci4: command 0x040f tx timeout [ 153.085236] Bluetooth: hci5: command 0x040f tx timeout [ 153.085259] Bluetooth: hci6: command 0x040f tx timeout [ 153.149221] Bluetooth: hci3: command 0x040f tx timeout [ 153.469748] Bluetooth: hci0: command 0x0409 tx timeout [ 153.853179] Bluetooth: hci1: command 0x0409 tx timeout [ 154.109254] Bluetooth: hci2: command 0x0409 tx timeout [ 154.301224] Bluetooth: hci7: command 0x0409 tx timeout [ 155.070130] Bluetooth: hci4: command 0x0419 tx timeout [ 155.134066] Bluetooth: hci5: command 0x0419 tx timeout [ 155.134629] Bluetooth: hci6: command 0x0419 tx timeout [ 155.197830] Bluetooth: hci3: command 0x0419 tx timeout [ 155.517179] Bluetooth: hci0: command 0x041b tx timeout [ 155.901207] Bluetooth: hci1: command 0x041b tx timeout [ 156.157137] Bluetooth: hci2: command 0x041b tx timeout [ 156.349133] Bluetooth: hci7: command 0x041b tx timeout [ 157.565118] Bluetooth: hci0: command 0x040f tx timeout [ 157.949196] Bluetooth: hci1: command 0x040f tx timeout [ 158.205140] Bluetooth: hci2: command 0x040f tx timeout [ 158.397118] Bluetooth: hci7: command 0x040f tx timeout [ 159.613139] Bluetooth: hci0: command 0x0419 tx timeout [ 159.997214] Bluetooth: hci1: command 0x0419 tx timeout [ 160.253182] Bluetooth: hci2: command 0x0419 tx timeout [ 160.445170] Bluetooth: hci7: command 0x0419 tx timeout [ 208.782802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.785637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.786617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.788926] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.790736] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.792445] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.809144] Bluetooth: hci3: HCI_REQ-0x0c1a [ 209.429269] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.433255] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.437020] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.439719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.441533] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.444407] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.453469] Bluetooth: hci4: HCI_REQ-0x0c1a [ 209.477633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.481370] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.484268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.491226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.496282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.497690] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.507143] Bluetooth: hci5: HCI_REQ-0x0c1a [ 209.587823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.590582] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.594217] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.604259] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.610250] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.612011] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.632240] Bluetooth: hci6: HCI_REQ-0x0c1a [ 210.877130] Bluetooth: hci3: command 0x0409 tx timeout [ 211.517161] Bluetooth: hci4: command 0x0409 tx timeout [ 211.581154] Bluetooth: hci5: command 0x0409 tx timeout [ 211.709122] Bluetooth: hci6: command 0x0409 tx timeout [ 212.925143] Bluetooth: hci3: command 0x041b tx timeout [ 213.565102] Bluetooth: hci4: command 0x041b tx timeout [ 213.629132] Bluetooth: hci5: command 0x041b tx timeout [ 213.757129] Bluetooth: hci6: command 0x041b tx timeout [ 213.763457] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.765004] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.776243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.786227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.796779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.800799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.817126] Bluetooth: hci2: HCI_REQ-0x0c1a [ 213.897303] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.907274] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.910181] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.921486] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.931354] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.932746] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.943550] Bluetooth: hci7: HCI_REQ-0x0c1a [ 214.973167] Bluetooth: hci3: command 0x040f tx timeout [ 215.357139] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 215.613123] Bluetooth: hci4: command 0x040f tx timeout [ 215.677122] Bluetooth: hci5: command 0x040f tx timeout [ 215.677146] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 215.805110] Bluetooth: hci6: command 0x040f tx timeout [ 215.869150] Bluetooth: hci2: command 0x0409 tx timeout [ 215.997155] Bluetooth: hci7: command 0x0409 tx timeout [ 217.021168] Bluetooth: hci3: command 0x0419 tx timeout [ 217.661160] Bluetooth: hci4: command 0x0419 tx timeout [ 217.725122] Bluetooth: hci5: command 0x0419 tx timeout [ 217.853106] Bluetooth: hci6: command 0x0419 tx timeout [ 217.917159] Bluetooth: hci2: command 0x041b tx timeout [ 218.045096] Bluetooth: hci7: command 0x041b tx timeout [ 219.965123] Bluetooth: hci2: command 0x040f tx timeout [ 220.093108] Bluetooth: hci7: command 0x040f tx timeout [ 220.285317] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 220.541156] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 222.013190] Bluetooth: hci2: command 0x0419 tx timeout [ 222.142124] Bluetooth: hci7: command 0x0419 tx timeout [ 223.081838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.083324] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.085178] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.088226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.090229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.092195] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.096718] Bluetooth: hci0: HCI_REQ-0x0c1a [ 225.149117] Bluetooth: hci0: command 0x0409 tx timeout [ 225.469159] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 227.197109] Bluetooth: hci0: command 0x041b tx timeout [ 228.295568] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 228.303129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 228.304516] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 228.310600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 228.315060] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 228.325890] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 228.360129] Bluetooth: hci1: HCI_REQ-0x0c1a [ 229.245139] Bluetooth: hci0: command 0x040f tx timeout [ 230.397119] Bluetooth: hci1: command 0x0409 tx timeout [ 231.293149] Bluetooth: hci0: command 0x0419 tx timeout [ 232.445148] Bluetooth: hci1: command 0x041b tx timeout [ 234.493116] Bluetooth: hci1: command 0x040f tx timeout [ 236.541104] Bluetooth: hci1: command 0x0419 tx timeout 23:12:32 executing program 2: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000), 0x81, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="280400091c93f1388e724775d693297f030881b1634062270a36a374022bd571e3a3d504f79dd6e44c235d3c7717114760e8f53f241bf19626456fa7f4077638806afe90f7d15fdb45285b8b75c6c48262d0417ffc85b799fcc388a41266d0adae9b799b5f6d4f185a789221a6401658320b6bf7157db3c8e3d1e617d86f12602244a2df6615aefaacd31b863d943f6e7dffb4b02e", @ANYRES16=r1, @ANYBLOB="b53700000000000000003200000008001000", @ANYRES32=0x0, @ANYBLOB="2f0099000000000000000000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x87d27e71721737b5, 0x0, 0x0, {{0x32}, {@void, @val={0x8, 0x10}, @val={0x2f}}}}, 0x28}}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r5, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x35}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7ff}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004890}, 0x8000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r6, 0x87d27e71721737b5, 0x0, 0x0, {{0x32}, {@void, @val={0x8, 0x10}, @val={0x2f}}}}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r8, 0x87d27e71721737b5, 0x0, 0x0, {{0x32}, {@void, @val={0x8, 0x10}, @val={0x2f}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1410}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r8, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x64}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x87d27e71721737b5, 0x0, 0x0, {{0x32}, {@void, @val={0x8, 0x10}, @val={0x2f}}}}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000000)="b5aedd90580b837f8bfeeeaabf9406655d504e7b1a1d2dd8999beae114a9b9f0b3a2b5c4c0c509e2f36988ead05bd7279f5cdff01e94658a8844292ca48e1f5dd0afa1af42630525c2fba42a1f7b0c7d2b9d86a085965ad3b9105cb9ba149d9629147fa7e376171624f913", 0x6b, 0xff}, {&(0x7f0000000080)="417c6e5f6ebd5f7963702c5591b73e6e3a75087e7390ceb18183365fe2aad7705a33115efc3cda2d5ef4f2792e3635092cd3357d2e7739f97ba243aaccc722", 0x3f, 0x200}], 0x460050, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESDEC=r1, @ANYRESDEC=r3]) [ 257.514862] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 257.519336] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 257.571788] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 257.575064] loop2: detected capacity change from 0 to 2 [ 257.577141] ======================================================= [ 257.577141] WARNING: The mand mount option has been deprecated and [ 257.577141] and is ignored by this kernel. Remove the mand [ 257.577141] option from the mount to silence this warning. [ 257.577141] ======================================================= [ 257.775231] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 257.777352] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 257.828955] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 23:12:32 executing program 2: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000), 0x81, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="280400091c93f1388e724775d693297f030881b1634062270a36a374022bd571e3a3d504f79dd6e44c235d3c7717114760e8f53f241bf19626456fa7f4077638806afe90f7d15fdb45285b8b75c6c48262d0417ffc85b799fcc388a41266d0adae9b799b5f6d4f185a789221a6401658320b6bf7157db3c8e3d1e617d86f12602244a2df6615aefaacd31b863d943f6e7dffb4b02e", @ANYRES16=r1, @ANYBLOB="b53700000000000000003200000008001000", @ANYRES32=0x0, @ANYBLOB="2f0099000000000000000000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x87d27e71721737b5, 0x0, 0x0, {{0x32}, {@void, @val={0x8, 0x10}, @val={0x2f}}}}, 0x28}}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r5, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x35}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7ff}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004890}, 0x8000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r6, 0x87d27e71721737b5, 0x0, 0x0, {{0x32}, {@void, @val={0x8, 0x10}, @val={0x2f}}}}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r8, 0x87d27e71721737b5, 0x0, 0x0, {{0x32}, {@void, @val={0x8, 0x10}, @val={0x2f}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1410}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r8, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x64}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x87d27e71721737b5, 0x0, 0x0, {{0x32}, {@void, @val={0x8, 0x10}, @val={0x2f}}}}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000000)="b5aedd90580b837f8bfeeeaabf9406655d504e7b1a1d2dd8999beae114a9b9f0b3a2b5c4c0c509e2f36988ead05bd7279f5cdff01e94658a8844292ca48e1f5dd0afa1af42630525c2fba42a1f7b0c7d2b9d86a085965ad3b9105cb9ba149d9629147fa7e376171624f913", 0x6b, 0xff}, {&(0x7f0000000080)="417c6e5f6ebd5f7963702c5591b73e6e3a75087e7390ceb18183365fe2aad7705a33115efc3cda2d5ef4f2792e3635092cd3357d2e7739f97ba243aaccc722", 0x3f, 0x200}], 0x460050, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESDEC=r1, @ANYRESDEC=r3]) [ 257.969762] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 257.983319] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 258.035865] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 258.037613] loop2: detected capacity change from 0 to 2 [ 258.271217] loop3: detected capacity change from 0 to 16383 23:12:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) eventfd2(0x5e318343, 0x1) mmap$perf(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40010, r1, 0xa0a7) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x5, 0xf2, 0xbd, 0x0, 0x0, 0x3f, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5f66, 0x6, @perf_bp={&(0x7f0000000000), 0x6}, 0x4c2c4, 0x6, 0x1, 0x8, 0x7f, 0x6, 0x0, 0x0, 0xbc, 0x0, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000240)={0x0, 0x80, 0x8a, 0x1, 0x95, 0x1, 0x0, 0x1, 0x2000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x5, 0x7}, 0x80, 0xd4d7, 0x1, 0x9, 0x9, 0x5000000, 0x1, 0x0, 0x20, 0x0, 0x5}) get_mempolicy(&(0x7f0000000140), 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x2) [ 258.328511] loop3: detected capacity change from 0 to 16383 [ 258.363648] audit: type=1400 audit(1664406753.321:7): avc: denied { open } for pid=9500 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 258.365380] audit: type=1400 audit(1664406753.321:8): avc: denied { kernel } for pid=9500 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 258.382931] ------------[ cut here ]------------ [ 258.382957] [ 258.382961] ====================================================== [ 258.382964] WARNING: possible circular locking dependency detected [ 258.382969] 6.0.0-rc7-next-20220927 #1 Not tainted [ 258.382977] ------------------------------------------------------ [ 258.382980] syz-executor.2/9501 is trying to acquire lock: [ 258.382988] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 258.383032] [ 258.383032] but task is already holding lock: [ 258.383037] ffff88800d1c6420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 258.383066] [ 258.383066] which lock already depends on the new lock. [ 258.383066] [ 258.383069] [ 258.383069] the existing dependency chain (in reverse order) is: [ 258.383073] [ 258.383073] -> #3 (&ctx->lock){....}-{2:2}: [ 258.383087] _raw_spin_lock+0x2a/0x40 [ 258.383100] __perf_event_task_sched_out+0x53b/0x18d0 [ 258.383113] __schedule+0xedd/0x2470 [ 258.383129] schedule+0xda/0x1b0 [ 258.383144] exit_to_user_mode_prepare+0x114/0x1a0 [ 258.383156] syscall_exit_to_user_mode+0x19/0x40 [ 258.383171] do_syscall_64+0x48/0x90 [ 258.383181] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 258.383196] [ 258.383196] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 258.383209] _raw_spin_lock_nested+0x30/0x40 [ 258.383222] raw_spin_rq_lock_nested+0x1e/0x30 [ 258.383235] task_fork_fair+0x63/0x4d0 [ 258.383252] sched_cgroup_fork+0x3d0/0x540 [ 258.383266] copy_process+0x4183/0x6e20 [ 258.383277] kernel_clone+0xe7/0x890 [ 258.383286] user_mode_thread+0xad/0xf0 [ 258.383297] rest_init+0x24/0x250 [ 258.383310] arch_call_rest_init+0xf/0x14 [ 258.383325] start_kernel+0x4c6/0x4eb [ 258.383337] secondary_startup_64_no_verify+0xe0/0xeb [ 258.383351] [ 258.383351] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 258.383365] _raw_spin_lock_irqsave+0x39/0x60 [ 258.383377] try_to_wake_up+0xab/0x1930 [ 258.383390] up+0x75/0xb0 [ 258.383406] __up_console_sem+0x6e/0x80 [ 258.383422] console_unlock+0x46a/0x590 [ 258.383437] vprintk_emit+0x1bd/0x560 [ 258.383453] vprintk+0x84/0xa0 [ 258.383469] _printk+0xba/0xf1 [ 258.383482] kauditd_hold_skb.cold+0x3f/0x4e [ 258.383492] kauditd_send_queue+0x233/0x290 [ 258.383509] kauditd_thread+0x5da/0x9a0 [ 258.383522] kthread+0x2ed/0x3a0 [ 258.383537] ret_from_fork+0x22/0x30 [ 258.383549] [ 258.383549] -> #0 ((console_sem).lock){....}-{2:2}: [ 258.383562] __lock_acquire+0x2a02/0x5e70 [ 258.383580] lock_acquire+0x1a2/0x530 [ 258.383595] _raw_spin_lock_irqsave+0x39/0x60 [ 258.383607] down_trylock+0xe/0x70 [ 258.383624] __down_trylock_console_sem+0x3b/0xd0 [ 258.383639] vprintk_emit+0x16b/0x560 [ 258.383655] vprintk+0x84/0xa0 [ 258.383671] _printk+0xba/0xf1 [ 258.383683] report_bug.cold+0x72/0xab [ 258.383693] handle_bug+0x3c/0x70 [ 258.383703] exc_invalid_op+0x14/0x50 [ 258.383713] asm_exc_invalid_op+0x16/0x20 [ 258.383726] group_sched_out.part.0+0x2c7/0x460 [ 258.383740] ctx_sched_out+0x8f1/0xc10 [ 258.383750] __perf_event_task_sched_out+0x6d0/0x18d0 [ 258.383763] __schedule+0xedd/0x2470 [ 258.383778] schedule+0xda/0x1b0 [ 258.383792] exit_to_user_mode_prepare+0x114/0x1a0 [ 258.383803] syscall_exit_to_user_mode+0x19/0x40 [ 258.383817] do_syscall_64+0x48/0x90 [ 258.383827] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 258.383841] [ 258.383841] other info that might help us debug this: [ 258.383841] [ 258.383844] Chain exists of: [ 258.383844] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 258.383844] [ 258.383859] Possible unsafe locking scenario: [ 258.383859] [ 258.383862] CPU0 CPU1 [ 258.383864] ---- ---- [ 258.383866] lock(&ctx->lock); [ 258.383872] lock(&rq->__lock); [ 258.383879] lock(&ctx->lock); [ 258.383885] lock((console_sem).lock); [ 258.383891] [ 258.383891] *** DEADLOCK *** [ 258.383891] [ 258.383893] 2 locks held by syz-executor.2/9501: [ 258.383900] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 258.383930] #1: ffff88800d1c6420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 258.383958] [ 258.383958] stack backtrace: [ 258.383961] CPU: 0 PID: 9501 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220927 #1 [ 258.383974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 258.383982] Call Trace: [ 258.383986] [ 258.383991] dump_stack_lvl+0x8b/0xb3 [ 258.384003] check_noncircular+0x263/0x2e0 [ 258.384022] ? format_decode+0x26c/0xb50 [ 258.384042] ? print_circular_bug+0x450/0x450 [ 258.384059] ? enable_ptr_key_workfn+0x20/0x20 [ 258.384077] ? format_decode+0x26c/0xb50 [ 258.384096] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 258.384114] __lock_acquire+0x2a02/0x5e70 [ 258.384136] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 258.384158] lock_acquire+0x1a2/0x530 [ 258.384175] ? down_trylock+0xe/0x70 [ 258.384194] ? lock_release+0x750/0x750 [ 258.384214] ? vprintk+0x84/0xa0 [ 258.384232] _raw_spin_lock_irqsave+0x39/0x60 [ 258.384244] ? down_trylock+0xe/0x70 [ 258.384262] down_trylock+0xe/0x70 [ 258.384279] ? vprintk+0x84/0xa0 [ 258.384296] __down_trylock_console_sem+0x3b/0xd0 [ 258.384313] vprintk_emit+0x16b/0x560 [ 258.384332] vprintk+0x84/0xa0 [ 258.384349] _printk+0xba/0xf1 [ 258.384362] ? record_print_text.cold+0x16/0x16 [ 258.384379] ? report_bug.cold+0x66/0xab [ 258.384391] ? group_sched_out.part.0+0x2c7/0x460 [ 258.384403] report_bug.cold+0x72/0xab [ 258.384415] handle_bug+0x3c/0x70 [ 258.384426] exc_invalid_op+0x14/0x50 [ 258.384438] asm_exc_invalid_op+0x16/0x20 [ 258.384452] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 258.384466] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 258.384478] RSP: 0018:ffff8880411c7c48 EFLAGS: 00010006 [ 258.384487] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 258.384494] RDX: ffff88801b8a8000 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 258.384503] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 258.384510] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800d1c6400 [ 258.384518] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 258.384529] ? group_sched_out.part.0+0x2c7/0x460 [ 258.384543] ? group_sched_out.part.0+0x2c7/0x460 [ 258.384556] ctx_sched_out+0x8f1/0xc10 [ 258.384569] __perf_event_task_sched_out+0x6d0/0x18d0 [ 258.384585] ? lock_is_held_type+0xd7/0x130 [ 258.384600] ? __perf_cgroup_move+0x160/0x160 [ 258.384613] ? set_next_entity+0x304/0x550 [ 258.384630] ? update_curr+0x267/0x740 [ 258.384648] ? lock_is_held_type+0xd7/0x130 [ 258.384664] __schedule+0xedd/0x2470 [ 258.384683] ? io_schedule_timeout+0x150/0x150 [ 258.384701] ? rcu_read_lock_sched_held+0x3e/0x80 [ 258.384721] schedule+0xda/0x1b0 [ 258.384738] exit_to_user_mode_prepare+0x114/0x1a0 [ 258.384750] syscall_exit_to_user_mode+0x19/0x40 [ 258.384765] do_syscall_64+0x48/0x90 [ 258.384777] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 258.384791] RIP: 0033:0x7f18f9019b19 [ 258.384799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 258.384811] RSP: 002b:00007f18f658f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 258.384821] RAX: 0000000000000001 RBX: 00007f18f912cf68 RCX: 00007f18f9019b19 [ 258.384842] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f18f912cf6c [ 258.384850] RBP: 00007f18f912cf60 R08: 000000000000000e R09: 0000000000000000 [ 258.384857] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f18f912cf6c [ 258.384864] R13: 00007ffd854b0bcf R14: 00007f18f658f300 R15: 0000000000022000 [ 258.384877] [ 258.440683] WARNING: CPU: 0 PID: 9501 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 258.441384] Modules linked in: [ 258.441626] CPU: 0 PID: 9501 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220927 #1 [ 258.442220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 258.443047] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 258.443446] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 258.444762] RSP: 0018:ffff8880411c7c48 EFLAGS: 00010006 [ 258.445169] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 258.445699] RDX: ffff88801b8a8000 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 258.446226] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 258.446744] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800d1c6400 [ 258.447275] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 258.447802] FS: 00007f18f658f700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 258.448395] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.448831] CR2: 00007fdf61a4a1f0 CR3: 0000000032cac000 CR4: 0000000000350ef0 [ 258.449357] Call Trace: [ 258.449555] [ 258.449729] ctx_sched_out+0x8f1/0xc10 [ 258.450030] __perf_event_task_sched_out+0x6d0/0x18d0 [ 258.450419] ? lock_is_held_type+0xd7/0x130 [ 258.450751] ? __perf_cgroup_move+0x160/0x160 [ 258.451086] ? set_next_entity+0x304/0x550 [ 258.451408] ? update_curr+0x267/0x740 [ 258.451710] ? lock_is_held_type+0xd7/0x130 [ 258.452033] __schedule+0xedd/0x2470 [ 258.452322] ? io_schedule_timeout+0x150/0x150 [ 258.452676] ? rcu_read_lock_sched_held+0x3e/0x80 [ 258.453056] schedule+0xda/0x1b0 [ 258.453337] exit_to_user_mode_prepare+0x114/0x1a0 [ 258.453709] syscall_exit_to_user_mode+0x19/0x40 [ 258.454059] do_syscall_64+0x48/0x90 [ 258.454338] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 258.454722] RIP: 0033:0x7f18f9019b19 [ 258.455000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 258.456332] RSP: 002b:00007f18f658f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 258.456899] RAX: 0000000000000001 RBX: 00007f18f912cf68 RCX: 00007f18f9019b19 [ 258.457425] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f18f912cf6c [ 258.457947] RBP: 00007f18f912cf60 R08: 000000000000000e R09: 0000000000000000 [ 258.458474] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f18f912cf6c [ 258.458990] R13: 00007ffd854b0bcf R14: 00007f18f658f300 R15: 0000000000022000 [ 258.459526] [ 258.459700] irq event stamp: 628 [ 258.459947] hardirqs last enabled at (627): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 258.460625] hardirqs last disabled at (628): [] __schedule+0x1225/0x2470 [ 258.461251] softirqs last enabled at (498): [] __irq_exit_rcu+0x11b/0x180 [ 258.461881] softirqs last disabled at (489): [] __irq_exit_rcu+0x11b/0x180 [ 258.462501] ---[ end trace 0000000000000000 ]--- 23:12:33 executing program 2: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000480)=""/86) semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x4, 0x14, &(0x7f0000000000)=""/5) 23:12:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f00000002c0)) io_setup(0x6, &(0x7f0000000040)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) ioctl$FIOCLEX(r0, 0x5451) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r3, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r4, &(0x7f00000001c0)="10", 0x1}]) write$bt_hci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="0178000000003f00010000008098bca6434258a5a122f150115250c35fea192018b7b39f98fe53459977e732dd2e"], 0xd) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rfcomm\x00') fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000180)='&\x00', 0x0, 0xffffffffffffffff) r6 = signalfd4(r0, &(0x7f0000000240)={[0x3ff]}, 0x8, 0x800) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0x3, 0x2}, 0x6) io_submit(r1, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r2, &(0x7f00000001c0)="10", 0x1}]) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0x3, 0x6, "d220d9", 0x3, 0x9}) 23:12:33 executing program 5: r0 = syz_io_uring_setup(0x4ed3, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@hci={0x1f, 0xffffffffffffffff}}, 0x3f) 23:12:33 executing program 2: statx(0xffffffffffffff9c, &(0x7f0000000f40)='./file0\x00', 0x800, 0x0, &(0x7f0000000f80)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r0, 0x80}) sendfile(0xffffffffffffffff, r0, &(0x7f0000000300)=0x8c, 0x20401) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="b5370000001000"/18, @ANYRES32=0x0, @ANYBLOB="2f0099000000000000000000"], 0x28}}, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:getty_etc_t:s0\x00', 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xb6, 0x4, &(0x7f0000000280)=[{&(0x7f0000000080), 0x0, 0x1}, {&(0x7f0000000100)="68f33fe62c8747e123e4b4c81ca3228b342b61e9d4cd9a3a4d09e3be5dff18dba418617e2731a5d8f4059c02e7eac7aaada179ce6c25a130e28d75a70a7bd5a85049", 0x42, 0x49}, {&(0x7f0000000080)="8102fd1cfbe2117f", 0x8}, {&(0x7f0000000180)="e70bba2c0b80297afab0635a39dac7b5c4a2b9d35f2d75e99d58d553e58cc4bdd9108ded43452ab7724044a8f596a14b", 0x30, 0xfffffffffffffffb}], 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f646f74732c646f733178666c6f7070792c646f74732c6e66733d6e6f73746168655f726f2c446d61736b3d30303030303030303030303030303030303130303030302c646f74732c646f7063723d303030303030303030303030303030303030303138a5a870e816677f9c1c4e5db21638b13630f40eafee10e47be40e9a26f3c53487399ceeb1cc66842a106075ded3fffd4a4be49767a3a8c955"]) [ 258.671998] audit: type=1400 audit(1664406753.629:9): avc: denied { relabelto } for pid=9524 comm="syz-executor.2" name="NETLINK" dev="sockfs" ino=18823 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:getty_conf_t:s0 tclass=netlink_generic_socket permissive=1 [ 258.675351] loop2: detected capacity change from 0 to 16383 [ 258.678771] FAT-fs (loop2): Unrecognized mount option "nfs=nostahe_ro" or missing value [ 258.689550] loop2: detected capacity change from 0 to 16383 [ 258.694705] FAT-fs (loop2): Unrecognized mount option "nfs=nostahe_ro" or missing value 23:12:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f00000002c0)) io_setup(0x6, &(0x7f0000000040)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) ioctl$FIOCLEX(r0, 0x5451) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r3, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r4, &(0x7f00000001c0)="10", 0x1}]) write$bt_hci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="0178000000003f00010000008098bca6434258a5a122f150115250c35fea192018b7b39f98fe53459977e732dd2e"], 0xd) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rfcomm\x00') fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000180)='&\x00', 0x0, 0xffffffffffffffff) r6 = signalfd4(r0, &(0x7f0000000240)={[0x3ff]}, 0x8, 0x800) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0x3, 0x2}, 0x6) io_submit(r1, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r2, &(0x7f00000001c0)="10", 0x1}]) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0x3, 0x6, "d220d9", 0x3, 0x9}) [ 259.170719] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9576 comm=syz-executor.6 [ 259.179095] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9576 comm=syz-executor.6 [ 259.182364] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9576 comm=syz-executor.6 [ 259.192922] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9576 comm=syz-executor.6 VM DIAGNOSIS: 23:12:34 Registers: info registers vcpu 0 RAX=0000000000000029 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba0b1 RDI=ffffffff8765a980 RBP=ffffffff8765a940 RSP=ffff8880411c7690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000029 R11=0000000000000001 R12=0000000000000029 R13=ffffffff8765a940 R14=0000000000000010 R15=ffffffff823ba0a0 RIP=ffffffff823ba109 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f18f658f700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdf61a4a1f0 CR3=0000000032cac000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f18f91007c0 00007f18f91007c8 YMM02=0000000000000000 0000000000000000 00007f18f91007e0 00007f18f91007c0 YMM03=0000000000000000 0000000000000000 00007f18f91007c8 00007f18f91007c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffff88806c300000 RBX=00000000db09d5e7 RCX=000000000000000f RDX=000000000009d5e7 RSI=ffff88804105f544 RDI=0000000000000003 RBP=0000000000000000 RSP=ffff88804105f478 R8 =000000000000000f R9 =ffff88800a752470 R10=ffff88806c7eaf38 R11=0000000000000001 R12=0000000000000000 R13=0000000000000001 R14=0000000000000cc0 R15=ffff88804105f4d8 RIP=ffffffff8217a3d5 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f26bdb538c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7bbd0948e0 CR3=000000001d020000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000031 0000000000000000 YMM03=0000000000000000 0000000000000000 7269762f73656369 7665642f7379732f YMM04=0000000000000000 0000000000000000 0000000100000002 000055d6ca85aec0 YMM05=0000000000000000 0000000000000000 000055d6ca85adf0 000055d6ca85adb0 YMM06=0000000000000000 0000000000000000 000055d6c9feaa40 ffffffff00000004 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 2064616572206f74 2064656c69614600 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000