Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:12355' (ECDSA) to the list of known hosts. 2022/10/06 14:50:44 fuzzer started 2022/10/06 14:50:45 dialing manager at localhost:37161 syzkaller login: [ 36.259878] cgroup: Unknown subsys name 'net' [ 36.358628] cgroup: Unknown subsys name 'rlimit' 2022/10/06 14:50:59 syscalls: 2215 2022/10/06 14:50:59 code coverage: enabled 2022/10/06 14:50:59 comparison tracing: enabled 2022/10/06 14:50:59 extra coverage: enabled 2022/10/06 14:50:59 setuid sandbox: enabled 2022/10/06 14:50:59 namespace sandbox: enabled 2022/10/06 14:50:59 Android sandbox: enabled 2022/10/06 14:50:59 fault injection: enabled 2022/10/06 14:50:59 leak checking: enabled 2022/10/06 14:50:59 net packet injection: enabled 2022/10/06 14:50:59 net device setup: enabled 2022/10/06 14:50:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/06 14:50:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/06 14:50:59 USB emulation: enabled 2022/10/06 14:50:59 hci packet injection: enabled 2022/10/06 14:50:59 wifi device emulation: failed to parse kernel version (6.0.0-next-20221006) 2022/10/06 14:50:59 802.15.4 emulation: enabled 2022/10/06 14:50:59 fetching corpus: 50, signal 22220/24016 (executing program) 2022/10/06 14:50:59 fetching corpus: 100, signal 35797/39046 (executing program) 2022/10/06 14:50:59 fetching corpus: 150, signal 41243/45935 (executing program) 2022/10/06 14:50:59 fetching corpus: 200, signal 49699/55551 (executing program) 2022/10/06 14:51:00 fetching corpus: 250, signal 56863/63793 (executing program) 2022/10/06 14:51:00 fetching corpus: 300, signal 60491/68626 (executing program) 2022/10/06 14:51:00 fetching corpus: 350, signal 62957/72290 (executing program) 2022/10/06 14:51:00 fetching corpus: 400, signal 68525/78734 (executing program) 2022/10/06 14:51:00 fetching corpus: 450, signal 72984/84013 (executing program) 2022/10/06 14:51:00 fetching corpus: 500, signal 76115/88057 (executing program) 2022/10/06 14:51:00 fetching corpus: 550, signal 79747/92482 (executing program) 2022/10/06 14:51:00 fetching corpus: 600, signal 82585/96076 (executing program) 2022/10/06 14:51:00 fetching corpus: 650, signal 84455/98774 (executing program) 2022/10/06 14:51:00 fetching corpus: 700, signal 86348/101513 (executing program) 2022/10/06 14:51:01 fetching corpus: 750, signal 89136/105004 (executing program) 2022/10/06 14:51:01 fetching corpus: 800, signal 91438/107981 (executing program) 2022/10/06 14:51:01 fetching corpus: 850, signal 93214/110455 (executing program) 2022/10/06 14:51:01 fetching corpus: 900, signal 94849/112712 (executing program) 2022/10/06 14:51:01 fetching corpus: 950, signal 96500/115036 (executing program) 2022/10/06 14:51:01 fetching corpus: 1000, signal 100598/119221 (executing program) 2022/10/06 14:51:01 fetching corpus: 1050, signal 101970/121157 (executing program) 2022/10/06 14:51:01 fetching corpus: 1100, signal 104524/123988 (executing program) 2022/10/06 14:51:01 fetching corpus: 1150, signal 107413/127051 (executing program) 2022/10/06 14:51:02 fetching corpus: 1200, signal 109702/129614 (executing program) 2022/10/06 14:51:02 fetching corpus: 1250, signal 110938/131359 (executing program) 2022/10/06 14:51:02 fetching corpus: 1300, signal 112618/133408 (executing program) 2022/10/06 14:51:02 fetching corpus: 1350, signal 113587/134961 (executing program) 2022/10/06 14:51:02 fetching corpus: 1400, signal 115683/137237 (executing program) 2022/10/06 14:51:02 fetching corpus: 1450, signal 116472/138524 (executing program) 2022/10/06 14:51:02 fetching corpus: 1500, signal 117492/140027 (executing program) 2022/10/06 14:51:02 fetching corpus: 1550, signal 120418/142768 (executing program) 2022/10/06 14:51:02 fetching corpus: 1600, signal 122171/144677 (executing program) 2022/10/06 14:51:03 fetching corpus: 1650, signal 123053/145928 (executing program) 2022/10/06 14:51:03 fetching corpus: 1700, signal 124557/147593 (executing program) 2022/10/06 14:51:03 fetching corpus: 1750, signal 125849/149042 (executing program) 2022/10/06 14:51:03 fetching corpus: 1800, signal 127027/150480 (executing program) 2022/10/06 14:51:03 fetching corpus: 1850, signal 128497/152060 (executing program) 2022/10/06 14:51:03 fetching corpus: 1900, signal 130080/153686 (executing program) 2022/10/06 14:51:03 fetching corpus: 1950, signal 130739/154723 (executing program) 2022/10/06 14:51:03 fetching corpus: 2000, signal 131924/156052 (executing program) 2022/10/06 14:51:03 fetching corpus: 2050, signal 132631/157049 (executing program) 2022/10/06 14:51:04 fetching corpus: 2100, signal 133190/157921 (executing program) 2022/10/06 14:51:04 fetching corpus: 2150, signal 134293/159100 (executing program) 2022/10/06 14:51:04 fetching corpus: 2200, signal 136359/160827 (executing program) 2022/10/06 14:51:04 fetching corpus: 2250, signal 137040/161743 (executing program) 2022/10/06 14:51:04 fetching corpus: 2300, signal 138749/163152 (executing program) 2022/10/06 14:51:04 fetching corpus: 2350, signal 140020/164322 (executing program) 2022/10/06 14:51:04 fetching corpus: 2400, signal 141023/165262 (executing program) 2022/10/06 14:51:04 fetching corpus: 2450, signal 142036/166286 (executing program) 2022/10/06 14:51:04 fetching corpus: 2500, signal 143032/167294 (executing program) 2022/10/06 14:51:05 fetching corpus: 2550, signal 143847/168169 (executing program) 2022/10/06 14:51:05 fetching corpus: 2600, signal 144616/169020 (executing program) 2022/10/06 14:51:05 fetching corpus: 2650, signal 145522/169910 (executing program) 2022/10/06 14:51:05 fetching corpus: 2700, signal 146696/170842 (executing program) 2022/10/06 14:51:05 fetching corpus: 2750, signal 147182/171481 (executing program) 2022/10/06 14:51:05 fetching corpus: 2800, signal 147667/172127 (executing program) 2022/10/06 14:51:05 fetching corpus: 2850, signal 148598/172933 (executing program) 2022/10/06 14:51:05 fetching corpus: 2900, signal 149250/173620 (executing program) 2022/10/06 14:51:05 fetching corpus: 2950, signal 150017/174292 (executing program) 2022/10/06 14:51:05 fetching corpus: 3000, signal 151743/175392 (executing program) 2022/10/06 14:51:06 fetching corpus: 3050, signal 153010/176215 (executing program) 2022/10/06 14:51:06 fetching corpus: 3100, signal 153432/176712 (executing program) 2022/10/06 14:51:06 fetching corpus: 3150, signal 153919/177233 (executing program) 2022/10/06 14:51:06 fetching corpus: 3200, signal 154667/177853 (executing program) 2022/10/06 14:51:06 fetching corpus: 3250, signal 155877/178570 (executing program) 2022/10/06 14:51:06 fetching corpus: 3300, signal 157171/179257 (executing program) 2022/10/06 14:51:06 fetching corpus: 3350, signal 159020/180128 (executing program) 2022/10/06 14:51:06 fetching corpus: 3400, signal 159670/180661 (executing program) 2022/10/06 14:51:06 fetching corpus: 3450, signal 160664/181269 (executing program) 2022/10/06 14:51:07 fetching corpus: 3500, signal 161703/181855 (executing program) 2022/10/06 14:51:07 fetching corpus: 3550, signal 162507/182309 (executing program) 2022/10/06 14:51:07 fetching corpus: 3600, signal 163255/182772 (executing program) 2022/10/06 14:51:07 fetching corpus: 3650, signal 163705/183119 (executing program) 2022/10/06 14:51:07 fetching corpus: 3700, signal 164340/183526 (executing program) 2022/10/06 14:51:07 fetching corpus: 3750, signal 164921/183900 (executing program) 2022/10/06 14:51:07 fetching corpus: 3800, signal 165707/184298 (executing program) 2022/10/06 14:51:07 fetching corpus: 3850, signal 167066/184867 (executing program) 2022/10/06 14:51:07 fetching corpus: 3900, signal 167602/185207 (executing program) 2022/10/06 14:51:07 fetching corpus: 3950, signal 168748/185638 (executing program) 2022/10/06 14:51:08 fetching corpus: 4000, signal 169972/186030 (executing program) 2022/10/06 14:51:08 fetching corpus: 4050, signal 170310/186301 (executing program) 2022/10/06 14:51:08 fetching corpus: 4100, signal 170994/186564 (executing program) 2022/10/06 14:51:08 fetching corpus: 4150, signal 171592/186816 (executing program) 2022/10/06 14:51:08 fetching corpus: 4200, signal 172267/187068 (executing program) 2022/10/06 14:51:08 fetching corpus: 4250, signal 172895/187280 (executing program) 2022/10/06 14:51:08 fetching corpus: 4300, signal 173641/187520 (executing program) 2022/10/06 14:51:08 fetching corpus: 4350, signal 174436/187749 (executing program) 2022/10/06 14:51:08 fetching corpus: 4400, signal 174861/187922 (executing program) 2022/10/06 14:51:09 fetching corpus: 4450, signal 175614/188090 (executing program) 2022/10/06 14:51:09 fetching corpus: 4500, signal 176319/188259 (executing program) 2022/10/06 14:51:09 fetching corpus: 4550, signal 176906/188404 (executing program) 2022/10/06 14:51:09 fetching corpus: 4600, signal 177441/188529 (executing program) 2022/10/06 14:51:09 fetching corpus: 4650, signal 177782/188635 (executing program) 2022/10/06 14:51:09 fetching corpus: 4700, signal 178083/188694 (executing program) 2022/10/06 14:51:09 fetching corpus: 4750, signal 179149/188811 (executing program) 2022/10/06 14:51:09 fetching corpus: 4800, signal 179739/188836 (executing program) 2022/10/06 14:51:09 fetching corpus: 4850, signal 180163/188840 (executing program) 2022/10/06 14:51:09 fetching corpus: 4900, signal 180587/188841 (executing program) 2022/10/06 14:51:10 fetching corpus: 4950, signal 181448/188853 (executing program) 2022/10/06 14:51:10 fetching corpus: 4960, signal 181517/188853 (executing program) 2022/10/06 14:51:10 fetching corpus: 4960, signal 181517/188853 (executing program) 2022/10/06 14:51:12 starting 8 fuzzer processes 14:51:12 executing program 0: sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x464, 0x10, 0x70bd27, 0x25dfdbfd, "f146132ee883c756355d3f118e65e4db3739f00bd30b9d5ccc830b46ca82585d64f96d128cb6192cca884dca3a75df7eef6e864f1f7ed1216a9636b740b33dd9c5bca88ca4bc0f958e86444f1dab9c8bd574e9223ad48fec5affeefc53039bb93ae1cee233f479e4b8411e2a3aea1fc994e486543c44b5573169978a9f7847bedb911d562574c8e1a98c55be1d2db49f2d90", ["", "", "", "", "", "", "", ""]}, 0xa4}, 0x1, 0x0, 0x0, 0x44010}, 0x20008000) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @local}}) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000001}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xcbd}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x513}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7c4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@loopback, @in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/bus/nvmem', 0x200040, 0x70) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001540)={'filter\x00', 0x0, 0x4, 0x1000, [0x8, 0x1, 0x6506, 0x9, 0x5, 0x8], 0x3, &(0x7f0000000500)=[{}, {}, {}], &(0x7f0000000540)=""/4096}, &(0x7f00000015c0)=0x78) r1 = fsmount(r0, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, r2, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x4005) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0xb6}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d0}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f00000018c0)) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001b00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001940)={0x178, 0x13, 0xc, 0x70bd27, 0x25dfdbff, {0x27, 0x7, 0x9, 0x5, {0x4e23, 0x4e23, [0x1, 0x7, 0x2, 0x3], [0x1000, 0x2, 0xfc58, 0xb0], 0x0, [0x8, 0x3]}, 0x80000000, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x27, 0x1, "766d2357e90d70cf6fdb9bcafdaebaf226247b22dd561ee5e61c1a7a5a4dbd0110a33c"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x178}, 0x1, 0x0, 0x0, 0x6c050}, 0x8004) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000001b80)={@private0, 0x0}, &(0x7f0000001bc0)=0x14) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001c00)={0x3fc, 0x13, 0x800, 0x70bd2c, 0x25dfdbff, {0x1, 0x8e, 0x7e, 0x5, {0x4e22, 0x4e20, [0x4, 0x800, 0x4, 0x8], [0x8, 0x3f, 0x6, 0xbd], r5, [0x5, 0x81]}, 0xe2, 0x484d}, [@INET_DIAG_REQ_BYTECODE={0x62, 0x1, "477142baff21bc884cf75590bfa08085410c85736b29e37216ee7c387511975aa8394a435cec2d6f6eada519c3c8ec03b8c9c41e957b7ed1eb05bf43d23293bdb890c48e2e4058bec18eb1a99b9d01479b5533f0d69d938af77b2362fb80"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "c8bd5e80ae4ea3346ddd800dcc2b1c3a180af7feb22f84c79c561205219ec5caa22a1e191bee9ad6e6344e6944cbd1e0909f680ce445791d8a3fb461c6ee77d7f7f23945f698b1a59b8f603dacb120c819f5c06beaefb9ab6597f3beede9756f204b17161c88b1f23e996b54a92ba95fd7abc2d55d650fedc9798441c07657a4c4b3d8ff817b1382b703fff8a4809ac4315fd1cb97826310f33d0f59f09baf70634d43efa2c5dce788e79ab777263ac422fb526e46507a9379b6b159f384f3c36bb3"}, @INET_DIAG_REQ_BYTECODE={0x5a, 0x1, "637de28a91abe7dcb417205dbcb012b9e0e52aa60171fddce57c5e759b3c70145fe408604f47f67a49c8edbf80cc3f5702dc37b577341d14b54fd33bb17349baeccdb7eca9988e2630eb14478d1f1d120f08a87dbc87"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "54d0146be4b6d06c53df9fd56ddf8fcc292460ec8a75647b0ce0f22d72453425e5608356a9e96f4c3f882e1c4f00e7abf5652eb99e995fac2d2caea04c28442f6038c88f79831c91ae79120f4e546a0b16d8284a7d592e58d59e12095adcc8281f98d847aa94e92113bd7805d026be4fe1d27b5874666bf253474544f0f361b81a80822c54694b9291ae0d5022a4f8ac67c4449d67b26d2f0627fb64f1f88f8a044e8ddb64ddd7886836689b09d8d53dbbabca948c96e7f0d17a084d41809cfbacd4a6ebd305d7507a8498c54433690c48a4a804"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "02f59c055039b6d55cfef8836179c1fca7883e98c1e92a2dacbfcb83276025f3dceb135e5a82f53238e0dafc0c604680a5b3bfde6418da1313e79e787389fd186ece16c69d505bdbcefc8a8bbcffd03fd0c8cb05cf2ca009c27fd7866963b8ef4af6daad8096f9989a9c961ea62cd84a67c7ab4326f75ee40064e58b883e2f7343b4396d6e85f9b1ae0f7fcbc27223a77fa2"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "b563875ff5af0f8b946ff7096cb5e7927717e8d4a317a3740f5f39b05f4ca7d32be8c34828387c071e2e9c3abb143418b78236d207175ab087d310b4cdedef143c5755e91e97febfda2d4fe2d856b8cf2e82988c8e8c716c3f3aac124b337d0fe59928e35fc7ec2af5fb1388220cd2248b30ecc7b6ba760c5624f0ef74978a3069d6b5a9dc55fdb5c0133c128272b85b830f3cae0db90b0d"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "3308eb19c504a20ed2435d8b301d53ff554b2873cca6"}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x4002010}, 0x4000040) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000002200)={'broute\x00', 0x0, 0x4, 0xe8, [0x2, 0x3, 0x2, 0xeaf2, 0x7, 0x7], 0x6, &(0x7f0000002080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000002100)=""/232}, &(0x7f0000002280)=0x78) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002300)={0x0, @dev, @initdev}, &(0x7f0000002340)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000024c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002380)={0xdc, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x81}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xad}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000895}, 0x8001) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 14:51:12 executing program 2: ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x9) open_by_handle_at(r0, &(0x7f0000000080)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x400, 0x7, 0x8, 0xffff}}, 0x402002) fallocate(r0, 0x20, 0x401, 0x5) r1 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1) r2 = fsmount(r1, 0x1, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000100)=0x7f, 0x4) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000140)) pread64(r2, &(0x7f0000000180)=""/237, 0xed, 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0xffffffffffffeb08}}, './file1\x00'}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x4, 0x1, 0xfff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540)={0x408001, 0x80, 0x3}, 0x18) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000580)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup(0xffffffffffffffff) tee(r4, r1, 0x7, 0xa) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f00000005c0)) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000600), &(0x7f0000000640)=0x4) 14:51:12 executing program 1: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xf8db}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x4}, {0x5}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x810}, 0x20040040) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vxcan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x20, 0x70bd25, 0xad4, {{}, {}, {0x4c, 0x18, {0x5, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}}, 0x818) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x881, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x5f}}]}, 0x20}}, 0x2000c005) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x10, 0x3f8, 0x300, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40015}, 0x50) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000b00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)={0x39c, 0x0, 0xb00, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x24c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xbd, 0x3, "3f250c856fae92a645714316c44c3a0397a1444e8fdcd748ff371f0feb003c5dee918b8ff418b4a8629749a94d4401d908300e937ff5541546f579dd1e47b1dbbdb7be35b40efe2406c0bf546f6b4d244c9c00148d0858cf3d97aef96ae21bd52679144dceb5198cedd2d67ba5071f801232649d354bcd679ca770f5da75da2d161e7eef59970e86303eb994f376a09578e17c0217a45849383d330fdbec0c35252019a9cb57e1684456e267a847e8b960aa666e063afb8356"}, @TIPC_NLA_NODE_ID={0x57, 0x3, "a5226353bea84d15ac012a575689d9e5b3897159b6a722016258ca037604bdd80b5ea0b021d771599c75bbce06defe3be22c6810670a55966209353d68767a16daaf83c2bfda23b76b09fe45f1a6a2ed344989"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "633878a0337d69652be596f7831a3b4a95ef13ae"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "1fb79a9b53dfdfb77e0aba911e0ae9ad69afe01adbbe446b124e7d4d490d98"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "0ed1a150172b8cecd021e92b8266e5f87cf437b2dc8517d238221f640aec0250b599"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "0aa6e9380966a2335fd0935277d24546b70f2fbce844dee481a1b680caaab726d6c6"}}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x100, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff80000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd249}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x39c}, 0x1, 0x0, 0x0, 0x40010}, 0x40) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_open_dev$vcsn(&(0x7f0000000cc0), 0x5, 0x416200) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x9}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x1, 0x4, 0x0, {0x7, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x2b, 0x7f}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x805) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x38, 0x1, 0x8, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x38}}, 0x0) socketpair(0xb, 0x800, 0x6, &(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x20, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x24}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4099}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001100), r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'veth1_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000013c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0xb4, r7, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x10000000) 14:51:12 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x28c, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5872fc61}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc0000}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb45}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd8b0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa6a7271e}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4ad}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x24004041}, 0x40000) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000001}, 0x40040) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f0000000680)=0xe8) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xdc, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xa8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa2, 0x5, "0493b681b185fd0a49e10ed9d98b1bac31ce17f267daa7761efabe8516eed1912f02a7e7cc58d3a5561e304e2904fc2dde1ee0d4dc5ba482da7c2b424d7f9f58b7210999286cf40217e196d722feb2939b8e42253ec94a86fde61ca50f7bd78b23aeb65c61c0840584e2927e5f851e04f849aac677b84158eae90491feb0401ae2ba439a9c2d7bdba36e1eead797d9e264a8086f5f6d8d5c35f6f442f164"}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000800}, 0x400c000) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000840)=""/72, 0x48, 0x40002000, &(0x7f00000008c0)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048084}, 0x4000) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x6c, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40004}, 0x40) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000b40)={@broadcast, @dev}, &(0x7f0000000b80)=0xc) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x801, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000c00)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x80) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x48, r6, 0x13a, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000f40), 0x8403, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r7, 0x6f152000) 14:51:12 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000001280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x5305109}, 0xc, &(0x7f0000001240)={&(0x7f0000000200)={0x1030, r2, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "789fbcf7dc76a879eb63da9640d9c2ba0738908435462fa564a2e38d3910971a5e49976c82db93001de4536a9b42f7cd8e80ec8e9199d008cb4d5f22010a5b70e3eec03442ad6e5b7b29de0d18be91461085368af532f0561145eb2459b4d859018de773fe3a7f90d1fa7e482959f9708dbd5b501039c6964f386031944adc385d487e2c768be12097f1142ebb732194b9db9f5b4ac3a8e27a4c74b6bd3c07ca79f6619edc85d1df573b6c9a0eb858b48a8d93dad54e0b7813e63f1fcc95eb5d0543bdad5cbb96196a247b52b3eff2ab65f64865d9ce15f5d6eaf725be4fb0ca6034c7c80470cc2b150e9f4b1915a801f693c590ac0990ec48aeea1fea6230feb3d29a1ee3f744a9867a0230939bb9752015e2b475c822d637172cafb978a51a2b5ba468076b7696dfcd84e712950e971125888d2b2a0c2518ca7d92f47e54c74c07a3f0504bb127e889cffaf7f8796606ae6aac94f7cd286a2b9d002fb627b9841dcfa67e3be868183a7789d6c7d233546afd2fe32ab64c5e8e4654615f971ba15f6460df71adab2571e05e6a2d37689571463f83eec61babe89db0721c9fdb1686ed8ba0233d4288e26447b5e7c3f3a3cf96528b9b772b5833e0bf8a1cdd9d253cb1917df452d0027f8770ba90a7d26de464e90b79ce426ff13e6c3f3cf8d5a12d1cc522a77bf5d041664cb654ae46c301406c96f5ffc61010c6f6b0285e76facf5dc4e71b0bdf805fe09c0fc3d8c9881ba4de8f6b6789457588b297e22c97e1778efb4117da4b79cbb7985d291bd3c7da760929a089b6ebb0d2657698d5ac9c749debdc7dc85f7d5832e9c263f4fe0d1ff73d61af6208c2899218a62d9df205c2a646223c70b98b44c2ddd9f1712ff215a105ecade04c0afbc7b09a6de2317cebd6800b772ad430b2f8e297582d269b8dedf5faaf7a78f98493e268c59d1b5756a689ecf24a424489f6b66f0462af604d10e2bd90794e887306befb8e41c4818b43958d0b2c4925d77b0a18838d6a5b818cc1cb438aa10963b01cba96c9051bec10db74ed996634831ff9df60d0b1b140896788ca89f54144f82488bd1e273c249f1df267d557017dabd4af09dce9038ea93213f2931ec5bf7fad31fb20dd0c46c8019a2685d2aec0c83ba28a8d918d2add67ca560cb13570f076e80ef47c088ea37a7af6cb9ec48bfbec7a1f9acc3f620449f56d6a110e68781d4cf262a8d0a83ddb35a658e882c5ba26b35fa2bd07e8771b0e4512a8d0b8f47c557e0c9d8a967da8716344c0198fe2d946a905f356047802aa179c439fae45ed60eb20792e3f7e3e40acd76202c87f8adae22ba4cac1023b80ba1ab46ee289256d97bde7cc30f38e1ea5f89189fffddd85cec1952f7eba26bf44578ad76b2bdd6ab09f2ec9c0e16b3379efb012e9c11a49f2ff5e77612c93ca3b08454ed23391167e3ce7379fcb298ac50d12d7a58bae0c4cb1c2f7d2762bb86a922e8ae23c35f18ca70125b51f262665c3959e4d2f3a3dd8ce8dc1712fd47a6969f4c3ec2d07789a602ebfaaefff0e454bddf39cbca6ca9654b77d48fb397079bcdcaf8b82ac14d995949b9c26ec65004cea71ee0487e024bbebc37586cd479d2f9e5e0b775108e0f7843596e4b833e9908b74885151a67152d47800a0a748fa192f70ecf459721c55a168f4f0557f73771a9bd198075054e92e98257ddfeea2b599ec95e125b777d4316770072577f174a6f930bf6317dfc6b0fd6e36df3cfff2038d51b0984b68ff3e8005ffc59eea18883dd04dc23697d73abcb7b5dc1badf2e834a6cb2ae0e70d56b41deb1985147d4dcf4488a396792e9d34488189ba03139586de64873d4d11324d3b680436e4b3b80506ec55b87ef70282b176eb6ab107ccf84e69e9d006dee97ad14ca4c214cf9d77e3e60d68494b116f481177ca983b8c21ebc04564e9be90db1c65eda145d1bd595a5f31b6f0c2992245cf39def81f12a9f09b35820001c7318c7621f3cc6fdd5f264719dc967284ae13fdae0e409ac6fc64fe3a5f9aed5a621c7b1b9d1498debb6cd86e790ce894046d3ee5c2e984858214efe4fab3fcbad6d601b285478b385ea6bc95855a35dc1ade8c166a8a99445fedac14e2247c50467b17a74280bf0b92702af741505b5642f908a9dd3b2eb73782bdaeae5611057a3af6f688f210f4b1b330a60d0c8bd717b7586bd3a0c8eb2f596af53a5361fbce28d6a02fb3959c9583bbea55fee340b1076228488e6f8b2331e3560658acc0c2641daa6459611ab6ba69b3dbd064554ba66517e0ca591e6fab75fd8ca53083b03b729b3cd7aa1332ad99cc9215abb66352481e5734735b9f968f51bd5df2e84e426bf69ea18dbd5fd82ad90e508ec3396161f08a5cc033ca8c2ebfb43dc5312e9d120cf3591d8d62b90bc8d0b4516ba35e55eb955af148693d19ec470fa184312a59a3e50fd3f574869bcf09b59ebf2f5da3484fb4e5e943d6f7c4757cdf6b72fe97bffffa160dcdb03e528635f8f551e72260a15caf2ff887ca9d1396f2c44a324e871c5455c989d08a0d029784aa2bf719e4993d8cfc8a92d9e81ee13ef3481fdcd05c4746c21ceebc82d500045e6a0408129f21b623ed461b0652553d6346b0cd00126117ad5b71f319eedd92697878413857564196c081e54a9ae927197236bfeb2b5e182862f84e0b76bb4365cb32c52c9f506d30f19634d61aa347f8f1cc567e030bec79618ceb48cfb4607599c52dd6a7a66e860cc9c2fbdfec3a09948606230559f93817b09a9608ff4e35794014dda52fe63f7923ff70b18f452c88094cf73166184aa2c96ecfdd0aa8c4c90164389b04227de610bb1ed00a7dcf4ca67e9614bf92440f8af0d45be7008d7e6faca6ff9ac11372cbea9eec74905b11cc02c0743a3a6b9cd0f543aafc2bf63188171171a0dad7dd79b484c0fe525b802ca99f2b2475eaa246275e4254be58d2d435475bf68ca6afc9039fa652504bda81ab4a935e2c4993183d5d57adab7f5d4e59aa3b41194e2f181fa27000e20ca36e6ec92a674bf349f027f25625c03ed0cba1938cf44a4881cdee885fd8b7118ea2d2f4df35ed03b4ad808ad5fde3f80053f49f0c729610aa45e3f1a07c7523d9b76f923008c02441757c9ecb444185affa9de6ee5e7769e38cae273c3983ff71ebdc51b54f4218ec13ef91855d45a97fd027a32ba5c1b7e0311a2c2cd0f2f70735f703da29c1815610e9ca6f5fceb630ad9608f3d4f35dd13d49a41120182f2b917c9f001d2823cc7e94bb533edf34b967b7971a6582a4a8b5bd3d524c805d218a2cfd2145964e5d7948be395ebe81b82474f954100db8c19a0b9cda21bf30566993354271045957ee1b8ad59e47a132fde14da7428e25d05db650f34972f6b2abd676ff900aa21eb9262239f5aa0d04bd530707b663d58522d946d49519095ead9cfedad3b666373e4fc3896337211696b571159558da49cfb3d2e013602aa9cd5307002320f1819e5fd2ce33e6ee9b1befc7e8719e81a627c01687f25db4bc6fe6c8450687da61329724e27f9f4e3236187ba1227f34af21ea0a34cd553775d64e2aaf171e2344cc7aeae18d458cbd350b9ea948b0ce4b180cc9b6aa68633d37d09c62ed0c0a0e6cd452a46056926f3f6f21cfe65ca246ccee464b986b673d055ee9fd33b0246d17859b48fa104a5e85c3c70243c27c5f199819c8b72e0a2737bb88b8e6551d43b16e6784dbaf3ea0021093d003857724428d08fe65f9596e34bd5688e1ae2af6c6a0604d1f40a37fcabd4717d967e81cd33ee7218c502b39ad5c7e2c7da1051cad811c9a92edebdd94f4f7f46779652f3adef615daae11a3c1e148d042dfebf3862c0a808c92be7802778f4819724f0aa140cfd2b140895d0ae4192f3365e871ce19173c48312e805e0372bd8f4e09a84fbbf6fc9a912df1042af7b08f2533e12facc00718c6558a69755b9d4528c96827be1a6756b01f432cc73ba76a6cf144c7b7d80df830185dda1dbefbda56f097bc93118c2760c77e4b91247111ff49b5365d74a39141ea3864a98a8ebeea91568843b26b3bf2177f56889df0c4c5188d48e30878966e5fb8be3fae5dac44275b8c5680889c0adad01ca210b0f82751f5b9fde046dd99b3c026cbd8bc0a8556e0b404f3acce7d612eabc8de8cad28c56265917746df0d094faea7b08f3a3662a027495b3d59c2435571c93768f9c0d0544bc5b4945d7ce00e850f888b5e67b049aad72054f282456a4e79761f53bc910930c37ac57cbf4447b012ecd09309ea0b4b14eeac555190db1c5cdd4573f68648f712445933bca7c4a676408d096a6e0395028cd368426f22de70767ebd37aa68c8f98d4e4d454c3a32f4b0ad46eb131904de3eca6badec8843a363c583b5b8232ee176912c7692fd96c73347f046ae6ba0409242f8c8b6c1868e58a2ade22f5dd173243fb1c8af4c8bf532e5a19210319a129ab2e1faab96885aa29b69b7529330dffae1de2f7a1a3f3e71f60d9b6d1de4ff4979b245d7b91f0fc90b6c2ff36d654f4ceebd18dce7f172ca224f2a87dffb7e5a2f74ea35400a366097e55779140e8ece36ed98634665059a3aee70e512e154c31a8eb6ea15ccdc976a39885d76ea0a24409496021027969050873cd8644717e50716a8f9f2a32f3f69719925978c67ae8199402f24d0135145bed925c127ed281e08456069a5ee47826df55df530a083196626ba729a6db890f00c414ba998cc3e8ed7a2571f4c23e3122e5de1331b1a86fc992d4a8bb660f2138c5d07de25de1022596797288e78c26d2427de186048aa084e532037e12c9eca764b571becdb7bf0d00bdc14c69d9c5292d6d8e8721f93e2fa5786b446557cf25a4e0e27416b2141a5adc6ab64af83f65750a47b58a2daba9c7d3b62aa9d88f6fd867cb117bb87e0d497326f8e638ee868b7d0c303f7f19dd4a2f480b9930cdb0cb2066a8f166a41c76980e975b693613f659e10c29ba1b3427710e1a598a1f09068117bddb7f2bdf6c4add806223e784d9e3ef6bf5dc41420f8a79954be79a0d4394de1e8a40844dd96a0ee077c4a068f2d7186db82859ae953e5782d7aa5ea1d3e07cd51f4759cab9009eb118d0b4d8116720f245d49fdd21e536a0c1cb7edfd3aa8f521c870d88d754aa769fbd4e89ad5541a237f11cdca1d0d0e681b812cdc28bde1a533b0ec78713290ad60e9d574de1351a83a29c03c0b3ed1c474e38765acdab6273d8b41ce829b29170cd932aa7d7cf09dd29797d4a3448edeaba0c9a4c3f0e50d9a9aa2715e04cabb4c4a6a265b57efd5576d5090212228a2740420f89a51e25db5d9eb496a2b4e2355fdc32e9fe3e56470f59abce1a9be5a6cc32ecf5d499d593b4de68afb9620aab005d1e3fece61c7cb740b99ddb620a2297268002c99bc51eed2af4a6002def9eca3d019e848dcaf1f92a1a724fba688426abaeba10fc549f5113b85fe1fc11097b42e48942912f191890b9ebcb89f7c62154826e65e8af52b74f1f6c5c282a9768e501395c60fa3a262b107b1455df9aebaae0e5bfd42434287572d34c3fc55eb88778ad1595d64be9ad6a7eb0ba0493d51f617c088ab1de7c80063942b8bf5a88612e446dff6d1ad39256f190d518a0a20658fb15ca2ceaef5f1ff6bccd206a118c5f083db512db7a3e9f69195e6f65917c1b57d7644ca50473e5b6c36e9c53ec697f6d182c402f197d343cf1f71a4a04758113dc7245186b29a48828d0d6edd621b7e74d9a24034f6e964c65e41bd32a703585fafe51d4fac49a2cc"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7fff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x749d}]}, 0x1030}, 0x1, 0x0, 0x0, 0x4016}, 0x20000000) write$bt_hci(r0, &(0x7f00000012c0)={0x1, @write_current_iac_lap={{0xc3a, 0x7}, {0x6, "bfc2bada62e6"}}}, 0xb) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x38}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x100010, r0, 0x8000000) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001440), &(0x7f0000001480)=0xc) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2d7c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x24000080) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x34, r1, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004001}, 0x8800) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000016c0)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000001700)='attr/exec\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0x10, r6, 0x8000000) syz_io_uring_setup(0x8db, &(0x7f0000001740)={0x0, 0xe3b, 0xa0439ad5dc3453ca, 0x1, 0x48, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000017c0), &(0x7f0000001800)) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x34, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000080) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000001940)) 14:51:12 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) r1 = shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x7000) shmat(r0, &(0x7f0000fee000/0x12000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmctl$IPC_RMID(r2, 0x0) shmdt(r1) shmat(0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000040)) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x3000) shmat(r2, &(0x7f0000ff4000/0x2000)=nil, 0x0) pwritev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="211bff8a109941edc0eb7592b8e1e3bbea847dab2ec156e1ee82f2be6ea30f4b99f8f7287a5bc090962ad6c6905cf387c1d84df5ae9b44395464f5e703a886002f88b1b07091df654ad90d51d5f0b28b216e9b2231e7df3e50735ffc44b03def4f1104b566660ae9a16ad743ee82758c32fc266f3d55f054e60f363546e9a8804877a7a5cf843bee4807897753e09865ee728e5e3a3894f4f986bcd170d7046cfba8533cf29ac076b052a055be26409783a15c23af603d7f22684f85c71e7e959d438605cf222527e7", 0xc9}, {&(0x7f0000000180)="3e72fa1c7fad03c527fc10fb1a7fc4fdecdd90682bc910a0b3c2fcab65bd2aa5e8a60311c862942cfa3e2b673064e360ef4f9b18e290bb009e69c1da136f6bd237af4173cb3cdb2e6620f25aa391d4", 0x4f}, {&(0x7f0000000200)="9feffea01d57fbf61fa106253d5f9f88315e9d473a5102bb9c6a696ed60beb4e456d1cc2424949b478312269000f3f1f302ca89d897e9bb6f1394ec1d35134d9cf42043ca1ee5708aa9f3a90519d43be6cd7adc439bcce1cb6f3e47922484eeef949f445cb94db", 0x67}, {&(0x7f0000000280)="8672fd20e03cbf1b4d386f096f0bd38d5c5a4f75d2fae9f5482074652fc56f64fe30f3b7e227d20f4cc88370796ce20d21a03fe35d1e91286320e68ae921a469ba80c23fabf740dc03f3a8a2a0b021e5db58822927cad922331e837ba2ac8068d76443de39942357b78a41df48", 0x6d}], 0x4, 0x6ab, 0xe6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(r4, &(0x7f0000000380)='-}^\x00', 0x0) shmat(r0, &(0x7f0000ff8000/0x1000)=nil, 0x3000) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f00000003c0)) 14:51:12 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x103081, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x96, 0x1, {0x2, 0x1, 0x1, 0x2, 0x3}, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) fcntl$notify(r1, 0x402, 0x3) fcntl$getflags(r0, 0x408) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000140)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000180)={0x0, @adiantum, 0x0, @desc3}) fcntl$notify(r0, 0x402, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) preadv2(r3, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/44, 0x2c}], 0x1, 0x1, 0xff, 0x3) r4 = mq_open(&(0x7f0000000240)='}]\x00', 0x1, 0x5, &(0x7f0000000280)={0x4, 0x7fffffff, 0x9, 0x1f}) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000000300)={0x19a, 0x28, [0x65445062, 0xa0e6, 0x6, 0xfffffffffffffc00], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) fsetxattr$security_selinux(r1, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:restorecond_var_run_t:s0\x00', 0x2b, 0x0) recvmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000700)}, {&(0x7f0000000740)=""/42, 0x2a}, {&(0x7f0000000780)=""/52, 0x34}, {&(0x7f00000007c0)=""/111, 0x6f}, {&(0x7f0000000840)=""/220, 0xdc}, {&(0x7f0000000940)=""/163, 0xa3}], 0x6, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x100) newfstatat(0xffffffffffffff9c, &(0x7f0000001d80)='.\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresuid(&(0x7f0000001e40), &(0x7f0000001e80), &(0x7f0000001ec0)=0x0) sendmsg$unix(r0, &(0x7f0000002040)={&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000440)}, {&(0x7f0000000480)="048dee878c1b5ef24fdd6aebc30d764ddd1a2ee34a75a5482f4c96b37c67e1559bc3409597969e618cb2d532fc9e1041157a24f4b54305e78233f84169847156e97a13e6b75219bd3e360675576c369949da24437fafb93976719a080efdc50cc152f23b565b58629d9b8dd52d652c8bc5808106abad2b92314419bf6fad6ae73a", 0x81}, {&(0x7f0000000540)="128ee43c8f3885785c40d5abf88952dcfcc17277b163a515d14dbb68", 0x1c}, {&(0x7f0000000580)="13b7e83553b50a314456d3c5", 0xc}, {&(0x7f00000005c0)="679cf265f55df4860a20ea1fad19eb8261ec314fb1403fee80f7c49468729e0986eb264db8e064f9d4c8de8c2ffcdd541a844f43dda98af7351b383294d036dc287fa48e130048694a040ee46f3359bab27ace3b6453daabdb257492af", 0x5d}, {&(0x7f0000000640)="a4b387c9b96d69d3a81e47c6f698e9f971ad18007bff404c86fece38f723ee76e306", 0x22}], 0x6, &(0x7f0000001f80)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7}}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0xa0, 0x1}, 0x1010) [ 63.862167] audit: type=1400 audit(1665067872.757:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:51:12 executing program 7: r0 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom(r0, &(0x7f0000000000)=""/56, 0x38, 0x40002000, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stack\x00') sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x3, 0x7, 0x201, 0x0, 0x0, {0x55353441af5a1f26, 0x0, 0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6213}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x47}]}]}, 0x34}}, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)={{0x3, 0x2, 0x24, 0x132, 0xd0, 0x9, 0x35, 0xffff}, "166eb16ecfdc3482481b9b1f34cdc47f501456a6caea543a4b4b485ef10cdccee274a5e1100552ac3cef41f1cb0c59e8df8556bcd425178bff9c39e2e0cf1f09f7636f2cacac65b5c502c1c89e12abcf66", ['\x00']}, 0x171) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/bus/usb', 0x0, 0x111) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x2, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x4048811) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = pidfd_open(0x0, 0x0) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000600)) ppoll(&(0x7f0000000640)=[{r3, 0x1204}, {r4, 0x4020}, {r5, 0x1000}, {r0, 0x1240}, {r1, 0x8002}, {r2, 0x410}, {r2, 0x400}, {r2, 0x200}, {r0, 0x408}], 0x9, &(0x7f00000006c0), &(0x7f0000000700)={[0x100000001]}, 0x8) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000740), &(0x7f0000000780)=0x4) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x1) r6 = open$dir(&(0x7f00000008c0)='./file0\x00', 0x1, 0x90) pread64(r6, &(0x7f0000000900)=""/96, 0x60, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000980)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @empty}, 0x10) pidfd_getfd(r4, r4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000a00)='./file0\x00', 0xc80, 0x40) [ 65.154623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.155824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.157368] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.158365] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.160332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.161444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.162397] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.163450] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.164335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.165687] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.167157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.168327] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.169165] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.170118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.172335] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.173207] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.188762] Bluetooth: hci4: HCI_REQ-0x0c1a [ 65.194707] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.204339] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.212303] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.213748] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.216532] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.220280] Bluetooth: hci2: HCI_REQ-0x0c1a [ 65.221899] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 65.223231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.224416] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.226248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.230990] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.234973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.237005] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.238868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.240622] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.241826] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.243273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.244200] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.245288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.246836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.248098] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.250659] Bluetooth: hci3: HCI_REQ-0x0c1a [ 65.254312] Bluetooth: hci1: HCI_REQ-0x0c1a [ 65.257743] Bluetooth: hci0: HCI_REQ-0x0c1a [ 65.259779] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.264452] Bluetooth: hci5: HCI_REQ-0x0c1a [ 65.287996] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.288865] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.295377] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.296454] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 65.297715] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.308621] Bluetooth: hci6: HCI_REQ-0x0c1a [ 67.221746] Bluetooth: hci4: command 0x0409 tx timeout [ 67.221912] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 67.285205] Bluetooth: hci2: command 0x0409 tx timeout [ 67.286831] Bluetooth: hci5: command 0x0409 tx timeout [ 67.287783] Bluetooth: hci0: command 0x0409 tx timeout [ 67.288577] Bluetooth: hci1: command 0x0409 tx timeout [ 67.289363] Bluetooth: hci3: command 0x0409 tx timeout [ 67.349146] Bluetooth: hci6: command 0x0409 tx timeout [ 69.269122] Bluetooth: hci4: command 0x041b tx timeout [ 69.334158] Bluetooth: hci3: command 0x041b tx timeout [ 69.334562] Bluetooth: hci1: command 0x041b tx timeout [ 69.334926] Bluetooth: hci0: command 0x041b tx timeout [ 69.335329] Bluetooth: hci5: command 0x041b tx timeout [ 69.335708] Bluetooth: hci2: command 0x041b tx timeout [ 69.398115] Bluetooth: hci6: command 0x041b tx timeout [ 71.318592] Bluetooth: hci4: command 0x040f tx timeout [ 71.382106] Bluetooth: hci2: command 0x040f tx timeout [ 71.382147] Bluetooth: hci5: command 0x040f tx timeout [ 71.382496] Bluetooth: hci0: command 0x040f tx timeout [ 71.383258] Bluetooth: hci1: command 0x040f tx timeout [ 71.383577] Bluetooth: hci3: command 0x040f tx timeout [ 71.446069] Bluetooth: hci6: command 0x040f tx timeout [ 72.278144] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 73.365105] Bluetooth: hci4: command 0x0419 tx timeout [ 73.429129] Bluetooth: hci3: command 0x0419 tx timeout [ 73.429149] Bluetooth: hci1: command 0x0419 tx timeout [ 73.429555] Bluetooth: hci0: command 0x0419 tx timeout [ 73.429948] Bluetooth: hci5: command 0x0419 tx timeout [ 73.430349] Bluetooth: hci2: command 0x0419 tx timeout [ 73.493079] Bluetooth: hci6: command 0x0419 tx timeout [ 74.714777] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.716260] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.717526] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.720499] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.725672] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 74.726559] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.730169] Bluetooth: hci7: HCI_REQ-0x0c1a [ 76.757111] Bluetooth: hci7: command 0x0409 tx timeout [ 78.805088] Bluetooth: hci7: command 0x041b tx timeout [ 80.682089] ================================================================== [ 80.682622] BUG: KASAN: use-after-free in __lock_acquire+0x42c9/0x5e70 [ 80.683073] Read of size 8 at addr ffff88800e6ac018 by task kmemleak/54 [ 80.683516] [ 80.683638] CPU: 1 PID: 54 Comm: kmemleak Not tainted 6.0.0-next-20221006 #1 [ 80.684366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 80.688165] Call Trace: [ 80.688350] [ 80.688511] dump_stack_lvl+0x8b/0xb3 [ 80.688786] print_report+0x172/0x475 [ 80.689065] ? __lock_acquire+0x42c9/0x5e70 [ 80.689374] kasan_report+0xbb/0x1c0 [ 80.689647] ? __lock_acquire+0x42c9/0x5e70 [ 80.689986] __lock_acquire+0x42c9/0x5e70 [ 80.690294] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 80.690670] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 80.691037] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 80.691402] lock_acquire+0x1a2/0x530 [ 80.691685] ? kmemleak_scan+0x21d/0x16d0 [ 80.691986] ? lock_release+0x750/0x750 [ 80.692278] ? lock_release+0x750/0x750 [ 80.692565] ? io_schedule_timeout+0x150/0x150 [ 80.692906] ? _raw_spin_lock_irq+0x41/0x50 [ 80.693220] _raw_spin_lock_irq+0x32/0x50 [ 80.693527] ? kmemleak_scan+0x21d/0x16d0 [ 80.693835] kmemleak_scan+0x21d/0x16d0 [ 80.694119] ? paint_ptr+0xc0/0xc0 [ 80.694382] ? __kthread_parkme+0x15a/0x220 [ 80.694692] ? kmemleak_write.cold+0x29/0x29 [ 80.695084] kmemleak_scan_thread+0x8f/0xb1 [ 80.695493] kthread+0x2ed/0x3a0 [ 80.695821] ? kthread_complete_and_exit+0x40/0x40 [ 80.696286] ret_from_fork+0x22/0x30 [ 80.696648] [ 80.696870] [ 80.697035] Allocated by task 182: [ 80.697362] kasan_save_stack+0x1e/0x40 [ 80.697735] kasan_set_track+0x21/0x30 [ 80.698116] __kasan_slab_alloc+0x58/0x70 [ 80.698508] kmem_cache_alloc+0x1a9/0x3e0 [ 80.698894] __create_object+0x3d/0xc10 [ 80.699264] kmemleak_alloc_percpu+0xa1/0x140 [ 80.699692] pcpu_alloc+0x7f4/0x10a0 [ 80.700051] __percpu_counter_init+0x10d/0x2e0 [ 80.700488] wb_init+0x607/0x810 [ 80.700813] wb_get_create+0x23a/0x1180 [ 80.701189] __inode_attach_wb+0x2e6/0x880 [ 80.701586] __mark_inode_dirty+0x9c6/0xe60 [ 80.702005] touch_atime+0x644/0x700 [ 80.702356] filemap_read+0x999/0xb60 [ 80.702715] generic_file_read_iter+0x3cd/0x530 [ 80.703071] ext4_file_read_iter+0x182/0x490 [ 80.703387] __kernel_read+0x2cb/0x7d0 [ 80.703668] kernel_read+0xbf/0x1c0 [ 80.703934] bprm_execve+0x70e/0x1920 [ 80.704205] do_execveat_common+0x72c/0x890 [ 80.704508] __x64_sys_execve+0x8f/0xc0 [ 80.704793] do_syscall_64+0x3b/0x90 [ 80.705063] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.705433] [ 80.705556] Freed by task 1226: [ 80.705796] kasan_save_stack+0x1e/0x40 [ 80.706074] kasan_set_track+0x21/0x30 [ 80.706358] kasan_save_free_info+0x2a/0x50 [ 80.706660] __kasan_slab_free+0x106/0x190 [ 80.706960] kmem_cache_free+0xf7/0x610 [ 80.707241] rcu_core+0x7e2/0x2080 [ 80.707495] __do_softirq+0x1c3/0x8f5 [ 80.707769] [ 80.707890] Last potentially related work creation: [ 80.708232] kasan_save_stack+0x1e/0x40 [ 80.708518] __kasan_record_aux_stack+0x95/0xb0 [ 80.708854] call_rcu+0x6a/0xa30 [ 80.709100] kmemleak_free_percpu+0x9a/0x120 [ 80.709420] free_percpu+0x2c/0xec0 [ 80.709677] percpu_counter_destroy+0x11a/0x1c0 [ 80.710022] wb_exit+0x5e/0xb0 [ 80.710260] cgwb_release_workfn+0x25d/0x3f0 [ 80.710586] process_one_work+0xa17/0x16a0 [ 80.710900] worker_thread+0x637/0x1260 [ 80.711187] kthread+0x2ed/0x3a0 [ 80.711434] ret_from_fork+0x22/0x30 [ 80.711703] [ 80.711827] The buggy address belongs to the object at ffff88800e6ac000 [ 80.711827] which belongs to the cache kmemleak_object of size 368 [ 80.712699] The buggy address is located 24 bytes inside of [ 80.712699] 368-byte region [ffff88800e6ac000, ffff88800e6ac170) [ 80.713485] [ 80.713615] The buggy address belongs to the physical page: [ 80.714014] page:00000000c592e60c refcount:1 mapcount:0 mapping:0000000000000000 index:0xdead000000000100 pfn:0xe6ac [ 80.714744] head:00000000c592e60c order:1 compound_mapcount:0 compound_pincount:0 [ 80.715267] flags: 0x100000000010200(slab|head|node=0|zone=1) [ 80.715682] raw: 0100000000010200 ffff888007c4f780 dead000000120012 0000000000000000 [ 80.716220] raw: dead000000000100 dead000000000122 00000001ffffffff 0000000000000000 [ 80.716754] page dumped because: kasan: bad access detected [ 80.717147] [ 80.717266] Memory state around the buggy address: [ 80.717607] ffff88800e6abf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.718121] ffff88800e6abf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.718622] >ffff88800e6ac000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.719111] ^ [ 80.719399] ffff88800e6ac080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.719892] ffff88800e6ac100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 80.720392] ================================================================== [ 80.720878] Disabling lock debugging due to kernel taint VM DIAGNOSIS: 14:51:29 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888020fdbef8 RCX=ffffffff8129c68a RDX=1ffffffff0d9ace3 RSI=0000000000000008 RDI=ffffffff86cd6718 RBP=ffffffff86cd6660 RSP=ffff88801814faa8 R8 =0000000000000000 R9 =ffffffff86cd57c7 R10=fffffbfff0d9aaf8 R11=0000000000000001 R12=ffff888020fdb580 R13=ffff888020fdbef8 R14=ffffffff854cf858 R15=0000000000040000 RIP=ffffffff8129c6c4 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd3485228e0 CR3=000000001b57c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff000000000000ffffffffffff0000 XMM03=ffffffffff00ffffffffffff00000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823c0801 RDI=ffffffff8765c9e0 RBP=ffffffff8765c9a0 RSP=ffff88800fee7608 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000061 R11=0000000000000001 R12=0000000000000061 R13=ffffffff8765c9a0 R14=0000000000000010 R15=ffffffff823c07f0 RIP=ffffffff823c0859 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f263b6a5368 CR3=0000000010040000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000