Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:9082' (ECDSA) to the list of known hosts. 2022/09/11 18:30:34 fuzzer started 2022/09/11 18:30:34 dialing manager at localhost:44773 syzkaller login: [ 28.723540] cgroup: Unknown subsys name 'net' [ 28.767784] cgroup: Unknown subsys name 'rlimit' 2022/09/11 18:30:48 syscalls: 201 2022/09/11 18:30:48 code coverage: enabled 2022/09/11 18:30:48 comparison tracing: enabled 2022/09/11 18:30:48 extra coverage: enabled 2022/09/11 18:30:48 setuid sandbox: enabled 2022/09/11 18:30:48 namespace sandbox: enabled 2022/09/11 18:30:48 Android sandbox: enabled 2022/09/11 18:30:48 fault injection: enabled 2022/09/11 18:30:48 leak checking: enabled 2022/09/11 18:30:48 net packet injection: enabled 2022/09/11 18:30:48 net device setup: enabled 2022/09/11 18:30:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/11 18:30:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/11 18:30:48 USB emulation: enabled 2022/09/11 18:30:48 hci packet injection: enabled 2022/09/11 18:30:48 wifi device emulation: failed to parse kernel version (6.0.0-rc4-next-20220909) 2022/09/11 18:30:48 802.15.4 emulation: enabled 2022/09/11 18:30:48 fetching corpus: 0, signal 0/0 (executing program) 2022/09/11 18:30:49 starting 8 fuzzer processes 18:30:49 executing program 6: sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r0 = syz_open_dev$vcsa(&(0x7f0000000540), 0x4c8a, 0x8b00) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0xfc, 0x4, 0x21, @private0, @local, 0x7800, 0x10, 0x3f, 0x200}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000800)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) r6 = accept4(0xffffffffffffffff, &(0x7f0000000980)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000a00)=0x80, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000a40)={0x504, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r3}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x95, 0x3f, 0x0, 0x5}, {0x6, 0x80, 0x1f, 0x1ecf}, {0x6, 0x5b, 0x2, 0x1}, {0x5, 0xff, 0x0, 0xe00}, {0x9ec, 0x9, 0x7f, 0x7fff}, {0x6, 0xd9, 0x4, 0x5}, {0x7, 0x81, 0x1, 0x7fffffff}, {0x100, 0x2, 0x81, 0x9}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}]}, 0x504}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100e2e2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x38, r8, 0xd03, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20042801}, 0x48000) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000011c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000012c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f00000014c0)={'syztnl2\x00', &(0x7f0000001440)={'sit0\x00', r5, 0x2f, 0x2, 0x3f, 0x4, 0x4, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x3, 0xfffffeff}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000001740)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001700)={&(0x7f0000001500)={0x1e8, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x24044000}, 0x4000) recvmsg$unix(r0, &(0x7f0000002b80)={&(0x7f0000001780), 0x6e, &(0x7f0000002a80)=[{&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/83, 0x53}, {&(0x7f0000002900)=""/112, 0x70}, {&(0x7f0000002980)=""/83, 0x53}, {&(0x7f0000002a00)=""/77, 0x4d}], 0x6, &(0x7f0000002b00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2020) sendmsg$BATADV_CMD_TP_METER_CANCEL(r14, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x34, 0x0, 0x402, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x20000001) ioctl$LOOP_SET_FD(r13, 0x4c00, r12) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) 18:30:49 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000040)={'some', 0x20, 0x4, 0x20, 0x3}, 0x2f) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'macvlan1\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd0, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008001) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) r4 = syz_open_dev$vcsa(&(0x7f0000000440), 0x9, 0x149300) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000540)={0x374, r5, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x5b}}}}, [@NL80211_ATTR_IE={0x1d7, 0x2a, [@random_vendor={0xdd, 0xf7, "3af9a7d41e1fde3a058df198fe3253d47ae4b495d02096d389af53f57d22dea76718bcd0e870c6a4028afbf5bb4cbe435d8c7ea9cb5885b700f74e08169c9358eec954085d1be00fa6c8b5b2dda4fa2f9a5a90380fb39652c6c64f84c5158c86a5e0d163e073777b343819963ea171e5823ba2040f555ce0da6364090c652996c6e6e74eceec2481f2adea7226ae2af2350328635c65adea48269471f1a4284d03789a73f828e246599ac359f3bb694c04d3de7c2183e0519998dd13e2b1857972b6de57f6f453ea3d24cfd15f93aa3a5041ce94353daca4c9866517081361d642166d3162bf65dc562b7b83fd643ebcb94a80ad2f064a"}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0xf8, @device_b, 0x9, "", 0x2, 0x3, @broadcast}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @mesh_chsw={0x76, 0x6, {0xb6, 0x7, 0x4, 0x100}}, @dsss={0x3, 0x1, 0x1dc}, @tim={0x5, 0x85, {0x1c, 0x76, 0x6a, "14fa0f33811a413a8c57a75de1bab9836ed24e926f3fa910e5e2970d65165de796e5c87a88ece1035b02b6a0fa02f79909d6772a5c6ee997998ddef93430e3e9d876f3ff4c7263c63cc929687a79449654eafa04a353e6cc6bf33401e572669ef87d327b13cb9012ed6f73ed4f4863419b732588d792d4dd3199b3734c70b9465ac2"}}, @mesh_chsw={0x76, 0x6, {0xff, 0x4, 0x38, 0x5}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x152, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0xac, 0x1f}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x34}}, @ht={0x2d, 0x1a, {0xc, 0x3, 0x1, 0x0, {0x7, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x5, 0x9}}, @ssid={0x0, 0x6, @default_ap_ssid}, @random_vendor={0xdd, 0xbd, "3c67ff7eeae32607ac133e3b6fca9d9a85db3c69d3abec16c3313df73dad7d2d6691db32f65d46d90ab58eecd09cc7af2283751d3f6eaf5c14a45a640daf0c968b13d5abbe05cc6c8acea1772e4e5f0eb0b90f6232d91b50b35e8a20ea2b1ced397aba0522739c50acae102ce49ab9f9c936fc2a34114ee744999c8cb35c2cc772af96dc61a168f8762551cec0ef3d08d7daa8083801bb51506d3ef38aeb915d864c09283bd8bc641c0dc0130c32b2aa41046da9ff16f2b4fa86ee0f4f"}, @supported_rates={0x1, 0x1, [{0x30, 0x1}]}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x4, 0x2, @device_a, 0x5, "", 0x5, 0x7, @device_a, 0x791}}, @ht={0x2d, 0x1a, {0x10, 0x3, 0x4, 0x0, {0x100, 0x88, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x801, 0x1, 0x16}}, @rann={0x7e, 0x15, {{0x0, 0x7e}, 0xe3, 0x8b, @device_b, 0x5, 0xffffffff, 0x3}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xa8f}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfffa}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1ff}]}, 0x374}, 0x1, 0x0, 0x0, 0x8084}, 0x24000054) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1d4, r5, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f60d1122da477b8a"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="df8217cb56944448f51f0905118b7600"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="dce0bf220c65aa43890962d76a029ec97a52516d1c3536e5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b71859e2b155abc7"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xee1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="da7f6a6c8fd7438b107a24929a6449ac3d635c437af32a71"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "321d65921a9aaa6f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="88836bbe18ac587e0ff9b88b592325917fc18d4934b300e4aa66d135a6b0dd84"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0f50e841f338d7a9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a6fb0acd930da5837398971d5cc9fe4f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6c3f75a3ada71278"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="dc721eff354dfa97ab9797a56b888f875cd5f36e766e080c937d9db966e3c53e"}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8af070b4f768e7ecddb9407869b50a02f562e4117178f909"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1fb6b50d5293a2ea07b10bc733b14100"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b577833f3ba7db0f795d1967e0b33fa78e0e41b1035b20c5"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="be2c778b98c72720a131e66429388a0371846cbed78949bcd34c6aac9fe842fa"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b4ee514a6947c78a04e8ef01b9b48939"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c1196bbe2e9cc51a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2a24d46d1d4e47b7"}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40801}, 0x24008014) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0x98, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x91}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x98}}, 0x1004000c) 18:30:49 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x14}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfff}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x605, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x8080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x700, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x13fa466ab964b77c}, 0x8000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c0}, 0x4008011) r5 = accept4(0xffffffffffffffff, &(0x7f0000000780)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000800)=0x80, 0x800) sendmsg$NL80211_CMD_TDLS_OPER(r5, 0xfffffffffffffffe, 0x4004) syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x134, r3, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x45}}}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4f4c87d9ade5413d2e1f055f412af7b1"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7f}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="88b29bc3bd8a593ee2622c65356987dac0fa7cb648c88868"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ec598d785adeca9083dd1c4d4b52823c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d6580030bb9dc0c8"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1ecc311ab723d6b387e2ded5848965a6070712477e07113233f16045f647b3c2"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="eb6c611f86682619c74a6aa7646824104625f20437446535452d36ede94330f7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xb1}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b72e0fbbccaca0a618bc8cfcd8d20df8"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7f7d4b57a93b436002f746c98767c3daed71fa8c7bd48042"}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000004) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20040088) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044805}, 0x24040090) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, r3, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffffffff, 0x21}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040004}, 0x8000) 18:30:49 executing program 4: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0xfd, 0x6, 0x2, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x20, 0x40, 0x80, 0x8001}}) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = syz_open_dev$vcsa(&(0x7f0000000200), 0x8, 0x1) write$tun(r2, &(0x7f0000000240)={@val={0x0, 0x9100}, @val={0x2, 0x0, 0x7, 0x9, 0x0, 0x7}, @mpls={[{}, {0x8}, {0xf4e3}], @generic="7823864975ce71ec94231f80d89de0c3fd823aa407adad9c427653291f22f2a676370bc0b00341de0bb331e20ec7bd70b6273b936474f81709d0cea1a0a10d093cf89e33ba257dd71d297cb1b21f5c3171b3cab40541e8beb7b7620b7ce72a8b08a71a67147a659722a70298698cce6bb550b5049b4fd8aefe75d4a1ad5b08a87a49c1e63c9623fcd6e2"}}, 0xa4) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x5, 0x240) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x8805}, 0x20000884) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0x840) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r5, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xa3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x4010) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000740)="37b1a7109d118cf0d0ea63cb060f52f0", 0x10) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x100c0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000880)) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000008c0)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r1, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xef}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x46}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 41.576380] audit: type=1400 audit(1662921049.315:6): avc: denied { execmem } for pid=284 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:30:49 executing program 1: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003d00)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/62, 0x3e}, {&(0x7f00000000c0)=""/41, 0x29}, {&(0x7f0000000100)=""/241, 0xf1}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/185, 0xb9}], 0x5}}, {{&(0x7f0000001340)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f00000013c0)=""/22, 0x16}, {&(0x7f0000001400)=""/236, 0xec}, {&(0x7f0000001500)=""/68, 0x44}], 0x3, &(0x7f00000015c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001600)=@abs, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000001680)=""/55, 0x37}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x2}}, {{&(0x7f0000002700)=@abs, 0x6e, &(0x7f0000003780)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, &(0x7f00000037c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003840), 0x6e, &(0x7f0000003900)=[{&(0x7f00000038c0)=""/36, 0x24}], 0x1, &(0x7f0000003940)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000003a40), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000003ac0)=""/130, 0x82}, {&(0x7f0000003b80)=""/56, 0x38}, {&(0x7f0000003bc0)=""/251, 0xfb}], 0x3}}], 0x6, 0x10041, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000003e80)) ioctl$TUNSETLINK(r3, 0x400454cd, 0x322) connect$inet6(r4, &(0x7f0000003ec0)={0xa, 0x4e24, 0x8001, @loopback, 0xb5}, 0x1c) connect$inet6(r1, &(0x7f0000003f00)={0xa, 0x4e20, 0x81, @mcast2, 0x74}, 0x1c) r6 = socket$inet6(0xa, 0x80000, 0xff) socketpair(0x9, 0x800, 0x5, &(0x7f0000003f80)={0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000003f40), r7) recvmmsg$unix(r4, &(0x7f0000006f80)=[{{&(0x7f0000004080), 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004100)=""/246, 0xf6}, {&(0x7f0000004200)=""/105, 0x69}, {&(0x7f0000004280)=""/162, 0xa2}, {&(0x7f0000004340)=""/164, 0xa4}, {&(0x7f0000004400)=""/205, 0xcd}, {&(0x7f0000004500)=""/185, 0xb9}, {&(0x7f00000045c0)=""/254, 0xfe}], 0x7, &(0x7f0000004740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000004800)=""/214, 0xd6}, {&(0x7f0000004900)=""/152, 0x98}, {&(0x7f00000049c0)=""/242, 0xf2}], 0x3, &(0x7f0000004b00)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f0000004b40)=""/227, 0xe3}], 0x1}}, {{&(0x7f0000004c80)=@abs, 0x6e, &(0x7f0000006e80)=[{&(0x7f0000004d00)=""/98, 0x62}, {&(0x7f0000004d80)=""/29, 0x1d}, {&(0x7f0000004dc0)=""/4096, 0x1000}, {&(0x7f0000005dc0)=""/44, 0x2c}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/56, 0x38}, {&(0x7f0000006e40)=""/9, 0x9}], 0x7, &(0x7f0000006f00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x4, 0x3023, &(0x7f0000007080)={0x0, 0x989680}) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000007300)={&(0x7f00000070c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000072c0)={&(0x7f0000007100)={0x1b0, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x78, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd3d2c85bd8a05cfb}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x94, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4048010}, 0x40000000) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r11, &(0x7f0000007340)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf3}, 0xe) connect$bt_l2cap(r3, &(0x7f0000007380)={0x1f, 0xf9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x2}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000007480)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000074c0)={'batadv0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000075c0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@multicast1}}, &(0x7f00000076c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000007700)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000007940)={&(0x7f00000073c0)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f0000007900)={&(0x7f0000007740)={0x1a0, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) socket$unix(0x1, 0x5, 0x0) accept4$inet(r0, 0x0, &(0x7f0000007980), 0x800) 18:30:49 executing program 7: pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000c, r0) pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8, r0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x42400, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x4040) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) pkey_alloc(0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000000840)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/224, 0xe0}], 0x7, &(0x7f0000000780)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x1, 0x20, &(0x7f00000008c0)={r4, r5+10000000}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r9, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000e80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c40)={0x1ec, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x40, 0x0, 0x81}, {0x9, 0x3, 0xff, 0xf7e}, {0x5, 0x4, 0x80, 0x7}, {0x8000, 0x8, 0x1, 0x54}, {0x2, 0x0, 0x8}, {0x100, 0x4, 0x0, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4}, 0x20008800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000ec0)={'batadv_slave_0\x00'}) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000f00)={{0xff12, 0x1}, {0x4, 0xe9e}, 0x973}) r11 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, r11) 18:30:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', r1, 0x4, 0x8, 0x9, 0x8, 0x38, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x87, 0x7, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f0000000240)=""/53, 0x35}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/1, 0x1}], 0x4, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000000480), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000500)=""/110, 0x6e}], 0x1, &(0x7f00000005c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000600), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000680)=""/8, 0x8}, {&(0x7f00000006c0)=""/92, 0x5c}, {&(0x7f0000000740)=""/24, 0x18}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000880)=""/245, 0xf5}], 0x5, &(0x7f0000000a00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000c00)=""/239, 0xef}, {&(0x7f0000000d00)=""/134, 0x86}], 0x2, &(0x7f0000000e00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000000ec0), 0x6e, &(0x7f0000001100)=[{&(0x7f0000000f40)=""/107, 0x6b}, {&(0x7f0000000fc0)=""/226, 0xe2}, {&(0x7f00000010c0)=""/7, 0x7}], 0x3}}, {{&(0x7f0000001140), 0x6e, &(0x7f0000001240)=[{&(0x7f00000011c0)=""/79, 0x4f}], 0x1}}, {{&(0x7f0000001280), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001300)=""/135, 0x87}, {&(0x7f00000013c0)=""/191, 0xbf}, {&(0x7f0000001480)=""/107, 0x6b}, {&(0x7f0000001500)=""/62, 0x3e}, {&(0x7f0000001540)=""/51, 0x33}, {&(0x7f0000001580)=""/202, 0xca}, {&(0x7f0000001680)=""/59, 0x3b}], 0x7, &(0x7f0000001740)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001940)=""/128, 0x80}, {&(0x7f00000019c0)=""/120, 0x78}, {&(0x7f0000001a40)=""/163, 0xa3}, {&(0x7f0000001b00)=""/8, 0x8}, {&(0x7f0000001b40)=""/142, 0x8e}], 0x5}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001c80)=""/241, 0xf1}, {&(0x7f0000001d80)=""/35, 0x23}, {&(0x7f0000001dc0)=""/154, 0x9a}, {&(0x7f0000001e80)}, {&(0x7f0000001ec0)=""/81, 0x51}], 0x5, &(0x7f0000001fc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002040), 0x6e, &(0x7f00000021c0)=[{&(0x7f00000020c0)=""/107, 0x6b}, {&(0x7f0000002140)=""/128, 0x80}], 0x2, &(0x7f0000002200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}], 0xa, 0x20, &(0x7f0000002540)={0x0, 0x3938700}) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000025c0), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000026c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x78, r13, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8005}, 0x24008080) ioctl$BLKTRACESTOP(r12, 0x1275, 0x0) ioctl$PTP_EXTTS_REQUEST(r9, 0x40103d02, &(0x7f0000002700)={0xfffffffa, 0x4}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000002740)=0x2, 0x4) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f00000029c0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002980)={&(0x7f00000027c0)={0x190, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0xb}}}}, [@NL80211_ATTR_IE={0x170, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @fast_bss_trans={0x37, 0x99, {0x2, 0x4, "5486304fc3900047adefef141512b30d", "51d87c93818053adfe8a90d355a4f9cc6086cc217dd5ec2627b0c11c09657b5c", "202a61b574bd3b35ef0b7f25e9d77e979335fda88de3e5af3adb601d037c90c3", [{0x20, 0x12, "96526bb8470262d1485f5bc4874b4fa31b47"}, {0x1, 0x9, "86109058cf0d3c4315"}, {0x4, 0x20, "9a959270d1ff6516f379b263b2d495f80801e42fce74873d032ea719e1bdacea"}, {0x2, 0x4, "2c147310"}]}}, @mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0x86, "d7ece394770e82e5489b9f79881c54c3953754b255bd9b99eb11907615a69e24c7c6de1772b0e33cac77f4bd31fd73eb4e28c9b53fb611d7a5fc219033f344fd9a633638aa7839fa5e317716511644fc4ede529b16eea55ac33e14cf97cab392621df697d28790341691c7e4e0bcc7e604891a2dd9beb0557384ad0c7a3e0b00efbd546d3b1c"}, @erp={0x2a, 0x1}, @tim={0x5, 0x28, {0x40, 0x14, 0x0, "9824fb1685c3ec5288a8acb6b881857e66a0625442d0b8e87b88975ce4564bfe0f630936dd"}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40840}, 0x404c0d1) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x80004200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$PTP_SYS_OFFSET_EXTENDED(r11, 0xc4c03d09, &(0x7f0000002b00)={0x12}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003000), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000030c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000003180)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000003280)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003240)={&(0x7f00000031c0)={0x7c, r14, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x6480ae20e4a79b3c}, 0x20040000) recvmmsg$unix(r6, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f00000032c0)=""/226, 0xe2}, {&(0x7f00000033c0)=""/219, 0xdb}, {&(0x7f00000034c0)=""/65, 0x41}, {&(0x7f0000003540)=""/215, 0xd7}], 0x4, &(0x7f0000003680)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000003780)=@abs, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000003800)=""/21, 0x15}, {&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/67, 0x43}, {&(0x7f00000039c0)=""/4096, 0x1000}], 0x4, &(0x7f0000004a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000004a80)=@abs, 0x6e, &(0x7f0000004d40)=[{&(0x7f0000004b00)=""/127, 0x7f}, {&(0x7f0000004b80)=""/151, 0x97}, {&(0x7f0000004c40)=""/243, 0xf3}], 0x3, &(0x7f0000004d80)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004dc0), 0x6e, &(0x7f0000004f80)=[{&(0x7f0000004e40)=""/147, 0x93}, {&(0x7f0000004f00)=""/77, 0x4d}], 0x2}}, {{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000004fc0)=""/52, 0x34}, {&(0x7f0000005000)}, {&(0x7f0000005040)=""/101, 0x65}], 0x3}}], 0x5, 0x10140, 0x0) ioctl$PTP_CLOCK_GETCAPS(r18, 0x80503d01, &(0x7f0000005240)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r17, 0x6, 0x14, &(0x7f00000052c0), 0x4) 18:30:49 executing program 0: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/25, 0x19}, {&(0x7f0000000040)=""/54, 0x36}], 0x2, &(0x7f00000000c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000100), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/71, 0x47}, {&(0x7f0000000280)=""/113, 0x71}, {&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f00000003c0)=""/151, 0x97}, {&(0x7f0000000480)=""/228, 0xe4}, {&(0x7f0000000580)=""/18, 0x12}, {&(0x7f00000005c0)=""/238, 0xee}], 0x8, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/1, 0x1}, {&(0x7f0000000a00)=""/142, 0x8e}, {&(0x7f0000000ac0)=""/133, 0x85}, {&(0x7f0000000b80)=""/67, 0x43}], 0x5, &(0x7f0000000c80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}], 0x3, 0x4000a121, &(0x7f0000000e00)={0x0, 0x989680}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x1800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x41) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8800800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1cc6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0x8001) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r4) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x40, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x53}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x2000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001180)={'wlan1\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004080) r9 = syz_open_dev$loop(&(0x7f00000012c0), 0x1, 0x0) ioctl$BLKTRACESTOP(r9, 0x1275, 0x0) clock_gettime(0x0, &(0x7f0000003f80)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000003d80)=[{{&(0x7f0000001300), 0x6e, &(0x7f0000001980)=[{&(0x7f0000001380)=""/218, 0xda}, {&(0x7f0000001480)=""/237, 0xed}, {&(0x7f0000001580)=""/209, 0xd1}, {&(0x7f0000001680)=""/164, 0xa4}, {&(0x7f0000001740)=""/193, 0xc1}, {&(0x7f0000001840)=""/221, 0xdd}, {&(0x7f0000001940)=""/57, 0x39}], 0x7, &(0x7f0000001a00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000001a80), 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001b00)=""/121, 0x79}, {&(0x7f0000001b80)=""/60, 0x3c}], 0x2, &(0x7f0000001c00)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c40)=""/131, 0x83}, {&(0x7f0000001d00)=""/120, 0x78}, {&(0x7f0000001d80)=""/14, 0xe}], 0x3, &(0x7f0000001e00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000001f00), 0x6e, &(0x7f0000003100)=[{&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/255, 0xff}, {&(0x7f0000003080)=""/111, 0x6f}], 0x3, &(0x7f0000003140)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000003180)=@abs, 0x6e, &(0x7f0000003300)=[{&(0x7f0000003200)=""/41, 0x29}, {&(0x7f0000003240)=""/132, 0x84}], 0x2, &(0x7f0000003340)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000003440), 0x6e, &(0x7f0000003740)=[{&(0x7f00000034c0)=""/163, 0xa3}, {&(0x7f0000003580)=""/80, 0x50}, {&(0x7f0000003600)=""/220, 0xdc}, {&(0x7f0000003700)=""/25, 0x19}], 0x4, &(0x7f0000003780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000003880)=@abs, 0x6e, &(0x7f0000003bc0)=[{&(0x7f0000003900)=""/25, 0x19}, {&(0x7f0000003940)=""/165, 0xa5}, {&(0x7f0000003a00)=""/74, 0x4a}, {&(0x7f0000003a80)}, {&(0x7f0000003ac0)=""/208, 0xd0}], 0x5}}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003c40)=""/162, 0xa2}], 0x1, &(0x7f0000003d40)=[@cred={{0x1c}}], 0x20}}], 0x8, 0x20, &(0x7f0000003fc0)={r10, r11+10000000}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r12, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004080)={&(0x7f0000004040)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x1) r15 = accept4(r14, &(0x7f0000004100)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000004180)=0x80, 0x81000) getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f00000041c0)={{{@in=@multicast1, @in=@multicast1}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f00000042c0)=0xe8) recvfrom$unix(r7, &(0x7f0000004300)=""/48, 0x30, 0x1, &(0x7f0000004340)=@file={0x1, './file0\x00'}, 0x6e) r16 = syz_open_dev$vcsu(&(0x7f00000043c0), 0xff, 0x480041) ioctl$TUNSETSNDBUF(r16, 0x400454d4, &(0x7f0000004400)=0x2) sched_rr_get_interval(r13, &(0x7f0000004440)) r17 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r17, &(0x7f0000004780)={&(0x7f0000004480), 0x6e, &(0x7f0000004740)=[{&(0x7f0000004500)=""/93, 0x5d}, {&(0x7f0000004580)=""/160, 0xa0}, {&(0x7f0000004640)=""/3, 0x3}, {&(0x7f0000004680)=""/161, 0xa1}], 0x4}, 0x0) [ 42.693791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 42.695112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 42.698268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 42.700217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 42.702827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 42.704978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 42.708565] Bluetooth: hci0: HCI_REQ-0x0c1a [ 42.766314] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 42.768297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 42.770578] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 42.772940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 42.774813] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 42.776310] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 42.784199] Bluetooth: hci3: HCI_REQ-0x0c1a [ 42.791570] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 42.802615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 42.804716] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 42.835168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 42.841310] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 42.843212] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 42.851166] Bluetooth: hci2: HCI_REQ-0x0c1a [ 42.883773] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 42.884555] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 42.887684] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 42.889917] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 42.891059] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 42.891673] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 42.894793] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 42.894856] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 42.896954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 42.899773] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 42.902989] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 42.903388] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 42.905506] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 42.905570] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 42.926163] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 42.926304] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 42.927867] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 42.929301] Bluetooth: hci6: HCI_REQ-0x0c1a [ 42.929402] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 42.934347] Bluetooth: hci7: HCI_REQ-0x0c1a [ 42.987089] Bluetooth: hci5: HCI_REQ-0x0c1a [ 44.726223] Bluetooth: hci0: command 0x0409 tx timeout [ 44.790028] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 44.790055] Bluetooth: hci3: command 0x0409 tx timeout [ 44.854084] Bluetooth: hci2: command 0x0409 tx timeout [ 44.854108] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 44.982096] Bluetooth: hci6: command 0x0409 tx timeout [ 44.982186] Bluetooth: hci7: command 0x0409 tx timeout [ 45.046257] Bluetooth: hci5: command 0x0409 tx timeout [ 46.774048] Bluetooth: hci0: command 0x041b tx timeout [ 46.838105] Bluetooth: hci3: command 0x041b tx timeout [ 46.902041] Bluetooth: hci2: command 0x041b tx timeout [ 47.030055] Bluetooth: hci7: command 0x041b tx timeout [ 47.031031] Bluetooth: hci6: command 0x041b tx timeout [ 47.094080] Bluetooth: hci5: command 0x041b tx timeout [ 48.822032] Bluetooth: hci0: command 0x040f tx timeout [ 48.886356] Bluetooth: hci3: command 0x040f tx timeout [ 48.950060] Bluetooth: hci2: command 0x040f tx timeout [ 49.078140] Bluetooth: hci6: command 0x040f tx timeout [ 49.078781] Bluetooth: hci7: command 0x040f tx timeout [ 49.142092] Bluetooth: hci5: command 0x040f tx timeout [ 49.398089] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 49.463030] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 50.870086] Bluetooth: hci0: command 0x0419 tx timeout [ 50.934035] Bluetooth: hci3: command 0x0419 tx timeout [ 50.998049] Bluetooth: hci2: command 0x0419 tx timeout [ 51.126097] Bluetooth: hci7: command 0x0419 tx timeout [ 51.126584] Bluetooth: hci6: command 0x0419 tx timeout [ 51.190067] Bluetooth: hci5: command 0x0419 tx timeout [ 53.686026] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 53.814041] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 57.910038] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 58.102032] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 60.192370] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.201221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.203909] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.209152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.211752] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.213187] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.218690] Bluetooth: hci1: HCI_REQ-0x0c1a [ 62.263029] Bluetooth: hci1: command 0x0409 tx timeout [ 62.390082] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 64.310042] Bluetooth: hci1: command 0x041b tx timeout [ 66.359053] Bluetooth: hci1: command 0x040f tx timeout [ 66.743023] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 68.406065] Bluetooth: hci1: command 0x0419 tx timeout [ 71.030067] Bluetooth: hci4: Opcode 0x c03 failed: -110 18:31:19 executing program 7: pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000c, r0) pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8, r0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x42400, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x4040) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) pkey_alloc(0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000000840)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/224, 0xe0}], 0x7, &(0x7f0000000780)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x1, 0x20, &(0x7f00000008c0)={r4, r5+10000000}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r9, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000e80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c40)={0x1ec, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x40, 0x0, 0x81}, {0x9, 0x3, 0xff, 0xf7e}, {0x5, 0x4, 0x80, 0x7}, {0x8000, 0x8, 0x1, 0x54}, {0x2, 0x0, 0x8}, {0x100, 0x4, 0x0, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4}, 0x20008800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000ec0)={'batadv_slave_0\x00'}) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000f00)={{0xff12, 0x1}, {0x4, 0xe9e}, 0x973}) r11 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, r11) 18:31:19 executing program 7: pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000c, r0) pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8, r0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x42400, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x4040) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) pkey_alloc(0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000000840)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/224, 0xe0}], 0x7, &(0x7f0000000780)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x1, 0x20, &(0x7f00000008c0)={r4, r5+10000000}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r9, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000e80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c40)={0x1ec, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x40, 0x0, 0x81}, {0x9, 0x3, 0xff, 0xf7e}, {0x5, 0x4, 0x80, 0x7}, {0x8000, 0x8, 0x1, 0x54}, {0x2, 0x0, 0x8}, {0x100, 0x4, 0x0, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4}, 0x20008800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000ec0)={'batadv_slave_0\x00'}) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000f00)={{0xff12, 0x1}, {0x4, 0xe9e}, 0x973}) r11 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, r11) 18:31:19 executing program 7: pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000c, r0) pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8, r0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x42400, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x4040) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) pkey_alloc(0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000000840)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/224, 0xe0}], 0x7, &(0x7f0000000780)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x1, 0x20, &(0x7f00000008c0)={r4, r5+10000000}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r9, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000e80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c40)={0x1ec, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x40, 0x0, 0x81}, {0x9, 0x3, 0xff, 0xf7e}, {0x5, 0x4, 0x80, 0x7}, {0x8000, 0x8, 0x1, 0x54}, {0x2, 0x0, 0x8}, {0x100, 0x4, 0x0, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4}, 0x20008800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000ec0)={'batadv_slave_0\x00'}) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000f00)={{0xff12, 0x1}, {0x4, 0xe9e}, 0x973}) r11 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, r11) 18:31:19 executing program 7: pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000c, r0) pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8, r0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x42400, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x4040) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) pkey_alloc(0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000000840)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/224, 0xe0}], 0x7, &(0x7f0000000780)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x1, 0x20, &(0x7f00000008c0)={r4, r5+10000000}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r9, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000e80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c40)={0x1ec, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x40, 0x0, 0x81}, {0x9, 0x3, 0xff, 0xf7e}, {0x5, 0x4, 0x80, 0x7}, {0x8000, 0x8, 0x1, 0x54}, {0x2, 0x0, 0x8}, {0x100, 0x4, 0x0, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4}, 0x20008800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000ec0)={'batadv_slave_0\x00'}) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000f00)={{0xff12, 0x1}, {0x4, 0xe9e}, 0x973}) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 18:31:19 executing program 7: pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000c, r0) pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8, r0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x42400, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x4040) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) pkey_alloc(0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000000840)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/224, 0xe0}], 0x7, &(0x7f0000000780)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x1, 0x20, &(0x7f00000008c0)={r4, r5+10000000}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r9, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000e80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c40)={0x1ec, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x40, 0x0, 0x81}, {0x9, 0x3, 0xff, 0xf7e}, {0x5, 0x4, 0x80, 0x7}, {0x8000, 0x8, 0x1, 0x54}, {0x2, 0x0, 0x8}, {0x100, 0x4, 0x0, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4}, 0x20008800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000ec0)={'batadv_slave_0\x00'}) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 18:31:19 executing program 7: pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000c, r0) pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8, r0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x42400, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x4040) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) pkey_alloc(0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000000840)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/224, 0xe0}], 0x7, &(0x7f0000000780)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x1, 0x20, &(0x7f00000008c0)={r4, r5+10000000}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r8, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000e80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c40)={0x1ec, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x40, 0x0, 0x81}, {0x9, 0x3, 0xff, 0xf7e}, {0x5, 0x4, 0x80, 0x7}, {0x8000, 0x8, 0x1, 0x54}, {0x2, 0x0, 0x8}, {0x100, 0x4, 0x0, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4}, 0x20008800) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 18:31:19 executing program 7: pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000c, r0) pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8, r0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x42400, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x4040) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) pkey_alloc(0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000000840)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/224, 0xe0}], 0x7, &(0x7f0000000780)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x1, 0x20, &(0x7f00000008c0)={r3, r4+10000000}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r6, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 18:31:20 executing program 7: pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000c, r0) pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8, r0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x42400, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x4040) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) pkey_alloc(0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000000840)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/224, 0xe0}], 0x7, &(0x7f0000000780)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x1, 0x20, &(0x7f00000008c0)={r3, r4+10000000}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r6, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x800) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 75.510834] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 79.734263] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 83.894103] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 88.118145] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 92.342179] Bluetooth: hci4: Opcode 0x c03 failed: -110 2022/09/11 18:31:40 executor 3 failed 11 times: executor 3: exit status 67 SYZFAIL: wrong response packet (errno 2: No such file or directory) loop exited with status 67 VM DIAGNOSIS: 18:31:40 Registers: info registers vcpu 0 RAX=0000000080000001 RBX=ffff88801b6a7a30 RCX=ffffffff816cc2cc RDX=ffff888010011ac0 RSI=0000000000000000 RDI=0000000000000004 RBP=00000000000001fe RSP=ffff88801b6a7608 R8 =0000000000000004 R9 =000000000000007c R10=00000000000001fe R11=0000000000000001 R12=0000000000000000 R13=ffffea0000d1ccc0 R14=ffff88801b6a7a58 R15=000000000000007c RIP=ffffffff814620b1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f68a1848630 CR3=000000000dc92000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000007 RBX=1ffff11003760e9c RCX=1ffffffff0b604b1 RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffffffff85b01450 RBP=0000000000000000 RSP=ffff88801bb074d0 R8 =0000000000000000 R9 =ffffffff85b01457 R10=fffffbfff0b6028a R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=ffffffff85406ca0 R15=0000000000000000 RIP=ffffffff812a4ae0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f206b1fbfb8 CR3=0000000015ff4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 636578650a3a7365 6d69742031312064 YMM02=0000000000000000 0000000000000000 6174732074697865 203a3320726f7475 YMM03=0000000000000000 0000000000000000 203a4c4941465a59 530a373620737574 YMM04=0000000000000000 0000000000000000 702065736e6f7073 657220676e6f7277 YMM05=0000000000000000 0000000000000000 3a32206f6e727265 28200a74656b6361 YMM06=0000000000000000 0000000000000000 726f20656c696620 68637573206f4e20 YMM07=0000000000000000 0000000000000000 706f6f6c0a297972 6f74636572696420 YMM08=0000000000000000 0000000000000000 3a3320726f747563 6578650a3a73656d YMM09=0000000000000000 0000000000000000 0a37362073757461 7473207469786520 YMM10=0000000000000000 0000000000000000 7220676e6f727720 3a4c4941465a5953 YMM11=0000000000000000 0000000000000000 200a74656b636170 2065736e6f707365 YMM12=0000000000000000 0000000000000000 637573206f4e203a 32206f6e72726528 YMM13=0000000000000000 0000000000000000 7463657269642072 6f20656c69662068 YMM14=0000000000000000 0000000000000000 6465746978652070 6f6f6c0a2979726f YMM15=0000000000000000 0000000000000000 0a37362073757461 7473206874697720